Esempio n. 1
0
    def test_is_forbidden(self):
        handler = MixinHandler()
        request = HTTPRequest('http://example.com/')
        handler.request = request

        context = Mock(address=('8.8.8.8', 8888),
                       trusted_downstream=['127.0.0.1'],
                       _orig_protocol='http')
        request.connection = Mock(context=context)
        self.assertTrue(handler.is_forbidden())

        context = Mock(address=('8.8.8.8', 8888),
                       trusted_downstream=[],
                       _orig_protocol='http')
        request.connection = Mock(context=context)
        self.assertTrue(handler.is_forbidden())

        context = Mock(address=('192.168.1.1', 8888),
                       trusted_downstream=[],
                       _orig_protocol='http')
        request.connection = Mock(context=context)
        self.assertIsNone(handler.is_forbidden())

        context = Mock(address=('8.8.8.8', 8888),
                       trusted_downstream=[],
                       _orig_protocol='https')
        request.connection = Mock(context=context)
        self.assertIsNone(handler.is_forbidden())
Esempio n. 2
0
    def test_get_real_client_addr(self):
        x_forwarded_for = 'a.a.a.a, 1.1.1.1'
        x_forwarded_port = 1111
        x_real_ip = '2.2.2.2'
        x_real_port = 2222
        fake_port = 65535

        mhandler = MixinHandler()
        mhandler.request = HTTPServerRequest(uri='/')
        mhandler.request.remote_ip = '4.4.4.4'
        self.assertIsNone(mhandler.get_real_client_addr())

        mhandler.request.headers.add('X-Forwarded-For', x_forwarded_for)
        self.assertIsNone(mhandler.get_real_client_addr())
        self.assertIsNone(mhandler.get_real_client_addr(True))

        x_forwarded_for = '1.1.1.1, 4.4.4.4'
        lst = [i.strip() for i in x_forwarded_for.split(',')]
        x_forwarded_first, x_forwarded_last = lst[0], lst[-1]
        mhandler.request.headers['X-Forwarded-For'] = x_forwarded_for

        self.assertEqual(mhandler.get_real_client_addr(),
                         (x_forwarded_last, fake_port))
        self.assertEqual(mhandler.get_real_client_addr(True),
                         (x_forwarded_first, fake_port))

        mhandler.request.headers.add('X-Forwarded-Port', fake_port + 1)
        self.assertEqual(mhandler.get_real_client_addr(),
                         (x_forwarded_last, fake_port))
        self.assertEqual(mhandler.get_real_client_addr(True),
                         (x_forwarded_first, fake_port))

        mhandler.request.headers['X-Forwarded-Port'] = x_forwarded_port
        self.assertEqual(mhandler.get_real_client_addr(),
                         (x_forwarded_last, x_forwarded_port))
        self.assertEqual(mhandler.get_real_client_addr(True),
                         (x_forwarded_first, x_forwarded_port))

        mhandler.request.remote_ip = x_real_ip

        mhandler.request.headers.add('X-Real-Ip', x_real_ip)
        self.assertEqual(mhandler.get_real_client_addr(),
                         (x_real_ip, fake_port))

        mhandler.request.headers.add('X-Real-Port', fake_port + 1)
        self.assertEqual(mhandler.get_real_client_addr(),
                         (x_real_ip, fake_port))

        mhandler.request.headers['X-Real-Port'] = x_real_port
        self.assertEqual(mhandler.get_real_client_addr(),
                         (x_real_ip, x_real_port))
Esempio n. 3
0
    def test_get_real_client_addr(self):
        handler = MixinHandler()
        handler.request = HTTPServerRequest(uri='/')
        self.assertIsNone(handler.get_real_client_addr())

        ip = '127.0.0.1'
        handler.request.headers.add('X-Real-Ip', ip)
        self.assertEqual(handler.get_real_client_addr(), False)

        handler.request.headers.add('X-Real-Port', '12345x')
        self.assertEqual(handler.get_real_client_addr(), False)

        handler.request.headers.update({'X-Real-Port': '12345'})
        self.assertEqual(handler.get_real_client_addr(), (ip, 12345))

        handler.request.headers.update({'X-Real-ip': None})
        self.assertEqual(handler.get_real_client_addr(), False)

        handler.request.headers.update({'X-Real-Port': '12345x'})
        self.assertEqual(handler.get_real_client_addr(), False)
Esempio n. 4
0
    def test_get_real_client_addr(self):
        x_forwarded_for = '1.1.1.1'
        x_forwarded_port = 1111
        x_real_ip = '2.2.2.2'
        x_real_port = 2222
        fake_port = 65535

        mhandler = MixinHandler()
        mhandler.request = HTTPServerRequest(uri='/')
        mhandler.request.remote_ip = x_forwarded_for

        self.assertIsNone(mhandler.get_real_client_addr())

        mhandler.request.headers.add('X-Forwarded-For', x_forwarded_for)
        self.assertEqual(mhandler.get_real_client_addr(),
                         (x_forwarded_for, fake_port))

        mhandler.request.headers.add('X-Forwarded-Port', fake_port + 1)
        self.assertEqual(mhandler.get_real_client_addr(),
                         (x_forwarded_for, fake_port))

        mhandler.request.headers['X-Forwarded-Port'] = x_forwarded_port
        self.assertEqual(mhandler.get_real_client_addr(),
                         (x_forwarded_for, x_forwarded_port))

        mhandler.request.remote_ip = x_real_ip

        mhandler.request.headers.add('X-Real-Ip', x_real_ip)
        self.assertEqual(mhandler.get_real_client_addr(),
                         (x_real_ip, fake_port))

        mhandler.request.headers.add('X-Real-Port', fake_port + 1)
        self.assertEqual(mhandler.get_real_client_addr(),
                         (x_real_ip, fake_port))

        mhandler.request.headers['X-Real-Port'] = x_real_port
        self.assertEqual(mhandler.get_real_client_addr(),
                         (x_real_ip, x_real_port))