56 lines
1.8 KiB
Go
56 lines
1.8 KiB
Go
package entity
|
|
|
|
import (
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
|
|
func TestCheckValidWildcardListenPortConflict(t *testing.T) {
|
|
s := &AllSetting{WebPort: 2053, SubPort: 2053, WebListen: "0.0.0.0", SubListen: ""}
|
|
if err := s.CheckValid(); err == nil {
|
|
t.Error("CheckValid must reject the same port bound on 0.0.0.0 and \"\" (both wildcard)")
|
|
}
|
|
|
|
ok := &AllSetting{WebPort: 2053, SubPort: 2053, WebListen: "127.0.0.1", SubListen: "192.168.1.1"}
|
|
if err := ok.CheckValid(); err != nil {
|
|
t.Errorf("distinct specific listens on the same port should be allowed: %v", err)
|
|
}
|
|
}
|
|
|
|
// The allowlist and the trusted-proxy list share one validator, so this also
|
|
// pins that each list still reports its own message (#5378).
|
|
func TestCheckValidIPOrCIDRLists(t *testing.T) {
|
|
base := func() *AllSetting {
|
|
return &AllSetting{WebPort: 2053, SubPort: 2096}
|
|
}
|
|
|
|
for _, v := range []string{"", "203.0.113.10", "198.51.100.0/24", " 203.0.113.10 , 2001:db8::/32 ", "203.0.113.10,,"} {
|
|
s := base()
|
|
s.IpLimitAllowlist = v
|
|
if err := s.CheckValid(); err != nil {
|
|
t.Errorf("ipLimitAllowlist=%q: unexpected error %v", v, err)
|
|
}
|
|
}
|
|
|
|
for _, v := range []string{"nonsense", "203.0.113.10/33", "203.0.113.10, oops"} {
|
|
s := base()
|
|
s.IpLimitAllowlist = v
|
|
err := s.CheckValid()
|
|
if err == nil {
|
|
t.Errorf("ipLimitAllowlist=%q: want error, got nil", v)
|
|
continue
|
|
}
|
|
if !strings.Contains(err.Error(), "IP limit allowlist entry is not valid:") {
|
|
t.Errorf("ipLimitAllowlist=%q: error %q does not name the setting", v, err)
|
|
}
|
|
}
|
|
|
|
s := base()
|
|
s.TrustedProxyCIDRs = "127.0.0.1/32, bogus"
|
|
err := s.CheckValid()
|
|
if err == nil || !strings.Contains(err.Error(), "trusted proxy CIDR is not valid: bogus") {
|
|
t.Errorf("trustedProxyCIDRs error = %v, want it to name the trusted-proxy list and the bad entry", err)
|
|
}
|
|
}
|