adba70a0de
Make the following fields visible in API responses: * ip_bans.ip_addr * ip_geolocations.ip_addr * ip_geolocations.network * users.last_ip_addr (mod only) * user_sessions.ip_addr * api_keys.last_ip_address * api_keys.permitted_ip_addresses Before IP addresses were globally hidden in API responses because IPs were present in a lot of tables and we didn't want to accidentally leak them. Now that we've gotten rid of IPs from most tables, it's safe to unhide them.
46 lines
1.5 KiB
Ruby
46 lines
1.5 KiB
Ruby
require 'test_helper'
|
|
|
|
class IpBanTest < ActiveSupport::TestCase
|
|
should "be able to ban a user" do
|
|
ip_ban = create(:ip_ban, ip_addr: "1.2.3.4")
|
|
|
|
assert_equal("1.2.3.4", ip_ban.ip_addr.to_s)
|
|
assert(IpBan.ip_matches("1.2.3.4").exists?)
|
|
end
|
|
|
|
should "be able to ban a subnet" do
|
|
ip_ban = create(:ip_ban, ip_addr: "1.2.3.4/24")
|
|
|
|
assert_equal("1.2.3.0/24", ip_ban.ip_addr.to_s)
|
|
assert(IpBan.ip_matches("1.2.3.0").exists?)
|
|
assert(IpBan.ip_matches("1.2.3.255").exists?)
|
|
end
|
|
|
|
should "allow a full ban to overlap a partial ban" do
|
|
@ip_ban1 = create(:ip_ban, ip_addr: "1.2.3.0/24", category: :partial)
|
|
@ip_ban2 = build(:ip_ban, ip_addr: "1.2.3.4", category: :full)
|
|
|
|
assert_equal(true, @ip_ban2.valid?)
|
|
end
|
|
|
|
context "validation" do
|
|
setup { create(:ip_ban, ip_addr: "5.6.7.8") }
|
|
subject { build(:ip_ban) }
|
|
|
|
should allow_value("1.2.3.4").for(:ip_addr)
|
|
should allow_value("1.2.3.4/24").for(:ip_addr)
|
|
should allow_value("ABCD::1234").for(:ip_addr)
|
|
should allow_value("ABCD::1234/64").for(:ip_addr)
|
|
should allow_value("ABCD::1234/48").for(:ip_addr)
|
|
|
|
should_not allow_value("").for(:ip_addr)
|
|
should_not allow_value("foo").for(:ip_addr)
|
|
should_not allow_value("5.6.7.8").for(:ip_addr)
|
|
should_not allow_value("10.0.0.1").for(:ip_addr)
|
|
should_not allow_value("127.0.0.1").for(:ip_addr)
|
|
should_not allow_value("1.2.3.4/16").for(:ip_addr)
|
|
should_not allow_value("ABCD::1234/32").for(:ip_addr)
|
|
should_not allow_value("ABCD::1234/47").for(:ip_addr)
|
|
end
|
|
end
|