< Summary - Envilder Core (TypeScript)

Information

Class:	src/envilder/core/infrastructure/azure/AzureVaultUrlValidator.ts
Assembly:	Default
File(s):	src/envilder/core/infrastructure/azure/AzureVaultUrlValidator.ts
Tag:	151_24479375065

Line coverage

100%

Branch coverage

100%

Method coverage

Feature is only available for sponsors

File(s)

#	Line	Line coverage
	`1`	`import { InvalidArgumentError } from '../../domain/errors/DomainErrors.js';`
	`2`
9	`3`	`export const DEFAULT_VAULT_HOSTS = [`
	`4`	`'.vault.azure.net',`
	`5`	`'.vault.azure.cn',`
	`6`	`'.vault.usgovcloudapi.net',`
	`7`	`'.vault.microsoftazure.de',`
	`8`	`];`
	`9`
	`10`	`export function validateAzureVaultUrl(`
	`11`	`vaultUrl: string,`
	`12`	`allowedHosts: string[],`
	`13`	`): void {`
	`14`	`let url: URL;`
23	`15`	`try {`
23	`16`	`url = new URL(vaultUrl);`
	`17`	`} catch {`
2	`18`	`throw new InvalidArgumentError('vaultUrl must be a valid URL');`
	`19`	`}`
	`20`
21	`21`	`if (url.protocol !== 'https:') {`
3	`22`	`throw new InvalidArgumentError('vaultUrl must use https:// protocol');`
	`23`	`}`
	`24`
18	`25`	`const isAllowedHost = allowedHosts.some((suffix) => {`
21	`26`	`const normalizedSuffix = suffix.startsWith('.') ? suffix.slice(1) : suffix;`
21	`27`	`return (`
	`28`	`url.hostname === normalizedSuffix \|\|`
	`29`	url.hostname.endsWith(`.${normalizedSuffix}`)
	`30`	`);`
	`31`	`});`
18	`32`	`if (!isAllowedHost) {`
4	`33`	`throw new InvalidArgumentError(`
	`34`	`vaultUrl hostname must end with one of: ${allowedHosts.join(', ')}`,
	`35`	`);`
	`36`	`}`
	`37`	`}`