Firesphere / silverstripe-bootstrapmfa

tests/mock/MockAuthenticator.php

<?php

namespace Firesphere\BootstrapMFA\Tests\Mocks;

use Firesphere\BootstrapMFA\Authenticators\BootstrapMFAAuthenticator;
use Firesphere\BootstrapMFA\Forms\BootstrapMFALoginForm;
use Firesphere\BootstrapMFA\Handlers\BootstrapMFALoginHandler;
use Firesphere\BootstrapMFA\Interfaces\MFAAuthenticator;
use SilverStripe\Control\HTTPRequest;
use SilverStripe\Dev\TestOnly;
use SilverStripe\Forms\FieldList;
use SilverStripe\Forms\FormAction;
use SilverStripe\Forms\TextField;
use SilverStripe\ORM\ValidationResult;
use SilverStripe\Security\Member;

class MockAuthenticator extends BootstrapMFAAuthenticator implements TestOnly, MFAAuthenticator
{

    /**
     * Get the MFA form
     *
     * @param BootstrapMFALoginHandler $controller
     * @param string $name
     * @return BootstrapMFALoginForm
     */
    public function getMFAForm($controller, $name)
    {
        $fields = FieldList::create([
            TextField::create('token', 'Token')
        ]);
        $actions = FieldList::create([
            FormAction::create('verifyMFA', 'Verify')
        ]);

        $form = BootstrapMFALoginForm::create($controller, $name, $fields, $actions);
        $form->setAuthenticatorClass(self::class);

        return $form;
    }

    /**
     * Verify the MFA code. Or just fake it
     *
     * @param array $data
     * @param HTTPRequest $request
     * @param string $token
     * @param ValidationResult $result
     * @return mixed
     */
    public function verifyMFA($data, $request, $token, $result)
    {
        if (!$result) {

$result is of type SilverStripe\ORM\ValidationResult, thus it always evaluated to true.

            $result = ValidationResult::create();
        }

        if ($token === 'success') {
            $id = $request->getSession()->get(BootstrapMFAAuthenticator::SESSION_KEY . '.MemberID');

            return Member::get()->byID($id);
        }

        $result->addError('This is not correct');

        return false;
    }

    public function getTokenField()
    {
        return 'token';
    }
}