ngit-grasp/tests/cors.rs

//! CORS Integration Tests
//!
//! Tests that verify CORS headers are correctly set on Git HTTP backend responses.
//!
//! # Test Strategy
//!
//! - Each test runs in complete isolation with its own fresh relay instance
//! - Uses macro to eliminate boilerplate while maintaining test isolation
//! - Calls individual test methods from grasp-audit for minimal duplication
//! - Automatic cleanup via TestRelay fixture (removes container and temp dirs)
//!
//! # Running Tests
//!
//! ```bash
//! # Run all CORS tests
//! cargo test --test cors
//!
//! # Run specific test
//! cargo test --test cors test_cors_allow_origin
//!
//! # With output
//! cargo test --test cors -- --nocapture
//! ```

mod common;

use common::TestRelay;
use grasp_audit::specs::grasp01::CorsTests;
use grasp_audit::*;

/// Macro to generate isolated CORS integration tests with relay domain
///
/// Each test runs with its own fresh relay instance to ensure complete isolation.
macro_rules! isolated_cors_test {
    ($test_name:ident) => {
        #[tokio::test]
        async fn $test_name() {
            let relay = TestRelay::start().await;
            let config = AuditConfig::isolated();
            let client = AuditClient::new(relay.url(), config)
                .await
                .expect("Failed to create audit client");

            let result = CorsTests::$test_name(&client, &relay.domain()).await;

            relay.stop().await;

            assert!(
                result.passed,
                "{} failed: {}",
                stringify!($test_name),
                result.error.as_deref().unwrap_or("unknown error")
            );
        }
    };
}

// Generate isolated tests for all CORS tests
isolated_cors_test!(test_cors_allow_origin);
isolated_cors_test!(test_cors_allow_methods);
isolated_cors_test!(test_cors_allow_headers);
isolated_cors_test!(test_cors_options_preflight);

isolated_cors_test!(test_cors_on_real_repo);