luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity
open-vault/http/custom_header_test.go

128 lines
3.7 KiB
Go
Raw Normal View History

Customizing HTTP headers in the config file (#12485) * Customizing HTTP headers in the config file * Add changelog, fix bad imports * fixing some bugs * fixing interaction of custom headers and /ui * Defining a member in core to set custom response headers * missing additional file * Some refactoring * Adding automated tests for the feature * Changing some error messages based on some recommendations * Incorporating custom response headers struct into the request context * removing some unused references * fixing a test * changing some error messages, removing a default header value from /ui * fixing a test * wrapping ResponseWriter to set the custom headers * adding a new test * some cleanup * removing some extra lines * Addressing comments * fixing some agent tests * skipping custom headers from agent listener config, removing two of the default headers as they cause issues with Vault in UI mode Adding X-Content-Type-Options to the ui default headers Let Content-Type be set as before * Removing default custom headers, and renaming some function varibles * some refacotring * Refactoring and addressing comments * removing a function and fixing comments
2021-10-13 15:06:33 +00:00
package http
import (
"testing"
"github.com/hashicorp/vault/vault"
)
var defaultCustomHeaders = map[string]string {
"Strict-Transport-Security": "max-age=1; domains",
"Content-Security-Policy": "default-src 'others'",
"X-Custom-Header": "Custom header value default",
"X-Frame-Options": "Deny",
"X-Content-Type-Options": "nosniff",
"Content-Type": "application/json",
"X-XSS-Protection": "1; mode=block",
}
var customHeader2xx = map[string]string {
"X-Custom-Header": "Custom header value 2xx",
}
var customHeader200 = map[string]string {
"Someheader-200": "200",
"X-Custom-Header": "Custom header value 200",
}
var customHeader4xx = map[string]string {
"Someheader-4xx": "4xx",
}
var customHeader400 = map[string]string {
"Someheader-400": "400",
}
var customHeader405 = map[string]string {
"Someheader-405": "405",
}
var CustomResponseHeaders = map[string]map[string]string{
"default": defaultCustomHeaders,
"307": {"X-Custom-Header": "Custom header value 307"},
"3xx": {
"X-Custom-Header": "Custom header value 3xx",
"X-Vault-Ignored-3xx": "Ignored 3xx",
},
"200": customHeader200,
"2xx": customHeader2xx,
"400": customHeader400,
"405": customHeader405,
"4xx": customHeader4xx,
}
func TestCustomResponseHeaders(t *testing.T) {
core, _, token := vault.TestCoreWithCustomResponseHeaderAndUI(t, CustomResponseHeaders, true)
ln, addr := TestServer(t, core)
defer ln.Close()
TestServerAuth(t, addr, token)
resp := testHttpGet(t, token, addr+"/v1/sys/raw/")
testResponseStatus(t, resp, 404)
testResponseHeader(t, resp, defaultCustomHeaders)
testResponseHeader(t, resp, customHeader4xx)
resp = testHttpGet(t, token, addr+"/v1/sys/seal")
testResponseStatus(t, resp, 405)
testResponseHeader(t, resp, defaultCustomHeaders)
testResponseHeader(t, resp, customHeader4xx)
testResponseHeader(t, resp, customHeader405)
resp = testHttpGet(t, token, addr+"/v1/sys/leader")
testResponseStatus(t, resp, 200)
testResponseHeader(t, resp, customHeader200)
resp = testHttpGet(t, token, addr+"/v1/sys/health")
testResponseStatus(t, resp, 200)
testResponseHeader(t, resp, customHeader200)
resp = testHttpGet(t, token, addr+"/v1/sys/generate-root/attempt")
testResponseStatus(t, resp, 200)
testResponseHeader(t, resp, customHeader200)
resp = testHttpGet(t, token, addr+"/v1/sys/generate-root/update")
testResponseStatus(t, resp, 400)
testResponseHeader(t, resp, defaultCustomHeaders)
testResponseHeader(t, resp, customHeader4xx)
testResponseHeader(t, resp, customHeader400)
resp = testHttpGet(t, token, addr+"/v1/sys/")
testResponseStatus(t, resp, 404)
testResponseHeader(t, resp, defaultCustomHeaders)
testResponseHeader(t, resp, customHeader4xx)
resp = testHttpGet(t, token, addr+"/v1/sys")
testResponseStatus(t, resp, 404)
testResponseHeader(t, resp, defaultCustomHeaders)
testResponseHeader(t, resp, customHeader4xx)
resp = testHttpGet(t, token, addr+"/v1/")
testResponseStatus(t, resp, 404)
testResponseHeader(t, resp, defaultCustomHeaders)
testResponseHeader(t, resp, customHeader4xx)
resp = testHttpGet(t, token, addr+"/v1")
testResponseStatus(t, resp, 404)
testResponseHeader(t, resp, defaultCustomHeaders)
testResponseHeader(t, resp, customHeader4xx)
resp = testHttpGet(t, token, addr+"/")
testResponseStatus(t, resp, 200)
testResponseHeader(t, resp, customHeader200)
resp = testHttpGet(t, token, addr+"/ui")
testResponseStatus(t, resp, 200)
testResponseHeader(t, resp, customHeader200)
resp = testHttpGet(t, token, addr+"/ui/")
testResponseStatus(t, resp, 200)
testResponseHeader(t, resp, customHeader200)
resp = testHttpPost(t, token, addr+"/v1/sys/auth/foo", map[string]interface{}{
"type": "noop",
"description": "foo",
})
testResponseStatus(t, resp, 204)
testResponseHeader(t, resp, customHeader2xx)
}