57 lines
1.5 KiB
Go
57 lines
1.5 KiB
Go
|
package nginx
|
||
|
|
|
||
|
|
import (
|
||
|
|
"os"
|
||
|
|
"path/filepath"
|
||
|
|
"strings"
|
||
|
|
"testing"
|
||
|
|
|
||
|
|
"github.com/havline/havline/internal/config"
|
||
|
|
"github.com/havline/havline/internal/proxy"
|
||
|
|
)
|
||
|
|
|
||
|
|
func TestChinaOnlyBypassGeoWithoutUserWhitelist(t *testing.T) {
|
||
|
|
dir := t.TempDir()
|
||
|
|
if err := os.WriteFile(filepath.Join(dir, "mime.types"), []byte("types { text/html html; }\n"), 0o644); err != nil {
|
||
|
|
t.Fatal(err)
|
||
|
|
}
|
||
|
|
cidrPath := filepath.Join(dir, "nginx", "china_cidr.conf")
|
||
|
|
if err := os.MkdirAll(filepath.Dir(cidrPath), 0o755); err != nil {
|
||
|
|
t.Fatal(err)
|
||
|
|
}
|
||
|
|
if err := os.WriteFile(cidrPath, []byte("1.0.0.0/8 1;\n"), 0o644); err != nil {
|
||
|
|
t.Fatal(err)
|
||
|
|
}
|
||
|
|
|
||
|
|
cfg := config.Config{
|
||
|
|
DataDir: dir,
|
||
|
|
NginxPIDFile: filepath.Join(dir, "nginx.pid"),
|
||
|
|
NginxMimeTypes: filepath.Join(dir, "mime.types"),
|
||
|
|
}
|
||
|
|
rules := []proxy.Rule{{
|
||
|
|
ID: 3,
|
||
|
|
ListenPort: 8080,
|
||
|
|
ListenIPv4: true,
|
||
|
|
Hosts: []proxy.Host{{Hostname: "app.example.com"}},
|
||
|
|
Upstream: "http://127.0.0.1:3000",
|
||
|
|
Enabled: true,
|
||
|
|
HTTPSEnabled: false,
|
||
|
|
Security: proxy.SecurityConfig{ChinaOnly: true},
|
||
|
|
}}
|
||
|
|
|
||
|
|
content, err := Generate(cfg, rules, nil, GenerateOptions{ChinaCIDRAvailable: true})
|
||
|
|
if err != nil {
|
||
|
|
t.Fatalf("generate: %v", err)
|
||
|
|
}
|
||
|
|
for _, want := range []string{
|
||
|
|
"geo $havline_client_ip $havline_rule_3_china_bypass",
|
||
|
|
"192.168.0.0/16 1;",
|
||
|
|
"10.0.0.0/8 1;",
|
||
|
|
"if ($havline_rule_3_china_bypass = 1)",
|
||
|
|
} {
|
||
|
|
if !strings.Contains(content, want) {
|
||
|
|
t.Fatalf("missing %q in:\n%s", want, content)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|