RSSHub/test/middleware/access-control.js

const supertest = require('supertest');
const Parser = require('rss-parser');
const parser = new Parser();
let server;

async function checkBlock(response) {
    expect(response.status).toBe(403);
    expect(await parser.parseString(response.text)).toMatchObject({
        items: [],
        title: '没有访问权限. Access denied.',
    });
}

afterEach(() => {
    delete process.env.BLACKLIST;
    delete process.env.WHITELIST;
    jest.resetModules();
    server.close();
});

describe('access-control', () => {
    it(`blacklist`, async () => {
        process.env.BLACKLIST = '/test/1,233.233.233.233';
        server = require('../../lib/index');
        const request = supertest(server);

        const response11 = await request.get('/test/1');
        checkBlock(response11);

        const response12 = await request.get('/test/1').set('X-Forwarded-For', '233.233.233.233');
        checkBlock(response12);

        const response21 = await request.get('/test/2');
        expect(response21.status).toBe(200);

        const response22 = await request.get('/test/2').set('X-Forwarded-For', '233.233.233.233');
        checkBlock(response22);
    });

    it(`whitelist`, async () => {
        process.env.WHITELIST = '/test/1,233.233.233.233';
        server = require('../../lib/index');
        const request = supertest(server);

        const response11 = await request.get('/test/1');
        expect(response11.status).toBe(200);

        const response12 = await request.get('/test/1').set('X-Forwarded-For', '233.233.233.233');
        expect(response12.status).toBe(200);

        const response21 = await request.get('/test/2');
        checkBlock(response21);

        const response22 = await request.get('/test/2').set('X-Forwarded-For', '233.233.233.233');
        expect(response22.status).toBe(200);
    });
});