aaronrene / knowtation public
gateway-upstream-response-headers.test.mjs
44 lines 1.7 KB
Raw
sha256:b5f647cb9c409f563d4671fe3fc05ddea01fabfed9b41fc11cb923588e1c1baf mirror: GitHub Phase A durable MCP OAuth (#270) Human minor ⚠ breaking 11 days ago
1 import { describe, it } from 'node:test';
2 import assert from 'node:assert';
3 import { filterUpstreamResponseHeadersForDecodedBody } from '../hub/gateway/upstream-response-headers.mjs';
4
5 describe('filterUpstreamResponseHeadersForDecodedBody', () => {
6 it('removes content-encoding and length so decoded text() bodies are not double-decoded', () => {
7 const out = filterUpstreamResponseHeadersForDecodedBody([
8 ['Content-Encoding', 'br'],
9 ['Content-Length', '999'],
10 ['Content-Type', 'application/json; charset=utf-8'],
11 ['X-Powered-By', 'Express'],
12 ]);
13 assert.deepStrictEqual(out, [
14 ['Content-Type', 'application/json; charset=utf-8'],
15 ['X-Powered-By', 'Express'],
16 ]);
17 });
18
19 it('removes transfer-encoding and connection case-insensitively', () => {
20 const out = filterUpstreamResponseHeadersForDecodedBody([
21 ['transfer-encoding', 'chunked'],
22 ['Connection', 'keep-alive'],
23 ['ETag', '"abc"'],
24 ]);
25 assert.deepStrictEqual(out, [['ETag', '"abc"']]);
26 });
27
28 it('strips upstream CORS headers so gateway CORS middleware is authoritative', () => {
29 const out = filterUpstreamResponseHeadersForDecodedBody([
30 ['Access-Control-Allow-Origin', 'https://canister-origin.example'],
31 ['access-control-allow-methods', 'GET, POST'],
32 ['Access-Control-Allow-Headers', 'Authorization'],
33 ['access-control-allow-credentials', 'true'],
34 ['Access-Control-Expose-Headers', 'X-Custom'],
35 ['Access-Control-Max-Age', '3600'],
36 ['Content-Type', 'application/json'],
37 ['X-Custom', 'kept'],
38 ]);
39 assert.deepStrictEqual(out, [
40 ['Content-Type', 'application/json'],
41 ['X-Custom', 'kept'],
42 ]);
43 });
44 });
File History 4 commits
sha256:b5f647cb9c409f563d4671fe3fc05ddea01fabfed9b41fc11cb923588e1c1baf mirror: GitHub Phase A durable MCP OAuth (#270) Human minor ⚠ 11 days ago
sha256:d8c648b20a4d53b2673c5c082ee7edfa7b2fc9b11080832da1f38807b6bf940b fix(7C-L1b): route hosted delegation proposals through cani… Human minor ⚠ 31 days ago
sha256:2827ba9e7632a4b141c50caf1e8f7d77abbc3515be20e7465f2bccb0ac4edf91 fix: repair endpoint now sets has_active_subscription when … Human minor ⚠ 50 days ago
sha256:6a102aafafdfe7e70a24f4e59740200f0ee713ce7915f1b53e9d4ba5ee8b4410 Initial Muse snapshot Human 83 days ago