test: full code coverage (#77)

index.js

@@ -173,3 +173,5 @@ module.exports = fp(fastifyCors, {
   fastify: '3.x',
   name: 'fastify-cors'
 })
+
+module.exports.vary = vary

package.json

@@ -9,7 +9,7 @@
     "lint:standard": "standard",
     "lint:fix": "standard --fix",
     "lint:typescript": "standard --parser @typescript-eslint/parser --plugin @typescript-eslint/eslint-plugin test/types/*.ts",
-    "unit": "tap test/*.test.js",
+    "unit": "tap --100 test/*.test.js",
     "typescript": "tsd",
     "test": "npm run lint && npm run unit && npm run typescript",
     "coverage": "tap --cov --coverage-report=html test"

test/index.test.js

@@ -659,3 +659,95 @@ test('Should always add vary header to `Origin` by default', t => {
     })
   })
 })
+
+test('Should always add vary header to `Origin` by default (vary is array)', t => {
+  t.plan(4)
+
+  const fastify = Fastify()
+
+  // Mock getHeader function
+  fastify.decorateReply('getHeader', (name) => ['foo', 'bar'])
+
+  fastify.register(cors)
+
+  fastify.get('/', (req, reply) => {
+    reply.send('ok')
+  })
+
+  fastify.inject({
+    method: 'GET',
+    url: '/'
+  }, (err, res) => {
+    t.error(err)
+    delete res.headers.date
+    t.strictEqual(res.statusCode, 200)
+    t.strictEqual(res.payload, 'ok')
+    t.match(res.headers, {
+      vary: 'foo, bar, Origin'
+    })
+  })
+})
+
+test('Allow only request from with specific methods', t => {
+  t.plan(3)
+
+  const fastify = Fastify()
+  fastify.register(cors, { methods: ['GET', 'POST'] })
+
+  fastify.options('/', (req, reply) => {
+    reply.send('ok')
+  })
+
+  fastify.inject({
+    method: 'OPTIONS',
+    url: '/'
+  }, (err, res) => {
+    t.error(err)
+    delete res.headers.date
+    t.strictEqual(res.statusCode, 204)
+    t.match(res.headers, {
+      'access-control-allow-methods': 'GET, POST',
+      vary: 'Origin'
+    })
+  })
+})
+
+test('Allow only request from with specific headers', t => {
+  t.plan(7)
+
+  const fastify = Fastify()
+  fastify.register(cors, {
+    allowedHeaders: 'foo',
+    exposedHeaders: 'bar'
+  })
+
+  fastify.get('/', (req, reply) => {
+    reply.send('ok')
+  })
+
+  fastify.inject({
+    method: 'OPTIONS',
+    url: '/'
+  }, (err, res) => {
+    t.error(err)
+    delete res.headers.date
+    t.strictEqual(res.statusCode, 204)
+    t.match(res.headers, {
+      'access-control-allow-headers': 'foo',
+      vary: 'Origin'
+    })
+  })
+
+  fastify.inject({
+    method: 'GET',
+    url: '/'
+  }, (err, res) => {
+    t.error(err)
+    delete res.headers.date
+    t.strictEqual(res.statusCode, 200)
+    t.strictEqual(res.payload, 'ok')
+    t.match(res.headers, {
+      'access-control-expose-headers': 'bar'
+    })
+  })
+})

test/vary.test.js

@@ -0,0 +1,20 @@
+'use strict'
+
+const { test } = require('tap')
+const vary = require('..').vary
+
+test('Should not set reply header if none is passed', t => {
+  t.plan(1)
+
+  const replyMock = {
+    getHeader (name) {
+      return []
+    },
+    header (name, value) {
+      t.fail('Should not be here')
+    }
+  }
+
+  vary(replyMock, [])
+  t.pass()
+})