1 files changed, 43 insertions, 0 deletions
diff --git a/tests/lib/AppFramework/Controller/ApiControllerTest.php b/tests/lib/AppFramework/Controller/ApiControllerTest.php
new file mode 100644
index 00000000000..9dd980f975f
--- /dev/null
+++ b/tests/lib/AppFramework/Controller/ApiControllerTest.php
@@ -0,0 +1,43 @@
+<?php
+
+/**
+ * SPDX-FileCopyrightText: 2016-2024 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-FileCopyrightText: 2016 ownCloud, Inc.
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
+namespace Test\AppFramework\Controller;
+
+use OC\AppFramework\Http\Request;
+use OCP\AppFramework\ApiController;
+use OCP\IConfig;
+use OCP\IRequestId;
+
+class ChildApiController extends ApiController {
+};
+
+
+class ApiControllerTest extends \Test\TestCase {
+	/** @var ChildApiController */
+	protected $controller;
+
+	public function testCors(): void {
+		$request = new Request(
+			['server' => ['HTTP_ORIGIN' => 'test']],
+			$this->createMock(IRequestId::class),
+			$this->createMock(IConfig::class)
+		);
+		$this->controller = new ChildApiController('app', $request, 'verbs',
+			'headers', 100);
+
+		$response = $this->controller->preflightedCors();
+
+		$headers = $response->getHeaders();
+
+		$this->assertEquals('test', $headers['Access-Control-Allow-Origin']);
+		$this->assertEquals('verbs', $headers['Access-Control-Allow-Methods']);
+		$this->assertEquals('headers', $headers['Access-Control-Allow-Headers']);
+		$this->assertEquals('false', $headers['Access-Control-Allow-Credentials']);
+		$this->assertEquals(100, $headers['Access-Control-Max-Age']);
+	}
+}