469 lines
9.7 KiB
V
469 lines
9.7 KiB
V
import net.http
|
|
|
|
struct SetCookieTestCase {
|
|
cookie &http.Cookie
|
|
raw string
|
|
}
|
|
|
|
struct ReadSetCookiesTestCase {
|
|
header map[string][]string
|
|
cookies []&http.Cookie
|
|
}
|
|
|
|
struct AddCookieTestCase {
|
|
cookie []&http.Cookie
|
|
raw string
|
|
}
|
|
|
|
const (
|
|
write_set_cookie_tests = [
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'cookie-1'
|
|
value: 'v1'
|
|
}
|
|
raw: 'cookie-1=v1'
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'cookie-2'
|
|
value: 'two'
|
|
max_age: 3600
|
|
}
|
|
raw: 'cookie-2=two; Max-Age=3600'
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'cookie-3'
|
|
value: 'three'
|
|
domain: '.example.com'
|
|
}
|
|
raw: 'cookie-3=three; domain=example.com'
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'cookie-4'
|
|
value: 'four'
|
|
path: '/restricted/'
|
|
}
|
|
raw: 'cookie-4=four; path=/restricted/'
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'cookie-5'
|
|
value: 'five'
|
|
domain: 'wrong;bad.abc'
|
|
}
|
|
raw: 'cookie-5=five'
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'cookie-6'
|
|
value: 'six'
|
|
domain: 'bad-.abc'
|
|
}
|
|
raw: 'cookie-6=six'
|
|
},
|
|
// SetCookieTestCase{
|
|
// cookie: &http.Cookie{name: 'cookie-7', value: 'seven', domain: '127.0.0.1'},
|
|
// raw: 'cookie-7=seven; domain=127.0.0.1'
|
|
// },
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'cookie-8'
|
|
value: 'eight'
|
|
domain: '::1'
|
|
}
|
|
raw: 'cookie-8=eight'
|
|
},
|
|
// {
|
|
// cookie: &http.Cookie{name: 'cookie-9', value: 'expiring', expires: time.unix(1257894000, 0)},
|
|
// 'cookie-9=expiring; Expires=Tue, 10 Nov 2009 23:00:00 GMT',
|
|
// },
|
|
// According to IETF 6265 Section 5.1.1.5, the year cannot be less than 1601
|
|
// SetCookieTestCase{
|
|
// cookie: &http.Cookie{name: 'cookie-10', value: 'expiring-1601', expires: time.parse('Mon, 01 Jan 1601 01:01:01 GMT')},
|
|
// raw: 'cookie-10=expiring-1601; Expires=Mon, 01 Jan 1601 01:01:01 GMT'
|
|
// },
|
|
// SetCookieTestCase{
|
|
// cookie: &http.Cookie{name: 'cookie-11', value: 'invalid-expiry', expires: time.parse('Mon, 01 Jan 1600 01:01:01 GMT')},
|
|
// raw: 'cookie-11=invalid-expiry'
|
|
// },
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'cookie-12'
|
|
value: 'samesite-default'
|
|
same_site: .same_site_default_mode
|
|
}
|
|
raw: 'cookie-12=samesite-default; SameSite'
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'cookie-13'
|
|
value: 'samesite-lax'
|
|
same_site: .same_site_lax_mode
|
|
}
|
|
raw: 'cookie-13=samesite-lax; SameSite=Lax'
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'cookie-14'
|
|
value: 'samesite-strict'
|
|
same_site: .same_site_strict_mode
|
|
}
|
|
raw: 'cookie-14=samesite-strict; SameSite=Strict'
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'cookie-15'
|
|
value: 'samesite-none'
|
|
same_site: .same_site_none_mode
|
|
}
|
|
raw: 'cookie-15=samesite-none; SameSite=None'
|
|
},
|
|
// The 'special' cookies have values containing commas or spaces which
|
|
// are disallowed by RFC 6265 but are common in the wild.
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'special-1'
|
|
value: 'a z'
|
|
}
|
|
raw: 'special-1=a z'
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'special-2'
|
|
value: ' z'
|
|
}
|
|
raw: 'special-2=" z"'
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'special-3'
|
|
value: 'a '
|
|
}
|
|
raw: 'special-3="a "'
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'special-4'
|
|
value: ' '
|
|
}
|
|
raw: 'special-4=" "'
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'special-5'
|
|
value: 'a,z'
|
|
}
|
|
raw: 'special-5=a,z'
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'special-6'
|
|
value: ',z'
|
|
}
|
|
raw: 'special-6=",z"'
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'special-7'
|
|
value: 'a,'
|
|
}
|
|
raw: 'special-7="a,"'
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'special-8'
|
|
value: ','
|
|
}
|
|
raw: 'special-8=","'
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'empty-value'
|
|
value: ''
|
|
}
|
|
raw: 'empty-value='
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: ''
|
|
}
|
|
raw: ''
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: '\t'
|
|
}
|
|
raw: ''
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: '\r'
|
|
}
|
|
raw: ''
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'a\nb'
|
|
value: 'v'
|
|
}
|
|
raw: ''
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'a\nb'
|
|
value: 'v'
|
|
}
|
|
raw: ''
|
|
},
|
|
SetCookieTestCase{
|
|
cookie: &http.Cookie{
|
|
name: 'a\rb'
|
|
value: 'v'
|
|
}
|
|
raw: ''
|
|
},
|
|
]
|
|
add_cookies_tests = [
|
|
AddCookieTestCase{
|
|
cookie: []
|
|
raw: ''
|
|
},
|
|
AddCookieTestCase{
|
|
cookie: [&http.Cookie{
|
|
name: 'cookie-1'
|
|
value: 'v1'
|
|
}]
|
|
raw: 'cookie-1=v1'
|
|
},
|
|
AddCookieTestCase{
|
|
cookie: [&http.Cookie{
|
|
name: 'cookie-1'
|
|
value: 'v1'
|
|
},
|
|
&http.Cookie{
|
|
name: 'cookie-2'
|
|
value: 'v2'
|
|
},
|
|
&http.Cookie{
|
|
name: 'cookie-3'
|
|
value: 'v3'
|
|
},
|
|
]
|
|
raw: 'cookie-1=v1; cookie-2=v2; cookie-3=v3'
|
|
},
|
|
]
|
|
read_set_cookies_tests = [
|
|
ReadSetCookiesTestCase{
|
|
header: map{
|
|
'Set-Cookie': ['Cookie-1=v1']
|
|
}
|
|
cookies: [&http.Cookie{
|
|
name: 'Cookie-1'
|
|
value: 'v1'
|
|
raw: 'Cookie-1=v1'
|
|
}]
|
|
},
|
|
// ReadSetCookiesTestCase{
|
|
// header: {"Set-Cookie": ["NID=99=YsDT5i3E-CXax-; expires=Wed, 23-Nov-2011 01:05:03 GMT; path=/; domain=.google.ch; HttpOnly"]},
|
|
// cookies: [&http.Cookie{
|
|
// name: "NID",
|
|
// value: "99=YsDT5i3E-CXax-",
|
|
// path: "/",
|
|
// domain: ".google.ch",
|
|
// http_only: true,
|
|
// expires: time.parse_iso('Wed, 23-Nov-2011 01:05:03 GMT'),
|
|
// raw_expires: "Wed, 23-Nov-2011 01:05:03 GMT",
|
|
// raw: "NID=99=YsDT5i3E-CXax-; expires=Wed, 23-Nov-2011 01:05:03 GMT; path=/; domain=.google.ch; HttpOnly"
|
|
// }]
|
|
// },
|
|
// ReadSetCookiesTestCase{
|
|
// header: {"Set-Cookie": [".ASPXAUTH=7E3AA; expires=Wed, 07-Mar-2012 14:25:06 GMT; path=/; HttpOnly"]},
|
|
// cookies: [&http.Cookie{
|
|
// name: ".ASPXAUTH",
|
|
// value: "7E3AA",
|
|
// path: "/",
|
|
// expires: time.parse_iso('Wed, 07-Mar-2012 14:25:06 GMT'),
|
|
// raw_expires: "Wed, 07-Mar-2012 14:25:06 GMT",
|
|
// http_only: true,
|
|
// raw: ".ASPXAUTH=7E3AA; expires=Wed, 07-Mar-2012 14:25:06 GMT; path=/; HttpOnly"
|
|
// }]
|
|
// },
|
|
ReadSetCookiesTestCase{
|
|
header: map{
|
|
'Set-Cookie': ['ASP.NET_SessionId=foo; path=/; HttpOnly']
|
|
}
|
|
cookies: [
|
|
&http.Cookie{
|
|
name: 'ASP.NET_SessionId'
|
|
value: 'foo'
|
|
path: '/'
|
|
http_only: true
|
|
raw: 'ASP.NET_SessionId=foo; path=/; HttpOnly'
|
|
},
|
|
]
|
|
},
|
|
ReadSetCookiesTestCase{
|
|
header: map{
|
|
'Set-Cookie': ['samesitedefault=foo; SameSite']
|
|
}
|
|
cookies: [
|
|
&http.Cookie{
|
|
name: 'samesitedefault'
|
|
value: 'foo'
|
|
same_site: .same_site_default_mode
|
|
raw: 'samesitedefault=foo; SameSite'
|
|
},
|
|
]
|
|
},
|
|
ReadSetCookiesTestCase{
|
|
header: map{
|
|
'Set-Cookie': ['samesitelax=foo; SameSite=Lax']
|
|
}
|
|
cookies: [
|
|
&http.Cookie{
|
|
name: 'samesitelax'
|
|
value: 'foo'
|
|
same_site: .same_site_lax_mode
|
|
raw: 'samesitelax=foo; SameSite=Lax'
|
|
},
|
|
]
|
|
},
|
|
ReadSetCookiesTestCase{
|
|
header: map{
|
|
'Set-Cookie': ['samesitestrict=foo; SameSite=Strict']
|
|
}
|
|
cookies: [
|
|
&http.Cookie{
|
|
name: 'samesitestrict'
|
|
value: 'foo'
|
|
same_site: .same_site_strict_mode
|
|
raw: 'samesitestrict=foo; SameSite=Strict'
|
|
},
|
|
]
|
|
},
|
|
ReadSetCookiesTestCase{
|
|
header: map{
|
|
'Set-Cookie': ['samesitenone=foo; SameSite=None']
|
|
}
|
|
cookies: [
|
|
&http.Cookie{
|
|
name: 'samesitenone'
|
|
value: 'foo'
|
|
same_site: .same_site_none_mode
|
|
raw: 'samesitenone=foo; SameSite=None'
|
|
},
|
|
]
|
|
},
|
|
// Make sure we can properly read back the Set-Cookie headers we create
|
|
// for values containing spaces or commas:
|
|
ReadSetCookiesTestCase{
|
|
header: map{
|
|
'Set-Cookie': ['special-1=a z']
|
|
}
|
|
cookies: [
|
|
&http.Cookie{
|
|
name: 'special-1'
|
|
value: 'a z'
|
|
raw: 'special-1=a z'
|
|
},
|
|
]
|
|
},
|
|
ReadSetCookiesTestCase{
|
|
header: map{
|
|
'Set-Cookie': ['special-2=" z"']
|
|
}
|
|
cookies: [
|
|
&http.Cookie{
|
|
name: 'special-2'
|
|
value: ' z'
|
|
raw: 'special-2=" z"'
|
|
},
|
|
]
|
|
},
|
|
ReadSetCookiesTestCase{
|
|
header: map{
|
|
'Set-Cookie': ['special-3="a "']
|
|
}
|
|
cookies: [
|
|
&http.Cookie{
|
|
name: 'special-3'
|
|
value: 'a '
|
|
raw: 'special-3="a "'
|
|
},
|
|
]
|
|
},
|
|
ReadSetCookiesTestCase{
|
|
header: map{
|
|
'Set-Cookie': ['special-4=" "']
|
|
}
|
|
cookies: [
|
|
&http.Cookie{
|
|
name: 'special-4'
|
|
value: ' '
|
|
raw: 'special-4=" "'
|
|
},
|
|
]
|
|
},
|
|
ReadSetCookiesTestCase{
|
|
header: map{
|
|
'Set-Cookie': ['special-5=a,z']
|
|
}
|
|
cookies: [
|
|
&http.Cookie{
|
|
name: 'special-5'
|
|
value: 'a,z'
|
|
raw: 'special-5=a,z'
|
|
},
|
|
]
|
|
},
|
|
ReadSetCookiesTestCase{
|
|
header: map{
|
|
'Set-Cookie': ['special-6=",z"']
|
|
}
|
|
cookies: [
|
|
&http.Cookie{
|
|
name: 'special-6'
|
|
value: ',z'
|
|
raw: 'special-6=",z"'
|
|
},
|
|
]
|
|
},
|
|
ReadSetCookiesTestCase{
|
|
header: map{
|
|
'Set-Cookie': ['special-7=","']
|
|
}
|
|
cookies: [
|
|
&http.Cookie{
|
|
name: 'special-7'
|
|
value: ','
|
|
raw: 'special-8=","'
|
|
},
|
|
]
|
|
}
|
|
// TODO(bradfitz): users have reported seeing this in the,,
|
|
// wild, but do browsers handle it? RFC 6265 just says "don't
|
|
// do that" (section 3) and then never mentions header folding
|
|
// again.
|
|
// Header{"Set-Cookie": ["ASP.NET_SessionId=foo; path=/; HttpOnly, .ASPXAUTH=7E3AA; expires=Wed, 07-Mar-2012 14:25:06 GMT; path=/; HttpOnly"]},
|
|
]
|
|
)
|
|
|
|
fn test_write_set_cookies() {
|
|
for _, tt in write_set_cookie_tests {
|
|
assert tt.cookie.str() == tt.raw
|
|
}
|
|
}
|
|
|
|
fn test_read_set_cookies() {
|
|
for _, tt in read_set_cookies_tests {
|
|
h := tt.header['Set-Cookie'][0]
|
|
c := http.read_set_cookies(tt.header)
|
|
println(h)
|
|
println(c[0].str())
|
|
assert c[0].str() == h
|
|
}
|
|
}
|