test: add tests for IPv6

Author: kenjis

tests/system/HTTP/IncomingRequestTest.php

@@ -728,6 +728,23 @@ public function testGetIPAddressThruProxy()
         $this->assertSame($expected, $this->request->getIPAddress());
     }
 
+    public function testGetIPAddressThruProxyIPv6()
+    {
+        $expected                        = '123.123.123.123';
+        $_SERVER['HTTP_X_FORWARDED_FOR'] = $expected;
+        $_SERVER['REMOTE_ADDR']          = '2001:db8::2:1';
+
+        $config           = new App();
+        $config->proxyIPs = [
+            '2001:db8::2:1' => 'X-Forwarded-For',
+        ];
+        $this->request = new Request($config);
+        $this->request->populateHeaders();
+
+        // we should see the original forwarded address
+        $this->assertSame($expected, $this->request->getIPAddress());
+    }
+
     public function testGetIPAddressThruProxyInvalidIPAddress()
     {
         $_SERVER['HTTP_X_FORWARDED_FOR'] = '123.456.23.123';
@@ -746,6 +763,23 @@ public function testGetIPAddressThruProxyInvalidIPAddress()
         $this->assertSame($expected, $this->request->getIPAddress());
     }
 
+    public function testGetIPAddressThruProxyInvalidIPAddressIPv6()
+    {
+        $_SERVER['HTTP_X_FORWARDED_FOR'] = '2001:xyz::1';
+        $expected                        = '2001:db8::2:1';
+        $_SERVER['REMOTE_ADDR']          = $expected;
+
+        $config           = new App();
+        $config->proxyIPs = [
+            '2001:db8::2:1' => 'X-Forwarded-For',
+        ];
+        $this->request = new Request($config);
+        $this->request->populateHeaders();
+
+        // spoofed address invalid
+        $this->assertSame($expected, $this->request->getIPAddress());
+    }
+
     public function testGetIPAddressThruProxyNotWhitelisted()
     {
         $expected                        = '10.10.1.200';
@@ -764,6 +798,23 @@ public function testGetIPAddressThruProxyNotWhitelisted()
         $this->assertSame($expected, $this->request->getIPAddress());
     }
 
+    public function testGetIPAddressThruProxyNotWhitelistedIPv6()
+    {
+        $expected                        = '2001:db8::2:2';
+        $_SERVER['REMOTE_ADDR']          = $expected;
+        $_SERVER['HTTP_X_FORWARDED_FOR'] = '123.456.23.123';
+
+        $config           = new App();
+        $config->proxyIPs = [
+            '2001:db8::2:1' => 'X-Forwarded-For',
+        ];
+        $this->request = new Request($config);
+        $this->request->populateHeaders();
+
+        // spoofed address invalid
+        $this->assertSame($expected, $this->request->getIPAddress());
+    }
+
     public function testGetIPAddressThruProxySubnet()
     {
         $expected                        = '123.123.123.123';
@@ -779,6 +830,21 @@ public function testGetIPAddressThruProxySubnet()
         $this->assertSame($expected, $this->request->getIPAddress());
     }
 
+    public function testGetIPAddressThruProxySubnetIPv6()
+    {
+        $expected                        = '123.123.123.123';
+        $_SERVER['HTTP_X_FORWARDED_FOR'] = $expected;
+        $_SERVER['REMOTE_ADDR']          = '2001:db8:1234:ffff:ffff:ffff:ffff:ffff';
+
+        $config           = new App();
+        $config->proxyIPs = ['2001:db8:1234::/48' => 'X-Forwarded-For'];
+        $this->request    = new Request($config);
+        $this->request->populateHeaders();
+
+        // we should see the original forwarded address
+        $this->assertSame($expected, $this->request->getIPAddress());
+    }
+
     public function testGetIPAddressThruProxyOutOfSubnet()
     {
         $expected                        = '192.168.5.21';
@@ -794,6 +860,21 @@ public function testGetIPAddressThruProxyOutOfSubnet()
         $this->assertSame($expected, $this->request->getIPAddress());
     }
 
+    public function testGetIPAddressThruProxyOutOfSubnetIPv6()
+    {
+        $expected                        = '2001:db8:1235:ffff:ffff:ffff:ffff:ffff';
+        $_SERVER['REMOTE_ADDR']          = $expected;
+        $_SERVER['HTTP_X_FORWARDED_FOR'] = '123.123.123.123';
+
+        $config           = new App();
+        $config->proxyIPs = ['2001:db8:1234::/48' => 'X-Forwarded-For'];
+        $this->request    = new Request($config);
+        $this->request->populateHeaders();
+
+        // we should see the original forwarded address
+        $this->assertSame($expected, $this->request->getIPAddress());
+    }
+
     public function testGetIPAddressThruProxyInvalidConfigString()
     {
         $this->expectException(ConfigException::class);