From 5e5edc5e74b9fe7cd02adf70f05e04bbafdec307 Mon Sep 17 00:00:00 2001
From: Rich Trott <rtrott@gmail.com>
Date: Sun, 11 Jul 2021 14:43:15 -0700
Subject: [PATCH] test: add test for websocket secret verification in debugger

---
 ...test-debugger-websocket-secret-mismatch.js | 53 +++++++++++++++++++
 1 file changed, 53 insertions(+)
 create mode 100644 test/parallel/test-debugger-websocket-secret-mismatch.js

diff --git a/test/parallel/test-debugger-websocket-secret-mismatch.js b/test/parallel/test-debugger-websocket-secret-mismatch.js
new file mode 100644
index 00000000000000..d1c1074c7d4d50
--- /dev/null
+++ b/test/parallel/test-debugger-websocket-secret-mismatch.js
@@ -0,0 +1,53 @@
+'use strict';
+
+const common = require('../common');
+
+const assert = require('assert');
+const childProcess = require('child_process');
+const http = require('http');
+
+let port;
+
+const server = http.createServer(common.mustCall((req, res) => {
+  if (req.url.startsWith('/json')) {
+    res.writeHead(200);
+    res.end(`[ {
+      "description": "",
+      "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:${port}/devtools/page/DAB7FB6187B554E10B0BD18821265734",
+      "cid": "DAB7FB6187B554E10B0BD18821265734",
+      "title": "Fhqwhgads",
+      "type": "page",
+      "url": "https://www.example.com/",
+      "webSocketDebuggerUrl": "ws://localhost:${port}/devtools/page/DAB7FB6187B554E10B0BD18821265734"
+    } ]`);
+  } else {
+    res.setHeader('Upgrade', 'websocket');
+    res.setHeader('Connection', 'Upgrade');
+    res.setHeader('Sec-WebSocket-Accept', 'fhqwhgads');
+    res.setHeader('Sec-WebSocket-Protocol', 'chat');
+    res.writeHead(101);
+    res.end();
+  }
+}, 2)).listen(0, common.mustCall(() => {
+  port = server.address().port;
+  const proc =
+    childProcess.spawn(process.execPath, ['inspect', `localhost:${port}`]);
+
+  let stdout = '';
+  proc.stdout.on('data', (data) => {
+    stdout += data.toString();
+    assert.doesNotMatch(stdout, /\bok\b/);
+  });
+
+  let stderr = '';
+  proc.stderr.on('data', (data) => {
+    stderr += data.toString();
+  });
+
+  proc.on('exit', common.mustCall((code, signal) => {
+    assert.match(stderr, /\bWebsocket secret mismatch\b/);
+    assert.notStrictEqual(code, 0);
+    assert.strictEqual(signal, null);
+    server.close();
+  }));
+}));