snapshot of https://github.com/ory/keto.git (master, 2026-09-16; blobs > 131072B omitted)

internal/x/validate/validate_test.go

@@ -0,0 +1,116 @@
+// Copyright © 2023 Ory Corp
+// SPDX-License-Identifier: Apache-2.0
+
+package validate_test
+
+import (
+	"io"
+	"net/http"
+	"net/url"
+	"strings"
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+
+	"github.com/ory/keto/internal/x/validate"
+)
+
+func toURL(t *testing.T, s string) *url.URL {
+	u, err := url.Parse(s)
+	require.NoError(t, err)
+	return u
+}
+
+func TestValidateNoExtraParams(t *testing.T) {
+	for _, tt := range []struct {
+		name      string
+		req       *http.Request
+		assertErr assert.ErrorAssertionFunc
+	}{
+		{
+			name:      "empty",
+			req:       &http.Request{URL: toURL(t, "https://example.com")},
+			assertErr: assert.NoError,
+		},
+		{
+			name:      "all params",
+			req:       &http.Request{URL: toURL(t, "https://example.com?foo=1&bar=baz")},
+			assertErr: assert.NoError,
+		},
+		{
+			name:      "extra params",
+			req:       &http.Request{URL: toURL(t, "https://example.com?foo=1&bar=2&baz=3")},
+			assertErr: assert.Error,
+		},
+	} {
+		t.Run("case="+tt.name, func(t *testing.T) {
+			err := validate.All(tt.req, validate.NoExtraQueryParams("foo", "bar"))
+			tt.assertErr(t, err)
+		})
+	}
+}
+
+func TestQueryParamsContainsOneOf(t *testing.T) {
+	for _, tt := range []struct {
+		name      string
+		req       *http.Request
+		assertErr assert.ErrorAssertionFunc
+	}{
+		{
+			name:      "empty",
+			req:       &http.Request{URL: toURL(t, "https://example.com")},
+			assertErr: assert.Error,
+		},
+		{
+			name:      "other",
+			req:       &http.Request{URL: toURL(t, "https://example.com?a=1&b=2&c=3")},
+			assertErr: assert.Error,
+		},
+		{
+			name:      "one",
+			req:       &http.Request{URL: toURL(t, "https://example.com?foo=1")},
+			assertErr: assert.NoError,
+		},
+		{
+			name:      "all params",
+			req:       &http.Request{URL: toURL(t, "https://example.com?foo=1&bar=baz")},
+			assertErr: assert.NoError,
+		},
+		{
+			name:      "extra params",
+			req:       &http.Request{URL: toURL(t, "https://example.com?foo=1&bar=2&baz=3")},
+			assertErr: assert.NoError,
+		},
+	} {
+		t.Run("case="+tt.name, func(t *testing.T) {
+			err := validate.All(tt.req, validate.QueryParamsContainsOneOf("foo", "bar"))
+			tt.assertErr(t, err)
+		})
+	}
+}
+
+func TestValidateHasEmptyBody(t *testing.T) {
+	for _, tt := range []struct {
+		name      string
+		req       *http.Request
+		assertErr assert.ErrorAssertionFunc
+	}{
+		{
+			name:      "empty body",
+			req:       &http.Request{Body: io.NopCloser(strings.NewReader(""))},
+			assertErr: assert.NoError,
+		},
+		{
+			name:      "non-empty body",
+			req:       &http.Request{Body: io.NopCloser(strings.NewReader("content"))},
+			assertErr: assert.Error,
+		},
+	} {
+		t.Run("case="+tt.name, func(t *testing.T) {
+			err := validate.All(tt.req, validate.HasEmptyBody())
+			tt.assertErr(t, err)
+		})
+	}
+
+}