74 lines
1.5 KiB
PHP
74 lines
1.5 KiB
PHP
<?php
|
|
|
|
use App\Jobs\SendWebhookJob;
|
|
use Illuminate\Support\Facades\Http;
|
|
use Tests\TestCase;
|
|
|
|
uses(TestCase::class);
|
|
|
|
it('sends webhook to valid URLs', function () {
|
|
Http::fake(['*' => Http::response('ok', 200)]);
|
|
|
|
$job = new SendWebhookJob(
|
|
payload: ['event' => 'test'],
|
|
webhookUrl: 'https://example.com/webhook'
|
|
);
|
|
|
|
$job->handle();
|
|
|
|
Http::assertSent(function ($request) {
|
|
return $request->url() === 'https://example.com/webhook';
|
|
});
|
|
});
|
|
|
|
it('blocks webhook to loopback address', function () {
|
|
Http::fake();
|
|
|
|
$job = new SendWebhookJob(
|
|
payload: ['event' => 'test'],
|
|
webhookUrl: 'http://127.0.0.1/admin'
|
|
);
|
|
|
|
$job->handle();
|
|
|
|
Http::assertNothingSent();
|
|
});
|
|
|
|
it('blocks webhook to cloud metadata endpoint', function () {
|
|
Http::fake();
|
|
|
|
$job = new SendWebhookJob(
|
|
payload: ['event' => 'test'],
|
|
webhookUrl: 'http://169.254.169.254/'
|
|
);
|
|
|
|
$job->handle();
|
|
|
|
Http::assertNothingSent();
|
|
});
|
|
|
|
it('blocks webhook to IPv4-mapped IPv6 link-local endpoint', function () {
|
|
Http::fake();
|
|
|
|
$job = new SendWebhookJob(
|
|
payload: ['event' => 'test'],
|
|
webhookUrl: 'http://[::ffff:169.254.169.254]/'
|
|
);
|
|
|
|
$job->handle();
|
|
|
|
Http::assertNothingSent();
|
|
});
|
|
|
|
it('blocks webhook to localhost', function () {
|
|
Http::fake();
|
|
|
|
$job = new SendWebhookJob(
|
|
payload: ['event' => 'test'],
|
|
webhookUrl: 'http://localhost/internal-api'
|
|
);
|
|
|
|
$job->handle();
|
|
|
|
Http::assertNothingSent();
|
|
});
|