Xes
73154ae174
Fuente: https://github.com/chamilo/chamilo-lms/releases/download/v1.11.40/chamilo-1.11.40.zip sha256: 1cf4bf2cc7bae1ef1a1eff643235db1d552f78ddf4b6dd1e2d2dac9868679439 Snapshot independiente (rama huerfana); diffable vs 1.11.38. vendor incluido.
77 lines
3.4 KiB
PHP
77 lines
3.4 KiB
PHP
<?php
|
|
|
|
/*
|
|
* This file is part of the Symfony package.
|
|
*
|
|
* (c) Fabien Potencier <fabien@symfony.com>
|
|
*
|
|
* For the full copyright and license information, please view the LICENSE
|
|
* file that was distributed with this source code.
|
|
*/
|
|
|
|
namespace Symfony\Component\Security\Http\Tests\Logout;
|
|
|
|
use PHPUnit\Framework\TestCase;
|
|
use Symfony\Component\HttpFoundation\Request;
|
|
use Symfony\Component\HttpFoundation\Response;
|
|
use Symfony\Component\HttpFoundation\Session\Session;
|
|
use Symfony\Component\HttpFoundation\Session\Storage\MockArraySessionStorage;
|
|
use Symfony\Component\Security\Csrf\TokenStorage\SessionTokenStorage;
|
|
use Symfony\Component\Security\Http\Logout\CsrfTokenClearingLogoutHandler;
|
|
|
|
class CsrfTokenClearingLogoutHandlerTest extends TestCase
|
|
{
|
|
private $session;
|
|
private $csrfTokenStorage;
|
|
private $csrfTokenClearingLogoutHandler;
|
|
|
|
protected function setUp()
|
|
{
|
|
$this->session = new Session(new MockArraySessionStorage());
|
|
$this->csrfTokenStorage = new SessionTokenStorage($this->session, 'foo');
|
|
$this->csrfTokenStorage->setToken('foo', 'bar');
|
|
$this->csrfTokenStorage->setToken('foobar', 'baz');
|
|
$this->csrfTokenClearingLogoutHandler = new CsrfTokenClearingLogoutHandler($this->csrfTokenStorage);
|
|
}
|
|
|
|
public function testCsrfTokenCookieWithSameNamespaceIsRemoved()
|
|
{
|
|
$this->assertSame('bar', $this->session->get('foo/foo'));
|
|
$this->assertSame('baz', $this->session->get('foo/foobar'));
|
|
|
|
$this->csrfTokenClearingLogoutHandler->logout(new Request(), new Response(), $this->getMockBuilder('Symfony\Component\Security\Core\Authentication\Token\TokenInterface')->getMock());
|
|
|
|
$this->assertFalse($this->csrfTokenStorage->hasToken('foo'));
|
|
$this->assertFalse($this->csrfTokenStorage->hasToken('foobar'));
|
|
|
|
$this->assertFalse($this->session->has('foo/foo'));
|
|
$this->assertFalse($this->session->has('foo/foobar'));
|
|
}
|
|
|
|
public function testCsrfTokenCookieWithDifferentNamespaceIsNotRemoved()
|
|
{
|
|
$barNamespaceCsrfSessionStorage = new SessionTokenStorage($this->session, 'bar');
|
|
$barNamespaceCsrfSessionStorage->setToken('foo', 'bar');
|
|
$barNamespaceCsrfSessionStorage->setToken('foobar', 'baz');
|
|
|
|
$this->assertSame('bar', $this->session->get('foo/foo'));
|
|
$this->assertSame('baz', $this->session->get('foo/foobar'));
|
|
$this->assertSame('bar', $this->session->get('bar/foo'));
|
|
$this->assertSame('baz', $this->session->get('bar/foobar'));
|
|
|
|
$this->csrfTokenClearingLogoutHandler->logout(new Request(), new Response(), $this->getMockBuilder('Symfony\Component\Security\Core\Authentication\Token\TokenInterface')->getMock());
|
|
|
|
$this->assertTrue($barNamespaceCsrfSessionStorage->hasToken('foo'));
|
|
$this->assertTrue($barNamespaceCsrfSessionStorage->hasToken('foobar'));
|
|
$this->assertSame('bar', $barNamespaceCsrfSessionStorage->getToken('foo'));
|
|
$this->assertSame('baz', $barNamespaceCsrfSessionStorage->getToken('foobar'));
|
|
$this->assertFalse($this->csrfTokenStorage->hasToken('foo'));
|
|
$this->assertFalse($this->csrfTokenStorage->hasToken('foobar'));
|
|
|
|
$this->assertFalse($this->session->has('foo/foo'));
|
|
$this->assertFalse($this->session->has('foo/foobar'));
|
|
$this->assertSame('bar', $this->session->get('bar/foo'));
|
|
$this->assertSame('baz', $this->session->get('bar/foobar'));
|
|
}
|
|
}
|