def test_givenMissingOrigin_whenHandlingPreflightRequest_thenReturn400BadRequest(
self):
request = RequestBuilder().headers({}).build()
self.cors_handler = CorsPreflightRequestHandler(
Headers({'Access-Control-Allow-Origin': 'http://api.jivago.io'}))
response = self.cors_handler.invoke(request)
self.assertEqual(400, response.status)
def test_givenOriginThatStartsWithAllowedHeader_whenHandlingPreflight_thenReturn200OKWithVaryHeader(
self):
self.cors_headers[
'Access-Control-Allow-Origin'] = "http://api.jivago.io"
request = RequestBuilder().headers({
'Origin': 'http://api.jivago.io'
}).build()
self.cors_handler = CorsPreflightRequestHandler(self.cors_headers)
response = self.cors_handler.invoke(request)
self.assertEqual(200, response.status)
self.assertEqual('Origin', response.headers['Vary'])
class CorsPreflightRequestHandlerTest(unittest.TestCase):
def setUp(self):
self.cors_headers = Headers({"Access-Control-Allow-Origin": "*"})
self.cors_handler = CorsPreflightRequestHandler(self.cors_headers)
def test_givenAllowEverythingOriginHeader_whenHandlingPreflight_thenReturn200OK(
self):
request = RequestBuilder().headers({'Origin': 'some-origin'}).build()
response = self.cors_handler.invoke(request)
self.assertEqual(200, response.status)
def test_givenOriginThatStartsWithAllowedHeader_whenHandlingPreflight_thenReturn200OKWithVaryHeader(
self):
self.cors_headers[
'Access-Control-Allow-Origin'] = "http://api.jivago.io"
request = RequestBuilder().headers({
'Origin': 'http://api.jivago.io'
}).build()
self.cors_handler = CorsPreflightRequestHandler(self.cors_headers)
response = self.cors_handler.invoke(request)
self.assertEqual(200, response.status)
self.assertEqual('Origin', response.headers['Vary'])
def test_givenNonMatchingOrigin_whenHandlingPreflight_thenReturn400BadRequest(
self):
request = RequestBuilder().headers({
'Origin': 'http://foobar.com'
}).build()
self.cors_handler = CorsPreflightRequestHandler(
Headers({'Access-Control-Allow-Origin': 'http://api.jivago.io'}))
response = self.cors_handler.invoke(request)
self.assertEqual(400, response.status)
def test_givenMissingOrigin_whenHandlingPreflightRequest_thenReturn400BadRequest(
self):
request = RequestBuilder().headers({}).build()
self.cors_handler = CorsPreflightRequestHandler(
Headers({'Access-Control-Allow-Origin': 'http://api.jivago.io'}))
response = self.cors_handler.invoke(request)
self.assertEqual(400, response.status)
def create_cors_preflight_handler(
self, path: str) -> CorsPreflightRequestHandler:
highest_priority_rule = self._find_highest_priority_rule(path)
if highest_priority_rule:
return CorsPreflightRequestHandler(
highest_priority_rule.cors_headers)
raise NoMatchingCorsRuleException()
def setUp(self):
self.cors_headers = Headers({"Access-Control-Allow-Origin": "*"})
self.cors_handler = CorsPreflightRequestHandler(self.cors_headers)