Embedding¶

package myapp_test

import (
    "context"
    "net/http"
    "testing"

    "github.com/vibewarden/snitchproxy/pkg/snitchproxy"
)

func TestEgressSecurity(t *testing.T) {
    sp, err := snitchproxy.New(
        snitchproxy.WithConfigBytes([]byte(`
presets:
  - common-auth
  - pii
fail-on: high
`)),
        snitchproxy.WithMode(snitchproxy.ModeDecoy),
        snitchproxy.WithListenAddr(":0"),
        snitchproxy.WithAdminAddr(":0"),
    )
    if err != nil {
        t.Fatal(err)
    }

    if err := sp.Start(context.Background()); err != nil {
        t.Fatal(err)
    }
    defer sp.Close()

    // Point your HTTP client at sp.ListenAddr()
    resp, err := http.Get("http://" + sp.ListenAddr() + "/api/data")
    if err != nil {
        t.Fatal(err)
    }
    resp.Body.Close()

    // Check for violations
    if sp.HasViolationsAtOrAbove("high") {
        for _, v := range sp.Violations() {
            t.Errorf("violation: %s — %s", v.Assertion, v.Detail)
        }
    }
}