git.squeep.com Git - akkoma/blob - test/plugs/remote_ip_test.exs

   1 # Pleroma: A lightweight social networking server
   2 # Copyright © 2017-2019 Pleroma Authors <https://pleroma.social/>
   3 # SPDX-License-Identifier: AGPL-3.0-only
   4
   5 defmodule Pleroma.Plugs.RemoteIpTest do
   6   use ExUnit.Case, async: true
   7   use Plug.Test
   8
   9   alias Pleroma.Plugs.RemoteIp
  10
  11   test "disabled" do
  12     Pleroma.Config.put(RemoteIp, enabled: false)
  13
  14     %{remote_ip: remote_ip} = conn(:get, "/")
  15
  16     conn =
  17       conn(:get, "/")
  18       |> put_req_header("x-forwarded-for", "1.1.1.1")
  19       |> RemoteIp.call(nil)
  20
  21     assert conn.remote_ip == remote_ip
  22   end
  23
  24   test "enabled" do
  25     Pleroma.Config.put(RemoteIp, enabled: true)
  26
  27     conn =
  28       conn(:get, "/")
  29       |> put_req_header("x-forwarded-for", "1.1.1.1")
  30       |> RemoteIp.call(nil)
  31
  32     assert conn.remote_ip == {1, 1, 1, 1}
  33   end
  34
  35   test "custom headers" do
  36     Pleroma.Config.put(RemoteIp, enabled: true, headers: ["cf-connecting-ip"])
  37
  38     conn =
  39       conn(:get, "/")
  40       |> put_req_header("x-forwarded-for", "1.1.1.1")
  41       |> RemoteIp.call(nil)
  42
  43     refute conn.remote_ip == {1, 1, 1, 1}
  44
  45     conn =
  46       conn(:get, "/")
  47       |> put_req_header("cf-connecting-ip", "1.1.1.1")
  48       |> RemoteIp.call(nil)
  49
  50     assert conn.remote_ip == {1, 1, 1, 1}
  51   end
  52
  53   test "custom proxies" do
  54     Pleroma.Config.put(RemoteIp, enabled: true)
  55
  56     conn =
  57       conn(:get, "/")
  58       |> put_req_header("x-forwarded-for", "173.245.48.1, 1.1.1.1, 173.245.48.2")
  59       |> RemoteIp.call(nil)
  60
  61     refute conn.remote_ip == {1, 1, 1, 1}
  62
  63     Pleroma.Config.put([RemoteIp, :proxies], ["173.245.48.0/20"])
  64
  65     conn =
  66       conn(:get, "/")
  67       |> put_req_header("x-forwarded-for", "173.245.48.1, 1.1.1.1, 173.245.48.2")
  68       |> RemoteIp.call(nil)
  69
  70     assert conn.remote_ip == {1, 1, 1, 1}
  71   end
  72 end