feat: add configurable HLS CORS allowlists

tests/EventHandler/NginxConfigurationTest.php

@@ -0,0 +1,43 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Plugin\AzuraCastOnDemandHls\Tests\EventHandler;
+
+use App\Entity\Station;
+use App\Event\Nginx\WriteNginxConfiguration;
+use PHPUnit\Framework\Attributes\CoversClass;
+use PHPUnit\Framework\TestCase;
+use Plugin\AzuraCastOnDemandHls\Config;
+use Plugin\AzuraCastOnDemandHls\Cors\CorsConfigurationProvider;
+use Plugin\AzuraCastOnDemandHls\EventHandler\NginxConfiguration;
+
+#[CoversClass(NginxConfiguration::class)]
+final class NginxConfigurationTest extends TestCase
+{
+    public function testItGeneratesExactCorsRulesForTheProtectedHlsAssetLocation(): void
+    {
+        $configuration = new NginxConfiguration(
+            new Config(),
+            new class implements CorsConfigurationProvider {
+                public function getAllowedOrigins(int $stationId): array
+                {
+                    if (11 !== $stationId) {
+                        throw new \LogicException('Unexpected station ID.');
+                    }
+                    return ['https://aifrequency.org', 'https://www.aifrequency.org'];
+                }
+            },
+        );
+        $event = new WriteNginxConfiguration(new Station(11, '/var/azuracast/stations/test/config'));
+        $configuration($event);
+        $nginx = $event->buildConfiguration();
+
+        self::assertStringContainsString('location ^~ /internal/ondemand-hls/11/', $nginx);
+        self::assertStringContainsString('if ($http_origin = "https://aifrequency.org")', $nginx);
+        self::assertStringContainsString('if ($http_origin = "https://www.aifrequency.org")', $nginx);
+        self::assertStringContainsString('add_header Access-Control-Allow-Origin $ondemand_hls_cors_origin always;', $nginx);
+        self::assertStringContainsString('add_header Vary $ondemand_hls_cors_vary always;', $nginx);
+        self::assertStringNotContainsString('Access-Control-Allow-Origin *', $nginx);
+    }
+}