Function TestAddressFamilies

coderd/httpmw/realip_test.go:357–418

TestAddressFamilies tests the middleware using different combinations of address families for remote and proxy endpoints.

(t *testing.T)

// TestAddressFamilies tests the middleware using different combinations of
// address families for remote and proxy endpoints.
func TestAddressFamilies(t *testing.T) {
	t.Parallel()

	for _, clientFamily := range []string{"ipv4", "ipv6"} {
		for _, proxyFamily := range []string{"ipv4", "ipv6"} {
			for _, header := range []string{"Cf-Connecting-Ip", "True-Client-Ip", "X-Real-Ip", "X-Forwarded-For"} {
				name := fmt.Sprintf("%s-%s-%s", strings.ToLower(header), clientFamily, proxyFamily)

				t.Run(name, func(t *testing.T) {
					t.Parallel()

					clientAddr := "123.123.123.123"
					if clientFamily == "ipv6" {
						clientAddr = "2a03:2880:f10c:83:face:b00c:0:25de"
					}

					proxyAddr := "4.4.4.4"
					if proxyFamily == "ipv6" {
						proxyAddr = "2001:4860:4860::8888"
					}

					config := &httpmw.RealIPConfig{
						TrustedOrigins: []*net.IPNet{
							{
								IP:   net.ParseIP("0.0.0.0"),
								Mask: net.CIDRMask(0, 32),
							},
							{
								IP:   net.ParseIP("0::"),
								Mask: net.CIDRMask(0, 128),
							},
						},
						TrustedHeaders: []string{
							"Cf-Connecting-Ip",
							"X-Forwarded-For",
							"X-Real-Ip",
							"True-Client-Ip",
						},
					}

					middleware := httpmw.ExtractRealIP(config)

					req := httptest.NewRequest(http.MethodGet, "http://localhost", nil)
					req.Header.Set(header, clientAddr)
					req.RemoteAddr = proxyAddr

					handlerCalled := false

					nextHandler := http.HandlerFunc(func(w http.ResponseWriter, req *http.Request) {
						require.Equal(t, clientAddr, req.RemoteAddr, "remote address should match remote client")

						handlerCalled = true
					})

					middleware(nextHandler).ServeHTTP(httptest.NewRecorder(), req)

					require.True(t, handlerCalled, "expected handler to be invoked")
				})