mirror of
https://github.com/mattermost/mattermost.git
synced 2026-02-22 17:30:12 -05:00
120 lines
2.7 KiB
Go
120 lines
2.7 KiB
Go
// Copyright (c) 2017-present Mattermost, Inc. All Rights Reserved.
|
|
// See License.txt for license information.
|
|
|
|
package utils
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"io/ioutil"
|
|
"net"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"net/url"
|
|
"testing"
|
|
)
|
|
|
|
func TestHTTPClient(t *testing.T) {
|
|
for _, allowInternal := range []bool{true, false} {
|
|
c := NewHTTPClient(false, func(_ string) bool { return false }, func(ip net.IP) bool { return allowInternal || !IsReservedIP(ip) })
|
|
for _, tc := range []struct {
|
|
URL string
|
|
IsInternal bool
|
|
}{
|
|
{
|
|
URL: "https://google.com",
|
|
IsInternal: false,
|
|
},
|
|
{
|
|
URL: "https://127.0.0.1",
|
|
IsInternal: true,
|
|
},
|
|
} {
|
|
_, err := c.Get(tc.URL)
|
|
if !tc.IsInternal {
|
|
if err != nil {
|
|
t.Fatal("google is down?")
|
|
}
|
|
} else {
|
|
allowed := !tc.IsInternal || allowInternal
|
|
success := err == nil
|
|
switch e := err.(type) {
|
|
case *net.OpError:
|
|
success = e.Err != AddressForbidden
|
|
case *url.Error:
|
|
success = e.Err != AddressForbidden
|
|
}
|
|
if success != allowed {
|
|
t.Fatalf("failed for %v. allowed: %v, success %v", tc.URL, allowed, success)
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestHTTPClientWithProxy(t *testing.T) {
|
|
proxy := createProxyServer()
|
|
defer proxy.Close()
|
|
|
|
c := NewHTTPClient(true, nil, nil)
|
|
purl, _ := url.Parse(proxy.URL)
|
|
c.Transport.(*http.Transport).Proxy = http.ProxyURL(purl)
|
|
|
|
resp, err := c.Get("http://acme.com")
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
defer resp.Body.Close()
|
|
|
|
body, err := ioutil.ReadAll(resp.Body)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if string(body) != "proxy" {
|
|
t.FailNow()
|
|
}
|
|
}
|
|
|
|
func createProxyServer() *httptest.Server {
|
|
return httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
w.WriteHeader(200)
|
|
w.Header().Set("Content-Type", "text/plain; charset=us-ascii")
|
|
fmt.Fprint(w, "proxy")
|
|
}))
|
|
}
|
|
|
|
func TestDialContextFilter(t *testing.T) {
|
|
for _, tc := range []struct {
|
|
Addr string
|
|
IsValid bool
|
|
}{
|
|
{
|
|
Addr: "google.com:80",
|
|
IsValid: true,
|
|
},
|
|
{
|
|
Addr: "8.8.8.8:53",
|
|
IsValid: true,
|
|
},
|
|
{
|
|
Addr: "127.0.0.1:80",
|
|
},
|
|
{
|
|
Addr: "10.0.0.1:80",
|
|
IsValid: true,
|
|
},
|
|
} {
|
|
didDial := false
|
|
filter := dialContextFilter(func(ctx context.Context, network, addr string) (net.Conn, error) {
|
|
didDial = true
|
|
return nil, nil
|
|
}, func(host string) bool { return host == "10.0.0.1" }, func(ip net.IP) bool { return !IsReservedIP(ip) })
|
|
_, err := filter(context.Background(), "", tc.Addr)
|
|
switch {
|
|
case tc.IsValid == (err == AddressForbidden) || (err != nil && err != AddressForbidden):
|
|
t.Errorf("unexpected err for %v (%v)", tc.Addr, err)
|
|
case tc.IsValid != didDial:
|
|
t.Errorf("unexpected didDial for %v", tc.Addr)
|
|
}
|
|
}
|
|
}
|