mix
f62fe23826
The first MINOR after 1.0.0: send-only DMARC guidance in the panel, AGPL packaging on every page, and an internal split of `internal/web` ahead of domain-admin work. Upgrading runs one SQLite migration (empty defaults; existing DNS guidance is unchanged until you set a report address). Changed: - `internal/web` split into subpackages (`web/view`, `web/auth`, `web/validate`, Added: - panel: DMARC guidance for send-only relays — the suggested `_dmarc` record - AGPL packaging hygiene: [NOTICE](NOTICE) names the copyright holder and the - [docs/roadmap.md](docs/roadmap.md) — candidate item **visual-style** (panel Full detail: CHANGELOG.md (1.1.0).
75 lines
2.6 KiB
Go
75 lines
2.6 KiB
Go
package view
|
|
|
|
import (
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"testing"
|
|
)
|
|
|
|
// serveStatic runs one GET against the static handler.
|
|
func serveStatic(path string, headers map[string]string) *httptest.ResponseRecorder {
|
|
r := httptest.NewRequest(http.MethodGet, path, nil)
|
|
for k, v := range headers {
|
|
r.Header.Set(k, v)
|
|
}
|
|
rec := httptest.NewRecorder()
|
|
StaticHandler().ServeHTTP(rec, r)
|
|
return rec
|
|
}
|
|
|
|
// Every embedded asset must carry a validator. The favicon is the one that
|
|
// prompted this: a browser given no ETag and no Last-Modified caches it on a
|
|
// guess, and a rebranded panel keeps serving the old mark from the tab.
|
|
func TestStaticAssetsCarryETag(t *testing.T) {
|
|
for _, name := range []string{"favicon.png", "favicon.svg", "panel.css", "panel.js", "htmx.min.js"} {
|
|
rec := serveStatic("/static/"+name, nil)
|
|
if rec.Code != http.StatusOK {
|
|
t.Fatalf("%s: got status %d, want 200", name, rec.Code)
|
|
}
|
|
if rec.Header().Get("ETag") == "" {
|
|
t.Errorf("%s: no ETag", name)
|
|
}
|
|
if got := rec.Header().Get("Cache-Control"); got != "no-cache" {
|
|
t.Errorf("%s: Cache-Control = %q, want %q", name, got, "no-cache")
|
|
}
|
|
}
|
|
}
|
|
|
|
// The point of the ETag is the cheap second request: the browser sends back
|
|
// what it has and gets a bodyless 304 when nothing changed.
|
|
func TestStaticETagRevalidates(t *testing.T) {
|
|
first := serveStatic("/static/favicon.png", nil)
|
|
etag := first.Header().Get("ETag")
|
|
if etag == "" {
|
|
t.Fatal("no ETag on the first response")
|
|
}
|
|
|
|
same := serveStatic("/static/favicon.png", map[string]string{"If-None-Match": etag})
|
|
if same.Code != http.StatusNotModified {
|
|
t.Errorf("matching If-None-Match: got status %d, want 304", same.Code)
|
|
}
|
|
if same.Body.Len() != 0 {
|
|
t.Errorf("matching If-None-Match: got %d bytes of body, want none", same.Body.Len())
|
|
}
|
|
|
|
// A stale validator — what a browser holds after the asset is replaced —
|
|
// has to produce the new bytes rather than another 304.
|
|
stale := serveStatic("/static/favicon.png", map[string]string{"If-None-Match": `"0000000000000000"`})
|
|
if stale.Code != http.StatusOK {
|
|
t.Errorf("stale If-None-Match: got status %d, want 200", stale.Code)
|
|
}
|
|
if stale.Body.Len() == 0 {
|
|
t.Error("stale If-None-Match: empty body, want the asset")
|
|
}
|
|
}
|
|
|
|
// Two different assets must not share a validator, or replacing one would be
|
|
// masked by the other's cached copy.
|
|
func TestStaticETagsAreContentDerived(t *testing.T) {
|
|
png := serveStatic("/static/favicon.png", nil).Header().Get("ETag")
|
|
svg := serveStatic("/static/favicon.svg", nil).Header().Get("ETag")
|
|
if png == svg {
|
|
t.Errorf("favicon.png and favicon.svg share the ETag %s", png)
|
|
}
|
|
}
|