Tests\Eole\RestApi\OAuthTest

Complexity

Total Complexity

4

Size/Duplication

Total Lines	82
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	2

Importance

Changes

0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	testCreateAccessToken()	0	19	1
A	testCreateAccessTokenForbiddenIfPasswordWrong()	0	14	1
B	testRefreshToken()	0	30	1
A	testRefreshTokenReturnsClientErrorOnInvalidRefreshToken()	0	13	1

<?php

namespace Tests\Eole\RestApi;

use Tests\Eole\RestApi\AbstractApplicationTest;

class OAuthTest extends AbstractApplicationTest
{
    public function testCreateAccessToken()
    {
        $client = $this->createClient();

        $client->request('POST', '/oauth/access-token', array(
            'grant_type' => 'password',
            'client_id' => 'client-id',
            'client_secret' => 'client-secret',
            'username' => 'existing-player',
            'password' => 'good-password',
        ));

        $this->assertTrue($client->getResponse()->isSuccessful());

        $result = json_decode($client->getResponse()->getContent());

        $this->assertObjectHasAttribute('access_token', $result);
        $this->assertNotEmpty($result->access_token);
    }

    public function testCreateAccessTokenForbiddenIfPasswordWrong()
    {
        $client = $this->createClient();

        $client->request('POST', '/oauth/access-token', array(
            'grant_type' => 'password',
            'client_id' => 'client-id',
            'client_secret' => 'client-secret',
            'username' => 'existing-player',
            'password' => 'wrong-password',
        ));

        $this->assertEquals(401, $client->getResponse()->getStatusCode());
    }

    public function testRefreshToken()
    {
        $client = $this->createClient();

        $client->request('POST', '/oauth/access-token', array(
            'grant_type' => 'password',
            'client_id' => 'client-id',
            'client_secret' => 'client-secret',
            'username' => 'existing-player',
            'password' => 'good-password',
        ));

        $accessToken = json_decode($client->getResponse()->getContent());

        $client->request('POST', '/oauth/access-token', array(
            'grant_type' => 'refresh_token',
            'client_id' => 'client-id',
            'client_secret' => 'client-secret',
            'refresh_token' => $accessToken->refresh_token,
        ));

        $this->assertTrue($client->getResponse()->isSuccessful());

        $freshAccessToken = json_decode($client->getResponse()->getContent());

        $this->assertObjectHasAttribute('access_token', $freshAccessToken);
        $this->assertNotEmpty($freshAccessToken->access_token);
        $this->assertObjectHasAttribute('refresh_token', $freshAccessToken);
        $this->assertNotEmpty($freshAccessToken->refresh_token);
    }

    public function testRefreshTokenReturnsClientErrorOnInvalidRefreshToken()
    {
        $client = $this->createClient();

        $client->request('POST', '/oauth/access-token', array(
            'grant_type' => 'refresh_token',
            'client_id' => 'client-id',
            'client_secret' => 'client-secret',
            'refresh_token' => 'invalidrefreshtoken',
        ));

        $this->assertTrue($client->getResponse()->isClientError());
    }
}