test: add tests for exception messages

codeigniter4 · Mar 23, 2024 · 4dfb2d0 · 4dfb2d0
1 parent 8ce803f
commit 4dfb2d0
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/tests/system/Filters/CorsTest.php b/tests/system/Filters/CorsTest.php
@@ -187,6 +187,9 @@ public function testItReturnsAllowHeadersHeaderOnAllowAllHeadersRequest()
     public function testItDoesntPermitWildcardAllowedHeadersAndSupportsCredentials()
     {
         $this->expectException(ConfigException::class);
+        $this->expectExceptionMessage(
+            'When responding to a credentialed request, the server must not specify the "*" wildcard for the Access-Control-Allow-Headers response-header value.'
+        );
 
         $this->cors = $this->createCors(['allowedHeaders' => ['*'], 'supportsCredentials' => true]);
         $request    = $this->createValidPreflightRequest();
@@ -233,6 +236,9 @@ public function testItSetsExposedHeadersWhenConfiguredOnActualRequest()
     public function testItDoesNotPermitWildcardAllowedOriginsAndSupportsCredentials()
     {
         $this->expectException(ConfigException::class);
+        $this->expectExceptionMessage(
+            'When responding to a credentialed request, the server must not specify the "*" wildcard for the Access-Control-Allow-Origin response-header value.'
+        );
 
         $this->cors = $this->createCors([
             'allowedOrigins'      => ['*'],
@@ -246,6 +252,9 @@ public function testItDoesNotPermitWildcardAllowedOriginsAndSupportsCredentials(
     public function testItDoesNotPermitWildcardAllowedOriginsAllowedMethodAndSupportsCredentials()
     {
         $this->expectException(ConfigException::class);
+        $this->expectExceptionMessage(
+            'When responding to a credentialed request, the server must not specify the "*" wildcard for the Access-Control-Allow-Origin response-header value.'
+        );
 
         $this->cors = $this->createCors([
             'allowedOrigins'      => ['*'],
@@ -273,6 +282,9 @@ public function testItAddsAVaryHeaderWhenHasOriginPatterns()
     public function testItDoesntPermitWildcardAndOrigin()
     {
         $this->expectException(ConfigException::class);
+        $this->expectExceptionMessage(
+            "If wildcard is specified, you must set `'allowedOrigins' => ['*']`. But using wildcard is not recommended."
+        );
 
         $this->cors = $this->createCors([
             'allowedOrigins' => ['*', 'http://localhost'],