aaronrene / knowtation public
gateway-upstream-response-headers.test.mjs
44 lines 1.7 KB
Raw
sha256:65ccb454656ea5acdea0a10e559b78bcde1eb6ff753ecc2911bc99d1c3d7cadd feat(calendar): enforce agent context tiers in retrieval AP… Human minor ⚠ breaking 2 days ago
1 import { describe, it } from 'node:test';
2 import assert from 'node:assert';
3 import { filterUpstreamResponseHeadersForDecodedBody } from '../hub/gateway/upstream-response-headers.mjs';
4
5 describe('filterUpstreamResponseHeadersForDecodedBody', () => {
6 it('removes content-encoding and length so decoded text() bodies are not double-decoded', () => {
7 const out = filterUpstreamResponseHeadersForDecodedBody([
8 ['Content-Encoding', 'br'],
9 ['Content-Length', '999'],
10 ['Content-Type', 'application/json; charset=utf-8'],
11 ['X-Powered-By', 'Express'],
12 ]);
13 assert.deepStrictEqual(out, [
14 ['Content-Type', 'application/json; charset=utf-8'],
15 ['X-Powered-By', 'Express'],
16 ]);
17 });
18
19 it('removes transfer-encoding and connection case-insensitively', () => {
20 const out = filterUpstreamResponseHeadersForDecodedBody([
21 ['transfer-encoding', 'chunked'],
22 ['Connection', 'keep-alive'],
23 ['ETag', '"abc"'],
24 ]);
25 assert.deepStrictEqual(out, [['ETag', '"abc"']]);
26 });
27
28 it('strips upstream CORS headers so gateway CORS middleware is authoritative', () => {
29 const out = filterUpstreamResponseHeadersForDecodedBody([
30 ['Access-Control-Allow-Origin', 'https://canister-origin.example'],
31 ['access-control-allow-methods', 'GET, POST'],
32 ['Access-Control-Allow-Headers', 'Authorization'],
33 ['access-control-allow-credentials', 'true'],
34 ['Access-Control-Expose-Headers', 'X-Custom'],
35 ['Access-Control-Max-Age', '3600'],
36 ['Content-Type', 'application/json'],
37 ['X-Custom', 'kept'],
38 ]);
39 assert.deepStrictEqual(out, [
40 ['Content-Type', 'application/json'],
41 ['X-Custom', 'kept'],
42 ]);
43 });
44 });
File History 2 commits
sha256:65ccb454656ea5acdea0a10e559b78bcde1eb6ff753ecc2911bc99d1c3d7cadd feat(calendar): enforce agent context tiers in retrieval AP… Human minor ⚠ 2 days ago
sha256:9103f98c89257ed2b01c237cea895dabb3e85ea337dccb1161c175e4422355b6 docs: accept Calendar Events v0 spec with Phase 0 security … Human 3 days ago