peczenyj / GDPR-IAB-TCFv2 / 25516798745

96%

main: 96%

Pull #64

github

feat(cmp-validator): http_client injection + verify_ssl/timeout/env_proxy

CMPValidator gains four constructor options that bring its HTTP layer
in line with what callers actually need in production:

  - verify_ssl (default 1) and timeout (default 30) configure the
    default HTTP::Tiny client. verify_ssl pins the secure default
    independent of the installed HTTP::Tiny version (older versions
    silently defaulted to 0).

  - http_client accepts a pre-built object responding to ->get($url) in
    the HTTP::Tiny shape. Used verbatim when present; the default
    HTTP::Tiny is not constructed in that path. Validated at
    construction time (must be blessed and ->can('get')). Mutually
    exclusive with verify_ssl/timeout to make API misuse loud rather
    than silent.

  - The default HTTP::Tiny is now built with env_proxy => 1, so the
    standard https_proxy / http_proxy / no_proxy environment variables
    are honored automatically. This was previously silently ignored.

POD adds a NETWORK PROXIES section documenting the env vars and an
INJECTING AN HTTP CLIENT section showing the test/power-user pattern.
The 'now' constructor arg gets a tighter "test only" doc note (no
behavior change).

Tests cover: default values, override values, all three croak paths
(http_client + verify_ssl, http_client + timeout, non-blessed/no-get
http_client), end-to-end fake-client URL fetch, failed-response
surfacing, and an env_proxy smoke test (skipped if the surrounding
env already has http_proxy set).

14 of 14 new or added lines in 1 file covered. (100.0%)

995 of 1041 relevant lines covered (95.58%)

11317.86 hits per line