1
|
|
|
<?php |
2
|
|
|
|
3
|
|
|
use Mockery as m; |
4
|
|
|
|
5
|
|
|
class GuardTest extends PHPUnit_Framework_TestCase |
6
|
|
|
{ |
7
|
|
|
public function testSetRequest() |
8
|
|
|
{ |
9
|
|
|
$provider = m::mock(Illuminate\Contracts\Auth\UserProvider::class); |
10
|
|
|
$blacklist = m::mock(Framgia\Jwt\Blacklist::class); |
11
|
|
|
$signer = m::mock(Framgia\Jwt\Contracts\Signer::class); |
12
|
|
|
|
13
|
|
|
$firstRequest = Illuminate\Http\Request::create('/'); |
14
|
|
|
|
15
|
|
|
$guard = new Framgia\Jwt\Guard($provider, $firstRequest, $blacklist, $signer); |
|
|
|
|
16
|
|
|
|
17
|
|
|
$reflection = new ReflectionClass($guard); |
18
|
|
|
$property = $reflection->getProperty('request'); |
19
|
|
|
$property->setAccessible(true); |
20
|
|
|
|
21
|
|
|
$this->assertEquals($firstRequest, $property->getValue($guard)); |
22
|
|
|
|
23
|
|
|
$newRequest = Illuminate\Http\Request::create('/foo'); |
24
|
|
|
|
25
|
|
|
$guard->setRequest($newRequest); |
|
|
|
|
26
|
|
|
|
27
|
|
|
$this->assertEquals($newRequest, $property->getValue($guard)); |
28
|
|
|
} |
29
|
|
|
|
30
|
|
|
public function testUserWithRawToken() |
31
|
|
|
{ |
32
|
|
|
$user = m::mock(\Illuminate\Contracts\Auth\Authenticatable::class); |
33
|
|
|
|
34
|
|
|
$provider = m::mock(Illuminate\Contracts\Auth\UserProvider::class); |
35
|
|
|
$provider->shouldReceive('retrieveById')->once()->andReturn($user); |
36
|
|
|
|
37
|
|
|
$blacklist = m::mock(Framgia\Jwt\Blacklist::class); |
38
|
|
|
$signer = m::mock(Framgia\Jwt\Contracts\Signer::class); |
39
|
|
|
|
40
|
|
|
$request = Illuminate\Http\Request::create('/'); |
41
|
|
|
|
42
|
|
|
$token = (new \Lcobucci\JWT\Builder())->setSubject(1)->setExpiration(time() + 3600)->getToken(); |
43
|
|
|
|
44
|
|
|
$signer->shouldReceive('verify')->once()->andReturn(true); |
45
|
|
|
|
46
|
|
|
$request->headers->set('Authorization', 'Bearer '.$token); |
47
|
|
|
|
48
|
|
|
$guard = new Framgia\Jwt\Guard($provider, $request, $blacklist, $signer); |
|
|
|
|
49
|
|
|
|
50
|
|
|
$this->assertEquals($user, $guard->user()); |
51
|
|
|
} |
52
|
|
|
|
53
|
|
|
public function testUserWithSignedToken() |
54
|
|
|
{ |
55
|
|
|
$user = m::mock(\Illuminate\Contracts\Auth\Authenticatable::class); |
56
|
|
|
|
57
|
|
|
$signer = new Framgia\Jwt\Signers\Hmac('test'); |
58
|
|
|
|
59
|
|
|
$provider = m::mock(Illuminate\Contracts\Auth\UserProvider::class); |
60
|
|
|
$provider->shouldReceive('retrieveById')->once()->andReturn($user); |
61
|
|
|
|
62
|
|
|
$blacklist = m::mock(Framgia\Jwt\Blacklist::class); |
63
|
|
|
|
64
|
|
|
$request = Illuminate\Http\Request::create('/'); |
65
|
|
|
|
66
|
|
|
$token = $signer->sign((new \Lcobucci\JWT\Builder())->setSubject(1)->setExpiration(time() + 3600))->getToken(); |
67
|
|
|
|
68
|
|
|
$request->headers->set('Authorization', 'Bearer '.$token); |
69
|
|
|
|
70
|
|
|
$guard = new Framgia\Jwt\Guard($provider, $request, $blacklist, $signer); |
|
|
|
|
71
|
|
|
|
72
|
|
|
$this->assertEquals($user, $guard->user()); |
73
|
|
|
|
74
|
|
|
// Additional check to test if user provider is called once |
75
|
|
|
$this->assertEquals($user, $guard->user()); |
76
|
|
|
} |
77
|
|
|
|
78
|
|
View Code Duplication |
public function testValidate() |
|
|
|
|
79
|
|
|
{ |
80
|
|
|
$credentials = ['foo' => 'bar']; |
81
|
|
|
|
82
|
|
|
$user = m::mock(\Illuminate\Contracts\Auth\Authenticatable::class); |
83
|
|
|
$provider = m::mock(Illuminate\Contracts\Auth\UserProvider::class); |
84
|
|
|
$provider->shouldReceive('retrieveByCredentials')->once()->with($credentials)->andReturn($user); |
85
|
|
|
$provider->shouldReceive('validateCredentials')->once()->with($user, $credentials)->andReturn(true); |
86
|
|
|
|
87
|
|
|
$blacklist = m::mock(Framgia\Jwt\Blacklist::class); |
88
|
|
|
$signer = m::mock(Framgia\Jwt\Contracts\Signer::class); |
89
|
|
|
|
90
|
|
|
$request = Illuminate\Http\Request::create('/'); |
91
|
|
|
|
92
|
|
|
$guard = new Framgia\Jwt\Guard($provider, $request, $blacklist, $signer); |
|
|
|
|
93
|
|
|
|
94
|
|
|
$this->assertTrue($guard->validate($credentials)); |
95
|
|
|
} |
96
|
|
|
|
97
|
|
|
public function testValidateFailsWithFakeCredentials() |
98
|
|
|
{ |
99
|
|
|
$credentials = ['foo' => 'bar']; |
100
|
|
|
|
101
|
|
|
$provider = m::mock(Illuminate\Contracts\Auth\UserProvider::class); |
102
|
|
|
$provider->shouldReceive('retrieveByCredentials')->once()->with($credentials)->andReturnNull(); |
|
|
|
|
103
|
|
|
|
104
|
|
|
$blacklist = m::mock(Framgia\Jwt\Blacklist::class); |
105
|
|
|
$signer = m::mock(Framgia\Jwt\Contracts\Signer::class); |
106
|
|
|
|
107
|
|
|
$request = Illuminate\Http\Request::create('/'); |
108
|
|
|
|
109
|
|
|
$guard = new Framgia\Jwt\Guard($provider, $request, $blacklist, $signer); |
|
|
|
|
110
|
|
|
|
111
|
|
|
$this->assertFalse($guard->validate($credentials)); |
112
|
|
|
} |
113
|
|
|
|
114
|
|
View Code Duplication |
public function testAttempt() |
|
|
|
|
115
|
|
|
{ |
116
|
|
|
$credentials = ['foo' => 'bar']; |
117
|
|
|
|
118
|
|
|
$user = m::mock(\Illuminate\Contracts\Auth\Authenticatable::class); |
119
|
|
|
$provider = m::mock(Illuminate\Contracts\Auth\UserProvider::class); |
120
|
|
|
$provider->shouldReceive('retrieveByCredentials')->once()->with($credentials)->andReturn($user); |
121
|
|
|
$provider->shouldReceive('validateCredentials')->once()->with($user, $credentials)->andReturn(true); |
122
|
|
|
|
123
|
|
|
$blacklist = m::mock(Framgia\Jwt\Blacklist::class); |
124
|
|
|
$signer = m::mock(Framgia\Jwt\Contracts\Signer::class); |
125
|
|
|
|
126
|
|
|
$request = Illuminate\Http\Request::create('/'); |
127
|
|
|
|
128
|
|
|
$guard = new Framgia\Jwt\Guard($provider, $request, $blacklist, $signer); |
|
|
|
|
129
|
|
|
|
130
|
|
|
$this->assertTrue($guard->validate($credentials)); |
131
|
|
|
} |
132
|
|
|
|
133
|
|
|
public function testUserReturnsNullWithoutToken() |
134
|
|
|
{ |
135
|
|
|
$signer = m::mock(Framgia\Jwt\Signers\Hmac::class); |
136
|
|
|
|
137
|
|
|
$provider = m::mock(Illuminate\Contracts\Auth\UserProvider::class); |
138
|
|
|
$provider->shouldNotReceive('retrieveById'); |
|
|
|
|
139
|
|
|
|
140
|
|
|
$blacklist = m::mock(Framgia\Jwt\Blacklist::class); |
141
|
|
|
|
142
|
|
|
$request = Illuminate\Http\Request::create('/'); |
143
|
|
|
|
144
|
|
|
$guard = new Framgia\Jwt\Guard($provider, $request, $blacklist, $signer); |
|
|
|
|
145
|
|
|
|
146
|
|
|
$this->assertNull($guard->user()); |
147
|
|
|
} |
148
|
|
|
|
149
|
|
|
public function testUserReturnsNullWithInvalidToken() |
150
|
|
|
{ |
151
|
|
|
$credentials = ['foo' => 'bar']; |
|
|
|
|
152
|
|
|
|
153
|
|
|
$provider = m::mock(Illuminate\Contracts\Auth\UserProvider::class); |
154
|
|
|
$provider->shouldNotReceive('retrieveById'); |
|
|
|
|
155
|
|
|
|
156
|
|
|
$blacklist = m::mock(Framgia\Jwt\Blacklist::class); |
157
|
|
|
$signer = m::mock(Framgia\Jwt\Contracts\Signer::class); |
158
|
|
|
|
159
|
|
|
$request = Illuminate\Http\Request::create('/'); |
160
|
|
|
|
161
|
|
|
$request->headers->set('Authorization', 'Bearer BAD_TOKEN'); |
162
|
|
|
|
163
|
|
|
$guard = new Framgia\Jwt\Guard($provider, $request, $blacklist, $signer); |
|
|
|
|
164
|
|
|
|
165
|
|
|
$this->assertNull($guard->user()); |
166
|
|
|
} |
167
|
|
|
|
168
|
|
|
public function testAttemptReturnsToken() |
169
|
|
|
{ |
170
|
|
|
$credentials = ['foo' => 'bar']; |
171
|
|
|
|
172
|
|
|
$user = m::mock(\Illuminate\Contracts\Auth\Authenticatable::class); |
173
|
|
|
$user->shouldReceive('getAuthIdentifier')->once()->andReturn(1); |
174
|
|
|
|
175
|
|
|
$provider = m::mock(Illuminate\Contracts\Auth\UserProvider::class); |
176
|
|
|
$provider->shouldReceive('retrieveByCredentials')->once()->with($credentials)->andReturn($user); |
177
|
|
|
$provider->shouldReceive('validateCredentials')->once()->with($user, $credentials)->andReturn(true); |
178
|
|
|
|
179
|
|
|
$blacklist = m::mock(Framgia\Jwt\Blacklist::class); |
180
|
|
|
$signer = new Framgia\Jwt\Signers\Hmac('test'); |
181
|
|
|
|
182
|
|
|
$request = Illuminate\Http\Request::create('/'); |
183
|
|
|
|
184
|
|
|
$guard = new Framgia\Jwt\Guard($provider, $request, $blacklist, $signer); |
|
|
|
|
185
|
|
|
|
186
|
|
|
/** |
187
|
|
|
* @var \Lcobucci\JWT\Token |
188
|
|
|
*/ |
189
|
|
|
$token = $guard->attempt($credentials); |
190
|
|
|
|
191
|
|
|
$this->assertInstanceOf(\Lcobucci\JWT\Token::class, $token); |
192
|
|
|
$this->assertEquals(1, $token->getClaim('sub')); |
193
|
|
|
$this->assertLessThan($token->getClaim('exp'), time()); |
194
|
|
|
$this->assertNotNull($token->getClaim('jti')); |
195
|
|
|
|
196
|
|
|
$this->assertTrue($guard->validate($credentials)); |
197
|
|
|
} |
198
|
|
|
|
199
|
|
|
public function testAttemptWithAdditionalCredentials() |
200
|
|
|
{ |
201
|
|
|
$credentials = ['foo' => 'bar']; |
202
|
|
|
|
203
|
|
|
$user = m::mock(UserWithCredentials::class); |
204
|
|
|
$user->shouldReceive('getAuthIdentifier')->once()->andReturn(1); |
205
|
|
|
$user->shouldReceive('getCredentials')->once()->andReturn([ |
206
|
|
|
'admin' => true, |
207
|
|
|
'foo' => 'bar', |
208
|
|
|
]); |
209
|
|
|
|
210
|
|
|
$provider = m::mock(Illuminate\Contracts\Auth\UserProvider::class); |
211
|
|
|
$provider->shouldReceive('retrieveByCredentials')->once()->with($credentials)->andReturn($user); |
212
|
|
|
$provider->shouldReceive('validateCredentials')->once()->with($user, $credentials)->andReturn(true); |
213
|
|
|
|
214
|
|
|
$blacklist = m::mock(Framgia\Jwt\Blacklist::class); |
215
|
|
|
$signer = new Framgia\Jwt\Signers\Hmac('test'); |
216
|
|
|
|
217
|
|
|
$request = Illuminate\Http\Request::create('/'); |
218
|
|
|
|
219
|
|
|
$guard = new Framgia\Jwt\Guard($provider, $request, $blacklist, $signer); |
|
|
|
|
220
|
|
|
|
221
|
|
|
$token = $guard->attempt($credentials); |
222
|
|
|
|
223
|
|
|
$this->assertInstanceOf(\Lcobucci\JWT\Token::class, $token); |
224
|
|
|
$this->assertEquals(true, $token->getClaim('admin')); |
225
|
|
|
$this->assertEquals('bar', $token->getClaim('foo')); |
226
|
|
|
|
227
|
|
|
$this->assertTrue($guard->validate($credentials)); |
228
|
|
|
} |
229
|
|
|
|
230
|
|
|
public function testAttemptNullWithInvalidCredentials() |
231
|
|
|
{ |
232
|
|
|
$credentials = ['foo' => 'bar']; |
233
|
|
|
|
234
|
|
|
$provider = m::mock(Illuminate\Contracts\Auth\UserProvider::class); |
235
|
|
|
$provider->shouldReceive('retrieveByCredentials')->once()->with($credentials)->andReturn(null); |
236
|
|
|
|
237
|
|
|
$blacklist = m::mock(Framgia\Jwt\Blacklist::class); |
238
|
|
|
$signer = new Framgia\Jwt\Signers\Hmac('test'); |
239
|
|
|
|
240
|
|
|
$request = Illuminate\Http\Request::create('/'); |
241
|
|
|
|
242
|
|
|
$guard = new Framgia\Jwt\Guard($provider, $request, $blacklist, $signer); |
|
|
|
|
243
|
|
|
|
244
|
|
|
$this->assertNull($guard->attempt($credentials)); |
245
|
|
|
} |
246
|
|
|
|
247
|
|
|
public function testLogout() |
248
|
|
|
{ |
249
|
|
|
$provider = m::mock(Illuminate\Contracts\Auth\UserProvider::class); |
250
|
|
|
|
251
|
|
|
$blacklist = m::mock(Framgia\Jwt\Blacklist::class); |
252
|
|
|
$token = (new \Lcobucci\JWT\Builder())->setId('foo')->setSubject(1)->setExpiration(time() + 3600)->getToken(); |
253
|
|
|
$blacklist->shouldReceive('add')->once()->andReturn(true); |
254
|
|
|
|
255
|
|
|
$signer = m::mock(Framgia\Jwt\Contracts\Signer::class); |
256
|
|
|
|
257
|
|
|
$request = Illuminate\Http\Request::create('/'); |
258
|
|
|
$signer->shouldReceive('verify')->once()->andReturn(true); |
259
|
|
|
|
260
|
|
|
$request->headers->set('Authorization', 'Bearer '.$token); |
261
|
|
|
|
262
|
|
|
$guard = new Framgia\Jwt\Guard($provider, $request, $blacklist, $signer); |
|
|
|
|
263
|
|
|
|
264
|
|
|
$this->assertTrue($guard->logout()); |
265
|
|
|
} |
266
|
|
|
|
267
|
|
View Code Duplication |
public function testLogoutWithoutToken() |
|
|
|
|
268
|
|
|
{ |
269
|
|
|
$provider = m::mock(Illuminate\Contracts\Auth\UserProvider::class); |
270
|
|
|
|
271
|
|
|
$blacklist = m::mock(Framgia\Jwt\Blacklist::class); |
272
|
|
|
$blacklist->shouldNotReceive('add'); |
|
|
|
|
273
|
|
|
|
274
|
|
|
$signer = m::mock(Framgia\Jwt\Contracts\Signer::class); |
275
|
|
|
|
276
|
|
|
$request = Illuminate\Http\Request::create('/'); |
277
|
|
|
$signer->shouldReceive('verify')->once()->andReturn(true); |
278
|
|
|
|
279
|
|
|
$guard = new Framgia\Jwt\Guard($provider, $request, $blacklist, $signer); |
|
|
|
|
280
|
|
|
|
281
|
|
|
$this->assertTrue($guard->logout()); |
282
|
|
|
} |
283
|
|
|
|
284
|
|
View Code Duplication |
public function testLogoutWithInvalidToken() |
|
|
|
|
285
|
|
|
{ |
286
|
|
|
$provider = m::mock(Illuminate\Contracts\Auth\UserProvider::class); |
287
|
|
|
|
288
|
|
|
$blacklist = m::mock(Framgia\Jwt\Blacklist::class); |
289
|
|
|
$blacklist->shouldNotReceive('add'); |
|
|
|
|
290
|
|
|
|
291
|
|
|
$signer = m::mock(Framgia\Jwt\Contracts\Signer::class); |
292
|
|
|
|
293
|
|
|
$request = Illuminate\Http\Request::create('/'); |
294
|
|
|
$request->headers->set('Authorization', 'Bearer BAD_TOKEN'); |
295
|
|
|
$signer->shouldReceive('verify')->once()->andReturn(true); |
296
|
|
|
|
297
|
|
|
$guard = new Framgia\Jwt\Guard($provider, $request, $blacklist, $signer); |
|
|
|
|
298
|
|
|
|
299
|
|
|
$this->assertFalse($guard->logout()); |
300
|
|
|
} |
301
|
|
|
} |
302
|
|
|
|
303
|
|
|
abstract class UserWithCredentials implements \Illuminate\Contracts\Auth\Authenticatable, \Framgia\Jwt\Contracts\ProvidesCredentials {} |
304
|
|
|
|
This check looks for parameters that are defined as one type in their type hint or doc comment but seem to be used as a narrower type, i.e an implementation of an interface or a subclass.
Consider changing the type of the parameter or doing an instanceof check before assuming your parameter is of the expected type.