MagicMirror/tests/e2e/ipWhitelist_spec.js

const helpers = require("./helpers/global-setup");

describe("ipWhitelist directive configuration", () => {
	describe("When IP is not in whitelist", () => {
		beforeAll(async () => {
			await helpers.startApplication("tests/configs/noIpWhiteList.js");
		});

		afterAll(async () => {
			await helpers.stopApplication();
		});

		it("should reject request with 403 (Forbidden)", async () => {
			const port = global.testPort || 8080;
			const res = await fetch(`http://localhost:${port}`);
			expect(res.status).toBe(403);
		});

		it("should also reject Socket.IO handshake with 403 (Forbidden) — not just HTTP routes", async () => {
			const port = global.testPort || 8080;
			const res = await fetch(`http://localhost:${port}/socket.io/?EIO=4&transport=polling`);
			expect(res.status).toBe(403);
		});
	});

	describe("When whitelist is empty (allow all IPs)", () => {
		beforeAll(async () => {
			await helpers.startApplication("tests/configs/empty_ipWhiteList.js");
		});

		afterAll(async () => {
			await helpers.stopApplication();
		});

		it("should allow request with 200 (OK)", async () => {
			const port = global.testPort || 8080;
			const res = await fetch(`http://localhost:${port}`);
			expect(res.status).toBe(200);
		});

		it("should also allow Socket.IO handshake with 200 (OK) — not just HTTP routes", async () => {
			const port = global.testPort || 8080;
			const res = await fetch(`http://localhost:${port}/socket.io/?EIO=4&transport=polling`);
			expect(res.status).toBe(200);
		});
	});
});