@@ -17,87 +17,87 @@ |
||
| 17 | 17 | use Test\TestCase; |
| 18 | 18 | |
| 19 | 19 | class WipeControllerTest extends TestCase { |
| 20 | - /** @var RemoteWipe|MockObject */ |
|
| 21 | - private $remoteWipe; |
|
| 20 | + /** @var RemoteWipe|MockObject */ |
|
| 21 | + private $remoteWipe; |
|
| 22 | 22 | |
| 23 | - /** @var WipeController */ |
|
| 24 | - private $controller; |
|
| 23 | + /** @var WipeController */ |
|
| 24 | + private $controller; |
|
| 25 | 25 | |
| 26 | - protected function setUp(): void { |
|
| 27 | - parent::setUp(); |
|
| 26 | + protected function setUp(): void { |
|
| 27 | + parent::setUp(); |
|
| 28 | 28 | |
| 29 | - $this->remoteWipe = $this->createMock(RemoteWipe::class); |
|
| 30 | - $this->controller = new WipeController( |
|
| 31 | - 'core', |
|
| 32 | - $this->createMock(IRequest::class), |
|
| 33 | - $this->remoteWipe); |
|
| 34 | - } |
|
| 29 | + $this->remoteWipe = $this->createMock(RemoteWipe::class); |
|
| 30 | + $this->controller = new WipeController( |
|
| 31 | + 'core', |
|
| 32 | + $this->createMock(IRequest::class), |
|
| 33 | + $this->remoteWipe); |
|
| 34 | + } |
|
| 35 | 35 | |
| 36 | - public static function dataTest(): array { |
|
| 37 | - return [ |
|
| 38 | - // valid token, could perform operation, valid result |
|
| 39 | - [ true, true, true], |
|
| 40 | - [ true, false, false], |
|
| 41 | - [false, true, false], |
|
| 42 | - [false, false, false], |
|
| 43 | - ]; |
|
| 44 | - } |
|
| 36 | + public static function dataTest(): array { |
|
| 37 | + return [ |
|
| 38 | + // valid token, could perform operation, valid result |
|
| 39 | + [ true, true, true], |
|
| 40 | + [ true, false, false], |
|
| 41 | + [false, true, false], |
|
| 42 | + [false, false, false], |
|
| 43 | + ]; |
|
| 44 | + } |
|
| 45 | 45 | |
| 46 | - /** |
|
| 47 | - * @param bool $valid |
|
| 48 | - * @param bool $couldPerform |
|
| 49 | - * @param bool $result |
|
| 50 | - * |
|
| 51 | - * @dataProvider dataTest |
|
| 52 | - */ |
|
| 53 | - public function testCheckWipe(bool $valid, bool $couldPerform, bool $result): void { |
|
| 54 | - if (!$valid) { |
|
| 55 | - $this->remoteWipe->method('start') |
|
| 56 | - ->with('mytoken') |
|
| 57 | - ->willThrowException(new InvalidTokenException()); |
|
| 58 | - } else { |
|
| 59 | - $this->remoteWipe->method('start') |
|
| 60 | - ->with('mytoken') |
|
| 61 | - ->willReturn($couldPerform); |
|
| 62 | - } |
|
| 46 | + /** |
|
| 47 | + * @param bool $valid |
|
| 48 | + * @param bool $couldPerform |
|
| 49 | + * @param bool $result |
|
| 50 | + * |
|
| 51 | + * @dataProvider dataTest |
|
| 52 | + */ |
|
| 53 | + public function testCheckWipe(bool $valid, bool $couldPerform, bool $result): void { |
|
| 54 | + if (!$valid) { |
|
| 55 | + $this->remoteWipe->method('start') |
|
| 56 | + ->with('mytoken') |
|
| 57 | + ->willThrowException(new InvalidTokenException()); |
|
| 58 | + } else { |
|
| 59 | + $this->remoteWipe->method('start') |
|
| 60 | + ->with('mytoken') |
|
| 61 | + ->willReturn($couldPerform); |
|
| 62 | + } |
|
| 63 | 63 | |
| 64 | - $result = $this->controller->checkWipe('mytoken'); |
|
| 64 | + $result = $this->controller->checkWipe('mytoken'); |
|
| 65 | 65 | |
| 66 | - if (!$valid || !$couldPerform) { |
|
| 67 | - $this->assertSame(Http::STATUS_NOT_FOUND, $result->getStatus()); |
|
| 68 | - $this->assertSame([], $result->getData()); |
|
| 69 | - } else { |
|
| 70 | - $this->assertSame(Http::STATUS_OK, $result->getStatus()); |
|
| 71 | - $this->assertSame(['wipe' => true], $result->getData()); |
|
| 72 | - } |
|
| 73 | - } |
|
| 66 | + if (!$valid || !$couldPerform) { |
|
| 67 | + $this->assertSame(Http::STATUS_NOT_FOUND, $result->getStatus()); |
|
| 68 | + $this->assertSame([], $result->getData()); |
|
| 69 | + } else { |
|
| 70 | + $this->assertSame(Http::STATUS_OK, $result->getStatus()); |
|
| 71 | + $this->assertSame(['wipe' => true], $result->getData()); |
|
| 72 | + } |
|
| 73 | + } |
|
| 74 | 74 | |
| 75 | - /** |
|
| 76 | - * @param bool $valid |
|
| 77 | - * @param bool $couldPerform |
|
| 78 | - * @param bool $result |
|
| 79 | - * |
|
| 80 | - * @dataProvider dataTest |
|
| 81 | - */ |
|
| 82 | - public function testWipeDone(bool $valid, bool $couldPerform, bool $result): void { |
|
| 83 | - if (!$valid) { |
|
| 84 | - $this->remoteWipe->method('finish') |
|
| 85 | - ->with('mytoken') |
|
| 86 | - ->willThrowException(new InvalidTokenException()); |
|
| 87 | - } else { |
|
| 88 | - $this->remoteWipe->method('finish') |
|
| 89 | - ->with('mytoken') |
|
| 90 | - ->willReturn($couldPerform); |
|
| 91 | - } |
|
| 75 | + /** |
|
| 76 | + * @param bool $valid |
|
| 77 | + * @param bool $couldPerform |
|
| 78 | + * @param bool $result |
|
| 79 | + * |
|
| 80 | + * @dataProvider dataTest |
|
| 81 | + */ |
|
| 82 | + public function testWipeDone(bool $valid, bool $couldPerform, bool $result): void { |
|
| 83 | + if (!$valid) { |
|
| 84 | + $this->remoteWipe->method('finish') |
|
| 85 | + ->with('mytoken') |
|
| 86 | + ->willThrowException(new InvalidTokenException()); |
|
| 87 | + } else { |
|
| 88 | + $this->remoteWipe->method('finish') |
|
| 89 | + ->with('mytoken') |
|
| 90 | + ->willReturn($couldPerform); |
|
| 91 | + } |
|
| 92 | 92 | |
| 93 | - $result = $this->controller->wipeDone('mytoken'); |
|
| 93 | + $result = $this->controller->wipeDone('mytoken'); |
|
| 94 | 94 | |
| 95 | - if (!$valid || !$couldPerform) { |
|
| 96 | - $this->assertSame(Http::STATUS_NOT_FOUND, $result->getStatus()); |
|
| 97 | - $this->assertSame([], $result->getData()); |
|
| 98 | - } else { |
|
| 99 | - $this->assertSame(Http::STATUS_OK, $result->getStatus()); |
|
| 100 | - $this->assertSame([], $result->getData()); |
|
| 101 | - } |
|
| 102 | - } |
|
| 95 | + if (!$valid || !$couldPerform) { |
|
| 96 | + $this->assertSame(Http::STATUS_NOT_FOUND, $result->getStatus()); |
|
| 97 | + $this->assertSame([], $result->getData()); |
|
| 98 | + } else { |
|
| 99 | + $this->assertSame(Http::STATUS_OK, $result->getStatus()); |
|
| 100 | + $this->assertSame([], $result->getData()); |
|
| 101 | + } |
|
| 102 | + } |
|
| 103 | 103 | } |
@@ -36,9 +36,9 @@ |
||
| 36 | 36 | public static function dataTest(): array { |
| 37 | 37 | return [ |
| 38 | 38 | // valid token, could perform operation, valid result |
| 39 | - [ true, true, true], |
|
| 40 | - [ true, false, false], |
|
| 41 | - [false, true, false], |
|
| 39 | + [true, true, true], |
|
| 40 | + [true, false, false], |
|
| 41 | + [false, true, false], |
|
| 42 | 42 | [false, false, false], |
| 43 | 43 | ]; |
| 44 | 44 | } |
@@ -15,160 +15,160 @@ |
||
| 15 | 15 | use Test\TestCase; |
| 16 | 16 | |
| 17 | 17 | class AutoCompleteControllerTest extends TestCase { |
| 18 | - /** @var ISearch|MockObject */ |
|
| 19 | - protected $collaboratorSearch; |
|
| 20 | - /** @var IManager|MockObject */ |
|
| 21 | - protected $autoCompleteManager; |
|
| 22 | - /** @var IEventDispatcher|MockObject */ |
|
| 23 | - protected $dispatcher; |
|
| 24 | - /** @var AutoCompleteController */ |
|
| 25 | - protected $controller; |
|
| 18 | + /** @var ISearch|MockObject */ |
|
| 19 | + protected $collaboratorSearch; |
|
| 20 | + /** @var IManager|MockObject */ |
|
| 21 | + protected $autoCompleteManager; |
|
| 22 | + /** @var IEventDispatcher|MockObject */ |
|
| 23 | + protected $dispatcher; |
|
| 24 | + /** @var AutoCompleteController */ |
|
| 25 | + protected $controller; |
|
| 26 | 26 | |
| 27 | - protected function setUp(): void { |
|
| 28 | - parent::setUp(); |
|
| 27 | + protected function setUp(): void { |
|
| 28 | + parent::setUp(); |
|
| 29 | 29 | |
| 30 | - /** @var IRequest $request */ |
|
| 31 | - $request = $this->createMock(IRequest::class); |
|
| 32 | - $this->collaboratorSearch = $this->createMock(ISearch::class); |
|
| 33 | - $this->autoCompleteManager = $this->createMock(IManager::class); |
|
| 34 | - $this->dispatcher = $this->createMock(IEventDispatcher::class); |
|
| 30 | + /** @var IRequest $request */ |
|
| 31 | + $request = $this->createMock(IRequest::class); |
|
| 32 | + $this->collaboratorSearch = $this->createMock(ISearch::class); |
|
| 33 | + $this->autoCompleteManager = $this->createMock(IManager::class); |
|
| 34 | + $this->dispatcher = $this->createMock(IEventDispatcher::class); |
|
| 35 | 35 | |
| 36 | - $this->controller = new AutoCompleteController( |
|
| 37 | - 'core', |
|
| 38 | - $request, |
|
| 39 | - $this->collaboratorSearch, |
|
| 40 | - $this->autoCompleteManager, |
|
| 41 | - $this->dispatcher |
|
| 42 | - ); |
|
| 43 | - } |
|
| 36 | + $this->controller = new AutoCompleteController( |
|
| 37 | + 'core', |
|
| 38 | + $request, |
|
| 39 | + $this->collaboratorSearch, |
|
| 40 | + $this->autoCompleteManager, |
|
| 41 | + $this->dispatcher |
|
| 42 | + ); |
|
| 43 | + } |
|
| 44 | 44 | |
| 45 | - public static function searchDataProvider(): array { |
|
| 46 | - return [ |
|
| 47 | - [ #0 – regular search |
|
| 48 | - // searchResults |
|
| 49 | - [ |
|
| 50 | - 'exact' => [ |
|
| 51 | - 'users' => [], |
|
| 52 | - 'robots' => [], |
|
| 53 | - ], |
|
| 54 | - 'users' => [ |
|
| 55 | - ['label' => 'Alice A.', 'value' => ['shareWith' => 'alice']], |
|
| 56 | - ['label' => 'Bob Y.', 'value' => ['shareWith' => 'bob']], |
|
| 57 | - ], |
|
| 58 | - ], |
|
| 59 | - // expected |
|
| 60 | - [ |
|
| 61 | - [ 'id' => 'alice', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 62 | - [ 'id' => 'bob', 'label' => 'Bob Y.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 63 | - ], |
|
| 64 | - '', |
|
| 65 | - 'files', |
|
| 66 | - '42', |
|
| 67 | - null |
|
| 68 | - ], |
|
| 69 | - [ #1 – missing itemtype and id |
|
| 70 | - [ |
|
| 71 | - 'exact' => [ |
|
| 72 | - 'users' => [], |
|
| 73 | - 'robots' => [], |
|
| 74 | - ], |
|
| 75 | - 'users' => [ |
|
| 76 | - ['label' => 'Alice A.', 'value' => ['shareWith' => 'alice']], |
|
| 77 | - ['label' => 'Bob Y.', 'value' => ['shareWith' => 'bob']], |
|
| 78 | - ], |
|
| 79 | - ], |
|
| 80 | - // expected |
|
| 81 | - [ |
|
| 82 | - [ 'id' => 'alice', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 83 | - [ 'id' => 'bob', 'label' => 'Bob Y.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 84 | - ], |
|
| 85 | - '', |
|
| 86 | - null, |
|
| 87 | - null, |
|
| 88 | - null |
|
| 89 | - ], |
|
| 90 | - [ #2 – with sorter |
|
| 91 | - [ |
|
| 92 | - 'exact' => [ |
|
| 93 | - 'users' => [], |
|
| 94 | - 'robots' => [], |
|
| 95 | - ], |
|
| 96 | - 'users' => [ |
|
| 97 | - ['label' => 'Alice A.', 'value' => ['shareWith' => 'alice']], |
|
| 98 | - ['label' => 'Bob Y.', 'value' => ['shareWith' => 'bob']], |
|
| 99 | - ], |
|
| 100 | - ], |
|
| 101 | - // expected |
|
| 102 | - [ |
|
| 103 | - [ 'id' => 'alice', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 104 | - [ 'id' => 'bob', 'label' => 'Bob Y.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 105 | - ], |
|
| 106 | - '', |
|
| 107 | - 'files', |
|
| 108 | - '42', |
|
| 109 | - 'karma|bus-factor' |
|
| 110 | - ], |
|
| 111 | - [ #3 – exact Match |
|
| 112 | - [ |
|
| 113 | - 'exact' => [ |
|
| 114 | - 'users' => [ |
|
| 115 | - ['label' => 'Bob Y.', 'value' => ['shareWith' => 'bob']], |
|
| 116 | - ], |
|
| 117 | - 'robots' => [], |
|
| 118 | - ], |
|
| 119 | - 'users' => [ |
|
| 120 | - ['label' => 'Robert R.', 'value' => ['shareWith' => 'bobby']], |
|
| 121 | - ], |
|
| 122 | - ], |
|
| 123 | - [ |
|
| 124 | - [ 'id' => 'bob', 'label' => 'Bob Y.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 125 | - [ 'id' => 'bobby', 'label' => 'Robert R.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 126 | - ], |
|
| 127 | - 'bob', |
|
| 128 | - 'files', |
|
| 129 | - '42', |
|
| 130 | - null |
|
| 131 | - ], |
|
| 132 | - [ #4 – with unique name |
|
| 133 | - [ |
|
| 134 | - 'exact' => [ |
|
| 135 | - 'users' => [], |
|
| 136 | - 'robots' => [], |
|
| 137 | - ], |
|
| 138 | - 'users' => [ |
|
| 139 | - ['label' => 'Alice A.', 'value' => ['shareWith' => 'alice'], 'shareWithDisplayNameUnique' => '[email protected]'], |
|
| 140 | - ['label' => 'Alice A.', 'value' => ['shareWith' => 'alicea'], 'shareWithDisplayNameUnique' => '[email protected]'], |
|
| 141 | - ], |
|
| 142 | - ], |
|
| 143 | - // expected |
|
| 144 | - [ |
|
| 145 | - [ 'id' => 'alice', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => '[email protected]'], |
|
| 146 | - [ 'id' => 'alicea', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => '[email protected]'], |
|
| 147 | - ], |
|
| 148 | - '', |
|
| 149 | - 'files', |
|
| 150 | - '42', |
|
| 151 | - 'karma|bus-factor' |
|
| 152 | - ], |
|
| 153 | - ]; |
|
| 154 | - } |
|
| 45 | + public static function searchDataProvider(): array { |
|
| 46 | + return [ |
|
| 47 | + [ #0 – regular search |
|
| 48 | + // searchResults |
|
| 49 | + [ |
|
| 50 | + 'exact' => [ |
|
| 51 | + 'users' => [], |
|
| 52 | + 'robots' => [], |
|
| 53 | + ], |
|
| 54 | + 'users' => [ |
|
| 55 | + ['label' => 'Alice A.', 'value' => ['shareWith' => 'alice']], |
|
| 56 | + ['label' => 'Bob Y.', 'value' => ['shareWith' => 'bob']], |
|
| 57 | + ], |
|
| 58 | + ], |
|
| 59 | + // expected |
|
| 60 | + [ |
|
| 61 | + [ 'id' => 'alice', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 62 | + [ 'id' => 'bob', 'label' => 'Bob Y.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 63 | + ], |
|
| 64 | + '', |
|
| 65 | + 'files', |
|
| 66 | + '42', |
|
| 67 | + null |
|
| 68 | + ], |
|
| 69 | + [ #1 – missing itemtype and id |
|
| 70 | + [ |
|
| 71 | + 'exact' => [ |
|
| 72 | + 'users' => [], |
|
| 73 | + 'robots' => [], |
|
| 74 | + ], |
|
| 75 | + 'users' => [ |
|
| 76 | + ['label' => 'Alice A.', 'value' => ['shareWith' => 'alice']], |
|
| 77 | + ['label' => 'Bob Y.', 'value' => ['shareWith' => 'bob']], |
|
| 78 | + ], |
|
| 79 | + ], |
|
| 80 | + // expected |
|
| 81 | + [ |
|
| 82 | + [ 'id' => 'alice', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 83 | + [ 'id' => 'bob', 'label' => 'Bob Y.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 84 | + ], |
|
| 85 | + '', |
|
| 86 | + null, |
|
| 87 | + null, |
|
| 88 | + null |
|
| 89 | + ], |
|
| 90 | + [ #2 – with sorter |
|
| 91 | + [ |
|
| 92 | + 'exact' => [ |
|
| 93 | + 'users' => [], |
|
| 94 | + 'robots' => [], |
|
| 95 | + ], |
|
| 96 | + 'users' => [ |
|
| 97 | + ['label' => 'Alice A.', 'value' => ['shareWith' => 'alice']], |
|
| 98 | + ['label' => 'Bob Y.', 'value' => ['shareWith' => 'bob']], |
|
| 99 | + ], |
|
| 100 | + ], |
|
| 101 | + // expected |
|
| 102 | + [ |
|
| 103 | + [ 'id' => 'alice', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 104 | + [ 'id' => 'bob', 'label' => 'Bob Y.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 105 | + ], |
|
| 106 | + '', |
|
| 107 | + 'files', |
|
| 108 | + '42', |
|
| 109 | + 'karma|bus-factor' |
|
| 110 | + ], |
|
| 111 | + [ #3 – exact Match |
|
| 112 | + [ |
|
| 113 | + 'exact' => [ |
|
| 114 | + 'users' => [ |
|
| 115 | + ['label' => 'Bob Y.', 'value' => ['shareWith' => 'bob']], |
|
| 116 | + ], |
|
| 117 | + 'robots' => [], |
|
| 118 | + ], |
|
| 119 | + 'users' => [ |
|
| 120 | + ['label' => 'Robert R.', 'value' => ['shareWith' => 'bobby']], |
|
| 121 | + ], |
|
| 122 | + ], |
|
| 123 | + [ |
|
| 124 | + [ 'id' => 'bob', 'label' => 'Bob Y.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 125 | + [ 'id' => 'bobby', 'label' => 'Robert R.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 126 | + ], |
|
| 127 | + 'bob', |
|
| 128 | + 'files', |
|
| 129 | + '42', |
|
| 130 | + null |
|
| 131 | + ], |
|
| 132 | + [ #4 – with unique name |
|
| 133 | + [ |
|
| 134 | + 'exact' => [ |
|
| 135 | + 'users' => [], |
|
| 136 | + 'robots' => [], |
|
| 137 | + ], |
|
| 138 | + 'users' => [ |
|
| 139 | + ['label' => 'Alice A.', 'value' => ['shareWith' => 'alice'], 'shareWithDisplayNameUnique' => '[email protected]'], |
|
| 140 | + ['label' => 'Alice A.', 'value' => ['shareWith' => 'alicea'], 'shareWithDisplayNameUnique' => '[email protected]'], |
|
| 141 | + ], |
|
| 142 | + ], |
|
| 143 | + // expected |
|
| 144 | + [ |
|
| 145 | + [ 'id' => 'alice', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => '[email protected]'], |
|
| 146 | + [ 'id' => 'alicea', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => '[email protected]'], |
|
| 147 | + ], |
|
| 148 | + '', |
|
| 149 | + 'files', |
|
| 150 | + '42', |
|
| 151 | + 'karma|bus-factor' |
|
| 152 | + ], |
|
| 153 | + ]; |
|
| 154 | + } |
|
| 155 | 155 | |
| 156 | - /** |
|
| 157 | - * @dataProvider searchDataProvider |
|
| 158 | - */ |
|
| 159 | - public function testGet(array $searchResults, array $expected, string $searchTerm, ?string $itemType, ?string $itemId, ?string $sorter): void { |
|
| 160 | - $this->collaboratorSearch->expects($this->once()) |
|
| 161 | - ->method('search') |
|
| 162 | - ->willReturn([$searchResults, false]); |
|
| 156 | + /** |
|
| 157 | + * @dataProvider searchDataProvider |
|
| 158 | + */ |
|
| 159 | + public function testGet(array $searchResults, array $expected, string $searchTerm, ?string $itemType, ?string $itemId, ?string $sorter): void { |
|
| 160 | + $this->collaboratorSearch->expects($this->once()) |
|
| 161 | + ->method('search') |
|
| 162 | + ->willReturn([$searchResults, false]); |
|
| 163 | 163 | |
| 164 | - $runSorterFrequency = $sorter === null ? $this->never() : $this->once(); |
|
| 165 | - $this->autoCompleteManager->expects($runSorterFrequency) |
|
| 166 | - ->method('runSorters'); |
|
| 164 | + $runSorterFrequency = $sorter === null ? $this->never() : $this->once(); |
|
| 165 | + $this->autoCompleteManager->expects($runSorterFrequency) |
|
| 166 | + ->method('runSorters'); |
|
| 167 | 167 | |
| 168 | - $response = $this->controller->get($searchTerm, $itemType, $itemId, $sorter); |
|
| 168 | + $response = $this->controller->get($searchTerm, $itemType, $itemId, $sorter); |
|
| 169 | 169 | |
| 170 | - $list = $response->getData(); |
|
| 171 | - $this->assertEquals($expected, $list); // has better error output… |
|
| 172 | - $this->assertSame($expected, $list); |
|
| 173 | - } |
|
| 170 | + $list = $response->getData(); |
|
| 171 | + $this->assertEquals($expected, $list); // has better error output… |
|
| 172 | + $this->assertSame($expected, $list); |
|
| 173 | + } |
|
| 174 | 174 | } |
@@ -44,7 +44,7 @@ discard block |
||
| 44 | 44 | |
| 45 | 45 | public static function searchDataProvider(): array { |
| 46 | 46 | return [ |
| 47 | - [ #0 – regular search |
|
| 47 | + [#0 – regular search |
|
| 48 | 48 | // searchResults |
| 49 | 49 | [ |
| 50 | 50 | 'exact' => [ |
@@ -58,15 +58,15 @@ discard block |
||
| 58 | 58 | ], |
| 59 | 59 | // expected |
| 60 | 60 | [ |
| 61 | - [ 'id' => 'alice', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 62 | - [ 'id' => 'bob', 'label' => 'Bob Y.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 61 | + ['id' => 'alice', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 62 | + ['id' => 'bob', 'label' => 'Bob Y.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 63 | 63 | ], |
| 64 | 64 | '', |
| 65 | 65 | 'files', |
| 66 | 66 | '42', |
| 67 | 67 | null |
| 68 | 68 | ], |
| 69 | - [ #1 – missing itemtype and id |
|
| 69 | + [#1 – missing itemtype and id |
|
| 70 | 70 | [ |
| 71 | 71 | 'exact' => [ |
| 72 | 72 | 'users' => [], |
@@ -79,15 +79,15 @@ discard block |
||
| 79 | 79 | ], |
| 80 | 80 | // expected |
| 81 | 81 | [ |
| 82 | - [ 'id' => 'alice', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 83 | - [ 'id' => 'bob', 'label' => 'Bob Y.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 82 | + ['id' => 'alice', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 83 | + ['id' => 'bob', 'label' => 'Bob Y.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 84 | 84 | ], |
| 85 | 85 | '', |
| 86 | 86 | null, |
| 87 | 87 | null, |
| 88 | 88 | null |
| 89 | 89 | ], |
| 90 | - [ #2 – with sorter |
|
| 90 | + [#2 – with sorter |
|
| 91 | 91 | [ |
| 92 | 92 | 'exact' => [ |
| 93 | 93 | 'users' => [], |
@@ -100,15 +100,15 @@ discard block |
||
| 100 | 100 | ], |
| 101 | 101 | // expected |
| 102 | 102 | [ |
| 103 | - [ 'id' => 'alice', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 104 | - [ 'id' => 'bob', 'label' => 'Bob Y.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 103 | + ['id' => 'alice', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 104 | + ['id' => 'bob', 'label' => 'Bob Y.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 105 | 105 | ], |
| 106 | 106 | '', |
| 107 | 107 | 'files', |
| 108 | 108 | '42', |
| 109 | 109 | 'karma|bus-factor' |
| 110 | 110 | ], |
| 111 | - [ #3 – exact Match |
|
| 111 | + [#3 – exact Match |
|
| 112 | 112 | [ |
| 113 | 113 | 'exact' => [ |
| 114 | 114 | 'users' => [ |
@@ -121,15 +121,15 @@ discard block |
||
| 121 | 121 | ], |
| 122 | 122 | ], |
| 123 | 123 | [ |
| 124 | - [ 'id' => 'bob', 'label' => 'Bob Y.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 125 | - [ 'id' => 'bobby', 'label' => 'Robert R.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 124 | + ['id' => 'bob', 'label' => 'Bob Y.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 125 | + ['id' => 'bobby', 'label' => 'Robert R.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => ''], |
|
| 126 | 126 | ], |
| 127 | 127 | 'bob', |
| 128 | 128 | 'files', |
| 129 | 129 | '42', |
| 130 | 130 | null |
| 131 | 131 | ], |
| 132 | - [ #4 – with unique name |
|
| 132 | + [#4 – with unique name |
|
| 133 | 133 | [ |
| 134 | 134 | 'exact' => [ |
| 135 | 135 | 'users' => [], |
@@ -142,8 +142,8 @@ discard block |
||
| 142 | 142 | ], |
| 143 | 143 | // expected |
| 144 | 144 | [ |
| 145 | - [ 'id' => 'alice', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => '[email protected]'], |
|
| 146 | - [ 'id' => 'alicea', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => '[email protected]'], |
|
| 145 | + ['id' => 'alice', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => '[email protected]'], |
|
| 146 | + ['id' => 'alicea', 'label' => 'Alice A.', 'icon' => '', 'source' => 'users', 'status' => '', 'subline' => '', 'shareWithDisplayNameUnique' => '[email protected]'], |
|
| 147 | 147 | ], |
| 148 | 148 | '', |
| 149 | 149 | 'files', |
@@ -168,7 +168,7 @@ discard block |
||
| 168 | 168 | $response = $this->controller->get($searchTerm, $itemType, $itemId, $sorter); |
| 169 | 169 | |
| 170 | 170 | $list = $response->getData(); |
| 171 | - $this->assertEquals($expected, $list); // has better error output… |
|
| 171 | + $this->assertEquals($expected, $list); // has better error output… |
|
| 172 | 172 | $this->assertSame($expected, $list); |
| 173 | 173 | } |
| 174 | 174 | } |
@@ -27,420 +27,420 @@ |
||
| 27 | 27 | use Test\TestCase; |
| 28 | 28 | |
| 29 | 29 | class TwoFactorChallengeControllerTest extends TestCase { |
| 30 | - /** @var IRequest|\PHPUnit\Framework\MockObject\MockObject */ |
|
| 31 | - private $request; |
|
| 32 | - |
|
| 33 | - /** @var Manager|\PHPUnit\Framework\MockObject\MockObject */ |
|
| 34 | - private $twoFactorManager; |
|
| 35 | - |
|
| 36 | - /** @var IUserSession|\PHPUnit\Framework\MockObject\MockObject */ |
|
| 37 | - private $userSession; |
|
| 38 | - |
|
| 39 | - /** @var ISession|\PHPUnit\Framework\MockObject\MockObject */ |
|
| 40 | - private $session; |
|
| 41 | - |
|
| 42 | - /** @var IURLGenerator|\PHPUnit\Framework\MockObject\MockObject */ |
|
| 43 | - private $urlGenerator; |
|
| 44 | - |
|
| 45 | - /** @var LoggerInterface|\PHPUnit\Framework\MockObject\MockObject */ |
|
| 46 | - private $logger; |
|
| 47 | - |
|
| 48 | - /** @var TwoFactorChallengeController|\PHPUnit\Framework\MockObject\MockObject */ |
|
| 49 | - private $controller; |
|
| 50 | - |
|
| 51 | - protected function setUp(): void { |
|
| 52 | - parent::setUp(); |
|
| 53 | - |
|
| 54 | - $this->request = $this->createMock(IRequest::class); |
|
| 55 | - $this->twoFactorManager = $this->createMock(Manager::class); |
|
| 56 | - $this->userSession = $this->createMock(IUserSession::class); |
|
| 57 | - $this->session = $this->createMock(ISession::class); |
|
| 58 | - $this->urlGenerator = $this->createMock(IURLGenerator::class); |
|
| 59 | - $this->logger = $this->createMock(LoggerInterface::class); |
|
| 60 | - |
|
| 61 | - $this->controller = $this->getMockBuilder(TwoFactorChallengeController::class) |
|
| 62 | - ->setConstructorArgs([ |
|
| 63 | - 'core', |
|
| 64 | - $this->request, |
|
| 65 | - $this->twoFactorManager, |
|
| 66 | - $this->userSession, |
|
| 67 | - $this->session, |
|
| 68 | - $this->urlGenerator, |
|
| 69 | - $this->logger, |
|
| 70 | - ]) |
|
| 71 | - ->onlyMethods(['getLogoutUrl']) |
|
| 72 | - ->getMock(); |
|
| 73 | - $this->controller->expects($this->any()) |
|
| 74 | - ->method('getLogoutUrl') |
|
| 75 | - ->willReturn('logoutAttribute'); |
|
| 76 | - } |
|
| 77 | - |
|
| 78 | - public function testSelectChallenge(): void { |
|
| 79 | - $user = $this->getMockBuilder(IUser::class)->getMock(); |
|
| 80 | - $p1 = $this->createMock(IActivatableAtLogin::class); |
|
| 81 | - $p1->method('getId')->willReturn('p1'); |
|
| 82 | - $backupProvider = $this->createMock(IProvider::class); |
|
| 83 | - $backupProvider->method('getId')->willReturn('backup_codes'); |
|
| 84 | - $providerSet = new ProviderSet([$p1, $backupProvider], true); |
|
| 85 | - $this->twoFactorManager->expects($this->once()) |
|
| 86 | - ->method('getLoginSetupProviders') |
|
| 87 | - ->with($user) |
|
| 88 | - ->willReturn([$p1]); |
|
| 89 | - |
|
| 90 | - $this->userSession->expects($this->once()) |
|
| 91 | - ->method('getUser') |
|
| 92 | - ->willReturn($user); |
|
| 93 | - $this->twoFactorManager->expects($this->once()) |
|
| 94 | - ->method('getProviderSet') |
|
| 95 | - ->with($user) |
|
| 96 | - ->willReturn($providerSet); |
|
| 97 | - |
|
| 98 | - $expected = new StandaloneTemplateResponse('core', 'twofactorselectchallenge', [ |
|
| 99 | - 'providers' => [ |
|
| 100 | - $p1, |
|
| 101 | - ], |
|
| 102 | - 'providerMissing' => true, |
|
| 103 | - 'backupProvider' => $backupProvider, |
|
| 104 | - 'redirect_url' => '/some/url', |
|
| 105 | - 'logout_url' => 'logoutAttribute', |
|
| 106 | - 'hasSetupProviders' => true, |
|
| 107 | - ], 'guest'); |
|
| 108 | - |
|
| 109 | - $this->assertEquals($expected, $this->controller->selectChallenge('/some/url')); |
|
| 110 | - } |
|
| 111 | - |
|
| 112 | - public function testShowChallenge(): void { |
|
| 113 | - $user = $this->createMock(IUser::class); |
|
| 114 | - $provider = $this->createMock(IProvider::class); |
|
| 115 | - $provider->method('getId')->willReturn('myprovider'); |
|
| 116 | - $backupProvider = $this->createMock(IProvider::class); |
|
| 117 | - $backupProvider->method('getId')->willReturn('backup_codes'); |
|
| 118 | - $tmpl = $this->createMock(ITemplate::class); |
|
| 119 | - $providerSet = new ProviderSet([$provider, $backupProvider], true); |
|
| 120 | - |
|
| 121 | - $this->userSession->expects($this->once()) |
|
| 122 | - ->method('getUser') |
|
| 123 | - ->willReturn($user); |
|
| 124 | - $this->twoFactorManager->expects($this->once()) |
|
| 125 | - ->method('getProviderSet') |
|
| 126 | - ->with($user) |
|
| 127 | - ->willReturn($providerSet); |
|
| 128 | - $provider->expects($this->once()) |
|
| 129 | - ->method('getId') |
|
| 130 | - ->willReturn('u2f'); |
|
| 131 | - $backupProvider->expects($this->once()) |
|
| 132 | - ->method('getId') |
|
| 133 | - ->willReturn('backup_codes'); |
|
| 134 | - |
|
| 135 | - $this->session->expects($this->once()) |
|
| 136 | - ->method('exists') |
|
| 137 | - ->with('two_factor_auth_error') |
|
| 138 | - ->willReturn(true); |
|
| 139 | - $this->session->expects($this->exactly(2)) |
|
| 140 | - ->method('remove') |
|
| 141 | - ->with($this->logicalOr($this->equalTo('two_factor_auth_error'), $this->equalTo('two_factor_auth_error_message'))); |
|
| 142 | - $provider->expects($this->once()) |
|
| 143 | - ->method('getTemplate') |
|
| 144 | - ->with($user) |
|
| 145 | - ->willReturn($tmpl); |
|
| 146 | - $tmpl->expects($this->once()) |
|
| 147 | - ->method('fetchPage') |
|
| 148 | - ->willReturn('<html/>'); |
|
| 149 | - |
|
| 150 | - $expected = new StandaloneTemplateResponse('core', 'twofactorshowchallenge', [ |
|
| 151 | - 'error' => true, |
|
| 152 | - 'provider' => $provider, |
|
| 153 | - 'backupProvider' => $backupProvider, |
|
| 154 | - 'logout_url' => 'logoutAttribute', |
|
| 155 | - 'template' => '<html/>', |
|
| 156 | - 'redirect_url' => '/re/dir/ect/url', |
|
| 157 | - 'error_message' => null, |
|
| 158 | - ], 'guest'); |
|
| 159 | - |
|
| 160 | - $this->assertEquals($expected, $this->controller->showChallenge('myprovider', '/re/dir/ect/url')); |
|
| 161 | - } |
|
| 162 | - |
|
| 163 | - public function testShowInvalidChallenge(): void { |
|
| 164 | - $user = $this->createMock(IUser::class); |
|
| 165 | - $providerSet = new ProviderSet([], false); |
|
| 166 | - |
|
| 167 | - $this->userSession->expects($this->once()) |
|
| 168 | - ->method('getUser') |
|
| 169 | - ->willReturn($user); |
|
| 170 | - $this->twoFactorManager->expects($this->once()) |
|
| 171 | - ->method('getProviderSet') |
|
| 172 | - ->with($user) |
|
| 173 | - ->willReturn($providerSet); |
|
| 174 | - $this->urlGenerator->expects($this->once()) |
|
| 175 | - ->method('linkToRoute') |
|
| 176 | - ->with('core.TwoFactorChallenge.selectChallenge') |
|
| 177 | - ->willReturn('select/challenge/url'); |
|
| 178 | - |
|
| 179 | - $expected = new RedirectResponse('select/challenge/url'); |
|
| 180 | - |
|
| 181 | - $this->assertEquals($expected, $this->controller->showChallenge('myprovider', 'redirect/url')); |
|
| 182 | - } |
|
| 183 | - |
|
| 184 | - public function testSolveChallenge(): void { |
|
| 185 | - $user = $this->createMock(IUser::class); |
|
| 186 | - $provider = $this->createMock(IProvider::class); |
|
| 187 | - |
|
| 188 | - $this->userSession->expects($this->once()) |
|
| 189 | - ->method('getUser') |
|
| 190 | - ->willReturn($user); |
|
| 191 | - $this->twoFactorManager->expects($this->once()) |
|
| 192 | - ->method('getProvider') |
|
| 193 | - ->with($user, 'myprovider') |
|
| 194 | - ->willReturn($provider); |
|
| 195 | - |
|
| 196 | - $this->twoFactorManager->expects($this->once()) |
|
| 197 | - ->method('verifyChallenge') |
|
| 198 | - ->with('myprovider', $user, 'token') |
|
| 199 | - ->willReturn(true); |
|
| 200 | - $this->urlGenerator |
|
| 201 | - ->expects($this->once()) |
|
| 202 | - ->method('linkToDefaultPageUrl') |
|
| 203 | - ->willReturn('/default/foo'); |
|
| 204 | - |
|
| 205 | - $expected = new RedirectResponse('/default/foo'); |
|
| 206 | - $this->assertEquals($expected, $this->controller->solveChallenge('myprovider', 'token')); |
|
| 207 | - } |
|
| 208 | - |
|
| 209 | - public function testSolveValidChallengeAndRedirect(): void { |
|
| 210 | - $user = $this->createMock(IUser::class); |
|
| 211 | - $provider = $this->createMock(IProvider::class); |
|
| 212 | - |
|
| 213 | - $this->userSession->expects($this->once()) |
|
| 214 | - ->method('getUser') |
|
| 215 | - ->willReturn($user); |
|
| 216 | - $this->twoFactorManager->expects($this->once()) |
|
| 217 | - ->method('getProvider') |
|
| 218 | - ->with($user, 'myprovider') |
|
| 219 | - ->willReturn($provider); |
|
| 220 | - |
|
| 221 | - $this->twoFactorManager->expects($this->once()) |
|
| 222 | - ->method('verifyChallenge') |
|
| 223 | - ->with('myprovider', $user, 'token') |
|
| 224 | - ->willReturn(true); |
|
| 225 | - $this->urlGenerator->expects($this->once()) |
|
| 226 | - ->method('getAbsoluteURL') |
|
| 227 | - ->with('redirect url') |
|
| 228 | - ->willReturn('redirect/url'); |
|
| 229 | - |
|
| 230 | - $expected = new RedirectResponse('redirect/url'); |
|
| 231 | - $this->assertEquals($expected, $this->controller->solveChallenge('myprovider', 'token', 'redirect%20url')); |
|
| 232 | - } |
|
| 233 | - |
|
| 234 | - public function testSolveChallengeInvalidProvider(): void { |
|
| 235 | - $user = $this->getMockBuilder(IUser::class)->getMock(); |
|
| 236 | - |
|
| 237 | - $this->userSession->expects($this->once()) |
|
| 238 | - ->method('getUser') |
|
| 239 | - ->willReturn($user); |
|
| 240 | - $this->twoFactorManager->expects($this->once()) |
|
| 241 | - ->method('getProvider') |
|
| 242 | - ->with($user, 'myprovider') |
|
| 243 | - ->willReturn(null); |
|
| 244 | - $this->urlGenerator->expects($this->once()) |
|
| 245 | - ->method('linkToRoute') |
|
| 246 | - ->with('core.TwoFactorChallenge.selectChallenge') |
|
| 247 | - ->willReturn('select/challenge/url'); |
|
| 248 | - |
|
| 249 | - $expected = new RedirectResponse('select/challenge/url'); |
|
| 250 | - |
|
| 251 | - $this->assertEquals($expected, $this->controller->solveChallenge('myprovider', 'token')); |
|
| 252 | - } |
|
| 253 | - |
|
| 254 | - public function testSolveInvalidChallenge(): void { |
|
| 255 | - $user = $this->createMock(IUser::class); |
|
| 256 | - $provider = $this->createMock(IProvider::class); |
|
| 257 | - |
|
| 258 | - $this->userSession->expects($this->once()) |
|
| 259 | - ->method('getUser') |
|
| 260 | - ->willReturn($user); |
|
| 261 | - $this->twoFactorManager->expects($this->once()) |
|
| 262 | - ->method('getProvider') |
|
| 263 | - ->with($user, 'myprovider') |
|
| 264 | - ->willReturn($provider); |
|
| 265 | - |
|
| 266 | - $this->twoFactorManager->expects($this->once()) |
|
| 267 | - ->method('verifyChallenge') |
|
| 268 | - ->with('myprovider', $user, 'token') |
|
| 269 | - ->willReturn(false); |
|
| 270 | - $this->session->expects($this->once()) |
|
| 271 | - ->method('set') |
|
| 272 | - ->with('two_factor_auth_error', true); |
|
| 273 | - $this->urlGenerator->expects($this->once()) |
|
| 274 | - ->method('linkToRoute') |
|
| 275 | - ->with('core.TwoFactorChallenge.showChallenge', [ |
|
| 276 | - 'challengeProviderId' => 'myprovider', |
|
| 277 | - 'redirect_url' => '/url', |
|
| 278 | - ]) |
|
| 279 | - ->willReturn('files/index/url'); |
|
| 280 | - $provider->expects($this->once()) |
|
| 281 | - ->method('getId') |
|
| 282 | - ->willReturn('myprovider'); |
|
| 283 | - |
|
| 284 | - $expected = new RedirectResponse('files/index/url'); |
|
| 285 | - $this->assertEquals($expected, $this->controller->solveChallenge('myprovider', 'token', '/url')); |
|
| 286 | - } |
|
| 287 | - |
|
| 288 | - public function testSolveChallengeTwoFactorException(): void { |
|
| 289 | - $user = $this->createMock(IUser::class); |
|
| 290 | - $provider = $this->createMock(IProvider::class); |
|
| 291 | - $exception = new TwoFactorException('2FA failed'); |
|
| 292 | - |
|
| 293 | - $this->userSession->expects($this->once()) |
|
| 294 | - ->method('getUser') |
|
| 295 | - ->willReturn($user); |
|
| 296 | - $this->twoFactorManager->expects($this->once()) |
|
| 297 | - ->method('getProvider') |
|
| 298 | - ->with($user, 'myprovider') |
|
| 299 | - ->willReturn($provider); |
|
| 300 | - |
|
| 301 | - $this->twoFactorManager->expects($this->once()) |
|
| 302 | - ->method('verifyChallenge') |
|
| 303 | - ->with('myprovider', $user, 'token') |
|
| 304 | - ->will($this->throwException($exception)); |
|
| 305 | - $calls = [ |
|
| 306 | - ['two_factor_auth_error_message', '2FA failed'], |
|
| 307 | - ['two_factor_auth_error', true], |
|
| 308 | - ]; |
|
| 309 | - $this->session->expects($this->exactly(2)) |
|
| 310 | - ->method('set') |
|
| 311 | - ->willReturnCallback(function () use (&$calls) { |
|
| 312 | - $expected = array_shift($calls); |
|
| 313 | - $this->assertEquals($expected, func_get_args()); |
|
| 314 | - }); |
|
| 315 | - $this->urlGenerator->expects($this->once()) |
|
| 316 | - ->method('linkToRoute') |
|
| 317 | - ->with('core.TwoFactorChallenge.showChallenge', [ |
|
| 318 | - 'challengeProviderId' => 'myprovider', |
|
| 319 | - 'redirect_url' => '/url', |
|
| 320 | - ]) |
|
| 321 | - ->willReturn('files/index/url'); |
|
| 322 | - $provider->expects($this->once()) |
|
| 323 | - ->method('getId') |
|
| 324 | - ->willReturn('myprovider'); |
|
| 325 | - |
|
| 326 | - $expected = new RedirectResponse('files/index/url'); |
|
| 327 | - $this->assertEquals($expected, $this->controller->solveChallenge('myprovider', 'token', '/url')); |
|
| 328 | - } |
|
| 329 | - |
|
| 330 | - public function testSetUpProviders(): void { |
|
| 331 | - $user = $this->createMock(IUser::class); |
|
| 332 | - $this->userSession->expects($this->once()) |
|
| 333 | - ->method('getUser') |
|
| 334 | - ->willReturn($user); |
|
| 335 | - $provider = $this->createMock(IActivatableAtLogin::class); |
|
| 336 | - $this->twoFactorManager->expects($this->once()) |
|
| 337 | - ->method('getLoginSetupProviders') |
|
| 338 | - ->with($user) |
|
| 339 | - ->willReturn([ |
|
| 340 | - $provider, |
|
| 341 | - ]); |
|
| 342 | - $expected = new StandaloneTemplateResponse( |
|
| 343 | - 'core', |
|
| 344 | - 'twofactorsetupselection', |
|
| 345 | - [ |
|
| 346 | - 'providers' => [ |
|
| 347 | - $provider, |
|
| 348 | - ], |
|
| 349 | - 'logout_url' => 'logoutAttribute', |
|
| 350 | - 'redirect_url' => null, |
|
| 351 | - ], |
|
| 352 | - 'guest' |
|
| 353 | - ); |
|
| 354 | - |
|
| 355 | - $response = $this->controller->setupProviders(); |
|
| 356 | - |
|
| 357 | - $this->assertEquals($expected, $response); |
|
| 358 | - } |
|
| 359 | - |
|
| 360 | - public function testSetUpInvalidProvider(): void { |
|
| 361 | - $user = $this->createMock(IUser::class); |
|
| 362 | - $this->userSession->expects($this->once()) |
|
| 363 | - ->method('getUser') |
|
| 364 | - ->willReturn($user); |
|
| 365 | - $provider = $this->createMock(IActivatableAtLogin::class); |
|
| 366 | - $provider->expects($this->any()) |
|
| 367 | - ->method('getId') |
|
| 368 | - ->willReturn('prov1'); |
|
| 369 | - $this->twoFactorManager->expects($this->once()) |
|
| 370 | - ->method('getLoginSetupProviders') |
|
| 371 | - ->with($user) |
|
| 372 | - ->willReturn([ |
|
| 373 | - $provider, |
|
| 374 | - ]); |
|
| 375 | - $this->urlGenerator->expects($this->once()) |
|
| 376 | - ->method('linkToRoute') |
|
| 377 | - ->with('core.TwoFactorChallenge.selectChallenge') |
|
| 378 | - ->willReturn('2fa/select/page'); |
|
| 379 | - $expected = new RedirectResponse('2fa/select/page'); |
|
| 380 | - |
|
| 381 | - $response = $this->controller->setupProvider('prov2'); |
|
| 382 | - |
|
| 383 | - $this->assertEquals($expected, $response); |
|
| 384 | - } |
|
| 385 | - |
|
| 386 | - public function testSetUpProvider(): void { |
|
| 387 | - $user = $this->createMock(IUser::class); |
|
| 388 | - $this->userSession->expects($this->once()) |
|
| 389 | - ->method('getUser') |
|
| 390 | - ->willReturn($user); |
|
| 391 | - $provider = $this->createMock(IActivatableAtLogin::class); |
|
| 392 | - $provider->expects($this->any()) |
|
| 393 | - ->method('getId') |
|
| 394 | - ->willReturn('prov1'); |
|
| 395 | - $this->twoFactorManager->expects($this->once()) |
|
| 396 | - ->method('getLoginSetupProviders') |
|
| 397 | - ->with($user) |
|
| 398 | - ->willReturn([ |
|
| 399 | - $provider, |
|
| 400 | - ]); |
|
| 401 | - $loginSetup = $this->createMock(ILoginSetupProvider::class); |
|
| 402 | - $provider->expects($this->any()) |
|
| 403 | - ->method('getLoginSetup') |
|
| 404 | - ->with($user) |
|
| 405 | - ->willReturn($loginSetup); |
|
| 406 | - $tmpl = $this->createMock(ITemplate::class); |
|
| 407 | - $loginSetup->expects($this->once()) |
|
| 408 | - ->method('getBody') |
|
| 409 | - ->willReturn($tmpl); |
|
| 410 | - $tmpl->expects($this->once()) |
|
| 411 | - ->method('fetchPage') |
|
| 412 | - ->willReturn('tmpl'); |
|
| 413 | - $expected = new StandaloneTemplateResponse( |
|
| 414 | - 'core', |
|
| 415 | - 'twofactorsetupchallenge', |
|
| 416 | - [ |
|
| 417 | - 'provider' => $provider, |
|
| 418 | - 'logout_url' => 'logoutAttribute', |
|
| 419 | - 'template' => 'tmpl', |
|
| 420 | - 'redirect_url' => null, |
|
| 421 | - ], |
|
| 422 | - 'guest' |
|
| 423 | - ); |
|
| 424 | - |
|
| 425 | - $response = $this->controller->setupProvider('prov1'); |
|
| 426 | - |
|
| 427 | - $this->assertEquals($expected, $response); |
|
| 428 | - } |
|
| 429 | - |
|
| 430 | - public function testConfirmProviderSetup(): void { |
|
| 431 | - $this->urlGenerator->expects($this->once()) |
|
| 432 | - ->method('linkToRoute') |
|
| 433 | - ->with( |
|
| 434 | - 'core.TwoFactorChallenge.showChallenge', |
|
| 435 | - [ |
|
| 436 | - 'challengeProviderId' => 'totp', |
|
| 437 | - 'redirect_url' => null, |
|
| 438 | - ]) |
|
| 439 | - ->willReturn('2fa/select/page'); |
|
| 440 | - $expected = new RedirectResponse('2fa/select/page'); |
|
| 441 | - |
|
| 442 | - $response = $this->controller->confirmProviderSetup('totp'); |
|
| 443 | - |
|
| 444 | - $this->assertEquals($expected, $response); |
|
| 445 | - } |
|
| 30 | + /** @var IRequest|\PHPUnit\Framework\MockObject\MockObject */ |
|
| 31 | + private $request; |
|
| 32 | + |
|
| 33 | + /** @var Manager|\PHPUnit\Framework\MockObject\MockObject */ |
|
| 34 | + private $twoFactorManager; |
|
| 35 | + |
|
| 36 | + /** @var IUserSession|\PHPUnit\Framework\MockObject\MockObject */ |
|
| 37 | + private $userSession; |
|
| 38 | + |
|
| 39 | + /** @var ISession|\PHPUnit\Framework\MockObject\MockObject */ |
|
| 40 | + private $session; |
|
| 41 | + |
|
| 42 | + /** @var IURLGenerator|\PHPUnit\Framework\MockObject\MockObject */ |
|
| 43 | + private $urlGenerator; |
|
| 44 | + |
|
| 45 | + /** @var LoggerInterface|\PHPUnit\Framework\MockObject\MockObject */ |
|
| 46 | + private $logger; |
|
| 47 | + |
|
| 48 | + /** @var TwoFactorChallengeController|\PHPUnit\Framework\MockObject\MockObject */ |
|
| 49 | + private $controller; |
|
| 50 | + |
|
| 51 | + protected function setUp(): void { |
|
| 52 | + parent::setUp(); |
|
| 53 | + |
|
| 54 | + $this->request = $this->createMock(IRequest::class); |
|
| 55 | + $this->twoFactorManager = $this->createMock(Manager::class); |
|
| 56 | + $this->userSession = $this->createMock(IUserSession::class); |
|
| 57 | + $this->session = $this->createMock(ISession::class); |
|
| 58 | + $this->urlGenerator = $this->createMock(IURLGenerator::class); |
|
| 59 | + $this->logger = $this->createMock(LoggerInterface::class); |
|
| 60 | + |
|
| 61 | + $this->controller = $this->getMockBuilder(TwoFactorChallengeController::class) |
|
| 62 | + ->setConstructorArgs([ |
|
| 63 | + 'core', |
|
| 64 | + $this->request, |
|
| 65 | + $this->twoFactorManager, |
|
| 66 | + $this->userSession, |
|
| 67 | + $this->session, |
|
| 68 | + $this->urlGenerator, |
|
| 69 | + $this->logger, |
|
| 70 | + ]) |
|
| 71 | + ->onlyMethods(['getLogoutUrl']) |
|
| 72 | + ->getMock(); |
|
| 73 | + $this->controller->expects($this->any()) |
|
| 74 | + ->method('getLogoutUrl') |
|
| 75 | + ->willReturn('logoutAttribute'); |
|
| 76 | + } |
|
| 77 | + |
|
| 78 | + public function testSelectChallenge(): void { |
|
| 79 | + $user = $this->getMockBuilder(IUser::class)->getMock(); |
|
| 80 | + $p1 = $this->createMock(IActivatableAtLogin::class); |
|
| 81 | + $p1->method('getId')->willReturn('p1'); |
|
| 82 | + $backupProvider = $this->createMock(IProvider::class); |
|
| 83 | + $backupProvider->method('getId')->willReturn('backup_codes'); |
|
| 84 | + $providerSet = new ProviderSet([$p1, $backupProvider], true); |
|
| 85 | + $this->twoFactorManager->expects($this->once()) |
|
| 86 | + ->method('getLoginSetupProviders') |
|
| 87 | + ->with($user) |
|
| 88 | + ->willReturn([$p1]); |
|
| 89 | + |
|
| 90 | + $this->userSession->expects($this->once()) |
|
| 91 | + ->method('getUser') |
|
| 92 | + ->willReturn($user); |
|
| 93 | + $this->twoFactorManager->expects($this->once()) |
|
| 94 | + ->method('getProviderSet') |
|
| 95 | + ->with($user) |
|
| 96 | + ->willReturn($providerSet); |
|
| 97 | + |
|
| 98 | + $expected = new StandaloneTemplateResponse('core', 'twofactorselectchallenge', [ |
|
| 99 | + 'providers' => [ |
|
| 100 | + $p1, |
|
| 101 | + ], |
|
| 102 | + 'providerMissing' => true, |
|
| 103 | + 'backupProvider' => $backupProvider, |
|
| 104 | + 'redirect_url' => '/some/url', |
|
| 105 | + 'logout_url' => 'logoutAttribute', |
|
| 106 | + 'hasSetupProviders' => true, |
|
| 107 | + ], 'guest'); |
|
| 108 | + |
|
| 109 | + $this->assertEquals($expected, $this->controller->selectChallenge('/some/url')); |
|
| 110 | + } |
|
| 111 | + |
|
| 112 | + public function testShowChallenge(): void { |
|
| 113 | + $user = $this->createMock(IUser::class); |
|
| 114 | + $provider = $this->createMock(IProvider::class); |
|
| 115 | + $provider->method('getId')->willReturn('myprovider'); |
|
| 116 | + $backupProvider = $this->createMock(IProvider::class); |
|
| 117 | + $backupProvider->method('getId')->willReturn('backup_codes'); |
|
| 118 | + $tmpl = $this->createMock(ITemplate::class); |
|
| 119 | + $providerSet = new ProviderSet([$provider, $backupProvider], true); |
|
| 120 | + |
|
| 121 | + $this->userSession->expects($this->once()) |
|
| 122 | + ->method('getUser') |
|
| 123 | + ->willReturn($user); |
|
| 124 | + $this->twoFactorManager->expects($this->once()) |
|
| 125 | + ->method('getProviderSet') |
|
| 126 | + ->with($user) |
|
| 127 | + ->willReturn($providerSet); |
|
| 128 | + $provider->expects($this->once()) |
|
| 129 | + ->method('getId') |
|
| 130 | + ->willReturn('u2f'); |
|
| 131 | + $backupProvider->expects($this->once()) |
|
| 132 | + ->method('getId') |
|
| 133 | + ->willReturn('backup_codes'); |
|
| 134 | + |
|
| 135 | + $this->session->expects($this->once()) |
|
| 136 | + ->method('exists') |
|
| 137 | + ->with('two_factor_auth_error') |
|
| 138 | + ->willReturn(true); |
|
| 139 | + $this->session->expects($this->exactly(2)) |
|
| 140 | + ->method('remove') |
|
| 141 | + ->with($this->logicalOr($this->equalTo('two_factor_auth_error'), $this->equalTo('two_factor_auth_error_message'))); |
|
| 142 | + $provider->expects($this->once()) |
|
| 143 | + ->method('getTemplate') |
|
| 144 | + ->with($user) |
|
| 145 | + ->willReturn($tmpl); |
|
| 146 | + $tmpl->expects($this->once()) |
|
| 147 | + ->method('fetchPage') |
|
| 148 | + ->willReturn('<html/>'); |
|
| 149 | + |
|
| 150 | + $expected = new StandaloneTemplateResponse('core', 'twofactorshowchallenge', [ |
|
| 151 | + 'error' => true, |
|
| 152 | + 'provider' => $provider, |
|
| 153 | + 'backupProvider' => $backupProvider, |
|
| 154 | + 'logout_url' => 'logoutAttribute', |
|
| 155 | + 'template' => '<html/>', |
|
| 156 | + 'redirect_url' => '/re/dir/ect/url', |
|
| 157 | + 'error_message' => null, |
|
| 158 | + ], 'guest'); |
|
| 159 | + |
|
| 160 | + $this->assertEquals($expected, $this->controller->showChallenge('myprovider', '/re/dir/ect/url')); |
|
| 161 | + } |
|
| 162 | + |
|
| 163 | + public function testShowInvalidChallenge(): void { |
|
| 164 | + $user = $this->createMock(IUser::class); |
|
| 165 | + $providerSet = new ProviderSet([], false); |
|
| 166 | + |
|
| 167 | + $this->userSession->expects($this->once()) |
|
| 168 | + ->method('getUser') |
|
| 169 | + ->willReturn($user); |
|
| 170 | + $this->twoFactorManager->expects($this->once()) |
|
| 171 | + ->method('getProviderSet') |
|
| 172 | + ->with($user) |
|
| 173 | + ->willReturn($providerSet); |
|
| 174 | + $this->urlGenerator->expects($this->once()) |
|
| 175 | + ->method('linkToRoute') |
|
| 176 | + ->with('core.TwoFactorChallenge.selectChallenge') |
|
| 177 | + ->willReturn('select/challenge/url'); |
|
| 178 | + |
|
| 179 | + $expected = new RedirectResponse('select/challenge/url'); |
|
| 180 | + |
|
| 181 | + $this->assertEquals($expected, $this->controller->showChallenge('myprovider', 'redirect/url')); |
|
| 182 | + } |
|
| 183 | + |
|
| 184 | + public function testSolveChallenge(): void { |
|
| 185 | + $user = $this->createMock(IUser::class); |
|
| 186 | + $provider = $this->createMock(IProvider::class); |
|
| 187 | + |
|
| 188 | + $this->userSession->expects($this->once()) |
|
| 189 | + ->method('getUser') |
|
| 190 | + ->willReturn($user); |
|
| 191 | + $this->twoFactorManager->expects($this->once()) |
|
| 192 | + ->method('getProvider') |
|
| 193 | + ->with($user, 'myprovider') |
|
| 194 | + ->willReturn($provider); |
|
| 195 | + |
|
| 196 | + $this->twoFactorManager->expects($this->once()) |
|
| 197 | + ->method('verifyChallenge') |
|
| 198 | + ->with('myprovider', $user, 'token') |
|
| 199 | + ->willReturn(true); |
|
| 200 | + $this->urlGenerator |
|
| 201 | + ->expects($this->once()) |
|
| 202 | + ->method('linkToDefaultPageUrl') |
|
| 203 | + ->willReturn('/default/foo'); |
|
| 204 | + |
|
| 205 | + $expected = new RedirectResponse('/default/foo'); |
|
| 206 | + $this->assertEquals($expected, $this->controller->solveChallenge('myprovider', 'token')); |
|
| 207 | + } |
|
| 208 | + |
|
| 209 | + public function testSolveValidChallengeAndRedirect(): void { |
|
| 210 | + $user = $this->createMock(IUser::class); |
|
| 211 | + $provider = $this->createMock(IProvider::class); |
|
| 212 | + |
|
| 213 | + $this->userSession->expects($this->once()) |
|
| 214 | + ->method('getUser') |
|
| 215 | + ->willReturn($user); |
|
| 216 | + $this->twoFactorManager->expects($this->once()) |
|
| 217 | + ->method('getProvider') |
|
| 218 | + ->with($user, 'myprovider') |
|
| 219 | + ->willReturn($provider); |
|
| 220 | + |
|
| 221 | + $this->twoFactorManager->expects($this->once()) |
|
| 222 | + ->method('verifyChallenge') |
|
| 223 | + ->with('myprovider', $user, 'token') |
|
| 224 | + ->willReturn(true); |
|
| 225 | + $this->urlGenerator->expects($this->once()) |
|
| 226 | + ->method('getAbsoluteURL') |
|
| 227 | + ->with('redirect url') |
|
| 228 | + ->willReturn('redirect/url'); |
|
| 229 | + |
|
| 230 | + $expected = new RedirectResponse('redirect/url'); |
|
| 231 | + $this->assertEquals($expected, $this->controller->solveChallenge('myprovider', 'token', 'redirect%20url')); |
|
| 232 | + } |
|
| 233 | + |
|
| 234 | + public function testSolveChallengeInvalidProvider(): void { |
|
| 235 | + $user = $this->getMockBuilder(IUser::class)->getMock(); |
|
| 236 | + |
|
| 237 | + $this->userSession->expects($this->once()) |
|
| 238 | + ->method('getUser') |
|
| 239 | + ->willReturn($user); |
|
| 240 | + $this->twoFactorManager->expects($this->once()) |
|
| 241 | + ->method('getProvider') |
|
| 242 | + ->with($user, 'myprovider') |
|
| 243 | + ->willReturn(null); |
|
| 244 | + $this->urlGenerator->expects($this->once()) |
|
| 245 | + ->method('linkToRoute') |
|
| 246 | + ->with('core.TwoFactorChallenge.selectChallenge') |
|
| 247 | + ->willReturn('select/challenge/url'); |
|
| 248 | + |
|
| 249 | + $expected = new RedirectResponse('select/challenge/url'); |
|
| 250 | + |
|
| 251 | + $this->assertEquals($expected, $this->controller->solveChallenge('myprovider', 'token')); |
|
| 252 | + } |
|
| 253 | + |
|
| 254 | + public function testSolveInvalidChallenge(): void { |
|
| 255 | + $user = $this->createMock(IUser::class); |
|
| 256 | + $provider = $this->createMock(IProvider::class); |
|
| 257 | + |
|
| 258 | + $this->userSession->expects($this->once()) |
|
| 259 | + ->method('getUser') |
|
| 260 | + ->willReturn($user); |
|
| 261 | + $this->twoFactorManager->expects($this->once()) |
|
| 262 | + ->method('getProvider') |
|
| 263 | + ->with($user, 'myprovider') |
|
| 264 | + ->willReturn($provider); |
|
| 265 | + |
|
| 266 | + $this->twoFactorManager->expects($this->once()) |
|
| 267 | + ->method('verifyChallenge') |
|
| 268 | + ->with('myprovider', $user, 'token') |
|
| 269 | + ->willReturn(false); |
|
| 270 | + $this->session->expects($this->once()) |
|
| 271 | + ->method('set') |
|
| 272 | + ->with('two_factor_auth_error', true); |
|
| 273 | + $this->urlGenerator->expects($this->once()) |
|
| 274 | + ->method('linkToRoute') |
|
| 275 | + ->with('core.TwoFactorChallenge.showChallenge', [ |
|
| 276 | + 'challengeProviderId' => 'myprovider', |
|
| 277 | + 'redirect_url' => '/url', |
|
| 278 | + ]) |
|
| 279 | + ->willReturn('files/index/url'); |
|
| 280 | + $provider->expects($this->once()) |
|
| 281 | + ->method('getId') |
|
| 282 | + ->willReturn('myprovider'); |
|
| 283 | + |
|
| 284 | + $expected = new RedirectResponse('files/index/url'); |
|
| 285 | + $this->assertEquals($expected, $this->controller->solveChallenge('myprovider', 'token', '/url')); |
|
| 286 | + } |
|
| 287 | + |
|
| 288 | + public function testSolveChallengeTwoFactorException(): void { |
|
| 289 | + $user = $this->createMock(IUser::class); |
|
| 290 | + $provider = $this->createMock(IProvider::class); |
|
| 291 | + $exception = new TwoFactorException('2FA failed'); |
|
| 292 | + |
|
| 293 | + $this->userSession->expects($this->once()) |
|
| 294 | + ->method('getUser') |
|
| 295 | + ->willReturn($user); |
|
| 296 | + $this->twoFactorManager->expects($this->once()) |
|
| 297 | + ->method('getProvider') |
|
| 298 | + ->with($user, 'myprovider') |
|
| 299 | + ->willReturn($provider); |
|
| 300 | + |
|
| 301 | + $this->twoFactorManager->expects($this->once()) |
|
| 302 | + ->method('verifyChallenge') |
|
| 303 | + ->with('myprovider', $user, 'token') |
|
| 304 | + ->will($this->throwException($exception)); |
|
| 305 | + $calls = [ |
|
| 306 | + ['two_factor_auth_error_message', '2FA failed'], |
|
| 307 | + ['two_factor_auth_error', true], |
|
| 308 | + ]; |
|
| 309 | + $this->session->expects($this->exactly(2)) |
|
| 310 | + ->method('set') |
|
| 311 | + ->willReturnCallback(function () use (&$calls) { |
|
| 312 | + $expected = array_shift($calls); |
|
| 313 | + $this->assertEquals($expected, func_get_args()); |
|
| 314 | + }); |
|
| 315 | + $this->urlGenerator->expects($this->once()) |
|
| 316 | + ->method('linkToRoute') |
|
| 317 | + ->with('core.TwoFactorChallenge.showChallenge', [ |
|
| 318 | + 'challengeProviderId' => 'myprovider', |
|
| 319 | + 'redirect_url' => '/url', |
|
| 320 | + ]) |
|
| 321 | + ->willReturn('files/index/url'); |
|
| 322 | + $provider->expects($this->once()) |
|
| 323 | + ->method('getId') |
|
| 324 | + ->willReturn('myprovider'); |
|
| 325 | + |
|
| 326 | + $expected = new RedirectResponse('files/index/url'); |
|
| 327 | + $this->assertEquals($expected, $this->controller->solveChallenge('myprovider', 'token', '/url')); |
|
| 328 | + } |
|
| 329 | + |
|
| 330 | + public function testSetUpProviders(): void { |
|
| 331 | + $user = $this->createMock(IUser::class); |
|
| 332 | + $this->userSession->expects($this->once()) |
|
| 333 | + ->method('getUser') |
|
| 334 | + ->willReturn($user); |
|
| 335 | + $provider = $this->createMock(IActivatableAtLogin::class); |
|
| 336 | + $this->twoFactorManager->expects($this->once()) |
|
| 337 | + ->method('getLoginSetupProviders') |
|
| 338 | + ->with($user) |
|
| 339 | + ->willReturn([ |
|
| 340 | + $provider, |
|
| 341 | + ]); |
|
| 342 | + $expected = new StandaloneTemplateResponse( |
|
| 343 | + 'core', |
|
| 344 | + 'twofactorsetupselection', |
|
| 345 | + [ |
|
| 346 | + 'providers' => [ |
|
| 347 | + $provider, |
|
| 348 | + ], |
|
| 349 | + 'logout_url' => 'logoutAttribute', |
|
| 350 | + 'redirect_url' => null, |
|
| 351 | + ], |
|
| 352 | + 'guest' |
|
| 353 | + ); |
|
| 354 | + |
|
| 355 | + $response = $this->controller->setupProviders(); |
|
| 356 | + |
|
| 357 | + $this->assertEquals($expected, $response); |
|
| 358 | + } |
|
| 359 | + |
|
| 360 | + public function testSetUpInvalidProvider(): void { |
|
| 361 | + $user = $this->createMock(IUser::class); |
|
| 362 | + $this->userSession->expects($this->once()) |
|
| 363 | + ->method('getUser') |
|
| 364 | + ->willReturn($user); |
|
| 365 | + $provider = $this->createMock(IActivatableAtLogin::class); |
|
| 366 | + $provider->expects($this->any()) |
|
| 367 | + ->method('getId') |
|
| 368 | + ->willReturn('prov1'); |
|
| 369 | + $this->twoFactorManager->expects($this->once()) |
|
| 370 | + ->method('getLoginSetupProviders') |
|
| 371 | + ->with($user) |
|
| 372 | + ->willReturn([ |
|
| 373 | + $provider, |
|
| 374 | + ]); |
|
| 375 | + $this->urlGenerator->expects($this->once()) |
|
| 376 | + ->method('linkToRoute') |
|
| 377 | + ->with('core.TwoFactorChallenge.selectChallenge') |
|
| 378 | + ->willReturn('2fa/select/page'); |
|
| 379 | + $expected = new RedirectResponse('2fa/select/page'); |
|
| 380 | + |
|
| 381 | + $response = $this->controller->setupProvider('prov2'); |
|
| 382 | + |
|
| 383 | + $this->assertEquals($expected, $response); |
|
| 384 | + } |
|
| 385 | + |
|
| 386 | + public function testSetUpProvider(): void { |
|
| 387 | + $user = $this->createMock(IUser::class); |
|
| 388 | + $this->userSession->expects($this->once()) |
|
| 389 | + ->method('getUser') |
|
| 390 | + ->willReturn($user); |
|
| 391 | + $provider = $this->createMock(IActivatableAtLogin::class); |
|
| 392 | + $provider->expects($this->any()) |
|
| 393 | + ->method('getId') |
|
| 394 | + ->willReturn('prov1'); |
|
| 395 | + $this->twoFactorManager->expects($this->once()) |
|
| 396 | + ->method('getLoginSetupProviders') |
|
| 397 | + ->with($user) |
|
| 398 | + ->willReturn([ |
|
| 399 | + $provider, |
|
| 400 | + ]); |
|
| 401 | + $loginSetup = $this->createMock(ILoginSetupProvider::class); |
|
| 402 | + $provider->expects($this->any()) |
|
| 403 | + ->method('getLoginSetup') |
|
| 404 | + ->with($user) |
|
| 405 | + ->willReturn($loginSetup); |
|
| 406 | + $tmpl = $this->createMock(ITemplate::class); |
|
| 407 | + $loginSetup->expects($this->once()) |
|
| 408 | + ->method('getBody') |
|
| 409 | + ->willReturn($tmpl); |
|
| 410 | + $tmpl->expects($this->once()) |
|
| 411 | + ->method('fetchPage') |
|
| 412 | + ->willReturn('tmpl'); |
|
| 413 | + $expected = new StandaloneTemplateResponse( |
|
| 414 | + 'core', |
|
| 415 | + 'twofactorsetupchallenge', |
|
| 416 | + [ |
|
| 417 | + 'provider' => $provider, |
|
| 418 | + 'logout_url' => 'logoutAttribute', |
|
| 419 | + 'template' => 'tmpl', |
|
| 420 | + 'redirect_url' => null, |
|
| 421 | + ], |
|
| 422 | + 'guest' |
|
| 423 | + ); |
|
| 424 | + |
|
| 425 | + $response = $this->controller->setupProvider('prov1'); |
|
| 426 | + |
|
| 427 | + $this->assertEquals($expected, $response); |
|
| 428 | + } |
|
| 429 | + |
|
| 430 | + public function testConfirmProviderSetup(): void { |
|
| 431 | + $this->urlGenerator->expects($this->once()) |
|
| 432 | + ->method('linkToRoute') |
|
| 433 | + ->with( |
|
| 434 | + 'core.TwoFactorChallenge.showChallenge', |
|
| 435 | + [ |
|
| 436 | + 'challengeProviderId' => 'totp', |
|
| 437 | + 'redirect_url' => null, |
|
| 438 | + ]) |
|
| 439 | + ->willReturn('2fa/select/page'); |
|
| 440 | + $expected = new RedirectResponse('2fa/select/page'); |
|
| 441 | + |
|
| 442 | + $response = $this->controller->confirmProviderSetup('totp'); |
|
| 443 | + |
|
| 444 | + $this->assertEquals($expected, $response); |
|
| 445 | + } |
|
| 446 | 446 | } |
@@ -308,7 +308,7 @@ |
||
| 308 | 308 | ]; |
| 309 | 309 | $this->session->expects($this->exactly(2)) |
| 310 | 310 | ->method('set') |
| 311 | - ->willReturnCallback(function () use (&$calls) { |
|
| 311 | + ->willReturnCallback(function() use (&$calls) { |
|
| 312 | 312 | $expected = array_shift($calls); |
| 313 | 313 | $this->assertEquals($expected, func_get_args()); |
| 314 | 314 | }); |
@@ -36,647 +36,647 @@ |
||
| 36 | 36 | use Test\TestCase; |
| 37 | 37 | |
| 38 | 38 | class ClientFlowLoginControllerTest extends TestCase { |
| 39 | - private IRequest&MockObject $request; |
|
| 40 | - private IUserSession&MockObject $userSession; |
|
| 41 | - private IL10N&MockObject $l10n; |
|
| 42 | - private Defaults&MockObject $defaults; |
|
| 43 | - private ISession&MockObject $session; |
|
| 44 | - private IProvider&MockObject $tokenProvider; |
|
| 45 | - private ISecureRandom&MockObject $random; |
|
| 46 | - private IURLGenerator&MockObject $urlGenerator; |
|
| 47 | - private ClientMapper&MockObject $clientMapper; |
|
| 48 | - private AccessTokenMapper&MockObject $accessTokenMapper; |
|
| 49 | - private ICrypto&MockObject $crypto; |
|
| 50 | - private IEventDispatcher&MockObject $eventDispatcher; |
|
| 51 | - private ITimeFactory&MockObject $timeFactory; |
|
| 52 | - private IConfig&MockObject $config; |
|
| 53 | - |
|
| 54 | - private ClientFlowLoginController $clientFlowLoginController; |
|
| 55 | - |
|
| 56 | - protected function setUp(): void { |
|
| 57 | - parent::setUp(); |
|
| 58 | - |
|
| 59 | - $this->request = $this->createMock(IRequest::class); |
|
| 60 | - $this->userSession = $this->createMock(IUserSession::class); |
|
| 61 | - $this->l10n = $this->createMock(IL10N::class); |
|
| 62 | - $this->l10n |
|
| 63 | - ->expects($this->any()) |
|
| 64 | - ->method('t') |
|
| 65 | - ->willReturnCallback(function ($text, $parameters = []) { |
|
| 66 | - return vsprintf($text, $parameters); |
|
| 67 | - }); |
|
| 68 | - $this->defaults = $this->createMock(Defaults::class); |
|
| 69 | - $this->session = $this->createMock(ISession::class); |
|
| 70 | - $this->tokenProvider = $this->createMock(IProvider::class); |
|
| 71 | - $this->random = $this->createMock(ISecureRandom::class); |
|
| 72 | - $this->urlGenerator = $this->createMock(IURLGenerator::class); |
|
| 73 | - $this->clientMapper = $this->createMock(ClientMapper::class); |
|
| 74 | - $this->accessTokenMapper = $this->createMock(AccessTokenMapper::class); |
|
| 75 | - $this->crypto = $this->createMock(ICrypto::class); |
|
| 76 | - $this->eventDispatcher = $this->createMock(IEventDispatcher::class); |
|
| 77 | - $this->timeFactory = $this->createMock(ITimeFactory::class); |
|
| 78 | - $this->config = $this->createMock(IConfig::class); |
|
| 79 | - |
|
| 80 | - $this->clientFlowLoginController = new ClientFlowLoginController( |
|
| 81 | - 'core', |
|
| 82 | - $this->request, |
|
| 83 | - $this->userSession, |
|
| 84 | - $this->l10n, |
|
| 85 | - $this->defaults, |
|
| 86 | - $this->session, |
|
| 87 | - $this->tokenProvider, |
|
| 88 | - $this->random, |
|
| 89 | - $this->urlGenerator, |
|
| 90 | - $this->clientMapper, |
|
| 91 | - $this->accessTokenMapper, |
|
| 92 | - $this->crypto, |
|
| 93 | - $this->eventDispatcher, |
|
| 94 | - $this->timeFactory, |
|
| 95 | - $this->config, |
|
| 96 | - ); |
|
| 97 | - } |
|
| 98 | - |
|
| 99 | - public function testShowAuthPickerPageNoClientOrOauthRequest(): void { |
|
| 100 | - $expected = new StandaloneTemplateResponse( |
|
| 101 | - 'core', |
|
| 102 | - 'error', |
|
| 103 | - [ |
|
| 104 | - 'errors' => |
|
| 105 | - [ |
|
| 106 | - [ |
|
| 107 | - 'error' => 'Access Forbidden', |
|
| 108 | - 'hint' => 'Invalid request', |
|
| 109 | - ], |
|
| 110 | - ], |
|
| 111 | - ], |
|
| 112 | - 'guest' |
|
| 113 | - ); |
|
| 114 | - |
|
| 115 | - $this->assertEquals($expected, $this->clientFlowLoginController->showAuthPickerPage()); |
|
| 116 | - } |
|
| 117 | - |
|
| 118 | - public function testShowAuthPickerPageWithOcsHeader(): void { |
|
| 119 | - $this->request |
|
| 120 | - ->method('getHeader') |
|
| 121 | - ->willReturnMap([ |
|
| 122 | - ['USER_AGENT', 'Mac OS X Sync Client'], |
|
| 123 | - ['OCS-APIREQUEST', 'true'], |
|
| 124 | - ]); |
|
| 125 | - $this->random |
|
| 126 | - ->expects($this->once()) |
|
| 127 | - ->method('generate') |
|
| 128 | - ->with( |
|
| 129 | - 64, |
|
| 130 | - ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_UPPER . ISecureRandom::CHAR_DIGITS |
|
| 131 | - ) |
|
| 132 | - ->willReturn('StateToken'); |
|
| 133 | - $this->session |
|
| 134 | - ->expects($this->once()) |
|
| 135 | - ->method('set') |
|
| 136 | - ->with('client.flow.state.token', 'StateToken'); |
|
| 137 | - $this->session |
|
| 138 | - ->expects($this->once()) |
|
| 139 | - ->method('get') |
|
| 140 | - ->with('oauth.state') |
|
| 141 | - ->willReturn('OauthStateToken'); |
|
| 142 | - $this->defaults |
|
| 143 | - ->expects($this->once()) |
|
| 144 | - ->method('getName') |
|
| 145 | - ->willReturn('ExampleCloud'); |
|
| 146 | - $this->request |
|
| 147 | - ->expects($this->once()) |
|
| 148 | - ->method('getServerHost') |
|
| 149 | - ->willReturn('example.com'); |
|
| 150 | - $this->request |
|
| 151 | - ->method('getServerProtocol') |
|
| 152 | - ->willReturn('https'); |
|
| 153 | - |
|
| 154 | - $expected = new StandaloneTemplateResponse( |
|
| 155 | - 'core', |
|
| 156 | - 'loginflow/authpicker', |
|
| 157 | - [ |
|
| 158 | - 'client' => 'Mac OS X Sync Client', |
|
| 159 | - 'clientIdentifier' => '', |
|
| 160 | - 'instanceName' => 'ExampleCloud', |
|
| 161 | - 'urlGenerator' => $this->urlGenerator, |
|
| 162 | - 'stateToken' => 'StateToken', |
|
| 163 | - 'serverHost' => 'https://example.com', |
|
| 164 | - 'oauthState' => 'OauthStateToken', |
|
| 165 | - 'user' => '', |
|
| 166 | - 'direct' => 0, |
|
| 167 | - 'providedRedirectUri' => '', |
|
| 168 | - ], |
|
| 169 | - 'guest' |
|
| 170 | - ); |
|
| 171 | - $csp = new Http\ContentSecurityPolicy(); |
|
| 172 | - $csp->addAllowedFormActionDomain('nc://*'); |
|
| 173 | - $expected->setContentSecurityPolicy($csp); |
|
| 174 | - $this->assertEquals($expected, $this->clientFlowLoginController->showAuthPickerPage()); |
|
| 175 | - } |
|
| 176 | - |
|
| 177 | - public function testShowAuthPickerPageWithOauth(): void { |
|
| 178 | - $this->request |
|
| 179 | - ->method('getHeader') |
|
| 180 | - ->willReturnMap([ |
|
| 181 | - ['USER_AGENT', 'Mac OS X Sync Client'], |
|
| 182 | - ['OCS-APIREQUEST', 'false'], |
|
| 183 | - ]); |
|
| 184 | - $client = new Client(); |
|
| 185 | - $client->setName('My external service'); |
|
| 186 | - $client->setRedirectUri('https://example.com/redirect.php'); |
|
| 187 | - $this->clientMapper |
|
| 188 | - ->expects($this->once()) |
|
| 189 | - ->method('getByIdentifier') |
|
| 190 | - ->with('MyClientIdentifier') |
|
| 191 | - ->willReturn($client); |
|
| 192 | - $this->random |
|
| 193 | - ->expects($this->once()) |
|
| 194 | - ->method('generate') |
|
| 195 | - ->with( |
|
| 196 | - 64, |
|
| 197 | - ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_UPPER . ISecureRandom::CHAR_DIGITS |
|
| 198 | - ) |
|
| 199 | - ->willReturn('StateToken'); |
|
| 200 | - $this->session |
|
| 201 | - ->expects($this->once()) |
|
| 202 | - ->method('set') |
|
| 203 | - ->with('client.flow.state.token', 'StateToken'); |
|
| 204 | - $this->session |
|
| 205 | - ->expects($this->once()) |
|
| 206 | - ->method('get') |
|
| 207 | - ->with('oauth.state') |
|
| 208 | - ->willReturn('OauthStateToken'); |
|
| 209 | - $this->defaults |
|
| 210 | - ->expects($this->once()) |
|
| 211 | - ->method('getName') |
|
| 212 | - ->willReturn('ExampleCloud'); |
|
| 213 | - $this->request |
|
| 214 | - ->expects($this->once()) |
|
| 215 | - ->method('getServerHost') |
|
| 216 | - ->willReturn('example.com'); |
|
| 217 | - $this->request |
|
| 218 | - ->method('getServerProtocol') |
|
| 219 | - ->willReturn('https'); |
|
| 220 | - |
|
| 221 | - $expected = new StandaloneTemplateResponse( |
|
| 222 | - 'core', |
|
| 223 | - 'loginflow/authpicker', |
|
| 224 | - [ |
|
| 225 | - 'client' => 'My external service', |
|
| 226 | - 'clientIdentifier' => 'MyClientIdentifier', |
|
| 227 | - 'instanceName' => 'ExampleCloud', |
|
| 228 | - 'urlGenerator' => $this->urlGenerator, |
|
| 229 | - 'stateToken' => 'StateToken', |
|
| 230 | - 'serverHost' => 'https://example.com', |
|
| 231 | - 'oauthState' => 'OauthStateToken', |
|
| 232 | - 'user' => '', |
|
| 233 | - 'direct' => 0, |
|
| 234 | - 'providedRedirectUri' => '', |
|
| 235 | - ], |
|
| 236 | - 'guest' |
|
| 237 | - ); |
|
| 238 | - $csp = new Http\ContentSecurityPolicy(); |
|
| 239 | - $csp->addAllowedFormActionDomain('https://example.com/redirect.php'); |
|
| 240 | - $expected->setContentSecurityPolicy($csp); |
|
| 241 | - $this->assertEquals($expected, $this->clientFlowLoginController->showAuthPickerPage('MyClientIdentifier')); |
|
| 242 | - } |
|
| 243 | - |
|
| 244 | - public function testGenerateAppPasswordWithInvalidToken(): void { |
|
| 245 | - $this->session |
|
| 246 | - ->expects($this->once()) |
|
| 247 | - ->method('get') |
|
| 248 | - ->with('client.flow.state.token') |
|
| 249 | - ->willReturn('OtherToken'); |
|
| 250 | - $this->session |
|
| 251 | - ->expects($this->once()) |
|
| 252 | - ->method('remove') |
|
| 253 | - ->with('client.flow.state.token'); |
|
| 254 | - |
|
| 255 | - $expected = new StandaloneTemplateResponse( |
|
| 256 | - 'core', |
|
| 257 | - '403', |
|
| 258 | - [ |
|
| 259 | - 'message' => 'State token does not match', |
|
| 260 | - ], |
|
| 261 | - 'guest' |
|
| 262 | - ); |
|
| 263 | - $expected->setStatus(Http::STATUS_FORBIDDEN); |
|
| 264 | - $this->assertEquals($expected, $this->clientFlowLoginController->generateAppPassword('MyStateToken')); |
|
| 265 | - } |
|
| 266 | - |
|
| 267 | - public function testGenerateAppPasswordWithSessionNotAvailableException(): void { |
|
| 268 | - $this->session |
|
| 269 | - ->expects($this->once()) |
|
| 270 | - ->method('get') |
|
| 271 | - ->with('client.flow.state.token') |
|
| 272 | - ->willReturn('MyStateToken'); |
|
| 273 | - $this->session |
|
| 274 | - ->expects($this->once()) |
|
| 275 | - ->method('remove') |
|
| 276 | - ->with('client.flow.state.token'); |
|
| 277 | - $this->session |
|
| 278 | - ->expects($this->once()) |
|
| 279 | - ->method('getId') |
|
| 280 | - ->willThrowException(new SessionNotAvailableException()); |
|
| 281 | - |
|
| 282 | - $expected = new Http\Response(); |
|
| 283 | - $expected->setStatus(Http::STATUS_FORBIDDEN); |
|
| 284 | - $this->assertEquals($expected, $this->clientFlowLoginController->generateAppPassword('MyStateToken')); |
|
| 285 | - } |
|
| 286 | - |
|
| 287 | - public function testGenerateAppPasswordWithInvalidTokenException(): void { |
|
| 288 | - $this->session |
|
| 289 | - ->expects($this->once()) |
|
| 290 | - ->method('get') |
|
| 291 | - ->with('client.flow.state.token') |
|
| 292 | - ->willReturn('MyStateToken'); |
|
| 293 | - $this->session |
|
| 294 | - ->expects($this->once()) |
|
| 295 | - ->method('remove') |
|
| 296 | - ->with('client.flow.state.token'); |
|
| 297 | - $this->session |
|
| 298 | - ->expects($this->once()) |
|
| 299 | - ->method('getId') |
|
| 300 | - ->willReturn('SessionId'); |
|
| 301 | - $this->tokenProvider |
|
| 302 | - ->expects($this->once()) |
|
| 303 | - ->method('getToken') |
|
| 304 | - ->with('SessionId') |
|
| 305 | - ->willThrowException(new InvalidTokenException()); |
|
| 306 | - |
|
| 307 | - $expected = new Http\Response(); |
|
| 308 | - $expected->setStatus(Http::STATUS_FORBIDDEN); |
|
| 309 | - $this->assertEquals($expected, $this->clientFlowLoginController->generateAppPassword('MyStateToken')); |
|
| 310 | - } |
|
| 311 | - |
|
| 312 | - public function testGeneratePasswordWithPassword(): void { |
|
| 313 | - $this->session |
|
| 314 | - ->expects($this->once()) |
|
| 315 | - ->method('get') |
|
| 316 | - ->with('client.flow.state.token') |
|
| 317 | - ->willReturn('MyStateToken'); |
|
| 318 | - $this->session |
|
| 319 | - ->expects($this->once()) |
|
| 320 | - ->method('remove') |
|
| 321 | - ->with('client.flow.state.token'); |
|
| 322 | - $this->session |
|
| 323 | - ->expects($this->once()) |
|
| 324 | - ->method('getId') |
|
| 325 | - ->willReturn('SessionId'); |
|
| 326 | - $myToken = $this->createMock(IToken::class); |
|
| 327 | - $myToken |
|
| 328 | - ->expects($this->once()) |
|
| 329 | - ->method('getLoginName') |
|
| 330 | - ->willReturn('MyLoginName'); |
|
| 331 | - $this->tokenProvider |
|
| 332 | - ->expects($this->once()) |
|
| 333 | - ->method('getToken') |
|
| 334 | - ->with('SessionId') |
|
| 335 | - ->willReturn($myToken); |
|
| 336 | - $this->tokenProvider |
|
| 337 | - ->expects($this->once()) |
|
| 338 | - ->method('getPassword') |
|
| 339 | - ->with($myToken, 'SessionId') |
|
| 340 | - ->willReturn('MyPassword'); |
|
| 341 | - $this->random |
|
| 342 | - ->expects($this->once()) |
|
| 343 | - ->method('generate') |
|
| 344 | - ->with(72) |
|
| 345 | - ->willReturn('MyGeneratedToken'); |
|
| 346 | - $user = $this->createMock(IUser::class); |
|
| 347 | - $user |
|
| 348 | - ->expects($this->once()) |
|
| 349 | - ->method('getUID') |
|
| 350 | - ->willReturn('MyUid'); |
|
| 351 | - $this->userSession |
|
| 352 | - ->expects($this->once()) |
|
| 353 | - ->method('getUser') |
|
| 354 | - ->willReturn($user); |
|
| 355 | - $this->tokenProvider |
|
| 356 | - ->expects($this->once()) |
|
| 357 | - ->method('generateToken') |
|
| 358 | - ->with( |
|
| 359 | - 'MyGeneratedToken', |
|
| 360 | - 'MyUid', |
|
| 361 | - 'MyLoginName', |
|
| 362 | - 'MyPassword', |
|
| 363 | - 'unknown', |
|
| 364 | - IToken::PERMANENT_TOKEN, |
|
| 365 | - IToken::DO_NOT_REMEMBER |
|
| 366 | - ); |
|
| 367 | - $this->request |
|
| 368 | - ->expects($this->once()) |
|
| 369 | - ->method('getServerProtocol') |
|
| 370 | - ->willReturn('http'); |
|
| 371 | - $this->request |
|
| 372 | - ->expects($this->once()) |
|
| 373 | - ->method('getServerHost') |
|
| 374 | - ->willReturn('example.com'); |
|
| 375 | - $this->request |
|
| 376 | - ->expects($this->any()) |
|
| 377 | - ->method('getHeader') |
|
| 378 | - ->willReturn(''); |
|
| 379 | - |
|
| 380 | - $this->eventDispatcher->expects($this->once()) |
|
| 381 | - ->method('dispatchTyped'); |
|
| 382 | - |
|
| 383 | - $expected = new Http\RedirectResponse('nc://login/server:http://example.com&user:MyLoginName&password:MyGeneratedToken'); |
|
| 384 | - $this->assertEquals($expected, $this->clientFlowLoginController->generateAppPassword('MyStateToken')); |
|
| 385 | - } |
|
| 386 | - |
|
| 387 | - /** |
|
| 388 | - * @param string $redirectUri |
|
| 389 | - * @param string $redirectUrl |
|
| 390 | - * |
|
| 391 | - * @testWith |
|
| 392 | - * ["https://example.com/redirect.php", "https://example.com/redirect.php?state=MyOauthState&code=MyAccessCode"] |
|
| 393 | - * ["https://example.com/redirect.php?hello=world", "https://example.com/redirect.php?hello=world&state=MyOauthState&code=MyAccessCode"] |
|
| 394 | - * |
|
| 395 | - */ |
|
| 396 | - public function testGeneratePasswordWithPasswordForOauthClient($redirectUri, $redirectUrl): void { |
|
| 397 | - $this->session |
|
| 398 | - ->method('get') |
|
| 399 | - ->willReturnMap([ |
|
| 400 | - ['client.flow.state.token', 'MyStateToken'], |
|
| 401 | - ['oauth.state', 'MyOauthState'], |
|
| 402 | - ]); |
|
| 403 | - $calls = [ |
|
| 404 | - 'client.flow.state.token', |
|
| 405 | - 'oauth.state', |
|
| 406 | - ]; |
|
| 407 | - $this->session |
|
| 408 | - ->method('remove') |
|
| 409 | - ->willReturnCallback(function ($key) use (&$calls) { |
|
| 410 | - $expected = array_shift($calls); |
|
| 411 | - $this->assertEquals($expected, $key); |
|
| 412 | - }); |
|
| 413 | - $this->session |
|
| 414 | - ->expects($this->once()) |
|
| 415 | - ->method('getId') |
|
| 416 | - ->willReturn('SessionId'); |
|
| 417 | - $myToken = $this->createMock(IToken::class); |
|
| 418 | - $myToken |
|
| 419 | - ->expects($this->once()) |
|
| 420 | - ->method('getLoginName') |
|
| 421 | - ->willReturn('MyLoginName'); |
|
| 422 | - $this->tokenProvider |
|
| 423 | - ->expects($this->once()) |
|
| 424 | - ->method('getToken') |
|
| 425 | - ->with('SessionId') |
|
| 426 | - ->willReturn($myToken); |
|
| 427 | - $this->tokenProvider |
|
| 428 | - ->expects($this->once()) |
|
| 429 | - ->method('getPassword') |
|
| 430 | - ->with($myToken, 'SessionId') |
|
| 431 | - ->willReturn('MyPassword'); |
|
| 432 | - $this->random |
|
| 433 | - ->method('generate') |
|
| 434 | - ->willReturnMap([ |
|
| 435 | - [72, ISecureRandom::CHAR_UPPER . ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_DIGITS, 'MyGeneratedToken'], |
|
| 436 | - [128, ISecureRandom::CHAR_UPPER . ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_DIGITS, 'MyAccessCode'], |
|
| 437 | - ]); |
|
| 438 | - $user = $this->createMock(IUser::class); |
|
| 439 | - $user |
|
| 440 | - ->expects($this->once()) |
|
| 441 | - ->method('getUID') |
|
| 442 | - ->willReturn('MyUid'); |
|
| 443 | - $this->userSession |
|
| 444 | - ->expects($this->once()) |
|
| 445 | - ->method('getUser') |
|
| 446 | - ->willReturn($user); |
|
| 447 | - $token = $this->createMock(IToken::class); |
|
| 448 | - $this->tokenProvider |
|
| 449 | - ->expects($this->once()) |
|
| 450 | - ->method('generateToken') |
|
| 451 | - ->with( |
|
| 452 | - 'MyGeneratedToken', |
|
| 453 | - 'MyUid', |
|
| 454 | - 'MyLoginName', |
|
| 455 | - 'MyPassword', |
|
| 456 | - 'My OAuth client', |
|
| 457 | - IToken::PERMANENT_TOKEN, |
|
| 458 | - IToken::DO_NOT_REMEMBER |
|
| 459 | - ) |
|
| 460 | - ->willReturn($token); |
|
| 461 | - $client = new Client(); |
|
| 462 | - $client->setName('My OAuth client'); |
|
| 463 | - $client->setRedirectUri($redirectUri); |
|
| 464 | - $this->clientMapper |
|
| 465 | - ->expects($this->once()) |
|
| 466 | - ->method('getByIdentifier') |
|
| 467 | - ->with('MyClientIdentifier') |
|
| 468 | - ->willReturn($client); |
|
| 469 | - |
|
| 470 | - $this->eventDispatcher->expects($this->once()) |
|
| 471 | - ->method('dispatchTyped'); |
|
| 472 | - |
|
| 473 | - $expected = new Http\RedirectResponse($redirectUrl); |
|
| 474 | - $this->assertEquals($expected, $this->clientFlowLoginController->generateAppPassword('MyStateToken', 'MyClientIdentifier')); |
|
| 475 | - } |
|
| 476 | - |
|
| 477 | - public function testGeneratePasswordWithoutPassword(): void { |
|
| 478 | - $this->session |
|
| 479 | - ->expects($this->once()) |
|
| 480 | - ->method('get') |
|
| 481 | - ->with('client.flow.state.token') |
|
| 482 | - ->willReturn('MyStateToken'); |
|
| 483 | - $this->session |
|
| 484 | - ->expects($this->once()) |
|
| 485 | - ->method('remove') |
|
| 486 | - ->with('client.flow.state.token'); |
|
| 487 | - $this->session |
|
| 488 | - ->expects($this->once()) |
|
| 489 | - ->method('getId') |
|
| 490 | - ->willReturn('SessionId'); |
|
| 491 | - $myToken = $this->createMock(IToken::class); |
|
| 492 | - $myToken |
|
| 493 | - ->expects($this->once()) |
|
| 494 | - ->method('getLoginName') |
|
| 495 | - ->willReturn('MyLoginName'); |
|
| 496 | - $this->tokenProvider |
|
| 497 | - ->expects($this->once()) |
|
| 498 | - ->method('getToken') |
|
| 499 | - ->with('SessionId') |
|
| 500 | - ->willReturn($myToken); |
|
| 501 | - $this->tokenProvider |
|
| 502 | - ->expects($this->once()) |
|
| 503 | - ->method('getPassword') |
|
| 504 | - ->with($myToken, 'SessionId') |
|
| 505 | - ->willThrowException(new PasswordlessTokenException()); |
|
| 506 | - $this->random |
|
| 507 | - ->expects($this->once()) |
|
| 508 | - ->method('generate') |
|
| 509 | - ->with(72) |
|
| 510 | - ->willReturn('MyGeneratedToken'); |
|
| 511 | - $user = $this->createMock(IUser::class); |
|
| 512 | - $user |
|
| 513 | - ->expects($this->once()) |
|
| 514 | - ->method('getUID') |
|
| 515 | - ->willReturn('MyUid'); |
|
| 516 | - $this->userSession |
|
| 517 | - ->expects($this->once()) |
|
| 518 | - ->method('getUser') |
|
| 519 | - ->willReturn($user); |
|
| 520 | - $this->tokenProvider |
|
| 521 | - ->expects($this->once()) |
|
| 522 | - ->method('generateToken') |
|
| 523 | - ->with( |
|
| 524 | - 'MyGeneratedToken', |
|
| 525 | - 'MyUid', |
|
| 526 | - 'MyLoginName', |
|
| 527 | - null, |
|
| 528 | - 'unknown', |
|
| 529 | - IToken::PERMANENT_TOKEN, |
|
| 530 | - IToken::DO_NOT_REMEMBER |
|
| 531 | - ); |
|
| 532 | - $this->request |
|
| 533 | - ->expects($this->once()) |
|
| 534 | - ->method('getServerProtocol') |
|
| 535 | - ->willReturn('http'); |
|
| 536 | - $this->request |
|
| 537 | - ->expects($this->once()) |
|
| 538 | - ->method('getServerHost') |
|
| 539 | - ->willReturn('example.com'); |
|
| 540 | - $this->request |
|
| 541 | - ->expects($this->any()) |
|
| 542 | - ->method('getHeader') |
|
| 543 | - ->willReturn(''); |
|
| 544 | - |
|
| 545 | - $this->eventDispatcher->expects($this->once()) |
|
| 546 | - ->method('dispatchTyped'); |
|
| 547 | - |
|
| 548 | - $expected = new Http\RedirectResponse('nc://login/server:http://example.com&user:MyLoginName&password:MyGeneratedToken'); |
|
| 549 | - $this->assertEquals($expected, $this->clientFlowLoginController->generateAppPassword('MyStateToken')); |
|
| 550 | - } |
|
| 551 | - |
|
| 552 | - public static function dataGeneratePasswordWithHttpsProxy(): array { |
|
| 553 | - return [ |
|
| 554 | - [ |
|
| 555 | - [ |
|
| 556 | - ['X-Forwarded-Proto', 'http'], |
|
| 557 | - ['X-Forwarded-Ssl', 'off'], |
|
| 558 | - ['USER_AGENT', ''], |
|
| 559 | - ], |
|
| 560 | - 'http', |
|
| 561 | - 'http', |
|
| 562 | - ], |
|
| 563 | - [ |
|
| 564 | - [ |
|
| 565 | - ['X-Forwarded-Proto', 'http'], |
|
| 566 | - ['X-Forwarded-Ssl', 'off'], |
|
| 567 | - ['USER_AGENT', ''], |
|
| 568 | - ], |
|
| 569 | - 'https', |
|
| 570 | - 'https', |
|
| 571 | - ], |
|
| 572 | - [ |
|
| 573 | - [ |
|
| 574 | - ['X-Forwarded-Proto', 'https'], |
|
| 575 | - ['X-Forwarded-Ssl', 'off'], |
|
| 576 | - ['USER_AGENT', ''], |
|
| 577 | - ], |
|
| 578 | - 'http', |
|
| 579 | - 'https', |
|
| 580 | - ], |
|
| 581 | - [ |
|
| 582 | - [ |
|
| 583 | - ['X-Forwarded-Proto', 'https'], |
|
| 584 | - ['X-Forwarded-Ssl', 'on'], |
|
| 585 | - ['USER_AGENT', ''], |
|
| 586 | - ], |
|
| 587 | - 'http', |
|
| 588 | - 'https', |
|
| 589 | - ], |
|
| 590 | - [ |
|
| 591 | - [ |
|
| 592 | - ['X-Forwarded-Proto', 'http'], |
|
| 593 | - ['X-Forwarded-Ssl', 'on'], |
|
| 594 | - ['USER_AGENT', ''], |
|
| 595 | - ], |
|
| 596 | - 'http', |
|
| 597 | - 'https', |
|
| 598 | - ], |
|
| 599 | - ]; |
|
| 600 | - } |
|
| 601 | - |
|
| 602 | - /** |
|
| 603 | - * @dataProvider dataGeneratePasswordWithHttpsProxy |
|
| 604 | - * @param array $headers |
|
| 605 | - * @param string $protocol |
|
| 606 | - * @param string $expected |
|
| 607 | - */ |
|
| 608 | - public function testGeneratePasswordWithHttpsProxy(array $headers, $protocol, $expected): void { |
|
| 609 | - $this->session |
|
| 610 | - ->expects($this->once()) |
|
| 611 | - ->method('get') |
|
| 612 | - ->with('client.flow.state.token') |
|
| 613 | - ->willReturn('MyStateToken'); |
|
| 614 | - $this->session |
|
| 615 | - ->expects($this->once()) |
|
| 616 | - ->method('remove') |
|
| 617 | - ->with('client.flow.state.token'); |
|
| 618 | - $this->session |
|
| 619 | - ->expects($this->once()) |
|
| 620 | - ->method('getId') |
|
| 621 | - ->willReturn('SessionId'); |
|
| 622 | - $myToken = $this->createMock(IToken::class); |
|
| 623 | - $myToken |
|
| 624 | - ->expects($this->once()) |
|
| 625 | - ->method('getLoginName') |
|
| 626 | - ->willReturn('MyLoginName'); |
|
| 627 | - $this->tokenProvider |
|
| 628 | - ->expects($this->once()) |
|
| 629 | - ->method('getToken') |
|
| 630 | - ->with('SessionId') |
|
| 631 | - ->willReturn($myToken); |
|
| 632 | - $this->tokenProvider |
|
| 633 | - ->expects($this->once()) |
|
| 634 | - ->method('getPassword') |
|
| 635 | - ->with($myToken, 'SessionId') |
|
| 636 | - ->willReturn('MyPassword'); |
|
| 637 | - $this->random |
|
| 638 | - ->expects($this->once()) |
|
| 639 | - ->method('generate') |
|
| 640 | - ->with(72) |
|
| 641 | - ->willReturn('MyGeneratedToken'); |
|
| 642 | - $user = $this->createMock(IUser::class); |
|
| 643 | - $user |
|
| 644 | - ->expects($this->once()) |
|
| 645 | - ->method('getUID') |
|
| 646 | - ->willReturn('MyUid'); |
|
| 647 | - $this->userSession |
|
| 648 | - ->expects($this->once()) |
|
| 649 | - ->method('getUser') |
|
| 650 | - ->willReturn($user); |
|
| 651 | - $this->tokenProvider |
|
| 652 | - ->expects($this->once()) |
|
| 653 | - ->method('generateToken') |
|
| 654 | - ->with( |
|
| 655 | - 'MyGeneratedToken', |
|
| 656 | - 'MyUid', |
|
| 657 | - 'MyLoginName', |
|
| 658 | - 'MyPassword', |
|
| 659 | - 'unknown', |
|
| 660 | - IToken::PERMANENT_TOKEN, |
|
| 661 | - IToken::DO_NOT_REMEMBER |
|
| 662 | - ); |
|
| 663 | - $this->request |
|
| 664 | - ->expects($this->once()) |
|
| 665 | - ->method('getServerProtocol') |
|
| 666 | - ->willReturn($protocol); |
|
| 667 | - $this->request |
|
| 668 | - ->expects($this->once()) |
|
| 669 | - ->method('getServerHost') |
|
| 670 | - ->willReturn('example.com'); |
|
| 671 | - $this->request |
|
| 672 | - ->expects($this->atLeastOnce()) |
|
| 673 | - ->method('getHeader') |
|
| 674 | - ->willReturnMap($headers); |
|
| 675 | - |
|
| 676 | - $this->eventDispatcher->expects($this->once()) |
|
| 677 | - ->method('dispatchTyped'); |
|
| 678 | - |
|
| 679 | - $expected = new Http\RedirectResponse('nc://login/server:' . $expected . '://example.com&user:MyLoginName&password:MyGeneratedToken'); |
|
| 680 | - $this->assertEquals($expected, $this->clientFlowLoginController->generateAppPassword('MyStateToken')); |
|
| 681 | - } |
|
| 39 | + private IRequest&MockObject $request; |
|
| 40 | + private IUserSession&MockObject $userSession; |
|
| 41 | + private IL10N&MockObject $l10n; |
|
| 42 | + private Defaults&MockObject $defaults; |
|
| 43 | + private ISession&MockObject $session; |
|
| 44 | + private IProvider&MockObject $tokenProvider; |
|
| 45 | + private ISecureRandom&MockObject $random; |
|
| 46 | + private IURLGenerator&MockObject $urlGenerator; |
|
| 47 | + private ClientMapper&MockObject $clientMapper; |
|
| 48 | + private AccessTokenMapper&MockObject $accessTokenMapper; |
|
| 49 | + private ICrypto&MockObject $crypto; |
|
| 50 | + private IEventDispatcher&MockObject $eventDispatcher; |
|
| 51 | + private ITimeFactory&MockObject $timeFactory; |
|
| 52 | + private IConfig&MockObject $config; |
|
| 53 | + |
|
| 54 | + private ClientFlowLoginController $clientFlowLoginController; |
|
| 55 | + |
|
| 56 | + protected function setUp(): void { |
|
| 57 | + parent::setUp(); |
|
| 58 | + |
|
| 59 | + $this->request = $this->createMock(IRequest::class); |
|
| 60 | + $this->userSession = $this->createMock(IUserSession::class); |
|
| 61 | + $this->l10n = $this->createMock(IL10N::class); |
|
| 62 | + $this->l10n |
|
| 63 | + ->expects($this->any()) |
|
| 64 | + ->method('t') |
|
| 65 | + ->willReturnCallback(function ($text, $parameters = []) { |
|
| 66 | + return vsprintf($text, $parameters); |
|
| 67 | + }); |
|
| 68 | + $this->defaults = $this->createMock(Defaults::class); |
|
| 69 | + $this->session = $this->createMock(ISession::class); |
|
| 70 | + $this->tokenProvider = $this->createMock(IProvider::class); |
|
| 71 | + $this->random = $this->createMock(ISecureRandom::class); |
|
| 72 | + $this->urlGenerator = $this->createMock(IURLGenerator::class); |
|
| 73 | + $this->clientMapper = $this->createMock(ClientMapper::class); |
|
| 74 | + $this->accessTokenMapper = $this->createMock(AccessTokenMapper::class); |
|
| 75 | + $this->crypto = $this->createMock(ICrypto::class); |
|
| 76 | + $this->eventDispatcher = $this->createMock(IEventDispatcher::class); |
|
| 77 | + $this->timeFactory = $this->createMock(ITimeFactory::class); |
|
| 78 | + $this->config = $this->createMock(IConfig::class); |
|
| 79 | + |
|
| 80 | + $this->clientFlowLoginController = new ClientFlowLoginController( |
|
| 81 | + 'core', |
|
| 82 | + $this->request, |
|
| 83 | + $this->userSession, |
|
| 84 | + $this->l10n, |
|
| 85 | + $this->defaults, |
|
| 86 | + $this->session, |
|
| 87 | + $this->tokenProvider, |
|
| 88 | + $this->random, |
|
| 89 | + $this->urlGenerator, |
|
| 90 | + $this->clientMapper, |
|
| 91 | + $this->accessTokenMapper, |
|
| 92 | + $this->crypto, |
|
| 93 | + $this->eventDispatcher, |
|
| 94 | + $this->timeFactory, |
|
| 95 | + $this->config, |
|
| 96 | + ); |
|
| 97 | + } |
|
| 98 | + |
|
| 99 | + public function testShowAuthPickerPageNoClientOrOauthRequest(): void { |
|
| 100 | + $expected = new StandaloneTemplateResponse( |
|
| 101 | + 'core', |
|
| 102 | + 'error', |
|
| 103 | + [ |
|
| 104 | + 'errors' => |
|
| 105 | + [ |
|
| 106 | + [ |
|
| 107 | + 'error' => 'Access Forbidden', |
|
| 108 | + 'hint' => 'Invalid request', |
|
| 109 | + ], |
|
| 110 | + ], |
|
| 111 | + ], |
|
| 112 | + 'guest' |
|
| 113 | + ); |
|
| 114 | + |
|
| 115 | + $this->assertEquals($expected, $this->clientFlowLoginController->showAuthPickerPage()); |
|
| 116 | + } |
|
| 117 | + |
|
| 118 | + public function testShowAuthPickerPageWithOcsHeader(): void { |
|
| 119 | + $this->request |
|
| 120 | + ->method('getHeader') |
|
| 121 | + ->willReturnMap([ |
|
| 122 | + ['USER_AGENT', 'Mac OS X Sync Client'], |
|
| 123 | + ['OCS-APIREQUEST', 'true'], |
|
| 124 | + ]); |
|
| 125 | + $this->random |
|
| 126 | + ->expects($this->once()) |
|
| 127 | + ->method('generate') |
|
| 128 | + ->with( |
|
| 129 | + 64, |
|
| 130 | + ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_UPPER . ISecureRandom::CHAR_DIGITS |
|
| 131 | + ) |
|
| 132 | + ->willReturn('StateToken'); |
|
| 133 | + $this->session |
|
| 134 | + ->expects($this->once()) |
|
| 135 | + ->method('set') |
|
| 136 | + ->with('client.flow.state.token', 'StateToken'); |
|
| 137 | + $this->session |
|
| 138 | + ->expects($this->once()) |
|
| 139 | + ->method('get') |
|
| 140 | + ->with('oauth.state') |
|
| 141 | + ->willReturn('OauthStateToken'); |
|
| 142 | + $this->defaults |
|
| 143 | + ->expects($this->once()) |
|
| 144 | + ->method('getName') |
|
| 145 | + ->willReturn('ExampleCloud'); |
|
| 146 | + $this->request |
|
| 147 | + ->expects($this->once()) |
|
| 148 | + ->method('getServerHost') |
|
| 149 | + ->willReturn('example.com'); |
|
| 150 | + $this->request |
|
| 151 | + ->method('getServerProtocol') |
|
| 152 | + ->willReturn('https'); |
|
| 153 | + |
|
| 154 | + $expected = new StandaloneTemplateResponse( |
|
| 155 | + 'core', |
|
| 156 | + 'loginflow/authpicker', |
|
| 157 | + [ |
|
| 158 | + 'client' => 'Mac OS X Sync Client', |
|
| 159 | + 'clientIdentifier' => '', |
|
| 160 | + 'instanceName' => 'ExampleCloud', |
|
| 161 | + 'urlGenerator' => $this->urlGenerator, |
|
| 162 | + 'stateToken' => 'StateToken', |
|
| 163 | + 'serverHost' => 'https://example.com', |
|
| 164 | + 'oauthState' => 'OauthStateToken', |
|
| 165 | + 'user' => '', |
|
| 166 | + 'direct' => 0, |
|
| 167 | + 'providedRedirectUri' => '', |
|
| 168 | + ], |
|
| 169 | + 'guest' |
|
| 170 | + ); |
|
| 171 | + $csp = new Http\ContentSecurityPolicy(); |
|
| 172 | + $csp->addAllowedFormActionDomain('nc://*'); |
|
| 173 | + $expected->setContentSecurityPolicy($csp); |
|
| 174 | + $this->assertEquals($expected, $this->clientFlowLoginController->showAuthPickerPage()); |
|
| 175 | + } |
|
| 176 | + |
|
| 177 | + public function testShowAuthPickerPageWithOauth(): void { |
|
| 178 | + $this->request |
|
| 179 | + ->method('getHeader') |
|
| 180 | + ->willReturnMap([ |
|
| 181 | + ['USER_AGENT', 'Mac OS X Sync Client'], |
|
| 182 | + ['OCS-APIREQUEST', 'false'], |
|
| 183 | + ]); |
|
| 184 | + $client = new Client(); |
|
| 185 | + $client->setName('My external service'); |
|
| 186 | + $client->setRedirectUri('https://example.com/redirect.php'); |
|
| 187 | + $this->clientMapper |
|
| 188 | + ->expects($this->once()) |
|
| 189 | + ->method('getByIdentifier') |
|
| 190 | + ->with('MyClientIdentifier') |
|
| 191 | + ->willReturn($client); |
|
| 192 | + $this->random |
|
| 193 | + ->expects($this->once()) |
|
| 194 | + ->method('generate') |
|
| 195 | + ->with( |
|
| 196 | + 64, |
|
| 197 | + ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_UPPER . ISecureRandom::CHAR_DIGITS |
|
| 198 | + ) |
|
| 199 | + ->willReturn('StateToken'); |
|
| 200 | + $this->session |
|
| 201 | + ->expects($this->once()) |
|
| 202 | + ->method('set') |
|
| 203 | + ->with('client.flow.state.token', 'StateToken'); |
|
| 204 | + $this->session |
|
| 205 | + ->expects($this->once()) |
|
| 206 | + ->method('get') |
|
| 207 | + ->with('oauth.state') |
|
| 208 | + ->willReturn('OauthStateToken'); |
|
| 209 | + $this->defaults |
|
| 210 | + ->expects($this->once()) |
|
| 211 | + ->method('getName') |
|
| 212 | + ->willReturn('ExampleCloud'); |
|
| 213 | + $this->request |
|
| 214 | + ->expects($this->once()) |
|
| 215 | + ->method('getServerHost') |
|
| 216 | + ->willReturn('example.com'); |
|
| 217 | + $this->request |
|
| 218 | + ->method('getServerProtocol') |
|
| 219 | + ->willReturn('https'); |
|
| 220 | + |
|
| 221 | + $expected = new StandaloneTemplateResponse( |
|
| 222 | + 'core', |
|
| 223 | + 'loginflow/authpicker', |
|
| 224 | + [ |
|
| 225 | + 'client' => 'My external service', |
|
| 226 | + 'clientIdentifier' => 'MyClientIdentifier', |
|
| 227 | + 'instanceName' => 'ExampleCloud', |
|
| 228 | + 'urlGenerator' => $this->urlGenerator, |
|
| 229 | + 'stateToken' => 'StateToken', |
|
| 230 | + 'serverHost' => 'https://example.com', |
|
| 231 | + 'oauthState' => 'OauthStateToken', |
|
| 232 | + 'user' => '', |
|
| 233 | + 'direct' => 0, |
|
| 234 | + 'providedRedirectUri' => '', |
|
| 235 | + ], |
|
| 236 | + 'guest' |
|
| 237 | + ); |
|
| 238 | + $csp = new Http\ContentSecurityPolicy(); |
|
| 239 | + $csp->addAllowedFormActionDomain('https://example.com/redirect.php'); |
|
| 240 | + $expected->setContentSecurityPolicy($csp); |
|
| 241 | + $this->assertEquals($expected, $this->clientFlowLoginController->showAuthPickerPage('MyClientIdentifier')); |
|
| 242 | + } |
|
| 243 | + |
|
| 244 | + public function testGenerateAppPasswordWithInvalidToken(): void { |
|
| 245 | + $this->session |
|
| 246 | + ->expects($this->once()) |
|
| 247 | + ->method('get') |
|
| 248 | + ->with('client.flow.state.token') |
|
| 249 | + ->willReturn('OtherToken'); |
|
| 250 | + $this->session |
|
| 251 | + ->expects($this->once()) |
|
| 252 | + ->method('remove') |
|
| 253 | + ->with('client.flow.state.token'); |
|
| 254 | + |
|
| 255 | + $expected = new StandaloneTemplateResponse( |
|
| 256 | + 'core', |
|
| 257 | + '403', |
|
| 258 | + [ |
|
| 259 | + 'message' => 'State token does not match', |
|
| 260 | + ], |
|
| 261 | + 'guest' |
|
| 262 | + ); |
|
| 263 | + $expected->setStatus(Http::STATUS_FORBIDDEN); |
|
| 264 | + $this->assertEquals($expected, $this->clientFlowLoginController->generateAppPassword('MyStateToken')); |
|
| 265 | + } |
|
| 266 | + |
|
| 267 | + public function testGenerateAppPasswordWithSessionNotAvailableException(): void { |
|
| 268 | + $this->session |
|
| 269 | + ->expects($this->once()) |
|
| 270 | + ->method('get') |
|
| 271 | + ->with('client.flow.state.token') |
|
| 272 | + ->willReturn('MyStateToken'); |
|
| 273 | + $this->session |
|
| 274 | + ->expects($this->once()) |
|
| 275 | + ->method('remove') |
|
| 276 | + ->with('client.flow.state.token'); |
|
| 277 | + $this->session |
|
| 278 | + ->expects($this->once()) |
|
| 279 | + ->method('getId') |
|
| 280 | + ->willThrowException(new SessionNotAvailableException()); |
|
| 281 | + |
|
| 282 | + $expected = new Http\Response(); |
|
| 283 | + $expected->setStatus(Http::STATUS_FORBIDDEN); |
|
| 284 | + $this->assertEquals($expected, $this->clientFlowLoginController->generateAppPassword('MyStateToken')); |
|
| 285 | + } |
|
| 286 | + |
|
| 287 | + public function testGenerateAppPasswordWithInvalidTokenException(): void { |
|
| 288 | + $this->session |
|
| 289 | + ->expects($this->once()) |
|
| 290 | + ->method('get') |
|
| 291 | + ->with('client.flow.state.token') |
|
| 292 | + ->willReturn('MyStateToken'); |
|
| 293 | + $this->session |
|
| 294 | + ->expects($this->once()) |
|
| 295 | + ->method('remove') |
|
| 296 | + ->with('client.flow.state.token'); |
|
| 297 | + $this->session |
|
| 298 | + ->expects($this->once()) |
|
| 299 | + ->method('getId') |
|
| 300 | + ->willReturn('SessionId'); |
|
| 301 | + $this->tokenProvider |
|
| 302 | + ->expects($this->once()) |
|
| 303 | + ->method('getToken') |
|
| 304 | + ->with('SessionId') |
|
| 305 | + ->willThrowException(new InvalidTokenException()); |
|
| 306 | + |
|
| 307 | + $expected = new Http\Response(); |
|
| 308 | + $expected->setStatus(Http::STATUS_FORBIDDEN); |
|
| 309 | + $this->assertEquals($expected, $this->clientFlowLoginController->generateAppPassword('MyStateToken')); |
|
| 310 | + } |
|
| 311 | + |
|
| 312 | + public function testGeneratePasswordWithPassword(): void { |
|
| 313 | + $this->session |
|
| 314 | + ->expects($this->once()) |
|
| 315 | + ->method('get') |
|
| 316 | + ->with('client.flow.state.token') |
|
| 317 | + ->willReturn('MyStateToken'); |
|
| 318 | + $this->session |
|
| 319 | + ->expects($this->once()) |
|
| 320 | + ->method('remove') |
|
| 321 | + ->with('client.flow.state.token'); |
|
| 322 | + $this->session |
|
| 323 | + ->expects($this->once()) |
|
| 324 | + ->method('getId') |
|
| 325 | + ->willReturn('SessionId'); |
|
| 326 | + $myToken = $this->createMock(IToken::class); |
|
| 327 | + $myToken |
|
| 328 | + ->expects($this->once()) |
|
| 329 | + ->method('getLoginName') |
|
| 330 | + ->willReturn('MyLoginName'); |
|
| 331 | + $this->tokenProvider |
|
| 332 | + ->expects($this->once()) |
|
| 333 | + ->method('getToken') |
|
| 334 | + ->with('SessionId') |
|
| 335 | + ->willReturn($myToken); |
|
| 336 | + $this->tokenProvider |
|
| 337 | + ->expects($this->once()) |
|
| 338 | + ->method('getPassword') |
|
| 339 | + ->with($myToken, 'SessionId') |
|
| 340 | + ->willReturn('MyPassword'); |
|
| 341 | + $this->random |
|
| 342 | + ->expects($this->once()) |
|
| 343 | + ->method('generate') |
|
| 344 | + ->with(72) |
|
| 345 | + ->willReturn('MyGeneratedToken'); |
|
| 346 | + $user = $this->createMock(IUser::class); |
|
| 347 | + $user |
|
| 348 | + ->expects($this->once()) |
|
| 349 | + ->method('getUID') |
|
| 350 | + ->willReturn('MyUid'); |
|
| 351 | + $this->userSession |
|
| 352 | + ->expects($this->once()) |
|
| 353 | + ->method('getUser') |
|
| 354 | + ->willReturn($user); |
|
| 355 | + $this->tokenProvider |
|
| 356 | + ->expects($this->once()) |
|
| 357 | + ->method('generateToken') |
|
| 358 | + ->with( |
|
| 359 | + 'MyGeneratedToken', |
|
| 360 | + 'MyUid', |
|
| 361 | + 'MyLoginName', |
|
| 362 | + 'MyPassword', |
|
| 363 | + 'unknown', |
|
| 364 | + IToken::PERMANENT_TOKEN, |
|
| 365 | + IToken::DO_NOT_REMEMBER |
|
| 366 | + ); |
|
| 367 | + $this->request |
|
| 368 | + ->expects($this->once()) |
|
| 369 | + ->method('getServerProtocol') |
|
| 370 | + ->willReturn('http'); |
|
| 371 | + $this->request |
|
| 372 | + ->expects($this->once()) |
|
| 373 | + ->method('getServerHost') |
|
| 374 | + ->willReturn('example.com'); |
|
| 375 | + $this->request |
|
| 376 | + ->expects($this->any()) |
|
| 377 | + ->method('getHeader') |
|
| 378 | + ->willReturn(''); |
|
| 379 | + |
|
| 380 | + $this->eventDispatcher->expects($this->once()) |
|
| 381 | + ->method('dispatchTyped'); |
|
| 382 | + |
|
| 383 | + $expected = new Http\RedirectResponse('nc://login/server:http://example.com&user:MyLoginName&password:MyGeneratedToken'); |
|
| 384 | + $this->assertEquals($expected, $this->clientFlowLoginController->generateAppPassword('MyStateToken')); |
|
| 385 | + } |
|
| 386 | + |
|
| 387 | + /** |
|
| 388 | + * @param string $redirectUri |
|
| 389 | + * @param string $redirectUrl |
|
| 390 | + * |
|
| 391 | + * @testWith |
|
| 392 | + * ["https://example.com/redirect.php", "https://example.com/redirect.php?state=MyOauthState&code=MyAccessCode"] |
|
| 393 | + * ["https://example.com/redirect.php?hello=world", "https://example.com/redirect.php?hello=world&state=MyOauthState&code=MyAccessCode"] |
|
| 394 | + * |
|
| 395 | + */ |
|
| 396 | + public function testGeneratePasswordWithPasswordForOauthClient($redirectUri, $redirectUrl): void { |
|
| 397 | + $this->session |
|
| 398 | + ->method('get') |
|
| 399 | + ->willReturnMap([ |
|
| 400 | + ['client.flow.state.token', 'MyStateToken'], |
|
| 401 | + ['oauth.state', 'MyOauthState'], |
|
| 402 | + ]); |
|
| 403 | + $calls = [ |
|
| 404 | + 'client.flow.state.token', |
|
| 405 | + 'oauth.state', |
|
| 406 | + ]; |
|
| 407 | + $this->session |
|
| 408 | + ->method('remove') |
|
| 409 | + ->willReturnCallback(function ($key) use (&$calls) { |
|
| 410 | + $expected = array_shift($calls); |
|
| 411 | + $this->assertEquals($expected, $key); |
|
| 412 | + }); |
|
| 413 | + $this->session |
|
| 414 | + ->expects($this->once()) |
|
| 415 | + ->method('getId') |
|
| 416 | + ->willReturn('SessionId'); |
|
| 417 | + $myToken = $this->createMock(IToken::class); |
|
| 418 | + $myToken |
|
| 419 | + ->expects($this->once()) |
|
| 420 | + ->method('getLoginName') |
|
| 421 | + ->willReturn('MyLoginName'); |
|
| 422 | + $this->tokenProvider |
|
| 423 | + ->expects($this->once()) |
|
| 424 | + ->method('getToken') |
|
| 425 | + ->with('SessionId') |
|
| 426 | + ->willReturn($myToken); |
|
| 427 | + $this->tokenProvider |
|
| 428 | + ->expects($this->once()) |
|
| 429 | + ->method('getPassword') |
|
| 430 | + ->with($myToken, 'SessionId') |
|
| 431 | + ->willReturn('MyPassword'); |
|
| 432 | + $this->random |
|
| 433 | + ->method('generate') |
|
| 434 | + ->willReturnMap([ |
|
| 435 | + [72, ISecureRandom::CHAR_UPPER . ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_DIGITS, 'MyGeneratedToken'], |
|
| 436 | + [128, ISecureRandom::CHAR_UPPER . ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_DIGITS, 'MyAccessCode'], |
|
| 437 | + ]); |
|
| 438 | + $user = $this->createMock(IUser::class); |
|
| 439 | + $user |
|
| 440 | + ->expects($this->once()) |
|
| 441 | + ->method('getUID') |
|
| 442 | + ->willReturn('MyUid'); |
|
| 443 | + $this->userSession |
|
| 444 | + ->expects($this->once()) |
|
| 445 | + ->method('getUser') |
|
| 446 | + ->willReturn($user); |
|
| 447 | + $token = $this->createMock(IToken::class); |
|
| 448 | + $this->tokenProvider |
|
| 449 | + ->expects($this->once()) |
|
| 450 | + ->method('generateToken') |
|
| 451 | + ->with( |
|
| 452 | + 'MyGeneratedToken', |
|
| 453 | + 'MyUid', |
|
| 454 | + 'MyLoginName', |
|
| 455 | + 'MyPassword', |
|
| 456 | + 'My OAuth client', |
|
| 457 | + IToken::PERMANENT_TOKEN, |
|
| 458 | + IToken::DO_NOT_REMEMBER |
|
| 459 | + ) |
|
| 460 | + ->willReturn($token); |
|
| 461 | + $client = new Client(); |
|
| 462 | + $client->setName('My OAuth client'); |
|
| 463 | + $client->setRedirectUri($redirectUri); |
|
| 464 | + $this->clientMapper |
|
| 465 | + ->expects($this->once()) |
|
| 466 | + ->method('getByIdentifier') |
|
| 467 | + ->with('MyClientIdentifier') |
|
| 468 | + ->willReturn($client); |
|
| 469 | + |
|
| 470 | + $this->eventDispatcher->expects($this->once()) |
|
| 471 | + ->method('dispatchTyped'); |
|
| 472 | + |
|
| 473 | + $expected = new Http\RedirectResponse($redirectUrl); |
|
| 474 | + $this->assertEquals($expected, $this->clientFlowLoginController->generateAppPassword('MyStateToken', 'MyClientIdentifier')); |
|
| 475 | + } |
|
| 476 | + |
|
| 477 | + public function testGeneratePasswordWithoutPassword(): void { |
|
| 478 | + $this->session |
|
| 479 | + ->expects($this->once()) |
|
| 480 | + ->method('get') |
|
| 481 | + ->with('client.flow.state.token') |
|
| 482 | + ->willReturn('MyStateToken'); |
|
| 483 | + $this->session |
|
| 484 | + ->expects($this->once()) |
|
| 485 | + ->method('remove') |
|
| 486 | + ->with('client.flow.state.token'); |
|
| 487 | + $this->session |
|
| 488 | + ->expects($this->once()) |
|
| 489 | + ->method('getId') |
|
| 490 | + ->willReturn('SessionId'); |
|
| 491 | + $myToken = $this->createMock(IToken::class); |
|
| 492 | + $myToken |
|
| 493 | + ->expects($this->once()) |
|
| 494 | + ->method('getLoginName') |
|
| 495 | + ->willReturn('MyLoginName'); |
|
| 496 | + $this->tokenProvider |
|
| 497 | + ->expects($this->once()) |
|
| 498 | + ->method('getToken') |
|
| 499 | + ->with('SessionId') |
|
| 500 | + ->willReturn($myToken); |
|
| 501 | + $this->tokenProvider |
|
| 502 | + ->expects($this->once()) |
|
| 503 | + ->method('getPassword') |
|
| 504 | + ->with($myToken, 'SessionId') |
|
| 505 | + ->willThrowException(new PasswordlessTokenException()); |
|
| 506 | + $this->random |
|
| 507 | + ->expects($this->once()) |
|
| 508 | + ->method('generate') |
|
| 509 | + ->with(72) |
|
| 510 | + ->willReturn('MyGeneratedToken'); |
|
| 511 | + $user = $this->createMock(IUser::class); |
|
| 512 | + $user |
|
| 513 | + ->expects($this->once()) |
|
| 514 | + ->method('getUID') |
|
| 515 | + ->willReturn('MyUid'); |
|
| 516 | + $this->userSession |
|
| 517 | + ->expects($this->once()) |
|
| 518 | + ->method('getUser') |
|
| 519 | + ->willReturn($user); |
|
| 520 | + $this->tokenProvider |
|
| 521 | + ->expects($this->once()) |
|
| 522 | + ->method('generateToken') |
|
| 523 | + ->with( |
|
| 524 | + 'MyGeneratedToken', |
|
| 525 | + 'MyUid', |
|
| 526 | + 'MyLoginName', |
|
| 527 | + null, |
|
| 528 | + 'unknown', |
|
| 529 | + IToken::PERMANENT_TOKEN, |
|
| 530 | + IToken::DO_NOT_REMEMBER |
|
| 531 | + ); |
|
| 532 | + $this->request |
|
| 533 | + ->expects($this->once()) |
|
| 534 | + ->method('getServerProtocol') |
|
| 535 | + ->willReturn('http'); |
|
| 536 | + $this->request |
|
| 537 | + ->expects($this->once()) |
|
| 538 | + ->method('getServerHost') |
|
| 539 | + ->willReturn('example.com'); |
|
| 540 | + $this->request |
|
| 541 | + ->expects($this->any()) |
|
| 542 | + ->method('getHeader') |
|
| 543 | + ->willReturn(''); |
|
| 544 | + |
|
| 545 | + $this->eventDispatcher->expects($this->once()) |
|
| 546 | + ->method('dispatchTyped'); |
|
| 547 | + |
|
| 548 | + $expected = new Http\RedirectResponse('nc://login/server:http://example.com&user:MyLoginName&password:MyGeneratedToken'); |
|
| 549 | + $this->assertEquals($expected, $this->clientFlowLoginController->generateAppPassword('MyStateToken')); |
|
| 550 | + } |
|
| 551 | + |
|
| 552 | + public static function dataGeneratePasswordWithHttpsProxy(): array { |
|
| 553 | + return [ |
|
| 554 | + [ |
|
| 555 | + [ |
|
| 556 | + ['X-Forwarded-Proto', 'http'], |
|
| 557 | + ['X-Forwarded-Ssl', 'off'], |
|
| 558 | + ['USER_AGENT', ''], |
|
| 559 | + ], |
|
| 560 | + 'http', |
|
| 561 | + 'http', |
|
| 562 | + ], |
|
| 563 | + [ |
|
| 564 | + [ |
|
| 565 | + ['X-Forwarded-Proto', 'http'], |
|
| 566 | + ['X-Forwarded-Ssl', 'off'], |
|
| 567 | + ['USER_AGENT', ''], |
|
| 568 | + ], |
|
| 569 | + 'https', |
|
| 570 | + 'https', |
|
| 571 | + ], |
|
| 572 | + [ |
|
| 573 | + [ |
|
| 574 | + ['X-Forwarded-Proto', 'https'], |
|
| 575 | + ['X-Forwarded-Ssl', 'off'], |
|
| 576 | + ['USER_AGENT', ''], |
|
| 577 | + ], |
|
| 578 | + 'http', |
|
| 579 | + 'https', |
|
| 580 | + ], |
|
| 581 | + [ |
|
| 582 | + [ |
|
| 583 | + ['X-Forwarded-Proto', 'https'], |
|
| 584 | + ['X-Forwarded-Ssl', 'on'], |
|
| 585 | + ['USER_AGENT', ''], |
|
| 586 | + ], |
|
| 587 | + 'http', |
|
| 588 | + 'https', |
|
| 589 | + ], |
|
| 590 | + [ |
|
| 591 | + [ |
|
| 592 | + ['X-Forwarded-Proto', 'http'], |
|
| 593 | + ['X-Forwarded-Ssl', 'on'], |
|
| 594 | + ['USER_AGENT', ''], |
|
| 595 | + ], |
|
| 596 | + 'http', |
|
| 597 | + 'https', |
|
| 598 | + ], |
|
| 599 | + ]; |
|
| 600 | + } |
|
| 601 | + |
|
| 602 | + /** |
|
| 603 | + * @dataProvider dataGeneratePasswordWithHttpsProxy |
|
| 604 | + * @param array $headers |
|
| 605 | + * @param string $protocol |
|
| 606 | + * @param string $expected |
|
| 607 | + */ |
|
| 608 | + public function testGeneratePasswordWithHttpsProxy(array $headers, $protocol, $expected): void { |
|
| 609 | + $this->session |
|
| 610 | + ->expects($this->once()) |
|
| 611 | + ->method('get') |
|
| 612 | + ->with('client.flow.state.token') |
|
| 613 | + ->willReturn('MyStateToken'); |
|
| 614 | + $this->session |
|
| 615 | + ->expects($this->once()) |
|
| 616 | + ->method('remove') |
|
| 617 | + ->with('client.flow.state.token'); |
|
| 618 | + $this->session |
|
| 619 | + ->expects($this->once()) |
|
| 620 | + ->method('getId') |
|
| 621 | + ->willReturn('SessionId'); |
|
| 622 | + $myToken = $this->createMock(IToken::class); |
|
| 623 | + $myToken |
|
| 624 | + ->expects($this->once()) |
|
| 625 | + ->method('getLoginName') |
|
| 626 | + ->willReturn('MyLoginName'); |
|
| 627 | + $this->tokenProvider |
|
| 628 | + ->expects($this->once()) |
|
| 629 | + ->method('getToken') |
|
| 630 | + ->with('SessionId') |
|
| 631 | + ->willReturn($myToken); |
|
| 632 | + $this->tokenProvider |
|
| 633 | + ->expects($this->once()) |
|
| 634 | + ->method('getPassword') |
|
| 635 | + ->with($myToken, 'SessionId') |
|
| 636 | + ->willReturn('MyPassword'); |
|
| 637 | + $this->random |
|
| 638 | + ->expects($this->once()) |
|
| 639 | + ->method('generate') |
|
| 640 | + ->with(72) |
|
| 641 | + ->willReturn('MyGeneratedToken'); |
|
| 642 | + $user = $this->createMock(IUser::class); |
|
| 643 | + $user |
|
| 644 | + ->expects($this->once()) |
|
| 645 | + ->method('getUID') |
|
| 646 | + ->willReturn('MyUid'); |
|
| 647 | + $this->userSession |
|
| 648 | + ->expects($this->once()) |
|
| 649 | + ->method('getUser') |
|
| 650 | + ->willReturn($user); |
|
| 651 | + $this->tokenProvider |
|
| 652 | + ->expects($this->once()) |
|
| 653 | + ->method('generateToken') |
|
| 654 | + ->with( |
|
| 655 | + 'MyGeneratedToken', |
|
| 656 | + 'MyUid', |
|
| 657 | + 'MyLoginName', |
|
| 658 | + 'MyPassword', |
|
| 659 | + 'unknown', |
|
| 660 | + IToken::PERMANENT_TOKEN, |
|
| 661 | + IToken::DO_NOT_REMEMBER |
|
| 662 | + ); |
|
| 663 | + $this->request |
|
| 664 | + ->expects($this->once()) |
|
| 665 | + ->method('getServerProtocol') |
|
| 666 | + ->willReturn($protocol); |
|
| 667 | + $this->request |
|
| 668 | + ->expects($this->once()) |
|
| 669 | + ->method('getServerHost') |
|
| 670 | + ->willReturn('example.com'); |
|
| 671 | + $this->request |
|
| 672 | + ->expects($this->atLeastOnce()) |
|
| 673 | + ->method('getHeader') |
|
| 674 | + ->willReturnMap($headers); |
|
| 675 | + |
|
| 676 | + $this->eventDispatcher->expects($this->once()) |
|
| 677 | + ->method('dispatchTyped'); |
|
| 678 | + |
|
| 679 | + $expected = new Http\RedirectResponse('nc://login/server:' . $expected . '://example.com&user:MyLoginName&password:MyGeneratedToken'); |
|
| 680 | + $this->assertEquals($expected, $this->clientFlowLoginController->generateAppPassword('MyStateToken')); |
|
| 681 | + } |
|
| 682 | 682 | } |
@@ -62,7 +62,7 @@ discard block |
||
| 62 | 62 | $this->l10n |
| 63 | 63 | ->expects($this->any()) |
| 64 | 64 | ->method('t') |
| 65 | - ->willReturnCallback(function ($text, $parameters = []) { |
|
| 65 | + ->willReturnCallback(function($text, $parameters = []) { |
|
| 66 | 66 | return vsprintf($text, $parameters); |
| 67 | 67 | }); |
| 68 | 68 | $this->defaults = $this->createMock(Defaults::class); |
@@ -127,7 +127,7 @@ discard block |
||
| 127 | 127 | ->method('generate') |
| 128 | 128 | ->with( |
| 129 | 129 | 64, |
| 130 | - ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_UPPER . ISecureRandom::CHAR_DIGITS |
|
| 130 | + ISecureRandom::CHAR_LOWER.ISecureRandom::CHAR_UPPER.ISecureRandom::CHAR_DIGITS |
|
| 131 | 131 | ) |
| 132 | 132 | ->willReturn('StateToken'); |
| 133 | 133 | $this->session |
@@ -194,7 +194,7 @@ discard block |
||
| 194 | 194 | ->method('generate') |
| 195 | 195 | ->with( |
| 196 | 196 | 64, |
| 197 | - ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_UPPER . ISecureRandom::CHAR_DIGITS |
|
| 197 | + ISecureRandom::CHAR_LOWER.ISecureRandom::CHAR_UPPER.ISecureRandom::CHAR_DIGITS |
|
| 198 | 198 | ) |
| 199 | 199 | ->willReturn('StateToken'); |
| 200 | 200 | $this->session |
@@ -406,7 +406,7 @@ discard block |
||
| 406 | 406 | ]; |
| 407 | 407 | $this->session |
| 408 | 408 | ->method('remove') |
| 409 | - ->willReturnCallback(function ($key) use (&$calls) { |
|
| 409 | + ->willReturnCallback(function($key) use (&$calls) { |
|
| 410 | 410 | $expected = array_shift($calls); |
| 411 | 411 | $this->assertEquals($expected, $key); |
| 412 | 412 | }); |
@@ -432,8 +432,8 @@ discard block |
||
| 432 | 432 | $this->random |
| 433 | 433 | ->method('generate') |
| 434 | 434 | ->willReturnMap([ |
| 435 | - [72, ISecureRandom::CHAR_UPPER . ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_DIGITS, 'MyGeneratedToken'], |
|
| 436 | - [128, ISecureRandom::CHAR_UPPER . ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_DIGITS, 'MyAccessCode'], |
|
| 435 | + [72, ISecureRandom::CHAR_UPPER.ISecureRandom::CHAR_LOWER.ISecureRandom::CHAR_DIGITS, 'MyGeneratedToken'], |
|
| 436 | + [128, ISecureRandom::CHAR_UPPER.ISecureRandom::CHAR_LOWER.ISecureRandom::CHAR_DIGITS, 'MyAccessCode'], |
|
| 437 | 437 | ]); |
| 438 | 438 | $user = $this->createMock(IUser::class); |
| 439 | 439 | $user |
@@ -676,7 +676,7 @@ discard block |
||
| 676 | 676 | $this->eventDispatcher->expects($this->once()) |
| 677 | 677 | ->method('dispatchTyped'); |
| 678 | 678 | |
| 679 | - $expected = new Http\RedirectResponse('nc://login/server:' . $expected . '://example.com&user:MyLoginName&password:MyGeneratedToken'); |
|
| 679 | + $expected = new Http\RedirectResponse('nc://login/server:'.$expected.'://example.com&user:MyLoginName&password:MyGeneratedToken'); |
|
| 680 | 680 | $this->assertEquals($expected, $this->clientFlowLoginController->generateAppPassword('MyStateToken')); |
| 681 | 681 | } |
| 682 | 682 | } |
@@ -32,257 +32,257 @@ |
||
| 32 | 32 | use Test\TestCase; |
| 33 | 33 | |
| 34 | 34 | class TwoFactorMiddlewareTest extends TestCase { |
| 35 | - /** @var Manager|MockObject */ |
|
| 36 | - private $twoFactorManager; |
|
| 37 | - |
|
| 38 | - /** @var IUserSession|MockObject */ |
|
| 39 | - private $userSession; |
|
| 40 | - |
|
| 41 | - /** @var ISession|MockObject */ |
|
| 42 | - private $session; |
|
| 43 | - |
|
| 44 | - /** @var IURLGenerator|MockObject */ |
|
| 45 | - private $urlGenerator; |
|
| 46 | - |
|
| 47 | - /** @var IControllerMethodReflector|MockObject */ |
|
| 48 | - private $reflector; |
|
| 49 | - |
|
| 50 | - /** @var IRequest|MockObject */ |
|
| 51 | - private $request; |
|
| 52 | - |
|
| 53 | - /** @var TwoFactorMiddleware */ |
|
| 54 | - private $middleware; |
|
| 55 | - |
|
| 56 | - /** @var Controller */ |
|
| 57 | - private $controller; |
|
| 58 | - |
|
| 59 | - protected function setUp(): void { |
|
| 60 | - parent::setUp(); |
|
| 61 | - |
|
| 62 | - $this->twoFactorManager = $this->getMockBuilder(Manager::class) |
|
| 63 | - ->disableOriginalConstructor() |
|
| 64 | - ->getMock(); |
|
| 65 | - $this->userSession = $this->getMockBuilder(Session::class) |
|
| 66 | - ->disableOriginalConstructor() |
|
| 67 | - ->getMock(); |
|
| 68 | - $this->session = $this->createMock(ISession::class); |
|
| 69 | - $this->urlGenerator = $this->createMock(IURLGenerator::class); |
|
| 70 | - $this->reflector = $this->createMock(IControllerMethodReflector::class); |
|
| 71 | - $this->request = new Request( |
|
| 72 | - [ |
|
| 73 | - 'server' => [ |
|
| 74 | - 'REQUEST_URI' => 'test/url' |
|
| 75 | - ] |
|
| 76 | - ], |
|
| 77 | - $this->createMock(IRequestId::class), |
|
| 78 | - $this->createMock(IConfig::class) |
|
| 79 | - ); |
|
| 80 | - |
|
| 81 | - $this->middleware = new TwoFactorMiddleware($this->twoFactorManager, $this->userSession, $this->session, $this->urlGenerator, $this->reflector, $this->request); |
|
| 82 | - $this->controller = $this->createMock(Controller::class); |
|
| 83 | - } |
|
| 84 | - |
|
| 85 | - public function testBeforeControllerNotLoggedIn(): void { |
|
| 86 | - $this->userSession->expects($this->once()) |
|
| 87 | - ->method('isLoggedIn') |
|
| 88 | - ->willReturn(false); |
|
| 89 | - |
|
| 90 | - $this->userSession->expects($this->never()) |
|
| 91 | - ->method('getUser'); |
|
| 92 | - |
|
| 93 | - $this->middleware->beforeController($this->controller, 'index'); |
|
| 94 | - } |
|
| 95 | - |
|
| 96 | - public function testBeforeSetupController(): void { |
|
| 97 | - $user = $this->createMock(IUser::class); |
|
| 98 | - $controller = $this->createMock(ALoginSetupController::class); |
|
| 99 | - $this->userSession->expects($this->any()) |
|
| 100 | - ->method('getUser') |
|
| 101 | - ->willReturn($user); |
|
| 102 | - $this->twoFactorManager->expects($this->once()) |
|
| 103 | - ->method('needsSecondFactor') |
|
| 104 | - ->willReturn(true); |
|
| 105 | - $this->userSession->expects($this->never()) |
|
| 106 | - ->method('isLoggedIn'); |
|
| 107 | - |
|
| 108 | - $this->middleware->beforeController($controller, 'create'); |
|
| 109 | - } |
|
| 110 | - |
|
| 111 | - public function testBeforeControllerNoTwoFactorCheckNeeded(): void { |
|
| 112 | - $user = $this->createMock(IUser::class); |
|
| 113 | - |
|
| 114 | - $this->userSession->expects($this->once()) |
|
| 115 | - ->method('isLoggedIn') |
|
| 116 | - ->willReturn(true); |
|
| 117 | - $this->userSession->expects($this->once()) |
|
| 118 | - ->method('getUser') |
|
| 119 | - ->willReturn($user); |
|
| 120 | - $this->twoFactorManager->expects($this->once()) |
|
| 121 | - ->method('isTwoFactorAuthenticated') |
|
| 122 | - ->with($user) |
|
| 123 | - ->willReturn(false); |
|
| 124 | - |
|
| 125 | - $this->middleware->beforeController($this->controller, 'index'); |
|
| 126 | - } |
|
| 127 | - |
|
| 128 | - |
|
| 129 | - public function testBeforeControllerTwoFactorAuthRequired(): void { |
|
| 130 | - $this->expectException(TwoFactorAuthRequiredException::class); |
|
| 131 | - |
|
| 132 | - $user = $this->createMock(IUser::class); |
|
| 133 | - |
|
| 134 | - $this->userSession->expects($this->once()) |
|
| 135 | - ->method('isLoggedIn') |
|
| 136 | - ->willReturn(true); |
|
| 137 | - $this->userSession->expects($this->once()) |
|
| 138 | - ->method('getUser') |
|
| 139 | - ->willReturn($user); |
|
| 140 | - $this->twoFactorManager->expects($this->once()) |
|
| 141 | - ->method('isTwoFactorAuthenticated') |
|
| 142 | - ->with($user) |
|
| 143 | - ->willReturn(true); |
|
| 144 | - $this->twoFactorManager->expects($this->once()) |
|
| 145 | - ->method('needsSecondFactor') |
|
| 146 | - ->with($user) |
|
| 147 | - ->willReturn(true); |
|
| 148 | - |
|
| 149 | - $this->middleware->beforeController($this->controller, 'index'); |
|
| 150 | - } |
|
| 151 | - |
|
| 152 | - |
|
| 153 | - public function testBeforeControllerUserAlreadyLoggedIn(): void { |
|
| 154 | - $this->expectException(UserAlreadyLoggedInException::class); |
|
| 155 | - |
|
| 156 | - $user = $this->createMock(IUser::class); |
|
| 157 | - |
|
| 158 | - $this->reflector |
|
| 159 | - ->method('hasAnnotation') |
|
| 160 | - ->willReturn(false); |
|
| 161 | - $this->userSession->expects($this->once()) |
|
| 162 | - ->method('isLoggedIn') |
|
| 163 | - ->willReturn(true); |
|
| 164 | - $this->userSession |
|
| 165 | - ->method('getUser') |
|
| 166 | - ->willReturn($user); |
|
| 167 | - $this->twoFactorManager->expects($this->once()) |
|
| 168 | - ->method('isTwoFactorAuthenticated') |
|
| 169 | - ->with($user) |
|
| 170 | - ->willReturn(true); |
|
| 171 | - $this->twoFactorManager->expects($this->once()) |
|
| 172 | - ->method('needsSecondFactor') |
|
| 173 | - ->with($user) |
|
| 174 | - ->willReturn(false); |
|
| 175 | - |
|
| 176 | - $twoFactorChallengeController = $this->getMockBuilder(TwoFactorChallengeController::class) |
|
| 177 | - ->disableOriginalConstructor() |
|
| 178 | - ->getMock(); |
|
| 179 | - $this->middleware->beforeController($twoFactorChallengeController, 'index'); |
|
| 180 | - } |
|
| 181 | - |
|
| 182 | - public function testAfterExceptionTwoFactorAuthRequired(): void { |
|
| 183 | - $ex = new TwoFactorAuthRequiredException(); |
|
| 184 | - |
|
| 185 | - $this->urlGenerator->expects($this->once()) |
|
| 186 | - ->method('linkToRoute') |
|
| 187 | - ->with('core.TwoFactorChallenge.selectChallenge') |
|
| 188 | - ->willReturn('test/url'); |
|
| 189 | - $expected = new RedirectResponse('test/url'); |
|
| 190 | - |
|
| 191 | - $this->assertEquals($expected, $this->middleware->afterException($this->controller, 'index', $ex)); |
|
| 192 | - } |
|
| 193 | - |
|
| 194 | - public function testAfterException(): void { |
|
| 195 | - $ex = new UserAlreadyLoggedInException(); |
|
| 196 | - |
|
| 197 | - $this->urlGenerator->expects($this->once()) |
|
| 198 | - ->method('linkToRoute') |
|
| 199 | - ->with('files.view.index') |
|
| 200 | - ->willReturn('redirect/url'); |
|
| 201 | - $expected = new RedirectResponse('redirect/url'); |
|
| 202 | - |
|
| 203 | - $this->assertEquals($expected, $this->middleware->afterException($this->controller, 'index', $ex)); |
|
| 204 | - } |
|
| 205 | - |
|
| 206 | - public function testRequires2FASetupDoneAnnotated(): void { |
|
| 207 | - $user = $this->createMock(IUser::class); |
|
| 208 | - |
|
| 209 | - $this->reflector |
|
| 210 | - ->method('hasAnnotation') |
|
| 211 | - ->willReturnCallback(function (string $annotation) { |
|
| 212 | - return $annotation === 'TwoFactorSetUpDoneRequired'; |
|
| 213 | - }); |
|
| 214 | - $this->userSession->expects($this->once()) |
|
| 215 | - ->method('isLoggedIn') |
|
| 216 | - ->willReturn(true); |
|
| 217 | - $this->userSession |
|
| 218 | - ->method('getUser') |
|
| 219 | - ->willReturn($user); |
|
| 220 | - $this->twoFactorManager->expects($this->once()) |
|
| 221 | - ->method('isTwoFactorAuthenticated') |
|
| 222 | - ->with($user) |
|
| 223 | - ->willReturn(true); |
|
| 224 | - $this->twoFactorManager->expects($this->once()) |
|
| 225 | - ->method('needsSecondFactor') |
|
| 226 | - ->with($user) |
|
| 227 | - ->willReturn(false); |
|
| 228 | - |
|
| 229 | - $this->expectException(UserAlreadyLoggedInException::class); |
|
| 230 | - |
|
| 231 | - $twoFactorChallengeController = $this->getMockBuilder(TwoFactorChallengeController::class) |
|
| 232 | - ->disableOriginalConstructor() |
|
| 233 | - ->getMock(); |
|
| 234 | - $this->middleware->beforeController($twoFactorChallengeController, 'index'); |
|
| 235 | - } |
|
| 236 | - |
|
| 237 | - public static function dataRequires2FASetupDone(): array { |
|
| 238 | - return [ |
|
| 239 | - [false, false, false], |
|
| 240 | - [false, true, true], |
|
| 241 | - [true, false, true], |
|
| 242 | - [true, true, true], |
|
| 243 | - ]; |
|
| 244 | - } |
|
| 245 | - |
|
| 246 | - /** |
|
| 247 | - * @dataProvider dataRequires2FASetupDone |
|
| 248 | - */ |
|
| 249 | - public function testRequires2FASetupDone(bool $hasProvider, bool $missingProviders, bool $expectEception): void { |
|
| 250 | - if ($hasProvider) { |
|
| 251 | - $provider = $this->createMock(IProvider::class); |
|
| 252 | - $provider->method('getId') |
|
| 253 | - ->willReturn('2FAftw'); |
|
| 254 | - $providers = [$provider]; |
|
| 255 | - } else { |
|
| 256 | - $providers = []; |
|
| 257 | - } |
|
| 258 | - |
|
| 259 | - |
|
| 260 | - $user = $this->createMock(IUser::class); |
|
| 261 | - |
|
| 262 | - $this->reflector |
|
| 263 | - ->method('hasAnnotation') |
|
| 264 | - ->willReturn(false); |
|
| 265 | - $this->userSession |
|
| 266 | - ->method('getUser') |
|
| 267 | - ->willReturn($user); |
|
| 268 | - $providerSet = new ProviderSet($providers, $missingProviders); |
|
| 269 | - $this->twoFactorManager->method('getProviderSet') |
|
| 270 | - ->with($user) |
|
| 271 | - ->willReturn($providerSet); |
|
| 272 | - $this->userSession |
|
| 273 | - ->method('isLoggedIn') |
|
| 274 | - ->willReturn(false); |
|
| 275 | - |
|
| 276 | - if ($expectEception) { |
|
| 277 | - $this->expectException(TwoFactorAuthRequiredException::class); |
|
| 278 | - } else { |
|
| 279 | - // hack to make phpunit shut up. Since we don't expect an exception here... |
|
| 280 | - $this->assertTrue(true); |
|
| 281 | - } |
|
| 282 | - |
|
| 283 | - $twoFactorChallengeController = $this->getMockBuilder(TwoFactorChallengeController::class) |
|
| 284 | - ->disableOriginalConstructor() |
|
| 285 | - ->getMock(); |
|
| 286 | - $this->middleware->beforeController($twoFactorChallengeController, 'index'); |
|
| 287 | - } |
|
| 35 | + /** @var Manager|MockObject */ |
|
| 36 | + private $twoFactorManager; |
|
| 37 | + |
|
| 38 | + /** @var IUserSession|MockObject */ |
|
| 39 | + private $userSession; |
|
| 40 | + |
|
| 41 | + /** @var ISession|MockObject */ |
|
| 42 | + private $session; |
|
| 43 | + |
|
| 44 | + /** @var IURLGenerator|MockObject */ |
|
| 45 | + private $urlGenerator; |
|
| 46 | + |
|
| 47 | + /** @var IControllerMethodReflector|MockObject */ |
|
| 48 | + private $reflector; |
|
| 49 | + |
|
| 50 | + /** @var IRequest|MockObject */ |
|
| 51 | + private $request; |
|
| 52 | + |
|
| 53 | + /** @var TwoFactorMiddleware */ |
|
| 54 | + private $middleware; |
|
| 55 | + |
|
| 56 | + /** @var Controller */ |
|
| 57 | + private $controller; |
|
| 58 | + |
|
| 59 | + protected function setUp(): void { |
|
| 60 | + parent::setUp(); |
|
| 61 | + |
|
| 62 | + $this->twoFactorManager = $this->getMockBuilder(Manager::class) |
|
| 63 | + ->disableOriginalConstructor() |
|
| 64 | + ->getMock(); |
|
| 65 | + $this->userSession = $this->getMockBuilder(Session::class) |
|
| 66 | + ->disableOriginalConstructor() |
|
| 67 | + ->getMock(); |
|
| 68 | + $this->session = $this->createMock(ISession::class); |
|
| 69 | + $this->urlGenerator = $this->createMock(IURLGenerator::class); |
|
| 70 | + $this->reflector = $this->createMock(IControllerMethodReflector::class); |
|
| 71 | + $this->request = new Request( |
|
| 72 | + [ |
|
| 73 | + 'server' => [ |
|
| 74 | + 'REQUEST_URI' => 'test/url' |
|
| 75 | + ] |
|
| 76 | + ], |
|
| 77 | + $this->createMock(IRequestId::class), |
|
| 78 | + $this->createMock(IConfig::class) |
|
| 79 | + ); |
|
| 80 | + |
|
| 81 | + $this->middleware = new TwoFactorMiddleware($this->twoFactorManager, $this->userSession, $this->session, $this->urlGenerator, $this->reflector, $this->request); |
|
| 82 | + $this->controller = $this->createMock(Controller::class); |
|
| 83 | + } |
|
| 84 | + |
|
| 85 | + public function testBeforeControllerNotLoggedIn(): void { |
|
| 86 | + $this->userSession->expects($this->once()) |
|
| 87 | + ->method('isLoggedIn') |
|
| 88 | + ->willReturn(false); |
|
| 89 | + |
|
| 90 | + $this->userSession->expects($this->never()) |
|
| 91 | + ->method('getUser'); |
|
| 92 | + |
|
| 93 | + $this->middleware->beforeController($this->controller, 'index'); |
|
| 94 | + } |
|
| 95 | + |
|
| 96 | + public function testBeforeSetupController(): void { |
|
| 97 | + $user = $this->createMock(IUser::class); |
|
| 98 | + $controller = $this->createMock(ALoginSetupController::class); |
|
| 99 | + $this->userSession->expects($this->any()) |
|
| 100 | + ->method('getUser') |
|
| 101 | + ->willReturn($user); |
|
| 102 | + $this->twoFactorManager->expects($this->once()) |
|
| 103 | + ->method('needsSecondFactor') |
|
| 104 | + ->willReturn(true); |
|
| 105 | + $this->userSession->expects($this->never()) |
|
| 106 | + ->method('isLoggedIn'); |
|
| 107 | + |
|
| 108 | + $this->middleware->beforeController($controller, 'create'); |
|
| 109 | + } |
|
| 110 | + |
|
| 111 | + public function testBeforeControllerNoTwoFactorCheckNeeded(): void { |
|
| 112 | + $user = $this->createMock(IUser::class); |
|
| 113 | + |
|
| 114 | + $this->userSession->expects($this->once()) |
|
| 115 | + ->method('isLoggedIn') |
|
| 116 | + ->willReturn(true); |
|
| 117 | + $this->userSession->expects($this->once()) |
|
| 118 | + ->method('getUser') |
|
| 119 | + ->willReturn($user); |
|
| 120 | + $this->twoFactorManager->expects($this->once()) |
|
| 121 | + ->method('isTwoFactorAuthenticated') |
|
| 122 | + ->with($user) |
|
| 123 | + ->willReturn(false); |
|
| 124 | + |
|
| 125 | + $this->middleware->beforeController($this->controller, 'index'); |
|
| 126 | + } |
|
| 127 | + |
|
| 128 | + |
|
| 129 | + public function testBeforeControllerTwoFactorAuthRequired(): void { |
|
| 130 | + $this->expectException(TwoFactorAuthRequiredException::class); |
|
| 131 | + |
|
| 132 | + $user = $this->createMock(IUser::class); |
|
| 133 | + |
|
| 134 | + $this->userSession->expects($this->once()) |
|
| 135 | + ->method('isLoggedIn') |
|
| 136 | + ->willReturn(true); |
|
| 137 | + $this->userSession->expects($this->once()) |
|
| 138 | + ->method('getUser') |
|
| 139 | + ->willReturn($user); |
|
| 140 | + $this->twoFactorManager->expects($this->once()) |
|
| 141 | + ->method('isTwoFactorAuthenticated') |
|
| 142 | + ->with($user) |
|
| 143 | + ->willReturn(true); |
|
| 144 | + $this->twoFactorManager->expects($this->once()) |
|
| 145 | + ->method('needsSecondFactor') |
|
| 146 | + ->with($user) |
|
| 147 | + ->willReturn(true); |
|
| 148 | + |
|
| 149 | + $this->middleware->beforeController($this->controller, 'index'); |
|
| 150 | + } |
|
| 151 | + |
|
| 152 | + |
|
| 153 | + public function testBeforeControllerUserAlreadyLoggedIn(): void { |
|
| 154 | + $this->expectException(UserAlreadyLoggedInException::class); |
|
| 155 | + |
|
| 156 | + $user = $this->createMock(IUser::class); |
|
| 157 | + |
|
| 158 | + $this->reflector |
|
| 159 | + ->method('hasAnnotation') |
|
| 160 | + ->willReturn(false); |
|
| 161 | + $this->userSession->expects($this->once()) |
|
| 162 | + ->method('isLoggedIn') |
|
| 163 | + ->willReturn(true); |
|
| 164 | + $this->userSession |
|
| 165 | + ->method('getUser') |
|
| 166 | + ->willReturn($user); |
|
| 167 | + $this->twoFactorManager->expects($this->once()) |
|
| 168 | + ->method('isTwoFactorAuthenticated') |
|
| 169 | + ->with($user) |
|
| 170 | + ->willReturn(true); |
|
| 171 | + $this->twoFactorManager->expects($this->once()) |
|
| 172 | + ->method('needsSecondFactor') |
|
| 173 | + ->with($user) |
|
| 174 | + ->willReturn(false); |
|
| 175 | + |
|
| 176 | + $twoFactorChallengeController = $this->getMockBuilder(TwoFactorChallengeController::class) |
|
| 177 | + ->disableOriginalConstructor() |
|
| 178 | + ->getMock(); |
|
| 179 | + $this->middleware->beforeController($twoFactorChallengeController, 'index'); |
|
| 180 | + } |
|
| 181 | + |
|
| 182 | + public function testAfterExceptionTwoFactorAuthRequired(): void { |
|
| 183 | + $ex = new TwoFactorAuthRequiredException(); |
|
| 184 | + |
|
| 185 | + $this->urlGenerator->expects($this->once()) |
|
| 186 | + ->method('linkToRoute') |
|
| 187 | + ->with('core.TwoFactorChallenge.selectChallenge') |
|
| 188 | + ->willReturn('test/url'); |
|
| 189 | + $expected = new RedirectResponse('test/url'); |
|
| 190 | + |
|
| 191 | + $this->assertEquals($expected, $this->middleware->afterException($this->controller, 'index', $ex)); |
|
| 192 | + } |
|
| 193 | + |
|
| 194 | + public function testAfterException(): void { |
|
| 195 | + $ex = new UserAlreadyLoggedInException(); |
|
| 196 | + |
|
| 197 | + $this->urlGenerator->expects($this->once()) |
|
| 198 | + ->method('linkToRoute') |
|
| 199 | + ->with('files.view.index') |
|
| 200 | + ->willReturn('redirect/url'); |
|
| 201 | + $expected = new RedirectResponse('redirect/url'); |
|
| 202 | + |
|
| 203 | + $this->assertEquals($expected, $this->middleware->afterException($this->controller, 'index', $ex)); |
|
| 204 | + } |
|
| 205 | + |
|
| 206 | + public function testRequires2FASetupDoneAnnotated(): void { |
|
| 207 | + $user = $this->createMock(IUser::class); |
|
| 208 | + |
|
| 209 | + $this->reflector |
|
| 210 | + ->method('hasAnnotation') |
|
| 211 | + ->willReturnCallback(function (string $annotation) { |
|
| 212 | + return $annotation === 'TwoFactorSetUpDoneRequired'; |
|
| 213 | + }); |
|
| 214 | + $this->userSession->expects($this->once()) |
|
| 215 | + ->method('isLoggedIn') |
|
| 216 | + ->willReturn(true); |
|
| 217 | + $this->userSession |
|
| 218 | + ->method('getUser') |
|
| 219 | + ->willReturn($user); |
|
| 220 | + $this->twoFactorManager->expects($this->once()) |
|
| 221 | + ->method('isTwoFactorAuthenticated') |
|
| 222 | + ->with($user) |
|
| 223 | + ->willReturn(true); |
|
| 224 | + $this->twoFactorManager->expects($this->once()) |
|
| 225 | + ->method('needsSecondFactor') |
|
| 226 | + ->with($user) |
|
| 227 | + ->willReturn(false); |
|
| 228 | + |
|
| 229 | + $this->expectException(UserAlreadyLoggedInException::class); |
|
| 230 | + |
|
| 231 | + $twoFactorChallengeController = $this->getMockBuilder(TwoFactorChallengeController::class) |
|
| 232 | + ->disableOriginalConstructor() |
|
| 233 | + ->getMock(); |
|
| 234 | + $this->middleware->beforeController($twoFactorChallengeController, 'index'); |
|
| 235 | + } |
|
| 236 | + |
|
| 237 | + public static function dataRequires2FASetupDone(): array { |
|
| 238 | + return [ |
|
| 239 | + [false, false, false], |
|
| 240 | + [false, true, true], |
|
| 241 | + [true, false, true], |
|
| 242 | + [true, true, true], |
|
| 243 | + ]; |
|
| 244 | + } |
|
| 245 | + |
|
| 246 | + /** |
|
| 247 | + * @dataProvider dataRequires2FASetupDone |
|
| 248 | + */ |
|
| 249 | + public function testRequires2FASetupDone(bool $hasProvider, bool $missingProviders, bool $expectEception): void { |
|
| 250 | + if ($hasProvider) { |
|
| 251 | + $provider = $this->createMock(IProvider::class); |
|
| 252 | + $provider->method('getId') |
|
| 253 | + ->willReturn('2FAftw'); |
|
| 254 | + $providers = [$provider]; |
|
| 255 | + } else { |
|
| 256 | + $providers = []; |
|
| 257 | + } |
|
| 258 | + |
|
| 259 | + |
|
| 260 | + $user = $this->createMock(IUser::class); |
|
| 261 | + |
|
| 262 | + $this->reflector |
|
| 263 | + ->method('hasAnnotation') |
|
| 264 | + ->willReturn(false); |
|
| 265 | + $this->userSession |
|
| 266 | + ->method('getUser') |
|
| 267 | + ->willReturn($user); |
|
| 268 | + $providerSet = new ProviderSet($providers, $missingProviders); |
|
| 269 | + $this->twoFactorManager->method('getProviderSet') |
|
| 270 | + ->with($user) |
|
| 271 | + ->willReturn($providerSet); |
|
| 272 | + $this->userSession |
|
| 273 | + ->method('isLoggedIn') |
|
| 274 | + ->willReturn(false); |
|
| 275 | + |
|
| 276 | + if ($expectEception) { |
|
| 277 | + $this->expectException(TwoFactorAuthRequiredException::class); |
|
| 278 | + } else { |
|
| 279 | + // hack to make phpunit shut up. Since we don't expect an exception here... |
|
| 280 | + $this->assertTrue(true); |
|
| 281 | + } |
|
| 282 | + |
|
| 283 | + $twoFactorChallengeController = $this->getMockBuilder(TwoFactorChallengeController::class) |
|
| 284 | + ->disableOriginalConstructor() |
|
| 285 | + ->getMock(); |
|
| 286 | + $this->middleware->beforeController($twoFactorChallengeController, 'index'); |
|
| 287 | + } |
|
| 288 | 288 | } |
@@ -208,7 +208,7 @@ discard block |
||
| 208 | 208 | |
| 209 | 209 | $this->reflector |
| 210 | 210 | ->method('hasAnnotation') |
| 211 | - ->willReturnCallback(function (string $annotation) { |
|
| 211 | + ->willReturnCallback(function(string $annotation) { |
|
| 212 | 212 | return $annotation === 'TwoFactorSetUpDoneRequired'; |
| 213 | 213 | }); |
| 214 | 214 | $this->userSession->expects($this->once()) |
@@ -237,9 +237,9 @@ discard block |
||
| 237 | 237 | public static function dataRequires2FASetupDone(): array { |
| 238 | 238 | return [ |
| 239 | 239 | [false, false, false], |
| 240 | - [false, true, true], |
|
| 240 | + [false, true, true], |
|
| 241 | 241 | [true, false, true], |
| 242 | - [true, true, true], |
|
| 242 | + [true, true, true], |
|
| 243 | 243 | ]; |
| 244 | 244 | } |
| 245 | 245 | |
@@ -31,402 +31,402 @@ |
||
| 31 | 31 | * Unit tests for \OC\Core\Service\LoginFlowV2Service |
| 32 | 32 | */ |
| 33 | 33 | class LoginFlowV2ServiceUnitTest extends TestCase { |
| 34 | - /** @var \OCP\IConfig */ |
|
| 35 | - private $config; |
|
| 36 | - |
|
| 37 | - /** @var \OCP\Security\ICrypto */ |
|
| 38 | - private $crypto; |
|
| 39 | - |
|
| 40 | - /** @var LoggerInterface|MockObject */ |
|
| 41 | - private $logger; |
|
| 42 | - |
|
| 43 | - /** @var \OC\Core\Db\LoginFlowV2Mapper */ |
|
| 44 | - private $mapper; |
|
| 45 | - |
|
| 46 | - /** @var \OCP\Security\ISecureRandom */ |
|
| 47 | - private $secureRandom; |
|
| 48 | - |
|
| 49 | - /** @var \OC\Core\Service\LoginFlowV2Service */ |
|
| 50 | - private $subjectUnderTest; |
|
| 51 | - |
|
| 52 | - /** @var \OCP\AppFramework\Utility\ITimeFactory */ |
|
| 53 | - private $timeFactory; |
|
| 54 | - |
|
| 55 | - /** @var \OC\Authentication\Token\IProvider */ |
|
| 56 | - private $tokenProvider; |
|
| 57 | - |
|
| 58 | - public function setUp(): void { |
|
| 59 | - parent::setUp(); |
|
| 60 | - |
|
| 61 | - $this->setupSubjectUnderTest(); |
|
| 62 | - } |
|
| 63 | - |
|
| 64 | - /** |
|
| 65 | - * Setup subject under test with mocked constructor arguments. |
|
| 66 | - * |
|
| 67 | - * Code was moved to separate function to keep setUp function small and clear. |
|
| 68 | - */ |
|
| 69 | - private function setupSubjectUnderTest(): void { |
|
| 70 | - $this->config = $this->createMock(IConfig::class); |
|
| 71 | - $this->crypto = $this->createMock(ICrypto::class); |
|
| 72 | - $this->mapper = $this->createMock(LoginFlowV2Mapper::class); |
|
| 73 | - $this->logger = $this->createMock(LoggerInterface::class); |
|
| 74 | - $this->tokenProvider = $this->createMock(IProvider::class); |
|
| 75 | - $this->secureRandom = $this->createMock(ISecureRandom::class); |
|
| 76 | - $this->timeFactory = $this->createMock(ITimeFactory::class); |
|
| 77 | - |
|
| 78 | - $this->subjectUnderTest = new LoginFlowV2Service( |
|
| 79 | - $this->mapper, |
|
| 80 | - $this->secureRandom, |
|
| 81 | - $this->timeFactory, |
|
| 82 | - $this->config, |
|
| 83 | - $this->crypto, |
|
| 84 | - $this->logger, |
|
| 85 | - $this->tokenProvider |
|
| 86 | - ); |
|
| 87 | - } |
|
| 88 | - |
|
| 89 | - /** |
|
| 90 | - * Generates for a given password required OpenSSL parts. |
|
| 91 | - * |
|
| 92 | - * @return array Array contains encrypted password, private key and public key. |
|
| 93 | - */ |
|
| 94 | - private function getOpenSSLEncryptedPublicAndPrivateKey(string $appPassword): array { |
|
| 95 | - // Create the private and public key |
|
| 96 | - $res = openssl_pkey_new([ |
|
| 97 | - 'digest_alg' => 'md5', // take fast algorithm for testing purposes |
|
| 98 | - 'private_key_bits' => 512, |
|
| 99 | - 'private_key_type' => OPENSSL_KEYTYPE_RSA, |
|
| 100 | - ]); |
|
| 101 | - |
|
| 102 | - // Extract the private key from $res |
|
| 103 | - openssl_pkey_export($res, $privateKey); |
|
| 104 | - |
|
| 105 | - // Extract the public key from $res |
|
| 106 | - $publicKey = openssl_pkey_get_details($res); |
|
| 107 | - $publicKey = $publicKey['key']; |
|
| 108 | - |
|
| 109 | - // Encrypt the data to $encrypted using the public key |
|
| 110 | - openssl_public_encrypt($appPassword, $encrypted, $publicKey, OPENSSL_PKCS1_OAEP_PADDING); |
|
| 111 | - |
|
| 112 | - return [$encrypted, $privateKey, $publicKey]; |
|
| 113 | - } |
|
| 114 | - |
|
| 115 | - /* |
|
| 34 | + /** @var \OCP\IConfig */ |
|
| 35 | + private $config; |
|
| 36 | + |
|
| 37 | + /** @var \OCP\Security\ICrypto */ |
|
| 38 | + private $crypto; |
|
| 39 | + |
|
| 40 | + /** @var LoggerInterface|MockObject */ |
|
| 41 | + private $logger; |
|
| 42 | + |
|
| 43 | + /** @var \OC\Core\Db\LoginFlowV2Mapper */ |
|
| 44 | + private $mapper; |
|
| 45 | + |
|
| 46 | + /** @var \OCP\Security\ISecureRandom */ |
|
| 47 | + private $secureRandom; |
|
| 48 | + |
|
| 49 | + /** @var \OC\Core\Service\LoginFlowV2Service */ |
|
| 50 | + private $subjectUnderTest; |
|
| 51 | + |
|
| 52 | + /** @var \OCP\AppFramework\Utility\ITimeFactory */ |
|
| 53 | + private $timeFactory; |
|
| 54 | + |
|
| 55 | + /** @var \OC\Authentication\Token\IProvider */ |
|
| 56 | + private $tokenProvider; |
|
| 57 | + |
|
| 58 | + public function setUp(): void { |
|
| 59 | + parent::setUp(); |
|
| 60 | + |
|
| 61 | + $this->setupSubjectUnderTest(); |
|
| 62 | + } |
|
| 63 | + |
|
| 64 | + /** |
|
| 65 | + * Setup subject under test with mocked constructor arguments. |
|
| 66 | + * |
|
| 67 | + * Code was moved to separate function to keep setUp function small and clear. |
|
| 68 | + */ |
|
| 69 | + private function setupSubjectUnderTest(): void { |
|
| 70 | + $this->config = $this->createMock(IConfig::class); |
|
| 71 | + $this->crypto = $this->createMock(ICrypto::class); |
|
| 72 | + $this->mapper = $this->createMock(LoginFlowV2Mapper::class); |
|
| 73 | + $this->logger = $this->createMock(LoggerInterface::class); |
|
| 74 | + $this->tokenProvider = $this->createMock(IProvider::class); |
|
| 75 | + $this->secureRandom = $this->createMock(ISecureRandom::class); |
|
| 76 | + $this->timeFactory = $this->createMock(ITimeFactory::class); |
|
| 77 | + |
|
| 78 | + $this->subjectUnderTest = new LoginFlowV2Service( |
|
| 79 | + $this->mapper, |
|
| 80 | + $this->secureRandom, |
|
| 81 | + $this->timeFactory, |
|
| 82 | + $this->config, |
|
| 83 | + $this->crypto, |
|
| 84 | + $this->logger, |
|
| 85 | + $this->tokenProvider |
|
| 86 | + ); |
|
| 87 | + } |
|
| 88 | + |
|
| 89 | + /** |
|
| 90 | + * Generates for a given password required OpenSSL parts. |
|
| 91 | + * |
|
| 92 | + * @return array Array contains encrypted password, private key and public key. |
|
| 93 | + */ |
|
| 94 | + private function getOpenSSLEncryptedPublicAndPrivateKey(string $appPassword): array { |
|
| 95 | + // Create the private and public key |
|
| 96 | + $res = openssl_pkey_new([ |
|
| 97 | + 'digest_alg' => 'md5', // take fast algorithm for testing purposes |
|
| 98 | + 'private_key_bits' => 512, |
|
| 99 | + 'private_key_type' => OPENSSL_KEYTYPE_RSA, |
|
| 100 | + ]); |
|
| 101 | + |
|
| 102 | + // Extract the private key from $res |
|
| 103 | + openssl_pkey_export($res, $privateKey); |
|
| 104 | + |
|
| 105 | + // Extract the public key from $res |
|
| 106 | + $publicKey = openssl_pkey_get_details($res); |
|
| 107 | + $publicKey = $publicKey['key']; |
|
| 108 | + |
|
| 109 | + // Encrypt the data to $encrypted using the public key |
|
| 110 | + openssl_public_encrypt($appPassword, $encrypted, $publicKey, OPENSSL_PKCS1_OAEP_PADDING); |
|
| 111 | + |
|
| 112 | + return [$encrypted, $privateKey, $publicKey]; |
|
| 113 | + } |
|
| 114 | + |
|
| 115 | + /* |
|
| 116 | 116 | * Tests for poll |
| 117 | 117 | */ |
| 118 | 118 | |
| 119 | - public function testPollApptokenCouldNotBeDecrypted(): void { |
|
| 120 | - $this->expectException(LoginFlowV2NotFoundException::class); |
|
| 121 | - $this->expectExceptionMessage('Apptoken could not be decrypted'); |
|
| 119 | + public function testPollApptokenCouldNotBeDecrypted(): void { |
|
| 120 | + $this->expectException(LoginFlowV2NotFoundException::class); |
|
| 121 | + $this->expectExceptionMessage('Apptoken could not be decrypted'); |
|
| 122 | 122 | |
| 123 | - /* |
|
| 123 | + /* |
|
| 124 | 124 | * Cannot be mocked, because functions like getLoginName are magic functions. |
| 125 | 125 | * To be able to set internal properties, we have to use the real class here. |
| 126 | 126 | */ |
| 127 | - $loginFlowV2 = new LoginFlowV2(); |
|
| 128 | - $loginFlowV2->setLoginName('test'); |
|
| 129 | - $loginFlowV2->setServer('test'); |
|
| 130 | - $loginFlowV2->setAppPassword('test'); |
|
| 131 | - $loginFlowV2->setPrivateKey('test'); |
|
| 127 | + $loginFlowV2 = new LoginFlowV2(); |
|
| 128 | + $loginFlowV2->setLoginName('test'); |
|
| 129 | + $loginFlowV2->setServer('test'); |
|
| 130 | + $loginFlowV2->setAppPassword('test'); |
|
| 131 | + $loginFlowV2->setPrivateKey('test'); |
|
| 132 | 132 | |
| 133 | - $this->mapper->expects($this->once()) |
|
| 134 | - ->method('getByPollToken') |
|
| 135 | - ->willReturn($loginFlowV2); |
|
| 133 | + $this->mapper->expects($this->once()) |
|
| 134 | + ->method('getByPollToken') |
|
| 135 | + ->willReturn($loginFlowV2); |
|
| 136 | 136 | |
| 137 | - $this->subjectUnderTest->poll(''); |
|
| 138 | - } |
|
| 137 | + $this->subjectUnderTest->poll(''); |
|
| 138 | + } |
|
| 139 | 139 | |
| 140 | - public function testPollInvalidToken(): void { |
|
| 141 | - $this->expectException(LoginFlowV2NotFoundException::class); |
|
| 142 | - $this->expectExceptionMessage('Invalid token'); |
|
| 140 | + public function testPollInvalidToken(): void { |
|
| 141 | + $this->expectException(LoginFlowV2NotFoundException::class); |
|
| 142 | + $this->expectExceptionMessage('Invalid token'); |
|
| 143 | 143 | |
| 144 | - $this->mapper->expects($this->once()) |
|
| 145 | - ->method('getByPollToken') |
|
| 146 | - ->willThrowException(new DoesNotExistException('')); |
|
| 144 | + $this->mapper->expects($this->once()) |
|
| 145 | + ->method('getByPollToken') |
|
| 146 | + ->willThrowException(new DoesNotExistException('')); |
|
| 147 | 147 | |
| 148 | - $this->subjectUnderTest->poll(''); |
|
| 149 | - } |
|
| 148 | + $this->subjectUnderTest->poll(''); |
|
| 149 | + } |
|
| 150 | 150 | |
| 151 | - public function testPollTokenNotYetReady(): void { |
|
| 152 | - $this->expectException(LoginFlowV2NotFoundException::class); |
|
| 153 | - $this->expectExceptionMessage('Token not yet ready'); |
|
| 151 | + public function testPollTokenNotYetReady(): void { |
|
| 152 | + $this->expectException(LoginFlowV2NotFoundException::class); |
|
| 153 | + $this->expectExceptionMessage('Token not yet ready'); |
|
| 154 | 154 | |
| 155 | - $this->subjectUnderTest->poll(''); |
|
| 156 | - } |
|
| 155 | + $this->subjectUnderTest->poll(''); |
|
| 156 | + } |
|
| 157 | 157 | |
| 158 | - public function testPollRemoveDataFromDb(): void { |
|
| 159 | - [$encrypted, $privateKey] = $this->getOpenSSLEncryptedPublicAndPrivateKey('test_pass'); |
|
| 158 | + public function testPollRemoveDataFromDb(): void { |
|
| 159 | + [$encrypted, $privateKey] = $this->getOpenSSLEncryptedPublicAndPrivateKey('test_pass'); |
|
| 160 | 160 | |
| 161 | - $this->crypto->expects($this->once()) |
|
| 162 | - ->method('decrypt') |
|
| 163 | - ->willReturn($privateKey); |
|
| 161 | + $this->crypto->expects($this->once()) |
|
| 162 | + ->method('decrypt') |
|
| 163 | + ->willReturn($privateKey); |
|
| 164 | 164 | |
| 165 | - /* |
|
| 165 | + /* |
|
| 166 | 166 | * Cannot be mocked, because functions like getLoginName are magic functions. |
| 167 | 167 | * To be able to set internal properties, we have to use the real class here. |
| 168 | 168 | */ |
| 169 | - $loginFlowV2 = new LoginFlowV2(); |
|
| 170 | - $loginFlowV2->setLoginName('test_login'); |
|
| 171 | - $loginFlowV2->setServer('test_server'); |
|
| 172 | - $loginFlowV2->setAppPassword(base64_encode($encrypted)); |
|
| 173 | - $loginFlowV2->setPrivateKey($privateKey); |
|
| 174 | - |
|
| 175 | - $this->mapper->expects($this->once()) |
|
| 176 | - ->method('delete') |
|
| 177 | - ->with($this->equalTo($loginFlowV2)); |
|
| 178 | - |
|
| 179 | - $this->mapper->expects($this->once()) |
|
| 180 | - ->method('getByPollToken') |
|
| 181 | - ->willReturn($loginFlowV2); |
|
| 182 | - |
|
| 183 | - $credentials = $this->subjectUnderTest->poll(''); |
|
| 184 | - |
|
| 185 | - $this->assertTrue($credentials instanceof LoginFlowV2Credentials); |
|
| 186 | - $this->assertEquals( |
|
| 187 | - [ |
|
| 188 | - 'server' => 'test_server', |
|
| 189 | - 'loginName' => 'test_login', |
|
| 190 | - 'appPassword' => 'test_pass', |
|
| 191 | - ], |
|
| 192 | - $credentials->jsonSerialize() |
|
| 193 | - ); |
|
| 194 | - } |
|
| 195 | - |
|
| 196 | - /* |
|
| 169 | + $loginFlowV2 = new LoginFlowV2(); |
|
| 170 | + $loginFlowV2->setLoginName('test_login'); |
|
| 171 | + $loginFlowV2->setServer('test_server'); |
|
| 172 | + $loginFlowV2->setAppPassword(base64_encode($encrypted)); |
|
| 173 | + $loginFlowV2->setPrivateKey($privateKey); |
|
| 174 | + |
|
| 175 | + $this->mapper->expects($this->once()) |
|
| 176 | + ->method('delete') |
|
| 177 | + ->with($this->equalTo($loginFlowV2)); |
|
| 178 | + |
|
| 179 | + $this->mapper->expects($this->once()) |
|
| 180 | + ->method('getByPollToken') |
|
| 181 | + ->willReturn($loginFlowV2); |
|
| 182 | + |
|
| 183 | + $credentials = $this->subjectUnderTest->poll(''); |
|
| 184 | + |
|
| 185 | + $this->assertTrue($credentials instanceof LoginFlowV2Credentials); |
|
| 186 | + $this->assertEquals( |
|
| 187 | + [ |
|
| 188 | + 'server' => 'test_server', |
|
| 189 | + 'loginName' => 'test_login', |
|
| 190 | + 'appPassword' => 'test_pass', |
|
| 191 | + ], |
|
| 192 | + $credentials->jsonSerialize() |
|
| 193 | + ); |
|
| 194 | + } |
|
| 195 | + |
|
| 196 | + /* |
|
| 197 | 197 | * Tests for getByLoginToken |
| 198 | 198 | */ |
| 199 | 199 | |
| 200 | - public function testGetByLoginToken(): void { |
|
| 201 | - $loginFlowV2 = new LoginFlowV2(); |
|
| 202 | - $loginFlowV2->setLoginName('test_login'); |
|
| 203 | - $loginFlowV2->setServer('test_server'); |
|
| 204 | - $loginFlowV2->setAppPassword('test'); |
|
| 200 | + public function testGetByLoginToken(): void { |
|
| 201 | + $loginFlowV2 = new LoginFlowV2(); |
|
| 202 | + $loginFlowV2->setLoginName('test_login'); |
|
| 203 | + $loginFlowV2->setServer('test_server'); |
|
| 204 | + $loginFlowV2->setAppPassword('test'); |
|
| 205 | 205 | |
| 206 | - $this->mapper->expects($this->once()) |
|
| 207 | - ->method('getByLoginToken') |
|
| 208 | - ->willReturn($loginFlowV2); |
|
| 206 | + $this->mapper->expects($this->once()) |
|
| 207 | + ->method('getByLoginToken') |
|
| 208 | + ->willReturn($loginFlowV2); |
|
| 209 | 209 | |
| 210 | - $result = $this->subjectUnderTest->getByLoginToken('test_token'); |
|
| 210 | + $result = $this->subjectUnderTest->getByLoginToken('test_token'); |
|
| 211 | 211 | |
| 212 | - $this->assertTrue($result instanceof LoginFlowV2); |
|
| 213 | - $this->assertEquals('test_server', $result->getServer()); |
|
| 214 | - $this->assertEquals('test_login', $result->getLoginName()); |
|
| 215 | - $this->assertEquals('test', $result->getAppPassword()); |
|
| 216 | - } |
|
| 212 | + $this->assertTrue($result instanceof LoginFlowV2); |
|
| 213 | + $this->assertEquals('test_server', $result->getServer()); |
|
| 214 | + $this->assertEquals('test_login', $result->getLoginName()); |
|
| 215 | + $this->assertEquals('test', $result->getAppPassword()); |
|
| 216 | + } |
|
| 217 | 217 | |
| 218 | - public function testGetByLoginTokenLoginTokenInvalid(): void { |
|
| 219 | - $this->expectException(LoginFlowV2NotFoundException::class); |
|
| 220 | - $this->expectExceptionMessage('Login token invalid'); |
|
| 218 | + public function testGetByLoginTokenLoginTokenInvalid(): void { |
|
| 219 | + $this->expectException(LoginFlowV2NotFoundException::class); |
|
| 220 | + $this->expectExceptionMessage('Login token invalid'); |
|
| 221 | 221 | |
| 222 | - $this->mapper->expects($this->once()) |
|
| 223 | - ->method('getByLoginToken') |
|
| 224 | - ->willThrowException(new DoesNotExistException('')); |
|
| 222 | + $this->mapper->expects($this->once()) |
|
| 223 | + ->method('getByLoginToken') |
|
| 224 | + ->willThrowException(new DoesNotExistException('')); |
|
| 225 | 225 | |
| 226 | - $this->subjectUnderTest->getByLoginToken('test_token'); |
|
| 227 | - } |
|
| 226 | + $this->subjectUnderTest->getByLoginToken('test_token'); |
|
| 227 | + } |
|
| 228 | 228 | |
| 229 | - public function testGetByLoginTokenClientForbidden() { |
|
| 230 | - $this->expectException(LoginFlowV2ClientForbiddenException::class); |
|
| 231 | - $this->expectExceptionMessage('Client not allowed'); |
|
| 229 | + public function testGetByLoginTokenClientForbidden() { |
|
| 230 | + $this->expectException(LoginFlowV2ClientForbiddenException::class); |
|
| 231 | + $this->expectExceptionMessage('Client not allowed'); |
|
| 232 | 232 | |
| 233 | - $allowedClients = [ |
|
| 234 | - '/Custom Allowed Client/i' |
|
| 235 | - ]; |
|
| 233 | + $allowedClients = [ |
|
| 234 | + '/Custom Allowed Client/i' |
|
| 235 | + ]; |
|
| 236 | 236 | |
| 237 | - $this->config->expects($this->exactly(1)) |
|
| 238 | - ->method('getSystemValue') |
|
| 239 | - ->willReturn($this->returnCallback(function ($key) use ($allowedClients) { |
|
| 240 | - // Note: \OCP\IConfig::getSystemValue returns either an array or string. |
|
| 241 | - return $key == 'core.login_flow_v2.allowed_user_agents' ? $allowedClients : ''; |
|
| 242 | - })); |
|
| 237 | + $this->config->expects($this->exactly(1)) |
|
| 238 | + ->method('getSystemValue') |
|
| 239 | + ->willReturn($this->returnCallback(function ($key) use ($allowedClients) { |
|
| 240 | + // Note: \OCP\IConfig::getSystemValue returns either an array or string. |
|
| 241 | + return $key == 'core.login_flow_v2.allowed_user_agents' ? $allowedClients : ''; |
|
| 242 | + })); |
|
| 243 | 243 | |
| 244 | - $loginFlowV2 = new LoginFlowV2(); |
|
| 245 | - $loginFlowV2->setClientName('Rogue Curl Client/1.0'); |
|
| 244 | + $loginFlowV2 = new LoginFlowV2(); |
|
| 245 | + $loginFlowV2->setClientName('Rogue Curl Client/1.0'); |
|
| 246 | 246 | |
| 247 | - $this->mapper->expects($this->once()) |
|
| 248 | - ->method('getByLoginToken') |
|
| 249 | - ->willReturn($loginFlowV2); |
|
| 247 | + $this->mapper->expects($this->once()) |
|
| 248 | + ->method('getByLoginToken') |
|
| 249 | + ->willReturn($loginFlowV2); |
|
| 250 | 250 | |
| 251 | - $this->subjectUnderTest->getByLoginToken('test_token'); |
|
| 252 | - } |
|
| 251 | + $this->subjectUnderTest->getByLoginToken('test_token'); |
|
| 252 | + } |
|
| 253 | 253 | |
| 254 | - public function testGetByLoginTokenClientAllowed() { |
|
| 255 | - $allowedClients = [ |
|
| 256 | - '/Foo Allowed Client/i', |
|
| 257 | - '/Custom Allowed Client/i' |
|
| 258 | - ]; |
|
| 254 | + public function testGetByLoginTokenClientAllowed() { |
|
| 255 | + $allowedClients = [ |
|
| 256 | + '/Foo Allowed Client/i', |
|
| 257 | + '/Custom Allowed Client/i' |
|
| 258 | + ]; |
|
| 259 | 259 | |
| 260 | - $loginFlowV2 = new LoginFlowV2(); |
|
| 261 | - $loginFlowV2->setClientName('Custom Allowed Client Curl Client/1.0'); |
|
| 260 | + $loginFlowV2 = new LoginFlowV2(); |
|
| 261 | + $loginFlowV2->setClientName('Custom Allowed Client Curl Client/1.0'); |
|
| 262 | 262 | |
| 263 | - $this->config->expects($this->exactly(1)) |
|
| 264 | - ->method('getSystemValue') |
|
| 265 | - ->willReturn($this->returnCallback(function ($key) use ($allowedClients) { |
|
| 266 | - // Note: \OCP\IConfig::getSystemValue returns either an array or string. |
|
| 267 | - return $key == 'core.login_flow_v2.allowed_user_agents' ? $allowedClients : ''; |
|
| 268 | - })); |
|
| 263 | + $this->config->expects($this->exactly(1)) |
|
| 264 | + ->method('getSystemValue') |
|
| 265 | + ->willReturn($this->returnCallback(function ($key) use ($allowedClients) { |
|
| 266 | + // Note: \OCP\IConfig::getSystemValue returns either an array or string. |
|
| 267 | + return $key == 'core.login_flow_v2.allowed_user_agents' ? $allowedClients : ''; |
|
| 268 | + })); |
|
| 269 | 269 | |
| 270 | - $this->mapper->expects($this->once()) |
|
| 271 | - ->method('getByLoginToken') |
|
| 272 | - ->willReturn($loginFlowV2); |
|
| 270 | + $this->mapper->expects($this->once()) |
|
| 271 | + ->method('getByLoginToken') |
|
| 272 | + ->willReturn($loginFlowV2); |
|
| 273 | 273 | |
| 274 | - $result = $this->subjectUnderTest->getByLoginToken('test_token'); |
|
| 274 | + $result = $this->subjectUnderTest->getByLoginToken('test_token'); |
|
| 275 | 275 | |
| 276 | - $this->assertTrue($result instanceof LoginFlowV2); |
|
| 277 | - $this->assertEquals('Custom Allowed Client Curl Client/1.0', $result->getClientName()); |
|
| 278 | - } |
|
| 276 | + $this->assertTrue($result instanceof LoginFlowV2); |
|
| 277 | + $this->assertEquals('Custom Allowed Client Curl Client/1.0', $result->getClientName()); |
|
| 278 | + } |
|
| 279 | 279 | |
| 280 | - /* |
|
| 280 | + /* |
|
| 281 | 281 | * Tests for startLoginFlow |
| 282 | 282 | */ |
| 283 | 283 | |
| 284 | - public function testStartLoginFlow(): void { |
|
| 285 | - $loginFlowV2 = new LoginFlowV2(); |
|
| 284 | + public function testStartLoginFlow(): void { |
|
| 285 | + $loginFlowV2 = new LoginFlowV2(); |
|
| 286 | 286 | |
| 287 | - $this->mapper->expects($this->once()) |
|
| 288 | - ->method('getByLoginToken') |
|
| 289 | - ->willReturn($loginFlowV2); |
|
| 287 | + $this->mapper->expects($this->once()) |
|
| 288 | + ->method('getByLoginToken') |
|
| 289 | + ->willReturn($loginFlowV2); |
|
| 290 | 290 | |
| 291 | - $this->mapper->expects($this->once()) |
|
| 292 | - ->method('update'); |
|
| 291 | + $this->mapper->expects($this->once()) |
|
| 292 | + ->method('update'); |
|
| 293 | 293 | |
| 294 | - $this->assertTrue($this->subjectUnderTest->startLoginFlow('test_token')); |
|
| 295 | - } |
|
| 294 | + $this->assertTrue($this->subjectUnderTest->startLoginFlow('test_token')); |
|
| 295 | + } |
|
| 296 | 296 | |
| 297 | - public function testStartLoginFlowDoesNotExistException(): void { |
|
| 298 | - $this->mapper->expects($this->once()) |
|
| 299 | - ->method('getByLoginToken') |
|
| 300 | - ->willThrowException(new DoesNotExistException('')); |
|
| 297 | + public function testStartLoginFlowDoesNotExistException(): void { |
|
| 298 | + $this->mapper->expects($this->once()) |
|
| 299 | + ->method('getByLoginToken') |
|
| 300 | + ->willThrowException(new DoesNotExistException('')); |
|
| 301 | 301 | |
| 302 | - $this->assertFalse($this->subjectUnderTest->startLoginFlow('test_token')); |
|
| 303 | - } |
|
| 302 | + $this->assertFalse($this->subjectUnderTest->startLoginFlow('test_token')); |
|
| 303 | + } |
|
| 304 | 304 | |
| 305 | - /** |
|
| 306 | - * If an exception not of type DoesNotExistException is thrown, |
|
| 307 | - * it is expected that it is not being handled by startLoginFlow. |
|
| 308 | - */ |
|
| 309 | - public function testStartLoginFlowException(): void { |
|
| 310 | - $this->expectException(Exception::class); |
|
| 305 | + /** |
|
| 306 | + * If an exception not of type DoesNotExistException is thrown, |
|
| 307 | + * it is expected that it is not being handled by startLoginFlow. |
|
| 308 | + */ |
|
| 309 | + public function testStartLoginFlowException(): void { |
|
| 310 | + $this->expectException(Exception::class); |
|
| 311 | 311 | |
| 312 | - $this->mapper->expects($this->once()) |
|
| 313 | - ->method('getByLoginToken') |
|
| 314 | - ->willThrowException(new Exception('')); |
|
| 312 | + $this->mapper->expects($this->once()) |
|
| 313 | + ->method('getByLoginToken') |
|
| 314 | + ->willThrowException(new Exception('')); |
|
| 315 | 315 | |
| 316 | - $this->subjectUnderTest->startLoginFlow('test_token'); |
|
| 317 | - } |
|
| 316 | + $this->subjectUnderTest->startLoginFlow('test_token'); |
|
| 317 | + } |
|
| 318 | 318 | |
| 319 | - /* |
|
| 319 | + /* |
|
| 320 | 320 | * Tests for flowDone |
| 321 | 321 | */ |
| 322 | 322 | |
| 323 | - public function testFlowDone(): void { |
|
| 324 | - [,, $publicKey] = $this->getOpenSSLEncryptedPublicAndPrivateKey('test_pass'); |
|
| 325 | - |
|
| 326 | - $loginFlowV2 = new LoginFlowV2(); |
|
| 327 | - $loginFlowV2->setPublicKey($publicKey); |
|
| 328 | - $loginFlowV2->setClientName('client_name'); |
|
| 329 | - |
|
| 330 | - $this->mapper->expects($this->once()) |
|
| 331 | - ->method('getByLoginToken') |
|
| 332 | - ->willReturn($loginFlowV2); |
|
| 333 | - |
|
| 334 | - $this->mapper->expects($this->once()) |
|
| 335 | - ->method('update'); |
|
| 336 | - |
|
| 337 | - $this->secureRandom->expects($this->once()) |
|
| 338 | - ->method('generate') |
|
| 339 | - ->with(72, ISecureRandom::CHAR_UPPER . ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_DIGITS) |
|
| 340 | - ->willReturn('test_pass'); |
|
| 341 | - |
|
| 342 | - // session token |
|
| 343 | - $sessionToken = $this->getMockBuilder(IToken::class)->disableOriginalConstructor()->getMock(); |
|
| 344 | - $sessionToken->expects($this->once()) |
|
| 345 | - ->method('getLoginName') |
|
| 346 | - ->willReturn('login_name'); |
|
| 347 | - |
|
| 348 | - $this->tokenProvider->expects($this->once()) |
|
| 349 | - ->method('getPassword') |
|
| 350 | - ->willReturn('test_pass'); |
|
| 351 | - |
|
| 352 | - $this->tokenProvider->expects($this->once()) |
|
| 353 | - ->method('getToken') |
|
| 354 | - ->willReturn($sessionToken); |
|
| 355 | - |
|
| 356 | - $this->tokenProvider->expects($this->once()) |
|
| 357 | - ->method('generateToken') |
|
| 358 | - ->with( |
|
| 359 | - 'test_pass', |
|
| 360 | - 'user_id', |
|
| 361 | - 'login_name', |
|
| 362 | - 'test_pass', |
|
| 363 | - 'client_name', |
|
| 364 | - IToken::PERMANENT_TOKEN, |
|
| 365 | - IToken::DO_NOT_REMEMBER |
|
| 366 | - ); |
|
| 367 | - |
|
| 368 | - $result = $this->subjectUnderTest->flowDone( |
|
| 369 | - 'login_token', |
|
| 370 | - 'session_id', |
|
| 371 | - 'server', |
|
| 372 | - 'user_id' |
|
| 373 | - ); |
|
| 374 | - $this->assertTrue($result); |
|
| 375 | - |
|
| 376 | - // app password is encrypted and must look like: |
|
| 377 | - // ZACZOOzxTpKz4+KXL5kZ/gCK0xvkaVi/8yzupAn6Ui6+5qCSKvfPKGgeDRKs0sivvSLzk/XSp811SZCZmH0Y3g== |
|
| 378 | - $this->assertMatchesRegularExpression('/[a-zA-Z\/0-9+=]+/', $loginFlowV2->getAppPassword()); |
|
| 379 | - |
|
| 380 | - $this->assertEquals('server', $loginFlowV2->getServer()); |
|
| 381 | - } |
|
| 382 | - |
|
| 383 | - public function testFlowDoneDoesNotExistException(): void { |
|
| 384 | - $this->mapper->expects($this->once()) |
|
| 385 | - ->method('getByLoginToken') |
|
| 386 | - ->willThrowException(new DoesNotExistException('')); |
|
| 387 | - |
|
| 388 | - $result = $this->subjectUnderTest->flowDone( |
|
| 389 | - 'login_token', |
|
| 390 | - 'session_id', |
|
| 391 | - 'server', |
|
| 392 | - 'user_id' |
|
| 393 | - ); |
|
| 394 | - $this->assertFalse($result); |
|
| 395 | - } |
|
| 396 | - |
|
| 397 | - public function testFlowDonePasswordlessTokenException(): void { |
|
| 398 | - $this->tokenProvider->expects($this->once()) |
|
| 399 | - ->method('getToken') |
|
| 400 | - ->willThrowException(new InvalidTokenException('')); |
|
| 401 | - |
|
| 402 | - $result = $this->subjectUnderTest->flowDone( |
|
| 403 | - 'login_token', |
|
| 404 | - 'session_id', |
|
| 405 | - 'server', |
|
| 406 | - 'user_id' |
|
| 407 | - ); |
|
| 408 | - $this->assertFalse($result); |
|
| 409 | - } |
|
| 410 | - |
|
| 411 | - /* |
|
| 323 | + public function testFlowDone(): void { |
|
| 324 | + [,, $publicKey] = $this->getOpenSSLEncryptedPublicAndPrivateKey('test_pass'); |
|
| 325 | + |
|
| 326 | + $loginFlowV2 = new LoginFlowV2(); |
|
| 327 | + $loginFlowV2->setPublicKey($publicKey); |
|
| 328 | + $loginFlowV2->setClientName('client_name'); |
|
| 329 | + |
|
| 330 | + $this->mapper->expects($this->once()) |
|
| 331 | + ->method('getByLoginToken') |
|
| 332 | + ->willReturn($loginFlowV2); |
|
| 333 | + |
|
| 334 | + $this->mapper->expects($this->once()) |
|
| 335 | + ->method('update'); |
|
| 336 | + |
|
| 337 | + $this->secureRandom->expects($this->once()) |
|
| 338 | + ->method('generate') |
|
| 339 | + ->with(72, ISecureRandom::CHAR_UPPER . ISecureRandom::CHAR_LOWER . ISecureRandom::CHAR_DIGITS) |
|
| 340 | + ->willReturn('test_pass'); |
|
| 341 | + |
|
| 342 | + // session token |
|
| 343 | + $sessionToken = $this->getMockBuilder(IToken::class)->disableOriginalConstructor()->getMock(); |
|
| 344 | + $sessionToken->expects($this->once()) |
|
| 345 | + ->method('getLoginName') |
|
| 346 | + ->willReturn('login_name'); |
|
| 347 | + |
|
| 348 | + $this->tokenProvider->expects($this->once()) |
|
| 349 | + ->method('getPassword') |
|
| 350 | + ->willReturn('test_pass'); |
|
| 351 | + |
|
| 352 | + $this->tokenProvider->expects($this->once()) |
|
| 353 | + ->method('getToken') |
|
| 354 | + ->willReturn($sessionToken); |
|
| 355 | + |
|
| 356 | + $this->tokenProvider->expects($this->once()) |
|
| 357 | + ->method('generateToken') |
|
| 358 | + ->with( |
|
| 359 | + 'test_pass', |
|
| 360 | + 'user_id', |
|
| 361 | + 'login_name', |
|
| 362 | + 'test_pass', |
|
| 363 | + 'client_name', |
|
| 364 | + IToken::PERMANENT_TOKEN, |
|
| 365 | + IToken::DO_NOT_REMEMBER |
|
| 366 | + ); |
|
| 367 | + |
|
| 368 | + $result = $this->subjectUnderTest->flowDone( |
|
| 369 | + 'login_token', |
|
| 370 | + 'session_id', |
|
| 371 | + 'server', |
|
| 372 | + 'user_id' |
|
| 373 | + ); |
|
| 374 | + $this->assertTrue($result); |
|
| 375 | + |
|
| 376 | + // app password is encrypted and must look like: |
|
| 377 | + // ZACZOOzxTpKz4+KXL5kZ/gCK0xvkaVi/8yzupAn6Ui6+5qCSKvfPKGgeDRKs0sivvSLzk/XSp811SZCZmH0Y3g== |
|
| 378 | + $this->assertMatchesRegularExpression('/[a-zA-Z\/0-9+=]+/', $loginFlowV2->getAppPassword()); |
|
| 379 | + |
|
| 380 | + $this->assertEquals('server', $loginFlowV2->getServer()); |
|
| 381 | + } |
|
| 382 | + |
|
| 383 | + public function testFlowDoneDoesNotExistException(): void { |
|
| 384 | + $this->mapper->expects($this->once()) |
|
| 385 | + ->method('getByLoginToken') |
|
| 386 | + ->willThrowException(new DoesNotExistException('')); |
|
| 387 | + |
|
| 388 | + $result = $this->subjectUnderTest->flowDone( |
|
| 389 | + 'login_token', |
|
| 390 | + 'session_id', |
|
| 391 | + 'server', |
|
| 392 | + 'user_id' |
|
| 393 | + ); |
|
| 394 | + $this->assertFalse($result); |
|
| 395 | + } |
|
| 396 | + |
|
| 397 | + public function testFlowDonePasswordlessTokenException(): void { |
|
| 398 | + $this->tokenProvider->expects($this->once()) |
|
| 399 | + ->method('getToken') |
|
| 400 | + ->willThrowException(new InvalidTokenException('')); |
|
| 401 | + |
|
| 402 | + $result = $this->subjectUnderTest->flowDone( |
|
| 403 | + 'login_token', |
|
| 404 | + 'session_id', |
|
| 405 | + 'server', |
|
| 406 | + 'user_id' |
|
| 407 | + ); |
|
| 408 | + $this->assertFalse($result); |
|
| 409 | + } |
|
| 410 | + |
|
| 411 | + /* |
|
| 412 | 412 | * Tests for createTokens |
| 413 | 413 | */ |
| 414 | 414 | |
| 415 | - public function testCreateTokens(): void { |
|
| 416 | - $this->config->expects($this->exactly(2)) |
|
| 417 | - ->method('getSystemValue') |
|
| 418 | - ->willReturn($this->returnCallback(function ($key) { |
|
| 419 | - // Note: \OCP\IConfig::getSystemValue returns either an array or string. |
|
| 420 | - return $key == 'openssl' ? [] : ''; |
|
| 421 | - })); |
|
| 415 | + public function testCreateTokens(): void { |
|
| 416 | + $this->config->expects($this->exactly(2)) |
|
| 417 | + ->method('getSystemValue') |
|
| 418 | + ->willReturn($this->returnCallback(function ($key) { |
|
| 419 | + // Note: \OCP\IConfig::getSystemValue returns either an array or string. |
|
| 420 | + return $key == 'openssl' ? [] : ''; |
|
| 421 | + })); |
|
| 422 | 422 | |
| 423 | - $this->mapper->expects($this->once()) |
|
| 424 | - ->method('insert'); |
|
| 423 | + $this->mapper->expects($this->once()) |
|
| 424 | + ->method('insert'); |
|
| 425 | 425 | |
| 426 | - $this->secureRandom->expects($this->exactly(2)) |
|
| 427 | - ->method('generate'); |
|
| 426 | + $this->secureRandom->expects($this->exactly(2)) |
|
| 427 | + ->method('generate'); |
|
| 428 | 428 | |
| 429 | - $token = $this->subjectUnderTest->createTokens('user_agent'); |
|
| 430 | - $this->assertTrue($token instanceof LoginFlowV2Tokens); |
|
| 431 | - } |
|
| 429 | + $token = $this->subjectUnderTest->createTokens('user_agent'); |
|
| 430 | + $this->assertTrue($token instanceof LoginFlowV2Tokens); |
|
| 431 | + } |
|
| 432 | 432 | } |