Coverage for tests / test_tutorial / test_cors / test_tutorial001.py: 100%

1from fastapi.testclient import TestClient 4 ctx1efgh

2 

3from docs_src.cors.tutorial001_py310 import app 4 ctx1efgh

4 

5 

6def test_cors(): 4 ctx1efgh

7 client = TestClient(app) 4 ctx1abcd

8 # Test pre-flight response 

9 headers = { 4 ctx1abcd

10 "Origin": "https://localhost.tiangolo.com", 

11 "Access-Control-Request-Method": "GET", 

12 "Access-Control-Request-Headers": "X-Example", 

13 } 

14 response = client.options("/", headers=headers) 4 ctx1abcd

15 assert response.status_code == 200, response.text 4 ctx1abcd

16 assert response.text == "OK" 4 ctx1abcd

17 assert ( 3 ctx1abc

18 response.headers["access-control-allow-origin"] 

19 == "https://localhost.tiangolo.com" 

20 ) 

21 assert response.headers["access-control-allow-headers"] == "X-Example" 4 ctx1abcd

22 

23 # Test standard response 

24 headers = {"Origin": "https://localhost.tiangolo.com"} 4 ctx1abcd

25 response = client.get("/", headers=headers) 4 ctx1abcd

26 assert response.status_code == 200, response.text 4 ctx1abcd

27 assert response.json() == {"message": "Hello World"} 4 ctx1abcd

28 assert ( 3 ctx1abc

29 response.headers["access-control-allow-origin"] 

30 == "https://localhost.tiangolo.com" 

31 ) 

32 

33 # Test non-CORS response 

34 response = client.get("/") 4 ctx1abcd

35 assert response.status_code == 200, response.text 4 ctx1abcd

36 assert response.json() == {"message": "Hello World"} 4 ctx1abcd

37 assert "access-control-allow-origin" not in response.headers 4 ctx1abcd