Coverage for tests / test_tutorial / test_cors / test_tutorial001.py: 100%

1from fastapi.testclient import TestClient 4 ctx1defg

2 

3from docs_src.cors.tutorial001_py310 import app 4 ctx1defg

4 

5 

6def test_cors(): 4 ctx1defg

7 client = TestClient(app) 3 ctx1abc

8 # Test pre-flight response 

9 headers = { 3 ctx1abc

10 "Origin": "https://localhost.tiangolo.com", 

11 "Access-Control-Request-Method": "GET", 

12 "Access-Control-Request-Headers": "X-Example", 

13 } 

14 response = client.options("/", headers=headers) 3 ctx1abc

15 assert response.status_code == 200, response.text 3 ctx1abc

16 assert response.text == "OK" 3 ctx1abc

17 assert ( 2 ctx1ab

18 response.headers["access-control-allow-origin"] 

19 == "https://localhost.tiangolo.com" 

20 ) 

21 assert response.headers["access-control-allow-headers"] == "X-Example" 3 ctx1abc

22 

23 # Test standard response 

24 headers = {"Origin": "https://localhost.tiangolo.com"} 3 ctx1abc

25 response = client.get("/", headers=headers) 3 ctx1abc

26 assert response.status_code == 200, response.text 3 ctx1abc

27 assert response.json() == {"message": "Hello World"} 3 ctx1abc

28 assert ( 2 ctx1ab

29 response.headers["access-control-allow-origin"] 

30 == "https://localhost.tiangolo.com" 

31 ) 

32 

33 # Test non-CORS response 

34 response = client.get("/") 3 ctx1abc

35 assert response.status_code == 200, response.text 3 ctx1abc

36 assert response.json() == {"message": "Hello World"} 3 ctx1abc

37 assert "access-control-allow-origin" not in response.headers 3 ctx1abc