ticket #70 attempt 1

tests/unit/test_openai_ip_restriction.py

@@ -0,0 +1,42 @@
+# retoor <retoor@molodetz.nl>
+
+import httpx
+import pytest
+from devplacepy.main import app
+from devplacepy.config import DATABASE_URL
+from tests.conftest import run_async
+
+
+@pytest.fixture
+def client():
+    from devplacepy.database import init_db
+
+    init_db()
+    with httpx.Client(app=app) as c:
+        yield c
+
+
+def test_localhost_ipv4_allowed_through(client):
+    gateway_url = "http://127.0.0.1/openai/v1/chat/completions"
+    response = client.get(gateway_url, headers={"accept": "application/json"})
+    assert response.status_code != 403
+
+
+def test_localhost_ipv6_allowed_through(client):
+    gateway_url = "http://[::1]/openai/v1/models"
+    response = client.get(gateway_url, headers={"accept": "application/json"})
+    assert response.status_code != 403
+
+
+def test_non_openai_path_not_affected(client):
+    response = client.get("http://127.0.0.1/feed", headers={"accept": "application/json"})
+    assert response.status_code != 403
+
+
+def test_external_ip_rejected(client):
+    response = client.get(
+        "http://10.0.0.1/openai/v1/chat/completions",
+        headers={"accept": "application/json"},
+    )
+    assert response.status_code == 403
+    assert response.json() == {"detail": "Forbidden"}