dnoulet/go-bananas
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor
Some checks are pending
Build, test, publish, deploy / build-test (push) Waiting to run
Details
Build, test, publish, deploy / publish (push) Blocked by required conditions
Details
Build, test, publish, deploy / deploy-prd (push) Blocked by required conditions
Details

Browse source
This commit is contained in:
Daniel Noulet 2026-10-10 02:30:01 +02:00
parent d0ea6e9eec
commit 2967f1a5af
31 changed files with 469 additions and 165 deletions
Download patch file Download diff file Expand all files Collapse all files

8
internal/httpapi/router_test.go
View file

@ -70,7 +70,7 @@ func newUnauthenticatedRouter(t *testing.T) http.Handler {
t.Helper()
cfg := testConfig(t)
cfg.AuthMode = config.AuthModeOIDC
cfg.OIDCIssuer = "https://auth-dev.urpi.be/realms/urpi"
cfg.OIDCIssuer = "https://auth.lcl-urpi.be/realms/urpi"
cfg.OIDCClientID = "go-bananas"
cfg.OIDCClientSecret = "test-client-secret"
cfg.SessionSecure = false
@ -278,7 +278,7 @@ func TestRuntimeIsReadableCrossOrigin(t *testing.T) {
// not testing the policy — it is testing the same-origin path under a
// misleading name.
req := httptest.NewRequestWithContext(context.Background(), http.MethodGet, path, nil)
req.Header.Set("Origin", "https://tell-dev.urpi.be")
req.Header.Set("Origin", "https://tell.lcl-urpi.be")
rec := httptest.NewRecorder()
router.ServeHTTP(rec, req)
@ -313,7 +313,7 @@ func TestAdminAPIIsNotOpenedByTheRuntimePolicy(t *testing.T) {
for _, path := range []string{"/api/v1/session", "/api/v1/themes"} {
t.Run(path, func(t *testing.T) {
req := httptest.NewRequestWithContext(t.Context(), http.MethodGet, path, nil)
req.Header.Set("Origin", "https://tell-dev.urpi.be")
req.Header.Set("Origin", "https://tell.lcl-urpi.be")
rec := httptest.NewRecorder()
router.ServeHTTP(rec, req)
@ -357,7 +357,7 @@ func TestAdminAPIAllowsAConfiguredOrigin(t *testing.T) {
func TestRuntimeAnswersPreflight(t *testing.T) {
req := httptest.NewRequestWithContext(
context.Background(), http.MethodOptions, "/rt/v1/contract.json", nil)
req.Header.Set("Origin", "https://tell-dev.urpi.be")
req.Header.Set("Origin", "https://tell.lcl-urpi.be")
// A real preflight names the method it wants to use. Without this header the
// request is not a preflight, and asserting 204 on it would be asserting on a
// case no browser ever sends — which is how this test passed against a 405.