59 lines
1.9 KiB
Go
59 lines
1.9 KiB
Go
package app
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
)
|
|
|
|
func TestConfigurationSafety(t *testing.T) {
|
|
c := DefaultConfig()
|
|
c.Listen = "0.0.0.0:8080"
|
|
if c.Validate() == nil {
|
|
t.Fatal("plain HTTP public listener accepted")
|
|
}
|
|
dir := t.TempDir()
|
|
p := filepath.Join(dir, "config.toml")
|
|
os.WriteFile(p, []byte("unknown_setting = true\n"), 0600)
|
|
if _, e := LoadConfig(p); e == nil {
|
|
t.Fatal("unknown configuration silently accepted")
|
|
}
|
|
os.WriteFile(p, []byte("data_dir = 'var'\n"), 0600)
|
|
loaded, e := LoadConfig(p)
|
|
if e != nil {
|
|
t.Fatal(e)
|
|
}
|
|
if loaded.DataDir != filepath.Join(dir, "var") {
|
|
t.Fatal("relative directory not resolved from configuration")
|
|
}
|
|
}
|
|
|
|
func TestLANHTTPRequiresExplicitPrivateAddress(t *testing.T) {
|
|
for _, test := range []struct {
|
|
name, listen, publicURL string
|
|
allow, valid bool
|
|
}{
|
|
{"disabled", "192.168.1.204:8080", "http://192.168.1.204:8080", false, false},
|
|
{"explicit LAN", "192.168.1.204:8080", "http://192.168.1.204:8080", true, true},
|
|
{"wildcard IPv4", "0.0.0.0:8080", "http://192.168.1.204:8080", true, false},
|
|
{"public listener", "8.8.8.8:8080", "http://192.168.1.204:8080", true, false},
|
|
{"public HTTP URL", "192.168.1.204:8080", "http://8.8.8.8:8080", true, true},
|
|
{"private IPv6", "[fd00::204]:8080", "http://[fd00::204]:8080", true, true},
|
|
{"wildcard IPv6", "[::]:8080", "http://[fd00::204]:8080", true, false},
|
|
{"loopback", "127.0.0.1:8080", "http://127.0.0.1:8080", false, true},
|
|
} {
|
|
t.Run(test.name, func(t *testing.T) {
|
|
c := DefaultConfig()
|
|
c.Listen, c.PublicURL, c.AllowLANHTTP = test.listen, test.publicURL, test.allow
|
|
if err := c.Validate(); (err == nil) != test.valid {
|
|
t.Fatalf("valid=%v, expected %v; error=%v", err == nil, test.valid, err)
|
|
}
|
|
})
|
|
}
|
|
c := DefaultConfig()
|
|
c.Listen, c.PublicURL, c.AllowLANHTTP, c.SecureCookies = "192.168.1.204:8080", "http://192.168.1.204:8080", true, true
|
|
if c.Validate() == nil {
|
|
t.Fatal("Secure cookies accepted for LAN HTTP")
|
|
}
|
|
}
|