Added basic HTTPS test for proxy

Author: evgeniy-scherbina

proxy/proxy_test.go

@@ -4,12 +4,16 @@ import (
 "context"
 "crypto/tls"
 "io"
+"log"
 "log/slog"
 "net/http"
 "os"
+"os/user"
+"strconv"
 "testing"
 "time"
 
+boundary_tls "github.com/coder/boundary/tls"
 "github.com/stretchr/testify/require"
 
 "github.com/coder/boundary/audit"
@@ -106,3 +110,105 @@ func TestProxyServerBasicHTTP(t *testing.T) {
 require.Equal(t, expectedResponse, string(body))
 })
 }
+
+// TestProxyServerBasicHTTPS tests basic HTTPS request handling
+func TestProxyServerBasicHTTPS(t *testing.T) {
+// Create test logger
+logger := slog.New(slog.NewTextHandler(os.Stderr, &slog.HandlerOptions{
+Level: slog.LevelDebug,
+}))
+
+// Create test rules (allow all for testing)
+testRules, err := rules.ParseAllowSpecs([]string{"*"})
+if err != nil {
+t.Fatalf("Failed to parse test rules: %v", err)
+}
+
+// Create rule engine
+ruleEngine := rules.NewRuleEngine(testRules, logger)
+
+// Create mock auditor
+auditor := &mockAuditor{}
+
+// Create TLS config (minimal for testing)
+tlsConfig := &tls.Config{
+MinVersion: tls.VersionTLS12,
+}
+
+currentUser, err := user.Current()
+if err != nil {
+log.Fatal(err)
+}
+
+uid, _ := strconv.Atoi(currentUser.Uid)
+gid, _ := strconv.Atoi(currentUser.Gid)
+
+// Create TLS certificate manager
+certManager, err := boundary_tls.NewCertificateManager(boundary_tls.Config{
+Logger: logger,
+ConfigDir: "/tmp/boundary",
+Uid: uid,
+Gid: gid,
+})
+require.NoError(t, err)
+
+// Setup TLS to get cert path for jailer
+tlsConfig, caCertPath, configDir, err := certManager.SetupTLSAndWriteCACert()
+require.NoError(t, err)
+_, _ = caCertPath, configDir
+
+// Create proxy server
+server := NewProxyServer(Config{
+HTTPPort: 8080,
+RuleEngine: ruleEngine,
+Auditor: auditor,
+Logger: logger,
+TLSConfig: tlsConfig,
+})
+
+// Create context with timeout
+ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
+defer cancel()
+
+// Start server in goroutine
+serverDone := make(chan error, 1)
+go func() {
+serverDone <- server.Start(ctx)
+}()
+
+// Give server time to start
+time.Sleep(100 * time.Millisecond)
+
+// Test basic HTTPS request
+t.Run("BasicHTTPSRequest", func(t *testing.T) {
+// Create HTTP client
+client := &http.Client{
+Transport: &http.Transport{
+TLSClientConfig: &tls.Config{
+InsecureSkipVerify: true, // Skip cert verification for testing
+},
+},
+Timeout: 5 * time.Second,
+}
+
+// Make request to proxy
+req, err := http.NewRequest("GET", "https://localhost:8080/api/v2", nil)
+if err != nil {
+t.Fatalf("Failed to create request: %v", err)
+}
+// Override the Host header
+req.Host = "dev.coder.com"
+
+// Make the request
+resp, err := client.Do(req)
+require.NoError(t, err)
+
+body, err := io.ReadAll(resp.Body)
+require.NoError(t, err)
+resp.Body.Close()
+
+expectedResponse := `{"message":"👋"}
+`
+require.Equal(t, expectedResponse, string(body))
+})
+}