Tests\Unit\Middleware\AllowCorsRequestsTest

Complexity

Total Complexity

7

Size/Duplication

Total Lines	109
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	3

Importance

Changes

0

6 Methods

Rating	Name	Duplication	Size	Complexity
A	it_should_return_correct_headers_on_options()	0	34	1
A	it_should_ignore_when_origin_missing()	0	5	1
A	it_should_return_error_on_invalid_origin()	0	22	2
A	it_should_return_success_on_valid_origin()	0	14	1
A	it_should_return_success_on_project_url()	0	8	1
A	getEnvironmentSetUp()	0	13	1

<?php

declare(strict_types=1);

namespace Tests\Unit\Middleware;

use Longman\LaravelLodash\Middlewares\AllowCorsRequests;
use Tests\Unit\TestCase;

use function config;
use function implode;

class AllowCorsRequestsTest extends TestCase

There is at least one abstract method in this class. Maybe declare it as abstract, or implement the remaining methods: artisan, be, call, seed

{
    /** @test */
    public function it_should_return_correct_headers_on_options()
    {
        $origin = 'domain.com';
        config()->set('lodash.cors.allow_origins', [$origin]);
        $headers = [
            'Origin',
            'X-Requested-With',
            'Content-Type',
            'Accept',
            'Authorization',
            'CustomHeader1234',
        ];
        config()->set('lodash.cors.allow_headers', $headers);
        $methods = [
            'HEAD',
            'GET',
            'POST',
            'OPTIONS',
            'PUT',
            'PATCH',
            'DELETE',
            'CustomMethod1234',
        ];
        config()->set('lodash.cors.allow_methods', $methods);

        $response = $this->call('OPTIONS', 'url1', [], [], [], ['HTTP_Origin' => 'https://' . $origin]);

array('HTTP_Origin' => 'https://' . $origin) is of type array<string,string,{"HTTP_Origin":"string"}>, but the function expects a string|null.

        $response->assertSeeText('Allowed');
        $response->assertHeader('Access-Control-Allow-Origin', 'https://' . $origin);

The method assertHeader() does not exist on Illuminate\Http\Response. Did you maybe mean header()?

        $response->assertHeader('Access-Control-Allow-Credentials', 'true');

The method assertHeader() does not exist on Illuminate\Http\Response. Did you maybe mean header()?

        $response->assertHeader('Access-Control-Allow-Methods', implode(',', $methods));

The method assertHeader() does not exist on Illuminate\Http\Response. Did you maybe mean header()?

        $response->assertHeader('Access-Control-Allow-Headers', implode(',', $headers));

The method assertHeader() does not exist on Illuminate\Http\Response. Did you maybe mean header()?

        $response->assertHeader('Access-Control-Max-Age', '1728000');

The method assertHeader() does not exist on Illuminate\Http\Response. Did you maybe mean header()?

        $response->assertStatus(200);

The method assertStatus() does not exist on Illuminate\Http\Response. Did you maybe mean status()?

    }

    /** @test */
    public function it_should_ignore_when_origin_missing()
    {
        $response = $this->call('GET', 'url1');
        $response->assertStatus(200);

The method assertStatus() does not exist on Illuminate\Http\Response. Did you maybe mean status()?

    }

    /** @test */
    public function it_should_return_error_on_invalid_origin()
    {
        config()->set('lodash.cors.allow_origins', ['domain.com']);

        foreach (['GET', 'OPTIONS'] as $method) {
            // Invalid domain
            $response = $this->call($method, 'url1', [], [], [], ['HTTP_Origin' => 'safsagsafsadsadsa']);

array('HTTP_Origin' => 'safsagsafsadsadsa') is of type array<string,string,{"HTTP_Origin":"string"}>, but the function expects a string|null.

            $response->assertStatus(400); // Bad request

The method assertStatus() does not exist on Illuminate\Http\Response. Did you maybe mean status()?

            // Without http://
            $response = $this->call($method, 'url1', [], [], [], ['HTTP_Origin' => 'google.com']);

array('HTTP_Origin' => 'google.com') is of type array<string,string,{"HTTP_Origin":"string"}>, but the function expects a string|null.

            $response->assertStatus(400); // Bad request

The method assertStatus() does not exist on Illuminate\Http\Response. Did you maybe mean status()?

            // Valid domain, but not whitelisted
            $response = $this->call($method, 'url1', [], [], [], ['HTTP_Origin' => 'http://google.com']);

array('HTTP_Origin' => 'http://google.com') is of type array<string,string,{"HTTP_Origin":"string"}>, but the function expects a string|null.

            $response->assertStatus(405); // Method not allowed

The method assertStatus() does not exist on Illuminate\Http\Response. Did you maybe mean status()?

            // Valid similar domain, but not whitelisted
            $response = $this->call($method, 'url1', [], [], [], ['HTTP_Origin' => 'http://mydomain.com']);

array('HTTP_Origin' => 'http://mydomain.com') is of type array<string,string,{"HTTP_Origin":"string"}>, but the function expects a string|null.

            $response->assertStatus(405); // Method not allowed

The method assertStatus() does not exist on Illuminate\Http\Response. Did you maybe mean status()?

        }
    }

    /** @test */
    public function it_should_return_success_on_valid_origin()
    {
        config()->set('lodash.cors.allow_origins', ['domain.com']);

        $origins = config('lodash.cors.allow_origins');

        // Whitelisted origin
        $response = $this->call('GET', 'url1', [], [], [], ['HTTP_Origin' => 'http://' . $origins[0]]);

array('HTTP_Origin' => 'http://' . $origins[0]) is of type array<string,string,{"HTTP_Origin":"string"}>, but the function expects a string|null.

        $response->assertStatus(200);

The method assertStatus() does not exist on Illuminate\Http\Response. Did you maybe mean status()?

        // Whitelisted subdomain origin
        $response = $this->call('GET', 'url1', [], [], [], ['HTTP_Origin' => 'http://sub.' . $origins[0]]);

array('HTTP_Origin' => 'http://sub.' . $origins[0]) is of type array<string,string,{"HTTP_Origin":"string"}>, but the function expects a string|null.

        $response->assertStatus(200);

The method assertStatus() does not exist on Illuminate\Http\Response. Did you maybe mean status()?

    }

    /** @test */
    public function it_should_return_success_on_project_url()
    {
        config()->set('lodash.cors.allow_origins', ['domain.com']);

        // Whitelisted origin
        $response = $this->call('GET', 'url1', [], [], [], ['HTTP_Origin' => config('app.url', 'http://localhost')]);

array('HTTP_Origin' => \config('app.url', 'http://localhost')) is of type array<string,*,{"HTTP_Origin":"*"}>, but the function expects a string|null.

        $response->assertStatus(200);

The method assertStatus() does not exist on Illuminate\Http\Response. Did you maybe mean status()?

    }

    protected function getEnvironmentSetUp($app)
    {
        /** @var \Illuminate\Routing\Router $router */
        $router = $app['router'];

        $router->get('url1', static function () {
            return 'ok';
        })->middleware(AllowCorsRequests::class);

        $router->options('url1', static function () {
            return 'ok';
        })->middleware(AllowCorsRequests::class);
    }
}