X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/2e104941dbf1e4bf92e0632cadeb946be0595d67..2b8f39b5067103d60f7bc43d26cb2f59126b2a42:/services/api/test/integration/cross_origin_test.rb diff --git a/services/api/test/integration/cross_origin_test.rb b/services/api/test/integration/cross_origin_test.rb index 28c1b81dab..5109ea46a6 100644 --- a/services/api/test/integration/cross_origin_test.rb +++ b/services/api/test/integration/cross_origin_test.rb @@ -1,3 +1,7 @@ +# Copyright (C) The Arvados Authors. All rights reserved. +# +# SPDX-License-Identifier: AGPL-3.0 + require 'test_helper' class CrossOriginTest < ActionDispatch::IntegrationTest @@ -32,11 +36,11 @@ class CrossOriginTest < ActionDispatch::IntegrationTest ['/arvados/v1/collections', '/arvados/v1/users', '/arvados/v1/api_client_authorizations'].each do |path| - test "CORS headers are set and body is stub at OPTIONS #{path}" do + test "CORS headers are set and body is empty at OPTIONS #{path}" do options path, {}, {} assert_response :success assert_cors_headers - assert_equal '-', response.body + assert_equal '', response.body end test "CORS headers are set at authenticated GET #{path}" do @@ -65,7 +69,7 @@ class CrossOriginTest < ActionDispatch::IntegrationTest %w(GET HEAD POST PUT DELETE).each do |m| assert_includes allowed, m, "A-C-A-Methods should include #{m}" end - assert_equal 'Authorization', response.headers['Access-Control-Allow-Headers'] + assert_equal 'Authorization, Content-Type', response.headers['Access-Control-Allow-Headers'] end def assert_no_cors_headers