Contents

# frozen_string_literal: true
require 'test_helper'

module Shipit
  class SameSiteCookieMiddlewareTest < ActiveSupport::TestCase
    def app
      Rack::Lint.new(lambda { |_env|
        response = Rack::Response.new("", 200, "Content-Type" => "text/yaml")

        response.set_cookie("session_test", value: "session_test", domain: ".test.com", path: "/")
        response.set_cookie("another_cookie", value: "123abc", domain: ".test.com", path: "/")
        response.finish
      })
    end

    def env_for_url(url)
      env = Rack::MockRequest.env_for(url)
      env
    end

    def middleware
      Shipit::SameSiteCookieMiddleware.new(app)
    end

    test 'SameSite cookie attributes should be added on SSL' do
      env = env_for_url("https://test.com/")

      _status, headers, _body = middleware.call(env)

      assert_includes headers['Set-Cookie'], 'SameSite'
    end

    test 'SameSite cookie attributes should be added when multiple cookies are present' do
      env = env_for_url("https://test.com/")

      _status, headers, _body = middleware.call(env)

      session_cookie, other_cookie = headers['Set-Cookie'].split("\n")

      assert_includes session_cookie, 'SameSite'
      assert_includes other_cookie, 'SameSite'
    end

    test 'SameSite cookie attributes should not be added on non SSL requests' do
      env = env_for_url("http://test.com/")

      _status, headers, _body = middleware.call(env)

      assert_not_includes headers['Set-Cookie'], 'SameSite'
    end
  end
end

Version data entries

10 entries across 10 versions & 1 rubygems

Version	Path
shipit-engine-0.39.0	test/middleware/same_site_cookie_middleware_test.rb
shipit-engine-0.38.0	test/middleware/same_site_cookie_middleware_test.rb
shipit-engine-0.37.0	test/middleware/same_site_cookie_middleware_test.rb
shipit-engine-0.36.1	test/middleware/same_site_cookie_middleware_test.rb
shipit-engine-0.36.0	test/middleware/same_site_cookie_middleware_test.rb
shipit-engine-0.35.1	test/middleware/same_site_cookie_middleware_test.rb
shipit-engine-0.35.0	test/middleware/same_site_cookie_middleware_test.rb
shipit-engine-0.34.0	test/middleware/same_site_cookie_middleware_test.rb
shipit-engine-0.33.0	test/middleware/same_site_cookie_middleware_test.rb
shipit-engine-0.32.0	test/middleware/same_site_cookie_middleware_test.rb