Add CORS test

api/api_test.go

@@ -11,8 +11,6 @@ import (
 	"os"
 	"testing"
 
-	"github.com/Castcloud/castcloud-go-server/Godeps/_workspace/src/github.com/labstack/echo"
-
 	. "github.com/Castcloud/castcloud-go-server/api/schema"
 )
 
@@ -101,21 +99,21 @@ func testHandler(w http.ResponseWriter, r *http.Request) {
 }
 
 type testReq struct {
-	r *echo.Echo
+	h http.Handler
 	*http.Request
 }
 
-func testRequest(r *echo.Echo, method, url string, body io.Reader) testReq {
+func testRequest(h http.Handler, method, url string, body io.Reader) testReq {
 	req, _ := http.NewRequest(method, url, body)
 	if method == "POST" {
 		req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
 	}
-	return testReq{r: r, Request: req}
+	return testReq{h: h, Request: req}
 }
 
 func (t testReq) send() *httptest.ResponseRecorder {
 	w := httptest.NewRecorder()
-	t.r.ServeHTTP(w, t.Request)
+	t.h.ServeHTTP(w, t.Request)
 	return w
 }
 

api/cors_test.go

@@ -0,0 +1,49 @@
+package api
+
+import (
+	"net/http/httptest"
+	"testing"
+
+	"github.com/Castcloud/castcloud-go-server/Godeps/_workspace/src/github.com/labstack/echo"
+	"github.com/Castcloud/castcloud-go-server/Godeps/_workspace/src/github.com/stretchr/testify/assert"
+)
+
+func TestCORS(t *testing.T) {
+	mw := cors()
+	req := testRequest(nil, "GET", "/", nil)
+	res := httptest.NewRecorder()
+	c := echo.NewContext(req.Request, echo.NewResponse(res), echo.New())
+	called := false
+
+	next := func(c *echo.Context) error {
+		called = true
+		return nil
+	}
+
+	// It calls the next middleware when no origin is set
+	h := mw(next)
+	h(c)
+	assert.True(t, called)
+	assert.Empty(t, res.Header().Get("Access-Control-Allow-Origin"))
+
+	// It sets CORS headers and calls the next middleware when the origin is set
+	req.Header.Set("Origin", "china")
+	called = false
+	h(c)
+	assert.True(t, called)
+	assert.NotEmpty(t, res.Header().Get("Access-Control-Allow-Origin"))
+
+	// It sets CORS headers, ends the middleware chain and
+	// returns 200 when receiving a preflight request
+	req.Method = "OPTIONS"
+	res = httptest.NewRecorder()
+	c = echo.NewContext(req.Request, echo.NewResponse(res), echo.New())
+	res.Code = 0
+	called = false
+	h(c)
+	assert.False(t, called)
+	assert.Equal(t, 200, res.Code)
+	assert.NotEmpty(t, res.Header().Get("Access-Control-Allow-Origin"))
+	assert.NotEmpty(t, res.Header().Get("Access-Control-Allow-Methods"))
+	assert.NotEmpty(t, res.Header().Get("Access-Control-Allow-Headers"))
+}