// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved. // See LICENSE.txt for license information. package api4 import ( "net/http" "net/http/httptest" "testing" "github.com/stretchr/testify/assert" "github.com/stretchr/testify/require" "github.com/mattermost/mattermost/server/public/model" ) func handlerForGzip(t *testing.T) func(*Context, http.ResponseWriter, *http.Request) { return func(_ *Context, w http.ResponseWriter, _ *http.Request) { // gziphandler default requires body size greater than 1400 bytes var body [1400]byte _, err := w.Write(body[:]) require.NoError(t, err) } } func testAPIHandlerGzipMode(t *testing.T, name string, h http.Handler, token string) { t.Run("Handler: "+name+" No Accept-Encoding", func(t *testing.T) { resp := httptest.NewRecorder() req := httptest.NewRequest("GET", "/api/v4/test", nil) req.Header.Set(model.HeaderAuth, "Bearer "+token) h.ServeHTTP(resp, req) assert.Equal(t, http.StatusOK, resp.Code) assert.Equal(t, "", resp.Header().Get("Content-Encoding")) }) t.Run("Handler: "+name+" With Accept-Encoding", func(t *testing.T) { resp := httptest.NewRecorder() req := httptest.NewRequest("GET", "/api/v4/test", nil) req.Header.Set("Accept-Encoding", "gzip") req.Header.Set(model.HeaderAuth, "Bearer "+token) h.ServeHTTP(resp, req) assert.Equal(t, http.StatusOK, resp.Code) assert.Equal(t, "gzip", resp.Header().Get("Content-Encoding")) }) } func testAPIHandlerNoGzipMode(t *testing.T, name string, h http.Handler, token string) { t.Run("Handler: "+name+" No Accept-Encoding", func(t *testing.T) { resp := httptest.NewRecorder() req := httptest.NewRequest("GET", "/api/v4/test", nil) req.Header.Set(model.HeaderAuth, "Bearer "+token) h.ServeHTTP(resp, req) assert.Equal(t, http.StatusOK, resp.Code) assert.Equal(t, "", resp.Header().Get("Content-Encoding")) }) t.Run("Handler: "+name+" With Accept-Encoding", func(t *testing.T) { resp := httptest.NewRecorder() req := httptest.NewRequest("GET", "/api/v4/test", nil) req.Header.Set("Accept-Encoding", "gzip") req.Header.Set(model.HeaderAuth, "Bearer "+token) h.ServeHTTP(resp, req) assert.Equal(t, http.StatusOK, resp.Code) assert.Equal(t, "", resp.Header().Get("Content-Encoding")) }) } func TestAPIHandlersWithGzip(t *testing.T) { mainHelper.Parallel(t) th := Setup(t) defer th.TearDown() api, err := Init(th.Server) require.NoError(t, err) session, _ := th.App.GetSession(th.Client.AuthToken) t.Run("with WebserverMode == \"gzip\"", func(t *testing.T) { th.App.UpdateConfig(func(cfg *model.Config) { *cfg.ServiceSettings.WebserverMode = "gzip" }) testAPIHandlerGzipMode(t, "ApiHandler", api.APIHandler(handlerForGzip(t)), "") testAPIHandlerGzipMode(t, "ApiSessionRequired", api.APISessionRequired(handlerForGzip(t)), session.Token) testAPIHandlerGzipMode(t, "ApiSessionRequiredMfa", api.APISessionRequiredMfa(handlerForGzip(t)), session.Token) testAPIHandlerGzipMode(t, "ApiHandlerTrustRequester", api.APIHandlerTrustRequester(handlerForGzip(t)), "") testAPIHandlerGzipMode(t, "ApiSessionRequiredTrustRequester", api.APISessionRequiredTrustRequester(handlerForGzip(t)), session.Token) }) t.Run("with WebserverMode == \"nogzip\"", func(t *testing.T) { th.App.UpdateConfig(func(cfg *model.Config) { *cfg.ServiceSettings.WebserverMode = "nogzip" }) testAPIHandlerNoGzipMode(t, "ApiHandler", api.APIHandler(handlerForGzip(t)), "") testAPIHandlerNoGzipMode(t, "ApiSessionRequired", api.APISessionRequired(handlerForGzip(t)), session.Token) testAPIHandlerNoGzipMode(t, "ApiSessionRequiredMfa", api.APISessionRequiredMfa(handlerForGzip(t)), session.Token) testAPIHandlerNoGzipMode(t, "ApiHandlerTrustRequester", api.APIHandlerTrustRequester(handlerForGzip(t)), "") testAPIHandlerNoGzipMode(t, "ApiSessionRequiredTrustRequester", api.APISessionRequiredTrustRequester(handlerForGzip(t)), session.Token) }) }