Extremely Popular
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388// Copyright 2018-2020 the oak authors. All rights reserved. MIT license.
import { assert, assertEquals, assertStrictEquals, test } from "./test_deps.ts";
import type { Application } from "./application.ts";import type { Context } from "./context.ts";import { Status } from "./deps.ts";import { httpErrors } from "./httpError.ts";import { send } from "./send.ts";
let encodingsAccepted = "identity";
function createMockApp< // deno-lint-ignore no-explicit-any S extends Record<string | number | symbol, any> = Record<string, any>,>( state = {} as S,): Application<S> { return { state, // deno-lint-ignore no-explicit-any } as any;}
function createMockContext< // deno-lint-ignore no-explicit-any S extends Record<string | number | symbol, any> = Record<string, any>,>( app: Application<S>, path = "/", method = "GET",) { // deno-lint-ignore no-explicit-any let body: any; let status = Status.OK; const headers = new Headers(); const resources: number[] = []; return ({ app, request: { acceptsEncodings() { return encodingsAccepted; }, headers: new Headers(), method, path, search: undefined, searchParams: new URLSearchParams(), url: new URL(`http://localhost${path}`), }, response: { get status(): Status { return status; }, set status(value: Status) { status = value; }, // deno-lint-ignore no-explicit-any get body(): any { return body; }, // deno-lint-ignore no-explicit-any set body(value: any) { body = value; }, addResource(rid: number) { resources.push(rid); }, destroy() { body = undefined; for (const rid of resources) { Deno.close(rid); } }, headers, async toServerResponse() { return { status, body, headers, }; }, }, state: app.state, } as unknown) as Context<S>;}
// deno-lint-ignore no-explicit-anyfunction isDenoReader(value: any): value is Deno.Reader { return value && typeof value === "object" && "read" in value && typeof value.read === "function";}
function setup< // deno-lint-ignore no-explicit-any S extends Record<string | number | symbol, any> = Record<string, any>,>( path = "/", method = "GET",): { app: Application<S>; context: Context<S>;} { encodingsAccepted = "identity"; const app = createMockApp<S>(); const context = createMockContext<S>(app, path, method); return { app, context };}
test({ name: "send HTML", async fn() { const { context } = setup("/test.html"); const fixture = await Deno.readFile("./fixtures/test.html"); await send(context, context.request.url.pathname, { root: "./fixtures" }); const serverResponse = context.response.toServerResponse(); const bodyReader = (await serverResponse).body; assert(isDenoReader(bodyReader)); const body = await Deno.readAll(bodyReader); assertEquals(body, fixture); assertEquals(context.response.type, ".html"); assertEquals( context.response.headers.get("content-length"), String(fixture.length), ); assert(context.response.headers.get("last-modified") != null); assertEquals(context.response.headers.get("cache-control"), "max-age=0"); context.response.destroy(); },});
test({ name: "send gzip", async fn() { const { context } = setup("/test.json"); const fixture = await Deno.readFile("./fixtures/test.json.gz"); encodingsAccepted = "gzip"; await send(context, context.request.url.pathname, { root: "./fixtures", }); const serverResponse = context.response.toServerResponse(); const bodyReader = (await serverResponse).body; assert(isDenoReader(bodyReader)); const body = await Deno.readAll(bodyReader); assertEquals(body, fixture); assertEquals(context.response.type, ".json"); assertEquals(context.response.headers.get("content-encoding"), "gzip"); assertEquals( context.response.headers.get("content-length"), String(fixture.length), ); context.response.destroy(); },});
test({ name: "send brotli", async fn() { const { context } = setup("/test.json"); const fixture = await Deno.readFile("./fixtures/test.json.br"); encodingsAccepted = "br"; await send(context, context.request.url.pathname, { root: "./fixtures" }); const serverResponse = context.response.toServerResponse(); const bodyReader = (await serverResponse).body; assert(isDenoReader(bodyReader)); const body = await Deno.readAll(bodyReader); assertEquals(body, fixture); assertEquals(context.response.type, ".json"); assertEquals(context.response.headers.get("content-encoding"), "br"); assertEquals( context.response.headers.get("content-length"), String(fixture.length), ); context.response.destroy(); },});
test({ name: "send identity", async fn() { const { context } = setup("/test.json"); const fixture = await Deno.readFile("./fixtures/test.json"); await send(context, context.request.url.pathname, { root: "./fixtures", }); const serverResponse = context.response.toServerResponse(); const bodyReader = (await serverResponse).body; assert(isDenoReader(bodyReader)); const body = await Deno.readAll(bodyReader); assertEquals(body, fixture); assertEquals(context.response.type, ".json"); assertStrictEquals(context.response.headers.get("content-encoding"), null); assertEquals( context.response.headers.get("content-length"), String(fixture.length), ); context.response.destroy(); },});
test({ name: "send 404", async fn() { const { context } = setup("/foo.txt"); encodingsAccepted = "identity"; let didThrow = false; try { await send(context, context.request.url.pathname, { root: "./fixtures", }); } catch (e) { assert(e instanceof httpErrors.NotFound); didThrow = true; } assert(didThrow); },});
test({ name: "send file with spaces", async fn() { const { context } = setup("/test%20file.json"); const fixture = await Deno.readFile("./fixtures/test file.json"); await send(context, context.request.url.pathname, { root: "./fixtures", }); const serverResponse = context.response.toServerResponse(); const bodyReader = (await serverResponse).body; assert(isDenoReader(bodyReader)); const body = await Deno.readAll(bodyReader); assertEquals(body, fixture); assertEquals(context.response.type, ".json"); assertStrictEquals(context.response.headers.get("content-encoding"), null); assertEquals( context.response.headers.get("content-length"), String(fixture.length), ); context.response.destroy(); },});
test({ name: "send hidden file throws 403", async fn() { const { context } = setup("/.test.json"); encodingsAccepted = "identity"; let didThrow = false; try { await send(context, context.request.url.pathname, { root: "./fixtures", }); } catch (e) { assert(e instanceof httpErrors.Forbidden); didThrow = true; } assert(didThrow); },});
test({ name: "send file from hidden dir throws 403", async fn() { const { context } = setup("/.test/test.json"); encodingsAccepted = "identity"; let didThrow = false; try { await send(context, context.request.url.pathname, { root: "./fixtures", }); } catch (e) { assert(e instanceof httpErrors.Forbidden); didThrow = true; } assert(didThrow); },});
test({ name: "send hidden file succeeds when hidden:true", async fn() { const { context } = setup("/.test.json"); const fixture = await Deno.readFile("./fixtures/.test.json"); await send(context, context.request.url.pathname, { root: "./fixtures", hidden: true, }); const serverResponse = context.response.toServerResponse(); const bodyReader = (await serverResponse).body; assert(isDenoReader(bodyReader)); const body = await Deno.readAll(bodyReader); assertEquals(body, fixture); assertEquals(context.response.type, ".json"); assertStrictEquals(context.response.headers.get("content-encoding"), null); assertEquals( context.response.headers.get("content-length"), String(fixture.length), ); context.response.destroy(); },});
test({ name: "send file from hidden root succeeds", async fn() { const { context } = setup("/test.json"); const fixture = await Deno.readFile("./fixtures/.test/test.json"); await send(context, context.request.url.pathname, { root: "./fixtures/.test", }); const serverResponse = context.response.toServerResponse(); const bodyReader = (await serverResponse).body; assert(isDenoReader(bodyReader)); const body = await Deno.readAll(bodyReader); assertEquals(body, fixture); assertEquals(context.response.type, ".json"); assertStrictEquals(context.response.headers.get("content-encoding"), null); assertEquals( context.response.headers.get("content-length"), String(fixture.length), ); context.response.destroy(); },});
test({ name: "send url: /../file sends /file", async fn() { const { context } = setup("/../test.json"); const fixture = await Deno.readFile("./fixtures/test.json"); await send(context, context.request.url.pathname, { root: "./fixtures", }); const serverResponse = context.response.toServerResponse(); const bodyReader = (await serverResponse).body; assert(isDenoReader(bodyReader)); const body = await Deno.readAll(bodyReader); assertEquals(body, fixture); assertEquals(context.response.type, ".json"); assertStrictEquals(context.response.headers.get("content-encoding"), null); assertEquals( context.response.headers.get("content-length"), String(fixture.length), ); context.response.destroy(); },});
test({ name: "send path: /../file throws 403", async fn() { const { context } = setup("/../test.json"); encodingsAccepted = "identity"; let didThrow = false; try { await send(context, "/../test.json", { root: "./fixtures", }); } catch (e) { assert(e instanceof httpErrors.Forbidden); didThrow = true; } assert(didThrow); },});
test({ name: "send allows .. in root", async fn() { const { context } = setup("/test.json"); const fixture = await Deno.readFile("./fixtures/test.json"); await send(context, context.request.url.pathname, { root: "../oak/fixtures", }); const serverResponse = context.response.toServerResponse(); const bodyReader = (await serverResponse).body; assert(isDenoReader(bodyReader)); const body = await Deno.readAll(bodyReader); assertEquals(body, fixture); assertEquals(context.response.type, ".json"); assertStrictEquals(context.response.headers.get("content-encoding"), null); assertEquals( context.response.headers.get("content-length"), String(fixture.length), ); context.response.destroy(); },});