Add tests for the handlePreflightRequest option

Author: Emilien Kenler

test/server.js

@@ -2514,6 +2514,67 @@ describe('server', function () {
     });
   });
 
+  describe('cors', function () {
+    it('should handle OPTIONS requests', function (done) {
+      listen({handlePreflightRequest: true}, function (port) {
+        request.options('http://localhost:%d/engine.io/default/'.s(port))
+          .set('Origin', 'http://engine.io')
+          .query({ transport: 'polling' })
+          .end(function (res) {
+            expect(res.status).to.be(400);
+            expect(res.body.code).to.be(2);
+            expect(res.body.message).to.be('Bad handshake method');
+            expect(res.header['access-control-allow-credentials']).to.be('true');
+            expect(res.header['access-control-allow-origin']).to.be('http://engine.io');
+            done();
+          });
+      });
+    });
+
+    it('should not handle OPTIONS requests', function (done) {
+      listen({handlePreflightRequest: false}, function (port) {
+        request.options('http://localhost:%d/engine.io/default/'.s(port))
+          .set('Origin', 'http://engine.io')
+          .query({ transport: 'polling' })
+          .end(function (res) {
+            expect(res.status).to.be(501);
+            expect(res.body.code).to.be(undefined);
+            done();
+          });
+      });
+    });
+
+    it('should handle OPTIONS requests with the given function', function (done) {
+      const handlePreflightRequest = (req, res) => {
+        let headers = {};
+        if (req.headers.origin) {
+          headers['Access-Control-Allow-Credentials'] = 'true';
+          headers['Access-Control-Allow-Origin'] = req.headers.origin;
+        } else {
+          headers['Access-Control-Allow-Origin'] = '*';
+        }
+        headers['Access-Control-Allow-Methods'] = 'GET,HEAD,PUT,PATCH,POST,DELETE';
+        headers['Access-Control-Allow-Headers'] = 'origin, content-type, accept';
+        res.writeHead(200, headers);
+        res.end();
+      };
+      listen({handlePreflightRequest}, function (port) {
+        request.options('http://localhost:%d/engine.io/default/'.s(port))
+          .set('Origin', 'http://engine.io')
+          .query({ transport: 'polling' })
+          .end(function (res) {
+            expect(res.status).to.be(200);
+            expect(res.body).to.be.empty();
+            expect(res.header['access-control-allow-credentials']).to.be('true');
+            expect(res.header['access-control-allow-origin']).to.be('http://engine.io');
+            expect(res.header['access-control-allow-methods']).to.be('GET,HEAD,PUT,PATCH,POST,DELETE');
+            expect(res.header['access-control-allow-headers']).to.be('origin, content-type, accept');
+            done();
+          });
+      });
+    });
+  });
+
   if (!UWS_ENGINE && parseInt(process.versions.node, 10) >= 4) {
     describe('wsEngine option', function () {
       it('should allow loading of other websocket server implementation like uws', function (done) {