mirror of
https://github.com/samsonjs/rack-attack.git
synced 2026-03-25 09:25:49 +00:00
45 lines
1.1 KiB
Ruby
45 lines
1.1 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
require_relative "../spec_helper"
|
|
|
|
describe "Blocking an IP subnet" do
|
|
let(:notifications) { [] }
|
|
|
|
before do
|
|
Rack::Attack.blocklist_ip("1.2.3.4/31")
|
|
end
|
|
|
|
it "forbids request if IP is inside the subnet" do
|
|
get "/", {}, "REMOTE_ADDR" => "1.2.3.4"
|
|
|
|
assert_equal 403, last_response.status
|
|
end
|
|
|
|
it "forbids request for another IP in the subnet" do
|
|
get "/", {}, "REMOTE_ADDR" => "1.2.3.5"
|
|
|
|
assert_equal 403, last_response.status
|
|
end
|
|
|
|
it "succeeds if IP is outside the subnet" do
|
|
get "/", {}, "REMOTE_ADDR" => "1.2.3.6"
|
|
|
|
assert_equal 200, last_response.status
|
|
end
|
|
|
|
it "notifies when the request is blocked" do
|
|
ActiveSupport::Notifications.subscribe("blocklist.rack_attack") do |_name, _start, _finish, _id, payload|
|
|
notifications.push(payload)
|
|
end
|
|
|
|
get "/", {}, "REMOTE_ADDR" => "5.6.7.8"
|
|
|
|
assert notifications.empty?
|
|
|
|
get "/", {}, "REMOTE_ADDR" => "1.2.3.4"
|
|
|
|
assert_equal 1, notifications.size
|
|
notification = notifications.pop
|
|
assert_equal :blocklist, notification[:request].env["rack.attack.match_type"]
|
|
end
|
|
end
|