[-] return HTTP 405 for non-POST methods in login handler (#1226)

* Added default case for unsupported methods in login handler

* fix tests

---------

Co-authored-by: Pavlo Golub <pavlo.golub@gmail.com>

Author: gemy26

internal/webserver/jwt.go

@@ -2,7 +2,6 @@ package webserver
 
 import (
 	"errors"
-	"fmt"
 	"net/http"
 	"time"
 
@@ -48,8 +47,9 @@ func (s *WebUIServer) handleLogin(w http.ResponseWriter, r *http.Request) {
 		}
 		_, err = w.Write([]byte(token))
 
-	case "GET":
-		fmt.Fprintf(w, "only POST methods is allowed.")
+	default:
+		w.Header().Set("Allow", "POST")
+		http.Error(w, "only POST method is allowed", http.StatusMethodNotAllowed)
 		return
 	}
 }

internal/webserver/jwt_test.go

@@ -59,9 +59,7 @@ func TestHandleLogin_GET(t *testing.T) {
 	w := httptest.NewRecorder()
 	ts.handleLogin(w, r)
 	resp := w.Result()
-	assert.Equal(t, http.StatusOK, resp.StatusCode)
-	body, _ := io.ReadAll(resp.Body)
-	assert.Equal(t, "only POST methods is allowed.", string(body))
+	assert.Equal(t, http.StatusMethodNotAllowed, resp.StatusCode)
 }
 
 func TestGenerateAndValidateJWT(t *testing.T) {