git.squeep.com Git - akkoma/blob - test/plugs/remote_ip_test.exs

   1 # Pleroma: A lightweight social networking server
   2 # Copyright © 2017-2020 Pleroma Authors <https://pleroma.social/>
   3 # SPDX-License-Identifier: AGPL-3.0-only
   4
   5 defmodule Pleroma.Plugs.RemoteIpTest do
   6   use ExUnit.Case, async: true
   7   use Plug.Test
   8
   9   alias Pleroma.Plugs.RemoteIp
  10
  11   import Pleroma.Tests.Helpers, only: [clear_config: 1, clear_config: 2]
  12   setup do: clear_config(RemoteIp)
  13
  14   test "disabled" do
  15     Pleroma.Config.put(RemoteIp, enabled: false)
  16
  17     %{remote_ip: remote_ip} = conn(:get, "/")
  18
  19     conn =
  20       conn(:get, "/")
  21       |> put_req_header("x-forwarded-for", "1.1.1.1")
  22       |> RemoteIp.call(nil)
  23
  24     assert conn.remote_ip == remote_ip
  25   end
  26
  27   test "enabled" do
  28     Pleroma.Config.put(RemoteIp, enabled: true)
  29
  30     conn =
  31       conn(:get, "/")
  32       |> put_req_header("x-forwarded-for", "1.1.1.1")
  33       |> RemoteIp.call(nil)
  34
  35     assert conn.remote_ip == {1, 1, 1, 1}
  36   end
  37
  38   test "custom headers" do
  39     Pleroma.Config.put(RemoteIp, enabled: true, headers: ["cf-connecting-ip"])
  40
  41     conn =
  42       conn(:get, "/")
  43       |> put_req_header("x-forwarded-for", "1.1.1.1")
  44       |> RemoteIp.call(nil)
  45
  46     refute conn.remote_ip == {1, 1, 1, 1}
  47
  48     conn =
  49       conn(:get, "/")
  50       |> put_req_header("cf-connecting-ip", "1.1.1.1")
  51       |> RemoteIp.call(nil)
  52
  53     assert conn.remote_ip == {1, 1, 1, 1}
  54   end
  55
  56   test "custom proxies" do
  57     Pleroma.Config.put(RemoteIp, enabled: true)
  58
  59     conn =
  60       conn(:get, "/")
  61       |> put_req_header("x-forwarded-for", "173.245.48.1, 1.1.1.1, 173.245.48.2")
  62       |> RemoteIp.call(nil)
  63
  64     refute conn.remote_ip == {1, 1, 1, 1}
  65
  66     Pleroma.Config.put([RemoteIp, :proxies], ["173.245.48.0/20"])
  67
  68     conn =
  69       conn(:get, "/")
  70       |> put_req_header("x-forwarded-for", "173.245.48.1, 1.1.1.1, 173.245.48.2")
  71       |> RemoteIp.call(nil)
  72
  73     assert conn.remote_ip == {1, 1, 1, 1}
  74   end
  75 end