Function TestCSRFWithConfig

middleware/csrf_test.go:230–368

(t *testing.T)

}

func TestCSRFWithConfig(t *testing.T) {
	token := randomString(16)

	var testCases = []struct {
		name                 string
		givenConfig          *CSRFConfig
		whenMethod           string
		whenHeaders          map[string]string
		expectEmptyBody      bool
		expectMWError        string
		expectCookieContains string
		expectTokenInContext string
		expectErr            string
	}{
		{
			name:                 "ok, GET",
			whenMethod:           http.MethodGet,
			expectCookieContains: "_csrf",
			expectTokenInContext: "TESTTOKEN",
		},
		{
			name: "ok, POST valid token",
			whenHeaders: map[string]string{
				echo.HeaderCookie:     "_csrf=" + token,
				echo.HeaderXCSRFToken: token,
			},
			whenMethod:           http.MethodPost,
			expectCookieContains: "_csrf",
			expectTokenInContext: token,
		},
		{
			name:            "nok, POST without token",
			whenMethod:      http.MethodPost,
			expectEmptyBody: true,
			expectErr:       `code=400, message=Bad Request, err=missing value in request header`,
		},
		{
			name:            "nok, POST empty token",
			whenHeaders:     map[string]string{echo.HeaderXCSRFToken: ""},
			whenMethod:      http.MethodPost,
			expectEmptyBody: true,
			expectErr:       `code=403, message=invalid csrf token`,
		},
		{
			name: "nok, invalid trusted origin in Config",
			givenConfig: &CSRFConfig{
				TrustedOrigins: []string{"http://example.com", "invalid"},
			},
			expectMWError: `trusted origin is missing scheme or host: invalid`,
		},
		{
			name: "ok, TokenLength",
			givenConfig: &CSRFConfig{
				TokenLength: 16,
			},
			whenMethod:           http.MethodGet,
			expectCookieContains: "_csrf",
			expectTokenInContext: "TESTTOKEN",