314 lines
11 KiB
PHP
314 lines
11 KiB
PHP
<?php
|
|
|
|
/*
|
|
* This file is part of the Symfony package.
|
|
*
|
|
* (c) Fabien Potencier <fabien@symfony.com>
|
|
*
|
|
* For the full copyright and license information, please view the LICENSE
|
|
* file that was distributed with this source code.
|
|
*/
|
|
|
|
namespace Symfony\Component\Security\Http\Tests\RememberMe;
|
|
|
|
use PHPUnit\Framework\TestCase;
|
|
use Symfony\Component\Security\Http\RememberMe\RememberMeServicesInterface;
|
|
use Symfony\Component\HttpFoundation\Request;
|
|
use Symfony\Component\HttpFoundation\Response;
|
|
use Symfony\Component\Security\Http\RememberMe\AbstractRememberMeServices;
|
|
|
|
class AbstractRememberMeServicesTest extends TestCase
|
|
{
|
|
public function testGetRememberMeParameter()
|
|
{
|
|
$service = $this->getService(null, array('remember_me_parameter' => 'foo'));
|
|
|
|
$this->assertEquals('foo', $service->getRememberMeParameter());
|
|
}
|
|
|
|
public function testGetSecret()
|
|
{
|
|
$service = $this->getService();
|
|
$this->assertEquals('foosecret', $service->getSecret());
|
|
}
|
|
|
|
public function testAutoLoginReturnsNullWhenNoCookie()
|
|
{
|
|
$service = $this->getService(null, array('name' => 'foo', 'path' => null, 'domain' => null));
|
|
|
|
$this->assertNull($service->autoLogin(new Request()));
|
|
}
|
|
|
|
/**
|
|
* @expectedException \RuntimeException
|
|
*/
|
|
public function testAutoLoginThrowsExceptionWhenImplementationDoesNotReturnUserInterface()
|
|
{
|
|
$service = $this->getService(null, array('name' => 'foo', 'path' => null, 'domain' => null));
|
|
$request = new Request();
|
|
$request->cookies->set('foo', 'foo');
|
|
|
|
$service
|
|
->expects($this->once())
|
|
->method('processAutoLoginCookie')
|
|
->will($this->returnValue(null))
|
|
;
|
|
|
|
$service->autoLogin($request);
|
|
}
|
|
|
|
public function testAutoLogin()
|
|
{
|
|
$service = $this->getService(null, array('name' => 'foo', 'path' => null, 'domain' => null));
|
|
$request = new Request();
|
|
$request->cookies->set('foo', 'foo');
|
|
|
|
$user = $this->getMockBuilder('Symfony\Component\Security\Core\User\UserInterface')->getMock();
|
|
$user
|
|
->expects($this->once())
|
|
->method('getRoles')
|
|
->will($this->returnValue(array()))
|
|
;
|
|
|
|
$service
|
|
->expects($this->once())
|
|
->method('processAutoLoginCookie')
|
|
->will($this->returnValue($user))
|
|
;
|
|
|
|
$returnedToken = $service->autoLogin($request);
|
|
|
|
$this->assertSame($user, $returnedToken->getUser());
|
|
$this->assertSame('foosecret', $returnedToken->getSecret());
|
|
$this->assertSame('fookey', $returnedToken->getProviderKey());
|
|
}
|
|
|
|
/**
|
|
* @dataProvider provideOptionsForLogout
|
|
*/
|
|
public function testLogout(array $options)
|
|
{
|
|
$service = $this->getService(null, $options);
|
|
$request = new Request();
|
|
$response = new Response();
|
|
$token = $this->getMockBuilder('Symfony\Component\Security\Core\Authentication\Token\TokenInterface')->getMock();
|
|
$service->logout($request, $response, $token);
|
|
$cookie = $request->attributes->get(RememberMeServicesInterface::COOKIE_ATTR_NAME);
|
|
$this->assertInstanceOf('Symfony\Component\HttpFoundation\Cookie', $cookie);
|
|
$this->assertTrue($cookie->isCleared());
|
|
$this->assertSame($options['name'], $cookie->getName());
|
|
$this->assertSame($options['path'], $cookie->getPath());
|
|
$this->assertSame($options['domain'], $cookie->getDomain());
|
|
$this->assertSame($options['secure'], $cookie->isSecure());
|
|
$this->assertSame($options['httponly'], $cookie->isHttpOnly());
|
|
}
|
|
|
|
public function provideOptionsForLogout()
|
|
{
|
|
return array(
|
|
array(array('name' => 'foo', 'path' => '/', 'domain' => null, 'secure' => false, 'httponly' => true)),
|
|
array(array('name' => 'foo', 'path' => '/bar', 'domain' => 'baz.com', 'secure' => true, 'httponly' => false)),
|
|
);
|
|
}
|
|
|
|
public function testLoginFail()
|
|
{
|
|
$service = $this->getService(null, array('name' => 'foo', 'path' => null, 'domain' => null));
|
|
$request = new Request();
|
|
|
|
$service->loginFail($request);
|
|
|
|
$this->assertTrue($request->attributes->get(RememberMeServicesInterface::COOKIE_ATTR_NAME)->isCleared());
|
|
}
|
|
|
|
public function testLoginSuccessIsNotProcessedWhenTokenDoesNotContainUserInterfaceImplementation()
|
|
{
|
|
$service = $this->getService(null, array('name' => 'foo', 'always_remember_me' => true, 'path' => null, 'domain' => null));
|
|
$request = new Request();
|
|
$response = new Response();
|
|
$account = $this->getMockBuilder('Symfony\Component\Security\Core\User\UserInterface')->getMock();
|
|
$token = $this->getMockBuilder('Symfony\Component\Security\Core\Authentication\Token\TokenInterface')->getMock();
|
|
$token
|
|
->expects($this->once())
|
|
->method('getUser')
|
|
->will($this->returnValue('foo'))
|
|
;
|
|
|
|
$service
|
|
->expects($this->never())
|
|
->method('onLoginSuccess')
|
|
;
|
|
|
|
$this->assertFalse($request->request->has('foo'));
|
|
|
|
$service->loginSuccess($request, $response, $token);
|
|
}
|
|
|
|
public function testLoginSuccessIsNotProcessedWhenRememberMeIsNotRequested()
|
|
{
|
|
$service = $this->getService(null, array('name' => 'foo', 'always_remember_me' => false, 'remember_me_parameter' => 'foo', 'path' => null, 'domain' => null));
|
|
$request = new Request();
|
|
$response = new Response();
|
|
$account = $this->getMockBuilder('Symfony\Component\Security\Core\User\UserInterface')->getMock();
|
|
$token = $this->getMockBuilder('Symfony\Component\Security\Core\Authentication\Token\TokenInterface')->getMock();
|
|
$token
|
|
->expects($this->once())
|
|
->method('getUser')
|
|
->will($this->returnValue($account))
|
|
;
|
|
|
|
$service
|
|
->expects($this->never())
|
|
->method('onLoginSuccess')
|
|
->will($this->returnValue(null))
|
|
;
|
|
|
|
$this->assertFalse($request->request->has('foo'));
|
|
|
|
$service->loginSuccess($request, $response, $token);
|
|
}
|
|
|
|
public function testLoginSuccessWhenRememberMeAlwaysIsTrue()
|
|
{
|
|
$service = $this->getService(null, array('name' => 'foo', 'always_remember_me' => true, 'path' => null, 'domain' => null));
|
|
$request = new Request();
|
|
$response = new Response();
|
|
$account = $this->getMockBuilder('Symfony\Component\Security\Core\User\UserInterface')->getMock();
|
|
$token = $this->getMockBuilder('Symfony\Component\Security\Core\Authentication\Token\TokenInterface')->getMock();
|
|
$token
|
|
->expects($this->once())
|
|
->method('getUser')
|
|
->will($this->returnValue($account))
|
|
;
|
|
|
|
$service
|
|
->expects($this->once())
|
|
->method('onLoginSuccess')
|
|
->will($this->returnValue(null))
|
|
;
|
|
|
|
$service->loginSuccess($request, $response, $token);
|
|
}
|
|
|
|
/**
|
|
* @dataProvider getPositiveRememberMeParameterValues
|
|
*/
|
|
public function testLoginSuccessWhenRememberMeParameterWithPathIsPositive($value)
|
|
{
|
|
$service = $this->getService(null, array('name' => 'foo', 'always_remember_me' => false, 'remember_me_parameter' => 'foo[bar]', 'path' => null, 'domain' => null));
|
|
|
|
$request = new Request();
|
|
$request->request->set('foo', array('bar' => $value));
|
|
$response = new Response();
|
|
$account = $this->getMockBuilder('Symfony\Component\Security\Core\User\UserInterface')->getMock();
|
|
$token = $this->getMockBuilder('Symfony\Component\Security\Core\Authentication\Token\TokenInterface')->getMock();
|
|
$token
|
|
->expects($this->once())
|
|
->method('getUser')
|
|
->will($this->returnValue($account))
|
|
;
|
|
|
|
$service
|
|
->expects($this->once())
|
|
->method('onLoginSuccess')
|
|
->will($this->returnValue(true))
|
|
;
|
|
|
|
$service->loginSuccess($request, $response, $token);
|
|
}
|
|
|
|
/**
|
|
* @dataProvider getPositiveRememberMeParameterValues
|
|
*/
|
|
public function testLoginSuccessWhenRememberMeParameterIsPositive($value)
|
|
{
|
|
$service = $this->getService(null, array('name' => 'foo', 'always_remember_me' => false, 'remember_me_parameter' => 'foo', 'path' => null, 'domain' => null));
|
|
|
|
$request = new Request();
|
|
$request->request->set('foo', $value);
|
|
$response = new Response();
|
|
$account = $this->getMockBuilder('Symfony\Component\Security\Core\User\UserInterface')->getMock();
|
|
$token = $this->getMockBuilder('Symfony\Component\Security\Core\Authentication\Token\TokenInterface')->getMock();
|
|
$token
|
|
->expects($this->once())
|
|
->method('getUser')
|
|
->will($this->returnValue($account))
|
|
;
|
|
|
|
$service
|
|
->expects($this->once())
|
|
->method('onLoginSuccess')
|
|
->will($this->returnValue(true))
|
|
;
|
|
|
|
$service->loginSuccess($request, $response, $token);
|
|
}
|
|
|
|
public function getPositiveRememberMeParameterValues()
|
|
{
|
|
return array(
|
|
array('true'),
|
|
array('1'),
|
|
array('on'),
|
|
array('yes'),
|
|
array(true),
|
|
);
|
|
}
|
|
|
|
public function testEncodeCookieAndDecodeCookieAreInvertible()
|
|
{
|
|
$cookieParts = array('aa', 'bb', 'cc');
|
|
$service = $this->getService();
|
|
|
|
$encoded = $this->callProtected($service, 'encodeCookie', array($cookieParts));
|
|
$this->assertInternalType('string', $encoded);
|
|
|
|
$decoded = $this->callProtected($service, 'decodeCookie', array($encoded));
|
|
$this->assertSame($cookieParts, $decoded);
|
|
}
|
|
|
|
/**
|
|
* @expectedException \InvalidArgumentException
|
|
* @expectedExceptionMessage cookie delimiter
|
|
*/
|
|
public function testThereShouldBeNoCookieDelimiterInCookieParts()
|
|
{
|
|
$cookieParts = array('aa', 'b'.AbstractRememberMeServices::COOKIE_DELIMITER.'b', 'cc');
|
|
$service = $this->getService();
|
|
|
|
$this->callProtected($service, 'encodeCookie', array($cookieParts));
|
|
}
|
|
|
|
protected function getService($userProvider = null, $options = array(), $logger = null)
|
|
{
|
|
if (null === $userProvider) {
|
|
$userProvider = $this->getProvider();
|
|
}
|
|
|
|
return $this->getMockForAbstractClass('Symfony\Component\Security\Http\RememberMe\AbstractRememberMeServices', array(
|
|
array($userProvider), 'foosecret', 'fookey', $options, $logger,
|
|
));
|
|
}
|
|
|
|
protected function getProvider()
|
|
{
|
|
$provider = $this->getMockBuilder('Symfony\Component\Security\Core\User\UserProviderInterface')->getMock();
|
|
$provider
|
|
->expects($this->any())
|
|
->method('supportsClass')
|
|
->will($this->returnValue(true))
|
|
;
|
|
|
|
return $provider;
|
|
}
|
|
|
|
private function callProtected($object, $method, array $args)
|
|
{
|
|
$reflection = new \ReflectionClass(get_class($object));
|
|
$reflectionMethod = $reflection->getMethod($method);
|
|
$reflectionMethod->setAccessible(true);
|
|
|
|
return $reflectionMethod->invokeArgs($object, $args);
|
|
}
|
|
}
|