Sha256: 4ea711edcc301fd5d394b9f115191f7dcf584dfa89aae42fd4c0d9b99323e51b
Contents?: true
Size: 1.92 KB
Versions: 12
Compression:
Stored size: 1.92 KB
Contents
require 'faraday'
require 'rspec/webservice_matchers/util'
require 'rspec/webservice_matchers/redirect_helpers'
module RSpec
module WebserviceMatchers
module EnforceHttpsEverywhere
# This is a high level matcher which checks three things:
# 1. Permanent redirect
# 2. to an https url
# 3. which is correctly configured
RSpec::Matchers.define :enforce_https_everywhere do
include RedirectHelpers
error_msg = status = final_protocol = has_valid_cert = nil
match do |domain_name|
begin
status, new_url, final_protocol = get_info(domain_name)
meets_expectations?(status, final_protocol, Util.valid_cert?(new_url))
rescue Faraday::Error::ConnectionFailed
error_msg = 'Connection failed'
false
end
end
def get_info(domain_name)
status, headers = Util.head(domain_name)
location = headers['location']
/^(https?)/ =~ location
protocol = $1 || nil
[status, location, protocol]
end
def meets_expectations?(status, protocol, valid_cert)
permanent_redirect?(status) && (protocol == 'https') && valid_cert
end
# Create a compound error message listing all of the
# relevant actual values received.
failure_message do
error_msg || higher_level_errors(status, final_protocol, has_valid_cert)
end
def higher_level_errors(status, protocol, cert_is_valid)
errors = []
unless permanent_redirect?(status)
errors << "received status #{status} instead of 301"
end
if protocol && (protocol != 'https')
errors << "destination uses protocol #{protocol.upcase}"
end
errors << "there's no valid SSL certificate" unless cert_is_valid
Util.error_message(errors)
end
end
end
end
end
Version data entries
12 entries across 12 versions & 1 rubygems