test/req.secure.js

   1 'use strict'
   2
   3 var express = require('../')
   4   , request = require('supertest');
   5
   6 describe('req', function(){
   7   describe('.secure', function(){
   8     describe('when X-Forwarded-Proto is missing', function(){
   9       it('should return false when http', function(done){
  10         var app = express();
  11
  12         app.get('/', function(req, res){
  13           res.send(req.secure ? 'yes' : 'no');
  14         });
  15
  16         request(app)
  17         .get('/')
  18         .expect('no', done)
  19       })
  20     })
  21   })
  22
  23   describe('.secure', function(){
  24     describe('when X-Forwarded-Proto is present', function(){
  25       it('should return false when http', function(done){
  26         var app = express();
  27
  28         app.get('/', function(req, res){
  29           res.send(req.secure ? 'yes' : 'no');
  30         });
  31
  32         request(app)
  33         .get('/')
  34         .set('X-Forwarded-Proto', 'https')
  35         .expect('no', done)
  36       })
  37
  38       it('should return true when "trust proxy" is enabled', function(done){
  39         var app = express();
  40
  41         app.enable('trust proxy');
  42
  43         app.get('/', function(req, res){
  44           res.send(req.secure ? 'yes' : 'no');
  45         });
  46
  47         request(app)
  48         .get('/')
  49         .set('X-Forwarded-Proto', 'https')
  50         .expect('yes', done)
  51       })
  52
  53       it('should return false when initial proxy is http', function(done){
  54         var app = express();
  55
  56         app.enable('trust proxy');
  57
  58         app.get('/', function(req, res){
  59           res.send(req.secure ? 'yes' : 'no');
  60         });
  61
  62         request(app)
  63         .get('/')
  64         .set('X-Forwarded-Proto', 'http, https')
  65         .expect('no', done)
  66       })
  67
  68       it('should return true when initial proxy is https', function(done){
  69         var app = express();
  70
  71         app.enable('trust proxy');
  72
  73         app.get('/', function(req, res){
  74           res.send(req.secure ? 'yes' : 'no');
  75         });
  76
  77         request(app)
  78         .get('/')
  79         .set('X-Forwarded-Proto', 'https, http')
  80         .expect('yes', done)
  81       })
  82
  83       describe('when "trust proxy" trusting hop count', function () {
  84         it('should respect X-Forwarded-Proto', function (done) {
  85           var app = express();
  86
  87           app.set('trust proxy', 1);
  88
  89           app.get('/', function (req, res) {
  90             res.send(req.secure ? 'yes' : 'no');
  91           });
  92
  93           request(app)
  94           .get('/')
  95           .set('X-Forwarded-Proto', 'https')
  96           .expect('yes', done)
  97         })
  98       })
  99     })
 100   })
 101 })