Function TestCORSWithConfig_AllowMethods

middleware/cors_test.go:344–429

(t *testing.T)

}

func TestCORSWithConfig_AllowMethods(t *testing.T) {
	var testCases = []struct {
		name                            string
		givenAllowOrigins               []string
		givenAllowMethods               []string
		whenAllowContextKey             string
		whenOrigin                      string
		expectAllow                     string
		expectAccessControlAllowMethods string
	}{
		{
			name:                "custom AllowMethods, preflight, no origin, sets only allow header from context key",
			givenAllowOrigins:   []string{"*"},
			givenAllowMethods:   []string{http.MethodGet, http.MethodHead},
			whenAllowContextKey: "OPTIONS, GET",
			whenOrigin:          "",
			expectAllow:         "OPTIONS, GET",
		},
		{
			name:                "default AllowMethods, preflight, no origin, no allow header in context key and in response",
			givenAllowOrigins:   []string{"*"},
			givenAllowMethods:   nil,
			whenAllowContextKey: "",
			whenOrigin:          "",
			expectAllow:         "",
		},
		{
			name:                            "custom AllowMethods, preflight, existing origin, sets both headers different values",
			givenAllowOrigins:               []string{"*"},
			givenAllowMethods:               []string{http.MethodGet, http.MethodHead},
			whenAllowContextKey:             "OPTIONS, GET",
			whenOrigin:                      "http://google.com",
			expectAllow:                     "OPTIONS, GET",
			expectAccessControlAllowMethods: "GET,HEAD",
		},
		{
			name:                            "default AllowMethods, preflight, existing origin, sets both headers",
			givenAllowOrigins:               []string{"*"},
			givenAllowMethods:               nil,
			whenAllowContextKey:             "OPTIONS, GET",
			whenOrigin:                      "http://google.com",
			expectAllow:                     "OPTIONS, GET",
			expectAccessControlAllowMethods: "OPTIONS, GET",
		},
		{
			name:                            "default AllowMethods, preflight, existing origin, no allows, sets only CORS allow methods",
			givenAllowOrigins:               []string{"*"},
			givenAllowMethods:               nil,
			whenAllowContextKey:             "",
			whenOrigin:                      "http://google.com",
			expectAllow:                     "",
			expectAccessControlAllowMethods: "GET,HEAD,PUT,PATCH,POST,DELETE",
		},
	}

	for _, tc := range testCases {
		t.Run(tc.name, func(t *testing.T) {
			e := echo.New()