golib/net/iplist/iplist_test.go

package iplist

import (
	"net/http"
	"net/http/httptest"
	"os"
	"path/filepath"
	"strings"
	"testing"
)

func TestParseTSV(t *testing.T) {
	got, err := Parse(strings.NewReader("network\tnote\n# comment\n192.0.2.1\tlocal\nexample.com\n"))
	if err != nil || len(got) != 2 || got[0] != "192.0.2.1" || got[1] != "example.com" {
		t.Fatalf("entries=%#v err=%v", got, err)
	}
}

func TestParseCSV(t *testing.T) {
	got, err := Parse(strings.NewReader("network,note\n# comment\n192.0.2.1,local\nexample.com\n"))
	if err != nil || len(got) != 2 || got[0] != "192.0.2.1" || got[1] != "example.com" {
		t.Fatalf("entries=%#v err=%v", got, err)
	}
}

func TestValidate(t *testing.T) {
	tests := []struct {
		entry string
		want  bool
	}{
		{"192.0.2.1", true},
		{"2001:db8::1", true},
		{"10.0.0.0/8", true},
		{"2001:db8::/32", true},
		{"example.com", true},
		{"sub.example.com", true},
		{"", false},
		{"not valid", false},
		{"has space.com", false},
		{"/missing/domain", false},
		{"http://example.com", false}, // URLs are not valid entries
	}

	for _, tt := range tests {
		if got := Validate(tt.entry); got != tt.want {
			t.Errorf("Validate(%q) = %v, want %v", tt.entry, got, tt.want)
		}
	}
}

func TestLoadRejectsInvalidEntry(t *testing.T) {
	dir := t.TempDir()
	// Write a local file with an invalid entry.
	path := filepath.Join(dir, "bad.tsv")
	if err := os.WriteFile(path, []byte("192.0.2.1\nnot valid entry\n"), 0o600); err != nil {
		t.Fatal(err)
	}
	_, err := Load(t.Context(), path, dir)
	if err == nil {
		t.Fatal("expected error for invalid entry, got nil")
	}
}

func TestLoadURLAuthCacheAndNested(t *testing.T) {
	var authOK bool
	inner := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
		_, _ = w.Write([]byte("192.0.2.2\n"))
	}))
	defer inner.Close()
	outer := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		authOK = r.Header.Get("Authorization") == "Basic dTpw"
		_, _ = w.Write([]byte("network\n" + inner.URL + "\n"))
	}))
	defer outer.Close()

	cacheDir := t.TempDir()
	got, err := Load(t.Context(), strings.Replace(outer.URL, "http://", "http://u:p@", 1), cacheDir)
	if err != nil || !authOK || len(got) != 1 || got[0] != "192.0.2.2" {
		t.Fatalf("auth=%v entries=%#v err=%v", authOK, got, err)
	}
	matches, err := filepath.Glob(filepath.Join(cacheDir, "ip-sources", "*.tsv"))
	if err != nil || len(matches) != 2 {
		t.Fatalf("cache files=%v err=%v", matches, err)
	}
	if _, err := os.Stat(matches[0] + ".meta"); err != nil {
		t.Fatal(err)
	}
}

func TestLoadAcceptHeader(t *testing.T) {
	var acceptOK bool
	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		acceptOK = strings.Contains(r.Header.Get("Accept"), "text/tab-separated-values")
		_, _ = w.Write([]byte("192.0.2.1\n"))
	}))
	defer srv.Close()

	cacheDir := t.TempDir()
	if _, err := Load(t.Context(), srv.URL, cacheDir); err != nil {
		t.Fatal(err)
	}
	if !acceptOK {
		t.Fatal("expected Accept header to contain text/tab-separated-values")
	}
}

func TestLoadCSVDetection(t *testing.T) {
	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		w.Header().Set("Content-Type", "text/csv")
		_, _ = w.Write([]byte("network,note\n192.0.2.1,local\n10.0.0.0/8,internal\n"))
	}))
	defer srv.Close()

	cacheDir := t.TempDir()
	got, err := Load(t.Context(), srv.URL, cacheDir)
	if err != nil {
		t.Fatalf("err=%v", err)
	}
	if len(got) != 2 || got[0] != "192.0.2.1" || got[1] != "10.0.0.0/8" {
		t.Fatalf("entries=%#v", got)
	}
}