Contents

require_relative "../lib/tynn/protection"
require_relative "../lib/tynn/session"

test "supports hsts options" do
  hsts = { expires: 100, subdomains: false, preload: true }

  Tynn.plugin(Tynn::Protection, ssl: true, hsts: hsts)

  Tynn.define do
  end

  app = Tynn::Test.new
  app.get("/", {}, "HTTPS" => "on")

  hsts = app.res.headers["Strict-Transport-Security"]

  assert_equal "max-age=100; preload", hsts
end

test "adds secure flag to session cookie" do
  Tynn.plugin(Tynn::Protection, ssl: true)
  Tynn.plugin(Tynn::Session, secret: "_this_must_be_random_")

  Tynn.define do
    root do
      session[:foo] = "foo"
    end
  end

  app = Tynn::Test.new
  app.get("/", {}, "HTTPS" => "on")

  session, _ = app.res.headers["Set-Cookie"].split("\n")

  assert(/;\s*secure\s*(;|$)/i === session)
end

Version data entries

4 entries across 4 versions & 1 rubygems

Version	Path
tynn-1.4.0	test/protection_test.rb
tynn-1.3.0	test/protection_test.rb
tynn-1.2.0	test/protection_test.rb
tynn-1.1.0	test/protection_test.rb