oauth2_proxy/pkg/apis/options/options_test.go

package options

import (
	"bytes"
	"io"
	"os"
	"testing"
	"time"

	. "github.com/onsi/ginkgo"
	. "github.com/onsi/gomega"
)

func TestOptions(t *testing.T) {
	RegisterFailHandler(Fail)
	RunSpecs(t, "Options")
}

var _ = Describe("Load", func() {
	var opts *Options
	var err error
	var config io.Reader
	var configType string
	var args []string

	BeforeEach(func() {
		// Make sure to clear previous test globals
		opts = nil
		err = nil
		config = nil
		configType = ""
		args = []string{}
	})

	JustBeforeEach(func() {
		opts, err = Load(config, configType, args)
	})

	Context("with no configuration", func() {
		It("returns no error", func() {
			Expect(err).NotTo(HaveOccurred())
		})

		It("returns the default configuration", func() {
			defaultOpts := New()
			Expect(opts).To(Equal(defaultOpts))
		})
	})

	Context("with a yaml configuration for cookies", func() {
		BeforeEach(func() {
			configType = "yaml"
			config = bytes.NewBuffer([]byte(`
        cookie:
          name: cookie_name
          secret: 123567890abcdef
          domain: example.com
          path: /path
          expire: 12h
          refresh: 1h
          secure: false
          httpOnly: false
        `))
		})

		It("returns no error", func() {
			Expect(err).NotTo(HaveOccurred())
		})

		It("sets the correct configuration", func() {
			expected := &CookieOptions{
				Name:     "cookie_name",
				Secret:   "123567890abcdef",
				Domain:   "example.com",
				Path:     "/path",
				Expire:   time.Duration(12) * time.Hour,
				Refresh:  time.Hour,
				Secure:   false,
				HTTPOnly: false,
			}
			Expect(opts.Cookie).To(Equal(expected))
		})

		Context("with environment configuration", func() {
			BeforeEach(func() {
				os.Setenv("OAUTH2_PROXY_COOKIE_NAME", "env_cookie_name")
				os.Setenv("OAUTH2_PROXY_COOKIE_SECRET", "env_secret_12345")
				os.Setenv("OAUTH2_PROXY_COOKIE_DOMAIN", "env.example.com")
				os.Setenv("OAUTH2_PROXY_COOKIE_PATH", "/env")
				os.Setenv("OAUTH2_PROXY_COOKIE_EXPIRE", "24h")
				os.Setenv("OAUTH2_PROXY_COOKIE_REFRESH", "2h")
				os.Setenv("OAUTH2_PROXY_COOKIE_SECURE", "true")
				os.Setenv("OAUTH2_PROXY_COOKIE_HTTPONLY", "true")
			})

			It("returns no error", func() {
				Expect(err).NotTo(HaveOccurred())
			})

			It("the environment overrides the config file", func() {
				expected := &CookieOptions{
					Name:     "env_cookie_name",
					Secret:   "env_secret_12345",
					Domain:   "env.example.com",
					Path:     "/env",
					Expire:   time.Duration(24) * time.Hour,
					Refresh:  time.Duration(2) * time.Hour,
					Secure:   true,
					HTTPOnly: true,
				}
				Expect(opts.Cookie).To(Equal(expected))
			})

			Context("with flag configuration", func() {
				Context("with hyphens", func() {
					BeforeEach(func() {
						args = []string{
							"--cookie-name=flag_cookie_name",
							"--cookie-secret=flag_secret_1234",
							"--cookie-domain=flag.example.com",
							"--cookie-path=/flag",
							"--cookie-expire=48h",
							"--cookie-refresh=4h",
							"--cookie-secure=false",
							"--cookie-httponly=false",
						}
					})

					It("returns no error", func() {
						Expect(err).NotTo(HaveOccurred())
					})

					It("the environment overrides the config file", func() {
						expected := &CookieOptions{
							Name:     "flag_cookie_name",
							Secret:   "flag_secret_1234",
							Domain:   "flag.example.com",
							Path:     "/flag",
							Expire:   time.Duration(48) * time.Hour,
							Refresh:  time.Duration(4) * time.Hour,
							Secure:   false,
							HTTPOnly: false,
						}
						Expect(opts.Cookie).To(Equal(expected))
					})
				})
			})
		})
	})
})