1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
|
#!/usr/bin/env perl -w
use strict;
use Test::More tests => 35;
#use Test::More 'no_plan';
use Plack::Test;
use URI;
BEGIN { use_ok 'Plack::Middleware::MethodOverride' or die; }
my $base_app = sub {
my $env = shift;
return [
200,
['Content-Type' => 'text/plain'],
[ "$env->{REQUEST_METHOD} ($env->{'plack.original_request_method'})" ]
];
};
ok my $app = Plack::Middleware::MethodOverride->wrap($base_app),
'Create MethodOverride app with no args';
my $uri = URI->new('/');
test_psgi $app, sub {
my $res = shift->(HTTP::Request->new(GET => $uri));
is $res->content, 'GET (GET)', 'GET should be GET';
};
test_psgi $app, sub {
my $res = shift->(HTTP::Request->new(PUT => $uri));
is $res->content, 'PUT (PUT)', 'PUT should be PUT';
};
test_psgi $app, sub {
my $res = shift->(HTTP::Request->new(POST => $uri));
is $res->content, 'POST (POST)', 'POST should be POST';
};
# Override over POST.
$uri->query_form('x-tunneled-method' => 'PUT');
test_psgi $app, sub {
my $res = shift->(HTTP::Request->new(POST => $uri));
is $res->content, 'PUT (POST)', 'Should send PUT over POST';
};
test_psgi $app, sub {
my $res = shift->(HTTP::Request->new(GET => $uri));
is $res->content, 'GET (GET)', 'Should not send PUT over GET';
};
# Try to confuse the parser.
$uri->query_form('foo' => 'x-tunneled-method', name => 'Scott');
test_psgi $app, sub {
my $res = shift->(HTTP::Request->new(POST => $uri));
is $res->content, 'POST (POST)', 'POST should be POST with no tunnel';
};
# Override with a DELETE
$uri->query_form('x-tunneled-method' => 'DELETE', PUT => 'x-tunneled-method');
test_psgi $app, sub {
my $res = shift->(HTTP::Request->new(POST => $uri));
is $res->content, 'DELETE (POST)', 'Should send DELETE over POST';
};
##############################################################################
# Now try with a header.
my $head = ['x-http-method-override' => 'PUT'];
test_psgi $app, sub {
my $res = shift->(HTTP::Request->new(POST => '/', $head));
is $res->content, 'PUT (POST)', 'Should send PUT over POST via header';
};
test_psgi $app, sub {
my $res = shift->(HTTP::Request->new(GET => '/', $head));
is $res->content, 'GET (GET)', 'Should not send PUT over GET via header';
};
# Try a different method.
$head->[1] = 'OPTIONS';
test_psgi $app, sub {
my $res = shift->(HTTP::Request->new(POST => '/', $head));
is $res->content, 'OPTIONS (POST)', 'Should send OPTIONS over POST via header';
};
# Make sure all supported methods work.
for my $meth (qw(GET HEAD PUT PATCH DELETE OPTIONS TRACE CONNECT)) {
$head->[1] = $meth;
test_psgi $app, sub {
my $res = shift->(HTTP::Request->new(POST => '/', $head));
is $res->content, "$meth (POST)", "Should support $meth";
};
# Lowercase too.
$head->[1] = lc $meth;
test_psgi $app, sub {
my $res = shift->(HTTP::Request->new(POST => '/', $head));
is $res->content, "$meth (POST)", "Should support $meth";
};
}
# Make sure no other methods are allowed.
for my $meth (qw(FOO SUCK CALL EXEC)) {
$head->[1] = $meth;
test_psgi $app, sub {
my $res = shift->(HTTP::Request->new(POST => '/', $head));
is $res->content, "POST (POST)", "Should not support $meth";
};
}
##############################################################################
# Now modify the param and the header.
ok $app = Plack::Middleware::MethodOverride->wrap(
$base_app,
param => 'x-do-this',
header => 'X-Do-It-Man',
), 'Create MethodOverride app with no param and header params';
$uri->query_form('x-do-this' => 'PUT');
test_psgi $app, sub {
my $res = shift->(HTTP::Request->new(POST => $uri));
is $res->content, 'PUT (POST)', 'Should get PUT for custom param'
};
$head = ['X-Do-It-man' => 'DELETE'];
test_psgi $app, sub {
my $res = shift->(HTTP::Request->new(POST => '/', $head));
is $res->content, 'DELETE (POST)', 'Should send DELETE over POST via custom header';
};
|
