audiobookshelf/test/server/utils/requestUtils.test.js

const { expect } = require('chai')

const { isRequestSecure, getRequestProtocol, getRequestOrigin } = require('../../../server/utils/requestUtils')

function mockReq({ secure = false, host = 'books.example.com', xForwardedProto = null } = {}) {
  return {
    secure,
    get(header) {
      if (header === 'host') return host
      if (header === 'x-forwarded-proto') return xForwardedProto
      return null
    }
  }
}

describe('requestUtils', () => {
  it('isRequestSecure uses req.secure', () => {
    expect(isRequestSecure(mockReq({ secure: true }))).to.equal(true)
    expect(isRequestSecure(mockReq({ secure: false }))).to.equal(false)
  })

  it('isRequestSecure uses strict x-forwarded-proto check', () => {
    expect(isRequestSecure(mockReq({ xForwardedProto: 'https' }))).to.equal(true)
    expect(isRequestSecure(mockReq({ xForwardedProto: 'http' }))).to.equal(false)
    expect(isRequestSecure(mockReq({ xForwardedProto: 'http, https' }))).to.equal(false)
  })

  it('getRequestProtocol returns https or http', () => {
    expect(getRequestProtocol(mockReq({ secure: true }))).to.equal('https')
    expect(getRequestProtocol(mockReq())).to.equal('http')
  })

  it('getRequestOrigin builds origin from protocol and host', () => {
    expect(getRequestOrigin(mockReq({ secure: true }))).to.deep.equal({
      protocol: 'https',
      host: 'books.example.com',
      origin: 'https://books.example.com'
    })
  })
})