git.iko.soy/typeable/oauth2-proxy
on master help sign in
Add ProxyRawPath tests
662fa72Fabian Stelzer
pkg/upstream/proxy_test.go+117−92
compare with master
unifiedsplit
@@ -16,96 +16,94 @@ import (
16)
16)
17
17
18var _ = Describe("Proxy Suite", func() {
18var _ = Describe("Proxy Suite", func() {
19− var upstreamServer http.Handler
19+ type proxyTableInput struct {
20+ target string
21+ response testHTTPResponse
22+ upstream string
23+ upstreams options.Upstreams
24+ }
20
25
21 Context("multiUpstreamProxy", func() {
26 Context("multiUpstreamProxy", func() {
22− BeforeEach(func() {
27+ DescribeTable("Proxy ServeHTTP",
28+ func(in *proxyTableInput) {
23− sigData := &options.SignatureData{Hash: crypto.SHA256, Key: "secret"}
29+ sigData := &options.SignatureData{Hash: crypto.SHA256, Key: "secret"}
24−
25− writer := &pagewriter.WriterFuncs{
26− ProxyErrorFunc: func(rw http.ResponseWriter, _ *http.Request, _ error) {
27− rw.WriteHeader(502)
28− rw.Write([]byte("Proxy Error"))
29− },
30− }
31−
32− ok := http.StatusOK
33− accepted := http.StatusAccepted
34
30
35− upstreams := options.Upstreams{
31+ writer := &pagewriter.WriterFuncs{
36− Configs: []options.Upstream{
32+ ProxyErrorFunc: func(rw http.ResponseWriter, _ *http.Request, _ error) {
37− {
33+ rw.WriteHeader(502)
38− ID: "http-backend",
34+ rw.Write([]byte("Proxy Error"))
39− Path: "/http/",
40− URI: serverAddr,
41− },
42− {
43− ID: "file-backend",
44− Path: "/files/",
45− URI: fmt.Sprintf("file:///%s", filesDir),
46− },
47− {
48− ID: "static-backend",
49− Path: "/static/",
50− Static: true,
51− StaticCode: &ok,
52− },
53− {
54− ID: "static-backend-no-trailing-slash",
55− Path: "/static",
56− Static: true,
57− StaticCode: &accepted,
58− },
59− {
60− ID: "static-backend-long",
61− Path: "/static/long",
62− Static: true,
63− StaticCode: &accepted,
64− },
65− {
66− ID: "bad-http-backend",
67− Path: "/bad-http/",
68− URI: "http://::1",
69− },
70− {
71− ID: "single-path-backend",
72− Path: "/single-path",
73− Static: true,
74− StaticCode: &ok,
75− },
76− {
77− ID: "backend-with-rewrite-prefix",
78− Path: "^/rewrite-prefix/(.*)",
79− RewriteTarget: "/different/backend/path/$1",
80− URI: serverAddr,
81 },
35 },
82− {
83− ID: "double-match-plain",
84− Path: "/double-match/",
85− URI: serverAddr,
86− },
87− {
88− ID: "double-match-rewrite",
89− Path: "^/double-match/(.*)",
90− RewriteTarget: "/double-match/rewrite/$1",
91− URI: serverAddr,
92− },
93− },
94− }
36+ }
95
37
96− var err error
38+ ok := http.StatusOK
97− upstreamServer, err = NewProxy(upstreams, sigData, writer)
39+ accepted := http.StatusAccepted
98− Expect(err).ToNot(HaveOccurred())
99− })
100
40
101− type proxyTableInput struct {
41+ // Allows for specifying settings and even individual upstreams for specific tests and uses the default upstreams/configs otherwise
102− target string
42+ upstreams := in.upstreams
103− response testHTTPResponse
43+ if len(in.upstreams.Configs) == 0 {
104− upstream string
44+ upstreams.Configs = []options.Upstream{
45+ {
46+ ID: "http-backend",
47+ Path: "/http/",
48+ URI: serverAddr,
49+ },
50+ {
51+ ID: "file-backend",
52+ Path: "/files/",
53+ URI: fmt.Sprintf("file:///%s", filesDir),
105− }
54+ },
55+ {
56+ ID: "static-backend",
57+ Path: "/static/",
58+ Static: true,
59+ StaticCode: &ok,
60+ },
61+ {
62+ ID: "static-backend-no-trailing-slash",
63+ Path: "/static",
64+ Static: true,
65+ StaticCode: &accepted,
66+ },
67+ {
68+ ID: "static-backend-long",
69+ Path: "/static/long",
70+ Static: true,
71+ StaticCode: &accepted,
72+ },
73+ {
74+ ID: "bad-http-backend",
75+ Path: "/bad-http/",
76+ URI: "http://::1",
77+ },
78+ {
79+ ID: "single-path-backend",
80+ Path: "/single-path",
81+ Static: true,
82+ StaticCode: &ok,
83+ },
84+ {
85+ ID: "backend-with-rewrite-prefix",
86+ Path: "^/rewrite-prefix/(.*)",
87+ RewriteTarget: "/different/backend/path/$1",
88+ URI: serverAddr,
89+ },
90+ {
91+ ID: "double-match-plain",
92+ Path: "/double-match/",
93+ URI: serverAddr,
94+ },
95+ {
96+ ID: "double-match-rewrite",
97+ Path: "^/double-match/(.*)",
98+ RewriteTarget: "/double-match/rewrite/$1",
99+ URI: serverAddr,
100+ },
101+ }
102+ }
103+
104+ upstreamServer, err := NewProxy(upstreams, sigData, writer)
105+ Expect(err).ToNot(HaveOccurred())
106
106
107− DescribeTable("Proxy ServeHTTP",
108− func(in *proxyTableInput) {
109 req := middlewareapi.AddRequestScope(
107 req := middlewareapi.AddRequestScope(
110 httptest.NewRequest("", in.target, nil),
108 httptest.NewRequest("", in.target, nil),
111 &middlewareapi.RequestScope{},
109 &middlewareapi.RequestScope{},
@@ -133,10 +131,12 @@ var _ = Describe("Proxy Suite", func() {
133 }
131 }
134
132
135 // Compare the reflected request to the upstream
133 // Compare the reflected request to the upstream
134+ if body != nil {
136− request := testHTTPRequest{}
135+ request := testHTTPRequest{}
137− Expect(json.Unmarshal(body, &request)).To(Succeed())
136+ Expect(json.Unmarshal(body, &request)).To(Succeed())
138− testSanitizeRequestHeader(request.Header)
137+ testSanitizeRequestHeader(request.Header)
139− Expect(request).To(Equal(in.response.request))
138+ Expect(request).To(Equal(in.response.request))
139+ }
140 },
140 },
141 Entry("with a request to the HTTP service", &proxyTableInput{
141 Entry("with a request to the HTTP service", &proxyTableInput{
142 target: "http://example.localhost/http/1234",
142 target: "http://example.localhost/http/1234",
@@ -312,6 +312,31 @@ var _ = Describe("Proxy Suite", func() {
312 },
312 },
313 upstream: "double-match-rewrite",
313 upstream: "double-match-rewrite",
314 }),
314 }),
315+ Entry("containing an escaped '/' without ProxyRawPath", &proxyTableInput{
316+ target: "http://example.localhost/%2F/test1/%2F/test2",
317+ response: testHTTPResponse{
318+ code: 301,
319+ header: map[string][]string{
320+ "Location": {
321+ "http://example.localhost/test1/test2",
322+ },
323+ },
324+ },
325+ upstream: "",
326+ }),
327+ Entry("containing an escaped '/' with ProxyRawPath", &proxyTableInput{
328+ upstreams: options.Upstreams{ProxyRawPath: true},
329+ target: "http://example.localhost/%2F/test1/%2F/test2",
330+ response: testHTTPResponse{
331+ code: 404,
332+ header: map[string][]string{
333+ "X-Content-Type-Options": {"nosniff"},
334+ contentType: {textPlainUTF8},
335+ },
336+ raw: "404 page not found\n",
337+ },
338+ upstream: "",
339+ }),
315 )
340 )
316 })
341 })
317
342
@@ -321,24 +346,24 @@ var _ = Describe("Proxy Suite", func() {
321 expectedOutput []options.Upstream
346 expectedOutput []options.Upstream
322 }
347 }
323
348
324− var httpPath = options.Upstream{
349+ httpPath := options.Upstream{
325 Path: "/http/",
350 Path: "/http/",
326 }
351 }
327
352
328− var httpSubPath = options.Upstream{
353+ httpSubPath := options.Upstream{
329 Path: "/http/subpath/",
354 Path: "/http/subpath/",
330 }
355 }
331
356
332− var longerPath = options.Upstream{
357+ longerPath := options.Upstream{
333 Path: "/longer-than-http",
358 Path: "/longer-than-http",
334 }
359 }
335
360
336− var shortPathWithRewrite = options.Upstream{
361+ shortPathWithRewrite := options.Upstream{
337 Path: "^/h/(.*)",
362 Path: "^/h/(.*)",
338 RewriteTarget: "/$1",
363 RewriteTarget: "/$1",
339 }
364 }
340
365
341− var shortSubPathWithRewrite = options.Upstream{
366+ shortSubPathWithRewrite := options.Upstream{
342 Path: "^/h/bar/(.*)",
367 Path: "^/h/bar/(.*)",
343 RewriteTarget: "/$1",
368 RewriteTarget: "/$1",
344 }
369 }