test: add integration tests for security middleware features

internal/transport/http/middleware/example_test.go

@@ -37,15 +37,24 @@ func TestSecurityMiddlewares(t *testing.T) {
 
 	// Test CORS
 	t.Run("Test CORS", func(t *testing.T) {
-		resp, err := http.Get(ts.URL + "/test")
+		// Tạo request mới với header Origin
+		req, err := http.NewRequest("GET", ts.URL+"/test", nil)
+		assert.NoError(t, err)
+		req.Header.Set("Origin", "https://example.com")
+
+		// Gửi request
+		client := &http.Client{}
+		resp, err := client.Do(req)
 		assert.NoError(t, err)
 		defer func() {
 			err := resp.Body.Close()
 			assert.NoError(t, err, "failed to close response body")
 		}()
 
-		// Kiểm tra CORS header
-		assert.Equal(t, "https://example.com", resp.Header.Get("Access-Control-Allow-Origin"))
+		// Kiểm tra CORS headers
+		assert.Equal(t, "https://example.com", resp.Header.Get("Access-Control-Allow-Origin"), "CORS origin not matched")
+		assert.Equal(t, "true", resp.Header.Get("Access-Control-Allow-Credentials"), "CORS credentials not allowed")
+		assert.NotEmpty(t, resp.Header.Get("Access-Control-Allow-Methods"), "CORS methods not set")
 	})
 
 	// Test rate limiting