Changeset View
Changeset View
Standalone View
Standalone View
test/functional/httpbasics.py
| Show All 13 Lines | |||||
| import urllib.parse | import urllib.parse | ||||
| class HTTPBasicsTest (BitcoinTestFramework): | class HTTPBasicsTest (BitcoinTestFramework): | ||||
| def set_test_params(self): | def set_test_params(self): | ||||
| self.num_nodes = 3 | self.num_nodes = 3 | ||||
| def setup_network(self): | def setup_network(self): | ||||
| self.extra_args = [["-rpccorsdomain=null"], [], []] | |||||
| self.setup_nodes() | self.setup_nodes() | ||||
| def run_test(self): | def run_test(self): | ||||
| # | # | ||||
| # lowlevel check for http persistent connection # | # lowlevel check for http persistent connection # | ||||
| # | # | ||||
| url = urllib.parse.urlparse(self.nodes[0].url) | url = urllib.parse.urlparse(self.nodes[0].url) | ||||
| ▲ Show 20 Lines • Show All 85 Lines • ▼ Show 20 Lines | def run_test(self): | ||||
| assert_equal(out1.status, http.client.NOT_FOUND) | assert_equal(out1.status, http.client.NOT_FOUND) | ||||
| conn = http.client.HTTPConnection(urlNode2.hostname, urlNode2.port) | conn = http.client.HTTPConnection(urlNode2.hostname, urlNode2.port) | ||||
| conn.connect() | conn.connect() | ||||
| conn.request('GET', '/' + ('x' * 10000), '', headers) | conn.request('GET', '/' + ('x' * 10000), '', headers) | ||||
| out1 = conn.getresponse() | out1 = conn.getresponse() | ||||
| assert_equal(out1.status, http.client.BAD_REQUEST) | assert_equal(out1.status, http.client.BAD_REQUEST) | ||||
| # Check Standard CORS request | |||||
| origin = "null" | |||||
| conn = http.client.HTTPConnection(url.hostname, url.port) | |||||
| conn.connect() | |||||
| authpair = url.username + ':' + url.password | |||||
| headers = {"Authorization": "Basic " + str_to_b64str(authpair), | |||||
| "Origin": origin} | |||||
| conn.request('POST', '/', '{"method": "getbestblockhash"}', headers) | |||||
| out1 = conn.getresponse() | |||||
| assert_equal(out1.status, http.client.OK) | |||||
| assert_equal(out1.headers["Access-Control-Allow-Origin"], origin) | |||||
| assert_equal(out1.headers["Access-Control-Allow-Credentials"], "true") | |||||
| assert_equal(out1.headers["Access-Control-Expose-Headers"], | |||||
| "WWW-Authenticate") | |||||
| assert(b'"error":null' in out1.read()) | |||||
| # Check Pre-flight CORS request | |||||
| corsheaders = {"Origin": origin, | |||||
| "Access-Control-Request-Method": "POST"} | |||||
| conn.request('OPTIONS', '/', None, corsheaders) | |||||
| out1 = conn.getresponse() | |||||
| assert_equal(out1.status, http.client.OK) | |||||
| assert_equal(out1.headers["Access-Control-Allow-Origin"], origin) | |||||
| assert_equal(out1.headers["Access-Control-Allow-Credentials"], "true") | |||||
| assert_equal(out1.headers["Access-Control-Allow-Methods"], "POST") | |||||
| assert_equal(out1.headers["Access-Control-Allow-Headers"], | |||||
| "authorization,content-type") | |||||
| assert_equal(b'', out1.read()) | |||||
| # Check Standard CORS request to node without CORS, expected failure | |||||
| conn = http.client.HTTPConnection(urlNode2.hostname, urlNode2.port) | |||||
| conn.connect() | |||||
| authpair = url.username + ':' + url.password | |||||
| headers = {"Authorization": "Basic " + str_to_b64str(authpair), | |||||
| "Origin": origin} | |||||
| conn.request('POST', '/', '{"method": "getbestblockhash"}', headers) | |||||
| out1 = conn.getresponse() | |||||
| assert_equal(out1.status, http.client.UNAUTHORIZED) | |||||
| assert_equal(b'', out1.read()) | |||||
| # Check Pre-flight CORS request to node without CORS, expected failure | |||||
| corsheaders = {"Origin": origin, | |||||
| "Access-Control-Request-Method": "POST"} | |||||
| conn.request('OPTIONS', '/', None, corsheaders) | |||||
| out1 = conn.getresponse() | |||||
| assert_equal(out1.status, http.client.METHOD_NOT_ALLOWED) | |||||
| assert_equal(b'JSONRPC server handles only POST requests', out1.read()) | |||||
| if __name__ == '__main__': | if __name__ == '__main__': | ||||
| HTTPBasicsTest().main() | HTTPBasicsTest().main() | ||||