|
| 1 | +/* |
| 2 | + * Copyright (c) 2024-Present, Okta, Inc. and/or its affiliates. All rights reserved. |
| 3 | + * The Okta software accompanied by this notice is provided pursuant to the Apache License, Version 2.0 (the "License.") |
| 4 | + * |
| 5 | + * You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0. |
| 6 | + * Unless required by applicable law or agreed to in writing, software |
| 7 | + * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| 8 | + * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 9 | + * |
| 10 | + * See the License for the specific language governing permissions and limitations under the License. |
| 11 | + */ |
| 12 | + |
| 13 | +#import <XCTest/XCTest.h> |
| 14 | +#import "OKTRedirectHTTPHandler.h" |
| 15 | +#import "OKTLoopbackHTTPServer.h" |
| 16 | + |
| 17 | +@interface OKTRedirectHTTPHandlerTests<OKTExternalUserAgentSession> : XCTestCase |
| 18 | + |
| 19 | +@property BOOL resumeExternalUserAgentFlowWithURLCalled; |
| 20 | + |
| 21 | +- (BOOL)resumeExternalUserAgentFlowWithURL:(NSURL *)URL; |
| 22 | + |
| 23 | +@end |
| 24 | + |
| 25 | +@interface OKTRedirectHTTPHandler(Private) |
| 26 | + |
| 27 | +- (BOOL)isOptionsHTTPServerRequest:(HTTPServerRequest *)request; |
| 28 | +- (void)HTTPConnection:(HTTPConnection *)conn didReceiveRequest:(HTTPServerRequest *)mess; |
| 29 | + |
| 30 | +@end |
| 31 | + |
| 32 | +@implementation OKTRedirectHTTPHandlerTests |
| 33 | + |
| 34 | +- (void)testIsOptionsHTTPServerRequest { |
| 35 | + OKTRedirectHTTPHandler *handler = [OKTRedirectHTTPHandler new]; |
| 36 | + CFStringRef url = CFSTR("http://www.okta.com"); |
| 37 | + CFURLRef myURL = CFURLCreateWithString(kCFAllocatorDefault, url, NULL); |
| 38 | + |
| 39 | + CFStringRef requestMethod = CFSTR("GET"); |
| 40 | + CFHTTPMessageRef myRequest = CFHTTPMessageCreateRequest(kCFAllocatorDefault, requestMethod, myURL, kCFHTTPVersion1_1); |
| 41 | + HTTPConnection *connection = [[HTTPConnection alloc] initWithPeerAddress:nil inputStream:nil outputStream:nil forServer:nil]; |
| 42 | + HTTPServerRequest *request = [[HTTPServerRequest alloc] initWithRequest:myRequest connection:connection]; |
| 43 | + BOOL isOptionsRequest = [handler isOptionsHTTPServerRequest: request]; |
| 44 | + XCTAssertFalse(isOptionsRequest); |
| 45 | + |
| 46 | + requestMethod = CFSTR("OPTIONS"); |
| 47 | + myRequest = CFHTTPMessageCreateRequest(kCFAllocatorDefault, requestMethod, myURL, kCFHTTPVersion1_1); |
| 48 | + request = [[HTTPServerRequest alloc] initWithRequest:myRequest connection:connection]; |
| 49 | + isOptionsRequest = [handler isOptionsHTTPServerRequest: request]; |
| 50 | + XCTAssertTrue(isOptionsRequest); |
| 51 | + |
| 52 | + requestMethod = CFSTR("options"); |
| 53 | + myRequest = CFHTTPMessageCreateRequest(kCFAllocatorDefault, requestMethod, myURL, kCFHTTPVersion1_1); |
| 54 | + request = [[HTTPServerRequest alloc] initWithRequest:myRequest connection:connection]; |
| 55 | + isOptionsRequest = [handler isOptionsHTTPServerRequest: request]; |
| 56 | + XCTAssertTrue(isOptionsRequest); |
| 57 | + |
| 58 | + isOptionsRequest = [handler isOptionsHTTPServerRequest: nil]; |
| 59 | + XCTAssertFalse(isOptionsRequest); |
| 60 | +} |
| 61 | + |
| 62 | +- (void)testDidReceiveRequestDelegate_NoOptionsHeader { |
| 63 | + OKTRedirectHTTPHandler *handler = [OKTRedirectHTTPHandler new]; |
| 64 | + handler.currentAuthorizationFlow = (id<OKTExternalUserAgentSession>)self; |
| 65 | + CFStringRef url = CFSTR("http://www.okta.com"); |
| 66 | + CFURLRef myURL = CFURLCreateWithString(kCFAllocatorDefault, url, NULL); |
| 67 | + CFStringRef requestMethod = CFSTR("GET"); |
| 68 | + CFHTTPMessageRef myRequest = CFHTTPMessageCreateRequest(kCFAllocatorDefault, requestMethod, myURL, kCFHTTPVersion1_1); |
| 69 | + HTTPConnection *connection = [[HTTPConnection alloc] initWithPeerAddress:nil inputStream:nil outputStream:nil forServer:nil]; |
| 70 | + HTTPServerRequest *request = [[HTTPServerRequest alloc] initWithRequest:myRequest connection:connection]; |
| 71 | + |
| 72 | + self.resumeExternalUserAgentFlowWithURLCalled = NO; |
| 73 | + [handler HTTPConnection:connection didReceiveRequest:request]; |
| 74 | + XCTAssertTrue(self.resumeExternalUserAgentFlowWithURLCalled); |
| 75 | + |
| 76 | + myURL = nil; |
| 77 | + requestMethod = CFSTR("GET"); |
| 78 | + myRequest = CFHTTPMessageCreateRequest(kCFAllocatorDefault, requestMethod, myURL, kCFHTTPVersion1_1); |
| 79 | + request = [[HTTPServerRequest alloc] initWithRequest:myRequest connection:connection]; |
| 80 | + self.resumeExternalUserAgentFlowWithURLCalled = NO; |
| 81 | + [handler HTTPConnection:connection didReceiveRequest:request]; |
| 82 | + XCTAssertFalse(self.resumeExternalUserAgentFlowWithURLCalled); |
| 83 | +} |
| 84 | + |
| 85 | +- (void)testDidReceiveRequestDelegate_WithOptionsHeader { |
| 86 | + OKTRedirectHTTPHandler *handler = [OKTRedirectHTTPHandler new]; |
| 87 | + handler.currentAuthorizationFlow = (id<OKTExternalUserAgentSession>)self; |
| 88 | + CFStringRef url = CFSTR("http://www.okta.com"); |
| 89 | + CFURLRef myURL = CFURLCreateWithString(kCFAllocatorDefault, url, NULL); |
| 90 | + CFStringRef requestMethod = CFSTR("OPTIONS"); |
| 91 | + CFHTTPMessageRef myRequest = CFHTTPMessageCreateRequest(kCFAllocatorDefault, requestMethod, myURL, kCFHTTPVersion1_1); |
| 92 | + HTTPConnection *connection = [[HTTPConnection alloc] initWithPeerAddress:nil inputStream:nil outputStream:nil forServer:nil]; |
| 93 | + HTTPServerRequest *request = [[HTTPServerRequest alloc] initWithRequest:myRequest connection:connection]; |
| 94 | + CFStringRef privateNetworkHeader = CFSTR("Access-Control-Request-Private-Network"); |
| 95 | + CFStringRef privateNetworkValue = CFSTR("true"); |
| 96 | + CFHTTPMessageSetHeaderFieldValue(myRequest, privateNetworkHeader, privateNetworkValue); |
| 97 | + CFStringRef originHeader = CFSTR("Origin"); |
| 98 | + CFStringRef originValue = CFSTR("http://www.okta.com"); |
| 99 | + CFHTTPMessageSetHeaderFieldValue(myRequest, originHeader, originValue); |
| 100 | + |
| 101 | + self.resumeExternalUserAgentFlowWithURLCalled = NO; |
| 102 | + [handler HTTPConnection:connection didReceiveRequest:request]; |
| 103 | + XCTAssertFalse(self.resumeExternalUserAgentFlowWithURLCalled); |
| 104 | + |
| 105 | + CFHTTPMessageRef response = request.response; |
| 106 | + |
| 107 | + originHeader = CFHTTPMessageCopyHeaderFieldValue(response, (__bridge CFStringRef)@"Access-Control-Allow-Origin"); |
| 108 | + BOOL originHeaderExists = CFStringCompare(originHeader, originValue, kCFCompareCaseInsensitive) == kCFCompareEqualTo; |
| 109 | + XCTAssertTrue(originHeaderExists); |
| 110 | + |
| 111 | + CFStringRef allowCredentialsHeader = CFHTTPMessageCopyHeaderFieldValue(response, (__bridge CFStringRef)@"Access-Control-Allow-Credentials"); |
| 112 | + BOOL allowCredentialsHeaderExists = CFStringCompare(allowCredentialsHeader, (__bridge CFStringRef)@"true", kCFCompareCaseInsensitive) == kCFCompareEqualTo; |
| 113 | + XCTAssertTrue(allowCredentialsHeaderExists); |
| 114 | + |
| 115 | + CFStringRef allowPrivateNetworkHeader = CFHTTPMessageCopyHeaderFieldValue(response, (__bridge CFStringRef)@"Access-Control-Allow-Private-Network"); |
| 116 | + BOOL allowPrivateNetworkHeaderExists = CFStringCompare(allowPrivateNetworkHeader, (__bridge CFStringRef)@"true", kCFCompareCaseInsensitive) == kCFCompareEqualTo; |
| 117 | + XCTAssertTrue(allowPrivateNetworkHeaderExists); |
| 118 | + |
| 119 | + CFStringRef contentLengthHeader = CFHTTPMessageCopyHeaderFieldValue(response, (__bridge CFStringRef)@"Content-Length"); |
| 120 | + BOOL contentLengthHeaderExists = CFStringCompare(contentLengthHeader, (__bridge CFStringRef)@"0", kCFCompareCaseInsensitive) == kCFCompareEqualTo; |
| 121 | + XCTAssertTrue(contentLengthHeaderExists); |
| 122 | +} |
| 123 | + |
| 124 | +- (BOOL)resumeExternalUserAgentFlowWithURL:(NSURL *)URL { |
| 125 | + self.resumeExternalUserAgentFlowWithURLCalled = YES; |
| 126 | + return true; |
| 127 | +} |
| 128 | + |
| 129 | +- (void)failExternalUserAgentFlowWithError:(NSError *)error { |
| 130 | +} |
| 131 | + |
| 132 | +@end |
0 commit comments