diff --git a/pkg/auth/hostname_detector.go b/pkg/auth/hostname_detector.go deleted file mode 100644 index 171bbac2831..00000000000 --- a/pkg/auth/hostname_detector.go +++ /dev/null @@ -1,29 +0,0 @@ -package auth - -import ( - "net/http" - "strings" - - "go.uber.org/zap" - - "github.com/transcom/mymove/pkg/logging" -) - -// HostnameDetectorMiddleware only allows the given hostname through -func HostnameDetectorMiddleware(globalLogger *zap.Logger, hostname string) func(next http.Handler) http.Handler { - globalLogger.Info("Creating hostname detector", zap.String("hostname", hostname)) - return func(next http.Handler) http.Handler { - mw := func(w http.ResponseWriter, r *http.Request) { - ctx := r.Context() - logger := logging.FromContext(ctx) - parts := strings.Split(r.Host, ":") - if !strings.EqualFold(parts[0], hostname) { - logger.Error("Bad hostname", zap.String("hostname", r.Host)) - http.Error(w, http.StatusText(400), http.StatusBadRequest) - return - } - next.ServeHTTP(w, r) - } - return http.HandlerFunc(mw) - } -} diff --git a/pkg/auth/hostname_detector_test.go b/pkg/auth/hostname_detector_test.go deleted file mode 100644 index 25ce72eca2e..00000000000 --- a/pkg/auth/hostname_detector_test.go +++ /dev/null @@ -1,44 +0,0 @@ -package auth - -import ( - "net/http" - "net/http/httptest" - "strings" -) - -var ordersMoveMil = "orders.move.mil" - -func (suite *authSuite) TestOrdersDetectorConstructor() { - adm := HostnameDetectorMiddleware(suite.logger, ordersMoveMil) - suite.NotNil(adm) -} - -func (suite *authSuite) TestOrdersDetector() { - rr := httptest.NewRecorder() - - ordersDetectorTestHandler := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {}) - ordersDetector := HostnameDetectorMiddleware(suite.logger, ordersMoveMil)(ordersDetectorTestHandler) - - req, _ := http.NewRequest("GET", "/some_url", nil) - req.Host = ordersMoveMil - session := Session{} - ordersDetector.ServeHTTP(rr, req.WithContext(SetSessionInRequestContext(req, &session))) - suite.Equal(http.StatusOK, rr.Code, "Should get 200 OK") - - req, _ = http.NewRequest("GET", "/some_url", nil) - req.Host = strings.ToUpper(ordersMoveMil) - session = Session{} - ordersDetector.ServeHTTP(rr, req.WithContext(SetSessionInRequestContext(req, &session))) - suite.Equal(http.StatusOK, rr.Code, "Should get 200 OK") - - notOrdersTestHandler := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { - suite.Fail("Should not be called") - }) - notOrdersDetector := HostnameDetectorMiddleware(suite.logger, ordersMoveMil)(notOrdersTestHandler) - - req, _ = http.NewRequest("GET", "/some_url", nil) - req.Host = "totally.bogus.hostname" - session = Session{} - notOrdersDetector.ServeHTTP(rr, req.WithContext(SetSessionInRequestContext(req, &session))) - suite.Equal(http.StatusBadRequest, rr.Code, "Should get 400 Bad Request") -}