api-web-request-spec.ts 17 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505
  1. import { expect } from 'chai';
  2. import * as http from 'http';
  3. import * as qs from 'querystring';
  4. import * as path from 'path';
  5. import * as url from 'url';
  6. import * as WebSocket from 'ws';
  7. import { ipcMain, protocol, session, WebContents, webContents } from 'electron/main';
  8. import { AddressInfo } from 'net';
  9. import { emittedOnce } from './events-helpers';
  10. const fixturesPath = path.resolve(__dirname, 'fixtures');
  11. describe('webRequest module', () => {
  12. const ses = session.defaultSession;
  13. const server = http.createServer((req, res) => {
  14. if (req.url === '/serverRedirect') {
  15. res.statusCode = 301;
  16. res.setHeader('Location', 'http://' + req.rawHeaders[1]);
  17. res.end();
  18. } else {
  19. res.setHeader('Custom', ['Header']);
  20. let content = req.url;
  21. if (req.headers.accept === '*/*;test/header') {
  22. content += 'header/received';
  23. }
  24. if (req.headers.origin === 'http://new-origin') {
  25. content += 'new/origin';
  26. }
  27. res.end(content);
  28. }
  29. });
  30. let defaultURL: string;
  31. before((done) => {
  32. protocol.registerStringProtocol('neworigin', (req, cb) => cb(''));
  33. server.listen(0, '127.0.0.1', () => {
  34. const port = (server.address() as AddressInfo).port;
  35. defaultURL = `http://127.0.0.1:${port}/`;
  36. done();
  37. });
  38. });
  39. after(() => {
  40. server.close();
  41. protocol.unregisterProtocol('neworigin');
  42. });
  43. let contents: WebContents = null as unknown as WebContents;
  44. // NB. sandbox: true is used because it makes navigations much (~8x) faster.
  45. before(async () => {
  46. contents = (webContents as any).create({ sandbox: true });
  47. await contents.loadFile(path.join(fixturesPath, 'pages', 'jquery.html'));
  48. });
  49. after(() => (contents as any).destroy());
  50. async function ajax (url: string, options = {}) {
  51. return contents.executeJavaScript(`ajax("${url}", ${JSON.stringify(options)})`);
  52. }
  53. describe('webRequest.onBeforeRequest', () => {
  54. afterEach(() => {
  55. ses.webRequest.onBeforeRequest(null);
  56. });
  57. it('can cancel the request', async () => {
  58. ses.webRequest.onBeforeRequest((details, callback) => {
  59. callback({
  60. cancel: true
  61. });
  62. });
  63. await expect(ajax(defaultURL)).to.eventually.be.rejectedWith('404');
  64. });
  65. it('can filter URLs', async () => {
  66. const filter = { urls: [defaultURL + 'filter/*'] };
  67. ses.webRequest.onBeforeRequest(filter, (details, callback) => {
  68. callback({ cancel: true });
  69. });
  70. const { data } = await ajax(`${defaultURL}nofilter/test`);
  71. expect(data).to.equal('/nofilter/test');
  72. await expect(ajax(`${defaultURL}filter/test`)).to.eventually.be.rejectedWith('404');
  73. });
  74. it('receives details object', async () => {
  75. ses.webRequest.onBeforeRequest((details, callback) => {
  76. expect(details.id).to.be.a('number');
  77. expect(details.timestamp).to.be.a('number');
  78. expect(details.webContentsId).to.be.a('number');
  79. expect(details.url).to.be.a('string').that.is.equal(defaultURL);
  80. expect(details.method).to.be.a('string').that.is.equal('GET');
  81. expect(details.resourceType).to.be.a('string').that.is.equal('xhr');
  82. expect(details.uploadData).to.be.undefined();
  83. callback({});
  84. });
  85. const { data } = await ajax(defaultURL);
  86. expect(data).to.equal('/');
  87. });
  88. it('receives post data in details object', async () => {
  89. const postData = {
  90. name: 'post test',
  91. type: 'string'
  92. };
  93. ses.webRequest.onBeforeRequest((details, callback) => {
  94. expect(details.url).to.equal(defaultURL);
  95. expect(details.method).to.equal('POST');
  96. expect(details.uploadData).to.have.lengthOf(1);
  97. const data = qs.parse(details.uploadData[0].bytes.toString());
  98. expect(data).to.deep.equal(postData);
  99. callback({ cancel: true });
  100. });
  101. await expect(ajax(defaultURL, {
  102. type: 'POST',
  103. data: postData
  104. })).to.eventually.be.rejectedWith('404');
  105. });
  106. it('can redirect the request', async () => {
  107. ses.webRequest.onBeforeRequest((details, callback) => {
  108. if (details.url === defaultURL) {
  109. callback({ redirectURL: `${defaultURL}redirect` });
  110. } else {
  111. callback({});
  112. }
  113. });
  114. const { data } = await ajax(defaultURL);
  115. expect(data).to.equal('/redirect');
  116. });
  117. it('does not crash for redirects', async () => {
  118. ses.webRequest.onBeforeRequest((details, callback) => {
  119. callback({ cancel: false });
  120. });
  121. await ajax(defaultURL + 'serverRedirect');
  122. await ajax(defaultURL + 'serverRedirect');
  123. });
  124. it('works with file:// protocol', async () => {
  125. ses.webRequest.onBeforeRequest((details, callback) => {
  126. callback({ cancel: true });
  127. });
  128. const fileURL = url.format({
  129. pathname: path.join(fixturesPath, 'blank.html').replace(/\\/g, '/'),
  130. protocol: 'file',
  131. slashes: true
  132. });
  133. await expect(ajax(fileURL)).to.eventually.be.rejectedWith('404');
  134. });
  135. });
  136. describe('webRequest.onBeforeSendHeaders', () => {
  137. afterEach(() => {
  138. ses.webRequest.onBeforeSendHeaders(null);
  139. ses.webRequest.onSendHeaders(null);
  140. });
  141. it('receives details object', async () => {
  142. ses.webRequest.onBeforeSendHeaders((details, callback) => {
  143. expect(details.requestHeaders).to.be.an('object');
  144. expect(details.requestHeaders['Foo.Bar']).to.equal('baz');
  145. callback({});
  146. });
  147. const { data } = await ajax(defaultURL, { headers: { 'Foo.Bar': 'baz' } });
  148. expect(data).to.equal('/');
  149. });
  150. it('can change the request headers', async () => {
  151. ses.webRequest.onBeforeSendHeaders((details, callback) => {
  152. const requestHeaders = details.requestHeaders;
  153. requestHeaders.Accept = '*/*;test/header';
  154. callback({ requestHeaders: requestHeaders });
  155. });
  156. const { data } = await ajax(defaultURL);
  157. expect(data).to.equal('/header/received');
  158. });
  159. it('can change request origin', async () => {
  160. ses.webRequest.onBeforeSendHeaders((details, callback) => {
  161. const requestHeaders = details.requestHeaders;
  162. requestHeaders.Origin = 'http://new-origin';
  163. callback({ requestHeaders: requestHeaders });
  164. });
  165. const { data } = await ajax(defaultURL);
  166. expect(data).to.equal('/new/origin');
  167. });
  168. it('can capture CORS requests', async () => {
  169. let called = false;
  170. ses.webRequest.onBeforeSendHeaders((details, callback) => {
  171. called = true;
  172. callback({ requestHeaders: details.requestHeaders });
  173. });
  174. await ajax('neworigin://host');
  175. expect(called).to.be.true();
  176. });
  177. it('resets the whole headers', async () => {
  178. const requestHeaders = {
  179. Test: 'header'
  180. };
  181. ses.webRequest.onBeforeSendHeaders((details, callback) => {
  182. callback({ requestHeaders: requestHeaders });
  183. });
  184. ses.webRequest.onSendHeaders((details) => {
  185. expect(details.requestHeaders).to.deep.equal(requestHeaders);
  186. });
  187. await ajax(defaultURL);
  188. });
  189. it('works with file:// protocol', async () => {
  190. const requestHeaders = {
  191. Test: 'header'
  192. };
  193. let onSendHeadersCalled = false;
  194. ses.webRequest.onBeforeSendHeaders((details, callback) => {
  195. callback({ requestHeaders: requestHeaders });
  196. });
  197. ses.webRequest.onSendHeaders((details) => {
  198. expect(details.requestHeaders).to.deep.equal(requestHeaders);
  199. onSendHeadersCalled = true;
  200. });
  201. await ajax(url.format({
  202. pathname: path.join(fixturesPath, 'blank.html').replace(/\\/g, '/'),
  203. protocol: 'file',
  204. slashes: true
  205. }));
  206. expect(onSendHeadersCalled).to.be.true();
  207. });
  208. });
  209. describe('webRequest.onSendHeaders', () => {
  210. afterEach(() => {
  211. ses.webRequest.onSendHeaders(null);
  212. });
  213. it('receives details object', async () => {
  214. ses.webRequest.onSendHeaders((details) => {
  215. expect(details.requestHeaders).to.be.an('object');
  216. });
  217. const { data } = await ajax(defaultURL);
  218. expect(data).to.equal('/');
  219. });
  220. });
  221. describe('webRequest.onHeadersReceived', () => {
  222. afterEach(() => {
  223. ses.webRequest.onHeadersReceived(null);
  224. });
  225. it('receives details object', async () => {
  226. ses.webRequest.onHeadersReceived((details, callback) => {
  227. expect(details.statusLine).to.equal('HTTP/1.1 200 OK');
  228. expect(details.statusCode).to.equal(200);
  229. expect(details.responseHeaders!.Custom).to.deep.equal(['Header']);
  230. callback({});
  231. });
  232. const { data } = await ajax(defaultURL);
  233. expect(data).to.equal('/');
  234. });
  235. it('can change the response header', async () => {
  236. ses.webRequest.onHeadersReceived((details, callback) => {
  237. const responseHeaders = details.responseHeaders!;
  238. responseHeaders.Custom = ['Changed'] as any;
  239. callback({ responseHeaders: responseHeaders });
  240. });
  241. const { headers } = await ajax(defaultURL);
  242. expect(headers).to.match(/^custom: Changed$/m);
  243. });
  244. it('can change response origin', async () => {
  245. ses.webRequest.onHeadersReceived((details, callback) => {
  246. const responseHeaders = details.responseHeaders!;
  247. responseHeaders['access-control-allow-origin'] = ['http://new-origin'] as any;
  248. callback({ responseHeaders: responseHeaders });
  249. });
  250. const { headers } = await ajax(defaultURL);
  251. expect(headers).to.match(/^access-control-allow-origin: http:\/\/new-origin$/m);
  252. });
  253. it('can change headers of CORS responses', async () => {
  254. ses.webRequest.onHeadersReceived((details, callback) => {
  255. const responseHeaders = details.responseHeaders!;
  256. responseHeaders.Custom = ['Changed'] as any;
  257. callback({ responseHeaders: responseHeaders });
  258. });
  259. const { headers } = await ajax('neworigin://host');
  260. expect(headers).to.match(/^custom: Changed$/m);
  261. });
  262. it('does not change header by default', async () => {
  263. ses.webRequest.onHeadersReceived((details, callback) => {
  264. callback({});
  265. });
  266. const { data, headers } = await ajax(defaultURL);
  267. expect(headers).to.match(/^custom: Header$/m);
  268. expect(data).to.equal('/');
  269. });
  270. it('follows server redirect', async () => {
  271. ses.webRequest.onHeadersReceived((details, callback) => {
  272. const responseHeaders = details.responseHeaders;
  273. callback({ responseHeaders: responseHeaders });
  274. });
  275. const { headers } = await ajax(defaultURL + 'serverRedirect');
  276. expect(headers).to.match(/^custom: Header$/m);
  277. });
  278. it('can change the header status', async () => {
  279. ses.webRequest.onHeadersReceived((details, callback) => {
  280. const responseHeaders = details.responseHeaders;
  281. callback({
  282. responseHeaders: responseHeaders,
  283. statusLine: 'HTTP/1.1 404 Not Found'
  284. });
  285. });
  286. const { headers } = await contents.executeJavaScript(`new Promise((resolve, reject) => {
  287. const options = {
  288. ...${JSON.stringify({ url: defaultURL })},
  289. success: (data, status, request) => {
  290. reject(new Error('expected failure'))
  291. },
  292. error: (xhr) => {
  293. resolve({ headers: xhr.getAllResponseHeaders() })
  294. }
  295. }
  296. $.ajax(options)
  297. })`);
  298. expect(headers).to.match(/^custom: Header$/m);
  299. });
  300. });
  301. describe('webRequest.onResponseStarted', () => {
  302. afterEach(() => {
  303. ses.webRequest.onResponseStarted(null);
  304. });
  305. it('receives details object', async () => {
  306. ses.webRequest.onResponseStarted((details) => {
  307. expect(details.fromCache).to.be.a('boolean');
  308. expect(details.statusLine).to.equal('HTTP/1.1 200 OK');
  309. expect(details.statusCode).to.equal(200);
  310. expect(details.responseHeaders!.Custom).to.deep.equal(['Header']);
  311. });
  312. const { data, headers } = await ajax(defaultURL);
  313. expect(headers).to.match(/^custom: Header$/m);
  314. expect(data).to.equal('/');
  315. });
  316. });
  317. describe('webRequest.onBeforeRedirect', () => {
  318. afterEach(() => {
  319. ses.webRequest.onBeforeRedirect(null);
  320. ses.webRequest.onBeforeRequest(null);
  321. });
  322. it('receives details object', async () => {
  323. const redirectURL = defaultURL + 'redirect';
  324. ses.webRequest.onBeforeRequest((details, callback) => {
  325. if (details.url === defaultURL) {
  326. callback({ redirectURL: redirectURL });
  327. } else {
  328. callback({});
  329. }
  330. });
  331. ses.webRequest.onBeforeRedirect((details) => {
  332. expect(details.fromCache).to.be.a('boolean');
  333. expect(details.statusLine).to.equal('HTTP/1.1 307 Internal Redirect');
  334. expect(details.statusCode).to.equal(307);
  335. expect(details.redirectURL).to.equal(redirectURL);
  336. });
  337. const { data } = await ajax(defaultURL);
  338. expect(data).to.equal('/redirect');
  339. });
  340. });
  341. describe('webRequest.onCompleted', () => {
  342. afterEach(() => {
  343. ses.webRequest.onCompleted(null);
  344. });
  345. it('receives details object', async () => {
  346. ses.webRequest.onCompleted((details) => {
  347. expect(details.fromCache).to.be.a('boolean');
  348. expect(details.statusLine).to.equal('HTTP/1.1 200 OK');
  349. expect(details.statusCode).to.equal(200);
  350. });
  351. const { data } = await ajax(defaultURL);
  352. expect(data).to.equal('/');
  353. });
  354. });
  355. describe('webRequest.onErrorOccurred', () => {
  356. afterEach(() => {
  357. ses.webRequest.onErrorOccurred(null);
  358. ses.webRequest.onBeforeRequest(null);
  359. });
  360. it('receives details object', async () => {
  361. ses.webRequest.onBeforeRequest((details, callback) => {
  362. callback({ cancel: true });
  363. });
  364. ses.webRequest.onErrorOccurred((details) => {
  365. expect(details.error).to.equal('net::ERR_BLOCKED_BY_CLIENT');
  366. });
  367. await expect(ajax(defaultURL)).to.eventually.be.rejectedWith('404');
  368. });
  369. });
  370. describe('WebSocket connections', () => {
  371. it('can be proxyed', async () => {
  372. // Setup server.
  373. const reqHeaders : { [key: string] : any } = {};
  374. const server = http.createServer((req, res) => {
  375. reqHeaders[req.url!] = req.headers;
  376. res.setHeader('foo1', 'bar1');
  377. res.end('ok');
  378. });
  379. const wss = new WebSocket.Server({ noServer: true });
  380. wss.on('connection', function connection (ws) {
  381. ws.on('message', function incoming (message) {
  382. if (message === 'foo') {
  383. ws.send('bar');
  384. }
  385. });
  386. });
  387. server.on('upgrade', function upgrade (request, socket, head) {
  388. const pathname = require('url').parse(request.url).pathname;
  389. if (pathname === '/websocket') {
  390. reqHeaders[request.url] = request.headers;
  391. wss.handleUpgrade(request, socket, head, function done (ws) {
  392. wss.emit('connection', ws, request);
  393. });
  394. }
  395. });
  396. // Start server.
  397. await new Promise(resolve => server.listen(0, '127.0.0.1', resolve));
  398. const port = String((server.address() as AddressInfo).port);
  399. // Use a separate session for testing.
  400. const ses = session.fromPartition('WebRequestWebSocket');
  401. // Setup listeners.
  402. const receivedHeaders : { [key: string] : any } = {};
  403. ses.webRequest.onBeforeSendHeaders((details, callback) => {
  404. details.requestHeaders.foo = 'bar';
  405. callback({ requestHeaders: details.requestHeaders });
  406. });
  407. ses.webRequest.onHeadersReceived((details, callback) => {
  408. const pathname = require('url').parse(details.url).pathname;
  409. receivedHeaders[pathname] = details.responseHeaders;
  410. callback({ cancel: false });
  411. });
  412. ses.webRequest.onResponseStarted((details) => {
  413. if (details.url.startsWith('ws://')) {
  414. expect(details.responseHeaders!.Connection[0]).be.equal('Upgrade');
  415. } else if (details.url.startsWith('http')) {
  416. expect(details.responseHeaders!.foo1[0]).be.equal('bar1');
  417. }
  418. });
  419. ses.webRequest.onSendHeaders((details) => {
  420. if (details.url.startsWith('ws://')) {
  421. expect(details.requestHeaders.foo).be.equal('bar');
  422. expect(details.requestHeaders.Upgrade).be.equal('websocket');
  423. } else if (details.url.startsWith('http')) {
  424. expect(details.requestHeaders.foo).be.equal('bar');
  425. }
  426. });
  427. ses.webRequest.onCompleted((details) => {
  428. if (details.url.startsWith('ws://')) {
  429. expect(details.error).be.equal('net::ERR_WS_UPGRADE');
  430. } else if (details.url.startsWith('http')) {
  431. expect(details.error).be.equal('net::OK');
  432. }
  433. });
  434. const contents = (webContents as any).create({
  435. session: ses,
  436. nodeIntegration: true,
  437. webSecurity: false
  438. });
  439. // Cleanup.
  440. after(() => {
  441. contents.destroy();
  442. server.close();
  443. ses.webRequest.onBeforeRequest(null);
  444. ses.webRequest.onBeforeSendHeaders(null);
  445. ses.webRequest.onHeadersReceived(null);
  446. ses.webRequest.onResponseStarted(null);
  447. ses.webRequest.onSendHeaders(null);
  448. ses.webRequest.onCompleted(null);
  449. });
  450. contents.loadFile(path.join(fixturesPath, 'api', 'webrequest.html'), { query: { port } });
  451. await emittedOnce(ipcMain, 'websocket-success');
  452. expect(receivedHeaders['/websocket'].Upgrade[0]).to.equal('websocket');
  453. expect(receivedHeaders['/'].foo1[0]).to.equal('bar1');
  454. expect(reqHeaders['/websocket'].foo).to.equal('bar');
  455. expect(reqHeaders['/'].foo).to.equal('bar');
  456. });
  457. });
  458. });