tigrbl_tests 0.3.9.dev1__tar.gz → 0.3.9.dev3__tar.gz

{tigrbl_tests-0.3.9.dev1 → tigrbl_tests-0.3.9.dev3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tigrbl_tests
-Version: 0.3.9.dev1
+Version: 0.3.9.dev3
 Summary: Test suite and fixtures for the Tigrbl framework.
 License-Expression: Apache-2.0
 License-File: LICENSE

{tigrbl_tests-0.3.9.dev1 → tigrbl_tests-0.3.9.dev3}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "tigrbl_tests"
-version = "0.3.9.dev1"
+version = "0.3.9.dev3"
 description = "Test suite and fixtures for the Tigrbl framework."
 license = "Apache-2.0"
 readme = "README.md"

{tigrbl_tests-0.3.9.dev1 → tigrbl_tests-0.3.9.dev3}/tests/i9n/test_mountable_lens_uvicorn.py

@@ -22,11 +22,11 @@ async def test_lens_mountable_on_tigrbl_app_uvicorn():
         assert 'id="root"' in response.text
         assert 'type="importmap"' in response.text
         assert (
-            '"@tigrbljs/tigrbl-lens": "https://esm.sh/@tigrbljs/tigrbl-lens@0.0.14"'
+            '"@tigrbljs/tigrbl-lens": "https://esm.sh/@tigrbljs/tigrbl-lens@latest"'
             in response.text
         )
         assert (
-            'href="https://esm.sh/@tigrbljs/tigrbl-lens@0.0.14/dist/tigrbl-lens.css"'
+            'href="https://esm.sh/@tigrbljs/tigrbl-lens@latest/dist/tigrbl-lens.css"'
             in response.text
         )
         assert 'import { createRoot } from "react-dom/client";' in response.text

{tigrbl_tests-0.3.9.dev1 → tigrbl_tests-0.3.9.dev3}/tests/unit/test_middleware_http_and_cors.py

@@ -204,3 +204,63 @@ def test_cors_middleware_wsgi_preserves_duplicate_headers() -> None:
         ]
         == "https://client.test"
     )
+
+
+@pytest.mark.asyncio
+async def test_cors_middleware_accepts_list_origins_and_regex() -> None:
+    async def endpoint(scope, receive, send):
+        del scope, receive
+        await send(
+            {
+                "type": "http.response.start",
+                "status": 200,
+                "headers": [],
+            }
+        )
+        await send({"type": "http.response.body", "body": b"ok", "more_body": False})
+
+    app = CORSMiddleware(
+        endpoint,
+        allow_origins=["https://allowed.example", "https://other.example"],
+        allow_origin_regex=r"https://.*\.trusted\.example",
+        allow_methods=["GET", "POST"],
+        allow_headers=["x-custom", "authorization"],
+    )
+
+    allowed = await _run_asgi(
+        app,
+        {
+            "type": "http",
+            "method": "GET",
+            "path": "/",
+            "query_string": b"",
+            "headers": [(b"origin", b"https://allowed.example")],
+        },
+    )
+    allowed_headers = {
+        k.decode("latin-1"): v.decode("latin-1")
+        for k, v in next(m for m in allowed if m["type"] == "http.response.start")[
+            "headers"
+        ]
+    }
+    assert allowed_headers["access-control-allow-origin"] == "https://allowed.example"
+    assert allowed_headers["access-control-allow-methods"] == "GET,POST"
+    assert allowed_headers["access-control-allow-headers"] == "x-custom,authorization"
+
+    regex_allowed = await _run_asgi(
+        app,
+        {
+            "type": "http",
+            "method": "GET",
+            "path": "/",
+            "query_string": b"",
+            "headers": [(b"origin", b"https://api.trusted.example")],
+        },
+    )
+    regex_headers = {
+        k.decode("latin-1"): v.decode("latin-1")
+        for k, v in next(
+            m for m in regex_allowed if m["type"] == "http.response.start"
+        )["headers"]
+    }
+    assert regex_headers["access-control-allow-origin"] == "https://api.trusted.example"