[#672] Support wildcard in allowed origins and headers

Signed-off-by: Marina Biryukova <m.biryukova@yadro.com>

api/layer/cors_test.go

@@ -6,6 +6,8 @@ import (
 	"strings"
 	"testing"
 
+	"git.frostfs.info/TrueCloudLab/frostfs-s3-gw/api/data"
+	apierr "git.frostfs.info/TrueCloudLab/frostfs-s3-gw/api/errors"
 	"github.com/stretchr/testify/require"
 )
 
@@ -17,7 +19,7 @@ func TestCorsCopiesNumber(t *testing.T) {
 		<AllowedMethod>GET</AllowedMethod>
 		<AllowedOrigin>http://www.example.com</AllowedOrigin>
 		<AllowedHeader>Authorization</AllowedHeader>
-		<ExposeHeader>x-amz-*</ExposeHeader>
+		<ExposeHeader>x-amz-request-id</ExposeHeader>
 	</CORSRule>
 </CORSConfiguration>
 `
@@ -39,6 +41,71 @@ func TestCorsCopiesNumber(t *testing.T) {
 	require.EqualValues(t, copies, tc.testFrostFS.CopiesNumbers(addrFromObject(objs[0]).EncodeToString()))
 }
 
+func TestCheckCORS(t *testing.T) {
+	for _, tc := range []struct {
+		name         string
+		cfg          *data.CORSConfiguration
+		expectedCode apierr.ErrorCode
+	}{
+		{
+			name: "allowed origin wildcards",
+			cfg: &data.CORSConfiguration{
+				CORSRules: []data.CORSRule{
+					{
+						AllowedOrigins: []string{"https://*.example.*"},
+						AllowedMethods: []string{"GET"},
+					},
+				},
+			},
+			expectedCode: apierr.ErrCORSWildcardsAllowedOrigins,
+		},
+		{
+			name: "allowed header wildcards",
+			cfg: &data.CORSConfiguration{
+				CORSRules: []data.CORSRule{
+					{
+						AllowedOrigins: []string{"https://*.example.com"},
+						AllowedMethods: []string{"GET"},
+						AllowedHeaders: []string{"x-amz-*-*"},
+					},
+				},
+			},
+			expectedCode: apierr.ErrCORSWildcardsAllowedHeaders,
+		},
+		{
+			name: "invalid allowed method",
+			cfg: &data.CORSConfiguration{
+				CORSRules: []data.CORSRule{
+					{
+						AllowedOrigins: []string{"https://*.example.com"},
+						AllowedMethods: []string{"INVALID"},
+						AllowedHeaders: []string{"x-amz-*"},
+					},
+				},
+			},
+			expectedCode: apierr.ErrCORSUnsupportedMethod,
+		},
+		{
+			name: "expose header wildcard",
+			cfg: &data.CORSConfiguration{
+				CORSRules: []data.CORSRule{
+					{
+						AllowedOrigins: []string{"https://*.example.com"},
+						AllowedMethods: []string{"GET"},
+						AllowedHeaders: []string{"x-amz-*"},
+						ExposeHeaders:  []string{"x-amz-*"},
+					},
+				},
+			},
+			expectedCode: apierr.ErrCORSWildcardExposeHeaders,
+		},
+	} {
+		t.Run(tc.name, func(t *testing.T) {
+			require.True(t, apierr.IsS3Error(checkCORS(tc.cfg), tc.expectedCode))
+		})
+	}
+}
+
 func NewXMLDecoder(r io.Reader, _ string) *xml.Decoder {
 	dec := xml.NewDecoder(r)