jbergner
1f61989c2d
All checks were successful
release-tag / release-image (push) Successful in 4m39s
62 lines
1.7 KiB
Go
62 lines
1.7 KiB
Go
package customer
|
|
|
|
import (
|
|
"net/http"
|
|
"testing"
|
|
)
|
|
|
|
func TestParseMoneyCentsExact(t *testing.T) {
|
|
cases := map[string]int64{
|
|
"0": 0,
|
|
"1": 100,
|
|
"1.2": 120,
|
|
"1.20": 120,
|
|
"499.99": 49999,
|
|
}
|
|
for in, want := range cases {
|
|
got, err := parseMoneyCents(in)
|
|
if err != nil || got != want {
|
|
t.Fatalf("parseMoneyCents(%q) = %d, %v; want %d", in, got, err, want)
|
|
}
|
|
}
|
|
for _, in := range []string{"", "-1.00", "+1.00", "1.234", "1,00", "abc"} {
|
|
if _, err := parseMoneyCents(in); err == nil {
|
|
t.Fatalf("parseMoneyCents(%q) should fail", in)
|
|
}
|
|
}
|
|
}
|
|
|
|
func TestCustomerCookieUsesLaxAndAdminStrict(t *testing.T) {
|
|
s := &Service{}
|
|
if got := s.cookieSameSite(customerCookie); got != http.SameSiteLaxMode {
|
|
t.Fatalf("customer cookie SameSite = %v; want Lax", got)
|
|
}
|
|
if got := s.cookieSameSite(csAdminCookie); got != http.SameSiteStrictMode {
|
|
t.Fatalf("admin cookie SameSite = %v; want Strict", got)
|
|
}
|
|
}
|
|
|
|
func TestAdminCookieSecureAutoForVPNHTTPAndHTTPSProxy(t *testing.T) {
|
|
s := &Service{cfg: Config{CookieSecure: true, AdminCookieSecureMode: "auto"}}
|
|
|
|
httpReq, err := http.NewRequest(http.MethodGet, "http://192.168.16.3:8091/admin", nil)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if s.cookieSecure(httpReq, csAdminCookie) {
|
|
t.Fatal("admin cookie should not be Secure for direct HTTP/VPN access in auto mode")
|
|
}
|
|
if !s.cookieSecure(httpReq, customerCookie) {
|
|
t.Fatal("public customer cookie must remain Secure")
|
|
}
|
|
|
|
httpsProxyReq, err := http.NewRequest(http.MethodGet, "http://customer-service:8091/admin", nil)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
httpsProxyReq.Header.Set("X-Forwarded-Proto", "https")
|
|
if !s.cookieSecure(httpsProxyReq, csAdminCookie) {
|
|
t.Fatal("admin cookie should be Secure behind an HTTPS proxy in auto mode")
|
|
}
|
|
}
|