From 963b2971ec2f43b1c2f669a969c294fc1d291d3b Mon Sep 17 00:00:00 2001
From: DanConwayDev <DanConwayDev@protonmail.com>
Date: Wed, 26 Nov 2025 03:53:31 +0000
Subject: add cors support

---
 tests/cors.rs | 95 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 95 insertions(+)
 create mode 100644 tests/cors.rs

(limited to 'tests')

diff --git a/tests/cors.rs b/tests/cors.rs
new file mode 100644
index 0000000..9cce817
--- /dev/null
+++ b/tests/cors.rs
@@ -0,0 +1,95 @@
+//! CORS Integration Tests
+//!
+//! Tests that verify CORS headers are correctly set on Git HTTP backend responses.
+//!
+//! # Test Strategy
+//!
+//! - Each test runs in complete isolation with its own fresh relay instance
+//! - Uses macro to eliminate boilerplate while maintaining test isolation
+//! - Calls individual test methods from grasp-audit for minimal duplication
+//! - Automatic cleanup via TestRelay fixture (removes container and temp dirs)
+//!
+//! # Running Tests
+//!
+//! ```bash
+//! # Run all CORS tests
+//! cargo test --test cors
+//!
+//! # Run specific test
+//! cargo test --test cors test_cors_allow_origin
+//!
+//! # With output
+//! cargo test --test cors -- --nocapture
+//! ```
+
+mod common;
+
+use common::TestRelay;
+use grasp_audit::specs::grasp01::CorsTests;
+use grasp_audit::*;
+
+/// Macro to generate isolated CORS integration tests with relay domain
+///
+/// Each test runs with its own fresh relay instance to ensure complete isolation.
+macro_rules! isolated_cors_test {
+    ($test_name:ident) => {
+        #[tokio::test]
+        async fn $test_name() {
+            let relay = TestRelay::start().await;
+            let config = AuditConfig::ci();
+            let client = AuditClient::new(relay.url(), config)
+                .await
+                .expect("Failed to create audit client");
+
+            let result = CorsTests::$test_name(&client, &relay.domain()).await;
+
+            relay.stop().await;
+
+            assert!(
+                result.passed,
+                "{} failed: {}",
+                stringify!($test_name),
+                result.error.as_deref().unwrap_or("unknown error")
+            );
+        }
+    };
+}
+
+/// Macro for CORS tests that need git_data_dir (the full integration test)
+macro_rules! isolated_cors_test_with_repo {
+    ($test_name:ident) => {
+        #[tokio::test]
+        async fn $test_name() {
+            let relay = TestRelay::start().await;
+            let config = AuditConfig::ci();
+            let client = AuditClient::new(relay.url(), config)
+                .await
+                .expect("Failed to create audit client");
+
+            let result = CorsTests::$test_name(
+                &client,
+                relay.git_data_dir(),
+                &relay.domain(),
+            )
+            .await;
+
+            relay.stop().await;
+
+            assert!(
+                result.passed,
+                "{} failed: {}",
+                stringify!($test_name),
+                result.error.as_deref().unwrap_or("unknown error")
+            );
+        }
+    };
+}
+
+// Generate isolated tests for all CORS tests
+isolated_cors_test!(test_cors_allow_origin);
+isolated_cors_test!(test_cors_allow_methods);
+isolated_cors_test!(test_cors_allow_headers);
+isolated_cors_test!(test_cors_options_preflight);
+
+// Integration test that creates a real repository and tests CORS on it
+isolated_cors_test_with_repo!(test_cors_on_real_repo);
\ No newline at end of file
-- 
cgit v1.2.3