Kalista Payne
46 lines
2.3 KiB
JavaScript
46 lines
2.3 KiB
JavaScript
/* eslint-disable global-require */
|
|
import {
|
|
generateRes,
|
|
generateReq,
|
|
generateNext,
|
|
} from '../../../helpers/api-unit.helper';
|
|
import cors from '../../../../website/server/middlewares/cors';
|
|
|
|
describe('cors middleware', () => {
|
|
let res; let req; let
|
|
next;
|
|
|
|
beforeEach(() => {
|
|
req = generateReq();
|
|
res = generateRes();
|
|
next = generateNext();
|
|
});
|
|
|
|
it('sets the correct headers', () => {
|
|
cors(req, res, next);
|
|
expect(res.set).to.have.been.calledWith({
|
|
'Access-Control-Allow-Origin': '*',
|
|
'Access-Control-Allow-Methods': 'OPTIONS,GET,POST,PUT,HEAD,DELETE',
|
|
'Access-Control-Allow-Headers': 'Authorization,Content-Type,Accept,Content-Encoding,X-Requested-With,x-api-user,x-api-key,x-client',
|
|
'Access-Control-Expose-Headers': 'X-RateLimit-Limit,X-RateLimit-Remaining,X-RateLimit-Reset,Retry-After',
|
|
'Content-Security-Policy': "default-src 'self' habitica.com *.habitica.com *.amazon.com *.amazonaws.com *.amplitude.com *.loggly.com *.payments-amazon.com *.stripe.com *.stripe.network; base-uri 'self'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; img-src * data:; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'",
|
|
});
|
|
expect(res.sendStatus).to.not.have.been.called;
|
|
expect(next).to.have.been.calledOnce;
|
|
});
|
|
|
|
it('responds immediately if method is OPTIONS', () => {
|
|
req.method = 'OPTIONS';
|
|
cors(req, res, next);
|
|
expect(res.set).to.have.been.calledWith({
|
|
'Access-Control-Allow-Origin': '*',
|
|
'Access-Control-Allow-Methods': 'OPTIONS,GET,POST,PUT,HEAD,DELETE',
|
|
'Access-Control-Allow-Headers': 'Authorization,Content-Type,Accept,Content-Encoding,X-Requested-With,x-api-user,x-api-key,x-client',
|
|
'Access-Control-Expose-Headers': 'X-RateLimit-Limit,X-RateLimit-Remaining,X-RateLimit-Reset,Retry-After',
|
|
'Content-Security-Policy': "default-src 'self' habitica.com *.habitica.com *.amazon.com *.amazonaws.com *.amplitude.com *.loggly.com *.payments-amazon.com *.stripe.com *.stripe.network; base-uri 'self'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; img-src * data:; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'",
|
|
});
|
|
expect(res.sendStatus).to.have.been.calledWith(200);
|
|
expect(next).to.not.have.been.called;
|
|
});
|
|
});
|