Function TestApplicationProxy

coderd/httpmw/realip_test.go:583–746

TestApplicationProxy checks headers passed to DevURL services are as expected.

(t *testing.T)

// TestApplicationProxy checks headers passed to DevURL services are as expected.
func TestApplicationProxy(t *testing.T) {
	t.Parallel()

	tests := []struct {
		Name               string
		Config             *httpmw.RealIPConfig
		Header             http.Header
		RemoteAddr         string
		TLS                bool
		ExpectedHeader     http.Header
		ExpectedRemoteAddr string
	}{
		{
			Name:   "untrusted-origin-http",
			Config: nil,
			Header: http.Header{
				"X-Forwarded-For": []string{"123.45.67.89,10.10.10.10"},
			},
			RemoteAddr: "17.18.19.20",
			TLS:        false,
			ExpectedHeader: http.Header{
				"X-Forwarded-For":   []string{"17.18.19.20"},
				"X-Forwarded-Proto": []string{"http"},
			},
			ExpectedRemoteAddr: "17.18.19.20",
		},
		{
			Name:   "untrusted-origin-https",
			Config: nil,
			Header: http.Header{
				"X-Forwarded-For": []string{"123.45.67.89,10.10.10.10"},
			},
			RemoteAddr: "17.18.19.20",
			TLS:        true,
			ExpectedHeader: http.Header{
				"X-Forwarded-For":   []string{"17.18.19.20"},
				"X-Forwarded-Proto": []string{"https"},
			},
			ExpectedRemoteAddr: "17.18.19.20",
		},
		{
			Name: "trusted-real-ip",
			Config: &httpmw.RealIPConfig{
				TrustedOrigins: []*net.IPNet{
					{
						IP:   net.ParseIP("0.0.0.0"),
						Mask: net.CIDRMask(0, 32),
					},
				},
				TrustedHeaders: []string{
					"X-Real-Ip",
				},
			},
			Header: http.Header{
				"X-Real-Ip":         []string{"99.88.77.66"},
				"X-Forwarded-For":   []string{"123.45.67.89,10.10.10.10"},
				"X-Forwarded-Proto": []string{"https"},
			},