OAuth2Framework\ServerBundle\Tests\Functional\Grant\AuthorizationCode\AuthorizationEndpointTest

Complexity

Total Complexity

6

Size/Duplication

Total Lines	96
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	10

Importance

Changes

0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	setUp()	0	6	2
B	theRequestIsValidButNoAccountIsSelected()	0	60	1
A	buildUri()	0	6	2
A	logIn()	0	15	1

<?php

declare(strict_types=1);

/*
 * The MIT License (MIT)
 *
 * Copyright (c) 2014-2018 Spomky-Labs
 *
 * This software may be modified and distributed under the terms
 * of the MIT license.  See the LICENSE file for details.
 */

namespace OAuth2Framework\ServerBundle\Tests\Functional\Grant\AuthorizationCode;

use OAuth2Framework\Component\AuthorizationCodeGrant\AuthorizationCodeGrantType;
use OAuth2Framework\Component\Core\UserAccount\UserAccountId;
use OAuth2Framework\ServerBundle\Tests\TestBundle\Entity\User;
use OAuth2Framework\ServerBundle\Tests\TestBundle\Entity\UserAccount;
use Symfony\Bundle\FrameworkBundle\Client;
use Symfony\Bundle\FrameworkBundle\Test\WebTestCase;
use Symfony\Component\BrowserKit\Cookie;
use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken;

/**
 * @group ServerBundle
 * @group Functional
 * @group Grant
 * @group AuthorizationCode
 */
class AuthorizationEndpointTest extends WebTestCase
{
    protected function setUp()
    {
        if (!\class_exists(AuthorizationCodeGrantType::class)) {
            static::markTestSkipped('The component "oauth2-framework/authorization-code-grant" is not installed.');
        }
    }

    /**
     * @test
     */
    public function theRequestIsValidButNoAccountIsSelected()
    {
        $uri = $this->buildUri([
            'client_id' => 'CLIENT_ID_2',
            'redirect_uri' => 'https://example.com/cb/?foo=bar',
            'response_type' => 'code',
        ]);
        $client = static::createClient();
        $this->logIn(
            $client,
            new User(
                'admin',
                ['ROLE_ADMIN', 'ROLE_USER'],
                ['john.1'],
                new \DateTimeImmutable('now -25 hours'),
                new \DateTimeImmutable('now -15 days')
            ),
            new UserAccount(
                new UserAccountId('john.1'),
                [
                    'address', [
                        'street_address' => '5 rue Sainte Anne',
                        'region' => 'Île de France',
                        'postal_code' => '75001',
                        'locality' => 'Paris',
                        'country' => 'France',
                    ],
                    'name' => 'John Doe',
                    'given_name' => 'John',
                    'family_name' => 'Doe',
                    'middle_name' => 'Jack',
                    'nickname' => 'Little John',
                    'profile' => 'https://profile.doe.fr/john/',
                    'preferred_username' => 'j-d',
                    'gender' => 'M',
                    'phone_number' => '+0123456789',
                    'phone_number_verified' => true,
                    'zoneinfo' => 'Europe/Paris',
                    'locale' => 'en',
                    'picture' => 'https://www.google.com',
                    'birthdate' => '1950-01-01',
                    'email' => 'root@localhost.com',
                    'email_verified' => false,
                    'website' => 'https://john.doe.com',
                    'website#fr_fr' => 'https://john.doe.fr',
                    'website#fr' => 'https://john.doe.fr',
                    'picture#de' => 'https://john.doe.de/picture',
                ]
            )
        );
        $client->request('GET', $uri, [], [], ['HTTPS' => 'on'], null);
        $response = $client->getResponse();

        static::assertEquals(303, $response->getStatusCode());
        static::assertTrue($response->headers->has('location'));

        $client->followRedirect();
        $response = $client->getResponse();
        dump($response->headers->get('location'));
    }

    private function buildUri(array $query): string
    {
        $query = http_build_query($query);

        return empty($query) ? '/authorize' : \Safe\sprintf('/authorize?%s', $query);
    }

    private function logIn(Client $client, User $user, ?UserAccount $userAccount): void
    {
        $session = $client->getContainer()->get('session');

        $firewallName = 'main';
        $firewallContext = 'main';

        $token = new UsernamePasswordToken($user, null, $firewallName, ['ROLE_ADMIN']);
        $session->set('_security_'.$firewallContext, serialize($token));
        $session->set('user_account', $userAccount);
        $session->save();

        $cookie = new Cookie($session->getName(), $session->getId());
        $client->getCookieJar()->set($cookie);
    }
}