httpclient_test.go RawHistoryFolder

1package provider
2
3import (
4	"net/http"
5	"net/http/httptest"
6	"testing"
7)
8
9func TestNewHTTPClientDoesNotChangeDefaultTransport(t *testing.T) {
10	orig := http.DefaultTransport
11	t.Cleanup(func() { http.DefaultTransport = orig })
12
13	client := NewHTTPClient(true)
14	if http.DefaultTransport != orig {
15		t.Fatal("NewHTTPClient must not mutate http.DefaultTransport")
16	}
17	tr, ok := client.Transport.(*http.Transport)
18	if !ok {
19		t.Fatalf("expected *http.Transport, got %T", client.Transport)
20	}
21	if tr.TLSClientConfig == nil || !tr.TLSClientConfig.InsecureSkipVerify {
22		t.Fatal("expected scoped InsecureSkipVerify=true in TLS config")
23	}
24}
25
26func TestScopedInsecureClientReachesTLSServer(t *testing.T) {
27	srv := httptest.NewTLSServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
28		w.WriteHeader(http.StatusOK)
29	}))
30	defer srv.Close()
31
32	orig := http.DefaultTransport
33	t.Cleanup(func() { http.DefaultTransport = orig })
34
35	secureClient := NewHTTPClient(false)
36	if _, err := secureClient.Get(srv.URL); err == nil {
37		t.Fatal("expected TLS error with secure client, got nil")
38	}
39
40	insecureClient := NewHTTPClient(true)
41	resp, err := insecureClient.Get(srv.URL)
42	if err != nil {
43		t.Fatalf("request failed with scoped insecure client: %v", err)
44	}
45	resp.Body.Close()
46	if resp.StatusCode != http.StatusOK {
47		t.Fatalf("status=%d", resp.StatusCode)
48	}
49
50	defaultClient := &http.Client{}
51	if _, err := defaultClient.Get(srv.URL); err == nil {
52		t.Fatal("default client must still reject self-signed TLS")
53	}
54}