darkhelm/notifications-api
1
0
Fork 0
mirror of https://github.com/GSA/notifications-api.git synced 2026-02-01 15:46:07 -05:00
Code Issues Packages Projects Releases Wiki Activity

Enable header checking on preview and staging, add test

Browse Source
This commit is contained in:
Athanasios Voutsadakis
2017-11-16 12:02:09 +00:00
parent 819c1a2dc5
commit 5d687d87e7
2 changed files with 23 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
tests/app/authentication/test_authentication.py
View File

@@ -380,7 +380,7 @@ def test_route_correct_secret_key(notify_api, client):
with set_config_values(notify_api, {
'ROUTE_SECRET_KEY_1': 'key_1',
'ROUTE_SECRET_KEY_2': '',
'DEBUG': False,
'CHECK_PROXY_HEADER': True,
}):
response = client.get(
@@ -396,7 +396,7 @@ def test_route_incorrect_secret_key(notify_api, client):
with set_config_values(notify_api, {
'ROUTE_SECRET_KEY_1': 'key_1',
'ROUTE_SECRET_KEY_2': '',
'DEBUG': False,
'CHECK_PROXY_HEADER': True,
}):
response = client.get(
@@ -406,3 +406,19 @@ def test_route_incorrect_secret_key(notify_api, client):
]
)
assert response.status_code == 403
def test_route_check_proxy_header_flag(notify_api, client):
with set_config_values(notify_api, {
'ROUTE_SECRET_KEY_1': 'key_1',
'ROUTE_SECRET_KEY_2': '',
'CHECK_PROXY_HEADER': False,
}):
response = client.get(
path='/_status',
headers=[
('X-Custom-Forwarder', 'wrong_key'),
]
)
assert response.status_code == 200