add preflight CORS live tests

Author: devksingh4

tests/live/cors.test.ts

@@ -4,6 +4,19 @@ import { getBaseEndpoint } from "./utils.js";
 const baseEndpoint = getBaseEndpoint();
 
 describe("CORS tests", async () => {
+  test("Events: Known URL is preflight allowed in CORS", async () => {
+    const response = await fetch(`${baseEndpoint}/api/v1/events`, {
+      method: "OPTIONS",
+      headers: {
+        "Access-Control-Request-Method": "GET",
+        Origin: "https://acmuiuc.pages.dev",
+      },
+    });
+    expect(response.status).toBe(204);
+    expect(response.headers.get("access-control-allow-origin")).toStrictEqual(
+      "https://acmuiuc.pages.dev",
+    );
+  });
   test("Events: Known URL is allowed in CORS", async () => {
     const response = await fetch(`${baseEndpoint}/api/v1/events`, {
       headers: {
@@ -15,6 +28,17 @@ describe("CORS tests", async () => {
       "https://acmuiuc.pages.dev",
     );
   });
+  test("Events: Unknown URL is preflight not allowed in CORS", async () => {
+    const response = await fetch(`${baseEndpoint}/api/v1/events`, {
+      method: "OPTIONS",
+      headers: {
+        "Access-Control-Request-Method": "GET",
+        Origin: "https://google.com",
+      },
+    });
+    expect(response.status).toBe(204);
+    expect(response.headers).not.toHaveProperty("access-control-allow-origin");
+  });
   test("Events: Unknown URL is not allowed in CORS", async () => {
     const response = await fetch(`${baseEndpoint}/api/v1/events`, {
       headers: {
@@ -35,6 +59,19 @@ describe("CORS tests", async () => {
       "https://acmuiuc.pages.dev",
     );
   });
+  test("Membership: Known URL is preflight allowed in CORS", async () => {
+    const response = await fetch(`${baseEndpoint}/api/v1/membership/zzzzzz`, {
+      method: "OPTIONS",
+      headers: {
+        "Access-Control-Request-Method": "GET",
+        Origin: "https://acmuiuc.pages.dev",
+      },
+    });
+    expect(response.status).toBe(204);
+    expect(response.headers.get("access-control-allow-origin")).toStrictEqual(
+      "https://acmuiuc.pages.dev",
+    );
+  });
   test("Membership: Unknown URL is not allowed in CORS", async () => {
     const response = await fetch(`${baseEndpoint}/api/v1/membership/zzzzzz`, {
       headers: {
@@ -44,4 +81,15 @@ describe("CORS tests", async () => {
     expect(response.status).toBe(200);
     expect(response.headers).not.toHaveProperty("access-control-allow-origin");
   });
+  test("Membership: Unknown URL is preflight not allowed in CORS", async () => {
+    const response = await fetch(`${baseEndpoint}/api/v1/membership/zzzzzz`, {
+      method: "OPTIONS",
+      headers: {
+        "Access-Control-Request-Method": "GET",
+        Origin: "https://google.com",
+      },
+    });
+    expect(response.status).toBe(204);
+    expect(response.headers).not.toHaveProperty("access-control-allow-origin");
+  });
 });