squidex/backend/tests/Squidex.Web.Tests/Pipeline/EnforceHttpsMiddlewareTests.cs

// ==========================================================================
//  Squidex Headless CMS
// ==========================================================================
//  Copyright (c) Squidex UG (haftungsbeschränkt)
//  All rights reserved. Licensed under the MIT license.
// ==========================================================================

using System.Threading.Tasks;
using Microsoft.AspNetCore.Http;
using Xunit;
using Options = Microsoft.Extensions.Options.Options;

namespace Squidex.Web.Pipeline
{
    public class EnforceHttpsMiddlewareTests
    {
        private readonly RequestDelegate next;
        private readonly UrlsOptions options = new UrlsOptions();
        private readonly EnforceHttpsMiddleware sut;
        private bool isNextCalled;

        public EnforceHttpsMiddlewareTests()
        {
            next = context =>
            {
                isNextCalled = true;

                return Task.CompletedTask;
            };

            sut = new EnforceHttpsMiddleware(Options.Create(options));
        }

        [Fact]
        public async Task Should_make_permanent_redirect_if_redirect_is_required()
        {
            var httpContext = CreateHttpContext();

            options.EnforceHTTPS = true;

            await sut.InvokeAsync(httpContext, next);

            Assert.False(isNextCalled);
            Assert.Equal("https://squidex.local/path?query=1", httpContext.Response.Headers["Location"]);
        }

        [Fact]
        public async Task Should_not_redirect_if_already_on_https()
        {
            var httpContext = CreateHttpContext("https");

            options.EnforceHTTPS = true;

            await sut.InvokeAsync(httpContext, next);

            Assert.True(isNextCalled);
            Assert.Null((string)httpContext.Response.Headers["Location"]);
        }

        [Fact]
        public async Task Should_not_redirect_if_not_required()
        {
            var httpContext = CreateHttpContext();

            options.EnforceHTTPS = false;

            await sut.InvokeAsync(httpContext, next);

            Assert.True(isNextCalled);
            Assert.Null((string)httpContext.Response.Headers["Location"]);
        }

        private static DefaultHttpContext CreateHttpContext(string scheme = "http")
        {
            var httpContext = new DefaultHttpContext();

            httpContext.Request.QueryString = new QueryString("?query=1");
            httpContext.Request.Host = new HostString("squidex.local");
            httpContext.Request.Path = new PathString("/path");
            httpContext.Request.Scheme = scheme;

            return httpContext;
        }
    }
}