mirror of https://github.com/dexidp/dex.git
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
69 lines
1.5 KiB
69 lines
1.5 KiB
4 years ago
|
package httpclient_test
|
||
|
|
|
||
|
|
import (
|
||
|
|
"crypto/tls"
|
||
|
|
"fmt"
|
||
|
|
"io"
|
||
|
|
"net/http"
|
||
|
|
"net/http/httptest"
|
||
|
|
"testing"
|
||
|
|
|
||
|
|
"github.com/stretchr/testify/assert"
|
||
|
|
|
||
|
|
"github.com/dexidp/dex/pkg/httpclient"
|
||
|
|
)
|
||
|
|
|
||
|
|
func TestRootCAs(t *testing.T) {
|
||
|
|
ts, err := NewLocalHTTPSTestServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
||
|
|
fmt.Fprint(w, "Hello, client")
|
||
|
|
}))
|
||
|
|
assert.Nil(t, err)
|
||
|
|
defer ts.Close()
|
||
|
|
|
||
|
|
rootCAs := []string{"testdata/rootCA.pem"}
|
||
|
|
testClient, err := httpclient.NewHTTPClient(rootCAs, false)
|
||
|
|
assert.Nil(t, err)
|
||
|
|
|
||
|
|
res, err := testClient.Get(ts.URL)
|
||
|
|
assert.Nil(t, err)
|
||
|
|
|
||
|
|
greeting, err := io.ReadAll(res.Body)
|
||
|
|
res.Body.Close()
|
||
|
|
assert.Nil(t, err)
|
||
|
|
|
||
|
|
assert.Equal(t, "Hello, client", string(greeting))
|
||
|
|
}
|
||
|
|
|
||
|
|
func TestInsecureSkipVerify(t *testing.T) {
|
||
|
|
ts, err := NewLocalHTTPSTestServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
||
|
|
fmt.Fprint(w, "Hello, client")
|
||
|
|
}))
|
||
|
|
assert.Nil(t, err)
|
||
|
|
defer ts.Close()
|
||
|
|
|
||
|
|
insecureSkipVerify := true
|
||
|
|
|
||
|
|
testClient, err := httpclient.NewHTTPClient(nil, insecureSkipVerify)
|
||
|
|
assert.Nil(t, err)
|
||
|
|
|
||
|
|
res, err := testClient.Get(ts.URL)
|
||
|
|
assert.Nil(t, err)
|
||
|
|
|
||
|
|
greeting, err := io.ReadAll(res.Body)
|
||
|
|
res.Body.Close()
|
||
|
|
assert.Nil(t, err)
|
||
|
|
|
||
|
|
assert.Equal(t, "Hello, client", string(greeting))
|
||
|
|
}
|
||
|
|
|
||
|
|
func NewLocalHTTPSTestServer(handler http.Handler) (*httptest.Server, error) {
|
||
|
|
ts := httptest.NewUnstartedServer(handler)
|
||
|
|
cert, err := tls.LoadX509KeyPair("testdata/server.crt", "testdata/server.key")
|
||
|
|
if err != nil {
|
||
|
|
return nil, err
|
||
|
|
}
|
||
|
|
ts.TLS = &tls.Config{Certificates: []tls.Certificate{cert}}
|
||
|
|
ts.StartTLS()
|
||
|
|
return ts, nil
|
||
|
|
}
|