Function TestCorruptedHeaders

coderd/httpmw/realip_test.go:307–353

TestCorruptedHeaders tests the middleware when the reverse proxy supplies unparsable content.

(t *testing.T)

// TestCorruptedHeaders tests the middleware when the reverse proxy
// supplies unparsable content.
func TestCorruptedHeaders(t *testing.T) {
	t.Parallel()

	for _, header := range []string{"Cf-Connecting-Ip", "True-Client-Ip", "X-Real-Ip", "X-Forwarded-For"} {
		name := strings.ToLower(header)

		t.Run(name, func(t *testing.T) {
			t.Parallel()

			remoteAddr := "10.10.10.10"

			config := &httpmw.RealIPConfig{
				TrustedOrigins: []*net.IPNet{
					{
						IP:   net.ParseIP("10.0.0.0"),
						Mask: net.CIDRMask(8, 32),
					},
				},
				TrustedHeaders: []string{
					"Cf-Connecting-Ip",
					"X-Forwarded-For",
					"X-Real-Ip",
					"True-Client-Ip",
				},
			}

			middleware := httpmw.ExtractRealIP(config)

			req := httptest.NewRequest(http.MethodGet, "http://localhost", nil)
			req.Header.Set(header, "12.34.56!78")
			req.RemoteAddr = remoteAddr

			handlerCalled := false

			nextHandler := http.HandlerFunc(func(w http.ResponseWriter, req *http.Request) {
				// Since the header is unparsable, the remoteAddr should be unchanged
				require.Equal(t, remoteAddr, req.RemoteAddr, "remote address should be unchanged")

				handlerCalled = true
			})

			middleware(nextHandler).ServeHTTP(httptest.NewRecorder(), req)

			require.True(t, handlerCalled, "expected handler to be invoked")
		})
	}
}

// TestAddressFamilies tests the middleware using different combinations of
// address families for remote and proxy endpoints.