mirror of
https://github.com/samsonjs/rack-attack.git
synced 2026-03-25 09:25:49 +00:00
e3056e737f
Because of the sort algorithm rails uses to satisfy `after` and `before`
constraints, gems can have unintended effects on others. See
0a120a818d
Prefer making rack-attack middleware idempotent instead of relying on
the load order and the contents of the middleware stack too much.
closes #452
closes #456
70 lines
1.5 KiB
Ruby
70 lines
1.5 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
require "bundler/setup"
|
|
|
|
require "minitest/autorun"
|
|
require "minitest/pride"
|
|
require "rack/test"
|
|
require "rails"
|
|
|
|
require "rack/attack"
|
|
|
|
if RUBY_ENGINE == "ruby"
|
|
require "byebug"
|
|
end
|
|
|
|
def safe_require(name)
|
|
require name
|
|
rescue LoadError
|
|
nil
|
|
end
|
|
|
|
safe_require "connection_pool"
|
|
safe_require "dalli"
|
|
safe_require "redis"
|
|
safe_require "redis-activesupport"
|
|
safe_require "redis-store"
|
|
|
|
class MiniTest::Spec
|
|
include Rack::Test::Methods
|
|
|
|
before do
|
|
Rails.cache = nil
|
|
@_original_throttled_response = Rack::Attack.throttled_response
|
|
@_original_blocklisted_response = Rack::Attack.blocklisted_response
|
|
end
|
|
|
|
after do
|
|
Rack::Attack.clear_configuration
|
|
Rack::Attack.instance_variable_set(:@cache, nil)
|
|
|
|
Rack::Attack.throttled_response = @_original_throttled_response
|
|
Rack::Attack.blocklisted_response = @_original_blocklisted_response
|
|
end
|
|
|
|
def app
|
|
Rack::Builder.new do
|
|
# Use Rack::Lint to test that rack-attack is complying with the rack spec
|
|
use Rack::Lint
|
|
# Intentionally added twice to test idempotence property
|
|
use Rack::Attack
|
|
use Rack::Attack
|
|
use Rack::Lint
|
|
|
|
run lambda { |_env| [200, {}, ['Hello World']] }
|
|
end.to_app
|
|
end
|
|
|
|
def self.it_allows_ok_requests
|
|
it "must allow ok requests" do
|
|
get '/', {}, 'REMOTE_ADDR' => '127.0.0.1'
|
|
|
|
_(last_response.status).must_equal 200
|
|
_(last_response.body).must_equal 'Hello World'
|
|
end
|
|
end
|
|
end
|
|
|
|
class Minitest::SharedExamples < Module
|
|
include Minitest::Spec::DSL
|
|
end
|