Add Party.ResetRouterFilters

relative to: https://github.com/kataras/iris/issues/1604#issuecomment-680410131
2025-12-17 09:57:01 +00:00 · 2020-08-26 06:57:36 +03:00
parent 1780d97d44
commit d44b69faed
6 changed files with 191 additions and 25 deletions
--- a/middleware/basicauth/basicauth_test.go
+++ b/middleware/basicauth/basicauth_test.go
@@ -0,0 +1,131 @@
+// Package basicauth_tests performs black-box testing of the basicauth middleware.
+// Note that, a secondary test is also available at: _examples/auth/basicauth/main_test.go
+package basicauth_test
+
+import (
+	"fmt"
+	"testing"
+
+	"github.com/kataras/iris/v12"
+	"github.com/kataras/iris/v12/httptest"
+	"github.com/kataras/iris/v12/middleware/basicauth"
+)
+
+func TestBasicAuthUseRouter(t *testing.T) {
+	app := iris.New()
+	users := map[string]string{
+		"usr":   "pss",
+		"admin": "admin",
+	}
+
+	app.UseRouter(basicauth.Default(users))
+
+	app.Get("/", func(ctx iris.Context) {
+		username, _, _ := ctx.Request().BasicAuth()
+		ctx.Writef("Hello, %s!", username)
+	})
+
+	app.Subdomain("static").Get("/", func(ctx iris.Context) {
+		username, _, _ := ctx.Request().BasicAuth()
+		ctx.Writef("Static, %s", username)
+	})
+
+	resetWithUseRouter := app.Subdomain("reset_with_use_router").ResetRouterFilters()
+	resetWithUseRouter.UseRouter(func(ctx iris.Context) {
+		ctx.Record()
+		ctx.Writef("with use router\n")
+		ctx.Next()
+	})
+	resetWithUseRouter.Get("/", func(ctx iris.Context) {
+		username, _, _ := ctx.Request().BasicAuth()
+		ctx.Writef("%s", username) // username should be empty.
+	})
+	// ^ order of these should not matter.
+	app.Subdomain("reset").ResetRouterFilters().Get("/", func(ctx iris.Context) {
+		username, _, _ := ctx.Request().BasicAuth()
+		ctx.Writef("%s", username) // username should be empty.
+	})
+
+	e := httptest.New(t, app.Configure(
+		iris.WithFireMethodNotAllowed,
+		iris.WithResetOnFireErrorCode,
+	))
+
+	for username, password := range users {
+		// Test pass authentication and route found.
+		e.GET("/").WithBasicAuth(username, password).Expect().
+			Status(httptest.StatusOK).Body().Equal(fmt.Sprintf("Hello, %s!", username))
+
+		// Test empty auth.
+		e.GET("/").Expect().Status(httptest.StatusUnauthorized).Body().Equal("Unauthorized")
+		// Test invalid auth.
+		e.GET("/").WithBasicAuth(username, "invalid_password").Expect().
+			Status(httptest.StatusUnauthorized).Body().Equal("Unauthorized")
+		e.GET("/").WithBasicAuth("invaid_username", password).Expect().
+			Status(httptest.StatusUnauthorized).Body().Equal("Unauthorized")
+
+		// Test different method, it should pass the authentication (no stop on 401)
+		// but it doesn't fire the GET route, instead it gives 405.
+		e.POST("/").WithBasicAuth(username, password).Expect().
+			Status(httptest.StatusMethodNotAllowed).Body().Equal("Method Not Allowed")
+
+		// Test pass the authentication but route not found.
+		e.GET("/notfound").WithBasicAuth(username, password).Expect().
+			Status(httptest.StatusNotFound).Body().Equal("Not Found")
+
+		// Test empty auth.
+		e.GET("/notfound").Expect().Status(httptest.StatusUnauthorized).Body().Equal("Unauthorized")
+		// Test invalid auth.
+		e.GET("/notfound").WithBasicAuth(username, "invalid_password").Expect().
+			Status(httptest.StatusUnauthorized).Body().Equal("Unauthorized")
+		e.GET("/notfound").WithBasicAuth("invaid_username", password).Expect().
+			Status(httptest.StatusUnauthorized).Body().Equal("Unauthorized")
+
+		// Test subdomain inherited.
+		sub := e.Builder(func(req *httptest.Request) {
+			req.WithURL("http://static.mydomain.com")
+		})
+
+		// Test pass and route found.
+		sub.GET("/").WithBasicAuth(username, password).Expect().
+			Status(httptest.StatusOK).Body().Equal(fmt.Sprintf("Static, %s", username))
+
+		// Test empty auth.
+		sub.GET("/").Expect().Status(httptest.StatusUnauthorized)
+		// Test invalid auth.
+		sub.GET("/").WithBasicAuth(username, "invalid_password").Expect().
+			Status(httptest.StatusUnauthorized).Body().Equal("Unauthorized")
+		sub.GET("/").WithBasicAuth("invaid_username", password).Expect().
+			Status(httptest.StatusUnauthorized).Body().Equal("Unauthorized")
+
+		// Test pass the authentication but route not found.
+		sub.GET("/notfound").WithBasicAuth(username, password).Expect().
+			Status(httptest.StatusNotFound).Body().Equal("Not Found")
+
+		// Test empty auth.
+		sub.GET("/notfound").Expect().Status(httptest.StatusUnauthorized).Body().Equal("Unauthorized")
+		// Test invalid auth.
+		sub.GET("/notfound").WithBasicAuth(username, "invalid_password").Expect().
+			Status(httptest.StatusUnauthorized).Body().Equal("Unauthorized")
+		sub.GET("/notfound").WithBasicAuth("invaid_username", password).Expect().
+			Status(httptest.StatusUnauthorized).Body().Equal("Unauthorized")
+
+		// Test a reset-ed Party with a single one UseRouter
+		// which writes on matched routes and reset and send the error on errors.
+		// (all should pass without auth).
+		sub = e.Builder(func(req *httptest.Request) {
+			req.WithURL("http://reset_with_use_router.mydomain.com")
+		})
+		sub.GET("/").Expect().Status(httptest.StatusOK).Body().Equal("with use router\n")
+		sub.POST("/").Expect().Status(httptest.StatusMethodNotAllowed).Body().Equal("Method Not Allowed")
+		sub.GET("/notfound").Expect().Status(httptest.StatusNotFound).Body().Equal("Not Found")
+
+		// Test a reset-ed Party (all should pass without auth).
+		sub = e.Builder(func(req *httptest.Request) {
+			req.WithURL("http://reset.mydomain.com")
+		})
+		sub.GET("/").Expect().Status(httptest.StatusOK).Body().Empty()
+		sub.POST("/").Expect().Status(httptest.StatusMethodNotAllowed).Body().Equal("Method Not Allowed")
+		sub.GET("/notfound").Expect().Status(httptest.StatusNotFound).Body().Equal("Not Found")
+	}
+}