Overblog\GraphQLBundle\Tests\Functional\Security\AccessTest

Complexity

Total Complexity

11

Size/Duplication

Total Lines	155
Duplicated Lines	30.32 %

Coupling/Cohesion

Components	1
Dependencies	2

Importance

Changes	1
Bugs	0	Features	1

10 Methods

Rating	Name	Duplication	Size	Complexity
A	testNotAuthenticatedUserAccessToUserName()	18	18	1
A	testFullyAuthenticatedUserAccessToUserName()	0	12	1
A	testNotAuthenticatedUserAccessToUserRoles()	0	4	1
A	testAuthenticatedUserAccessToUserRolesWithoutEnoughRights()	0	4	1
A	testUserWithCorrectRightsAccessToUserRoles()	0	12	1
A	testUserAccessToUserFriends()	0	17	1
A	testUserAccessToUserIsEnabledWithExpressionLanguageEvaluationFailed()	18	18	1
A	expectedFailedUserRoles()	0	10	1
A	assertResponse()	11	11	1
A	createClientAuthenticated()	0	13	2

<?php

/*
 * This file is part of the OverblogGraphQLBundle package.
 *
 * (c) Overblog <http://github.com/overblog/>
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

namespace Overblog\GraphQLBundle\Tests\Functional\Security;

use Overblog\GraphQLBundle\Tests\Functional\TestCase;

class AccessTest extends TestCase
{
    const USER_RYAN = 'ryan';
    const USER_ADMIN = 'admin';
    const ANONYMOUS_USER = null;

    private $userNameQuery = 'query MyQuery { user { name } }';

    private $userRolesQuery = 'query MyQuery { user { roles } }';

    private $userIsEnabledQuery = 'query MyQuery { user { isEnabled } }';

    private $userFriendsQuery = <<<EOF
query MyQuery {
  user {
    friends(first: 2) {
      edges {
        node {
          name
        }
      }
    }
  }
}
EOF;

    public function testNotAuthenticatedUserAccessToUserName()

This method seems to be duplicated in your project.

    {
        $expected = [
            'data' => [
                'user' => [
                    'name' => null,
                ],
            ],
            'errors' => [
                [
                    'message' => 'Access denied to this field.',
                    'locations' => [['line' => 1, 'column' => 24]],
                ],
            ],
        ];

        $this->assertResponse($this->userNameQuery, $expected, static::ANONYMOUS_USER);
    }

    public function testFullyAuthenticatedUserAccessToUserName()
    {
        $expected = [
            'data' => [
                'user' => [
                    'name' => 'Dan',
                ],
            ],
        ];

        $this->assertResponse($this->userNameQuery, $expected, static::USER_RYAN);
    }

    public function testNotAuthenticatedUserAccessToUserRoles()
    {
        $this->assertResponse($this->userRolesQuery, $this->expectedFailedUserRoles(), static::ANONYMOUS_USER);
    }

    public function testAuthenticatedUserAccessToUserRolesWithoutEnoughRights()
    {
        $this->assertResponse($this->userRolesQuery, $this->expectedFailedUserRoles(), static::USER_RYAN);
    }

    public function testUserWithCorrectRightsAccessToUserRoles()
    {
        $expected = [
            'data' => [
                'user' => [
                    'roles' => ['ROLE_USER'],
                ],
            ],
        ];

        $this->assertResponse($this->userRolesQuery, $expected, static::USER_ADMIN);
    }

    public function testUserAccessToUserFriends()
    {
        $expected = [
            'data' => [
                'user' => [
                    'friends' => [
                        'edges' => [
                            ['node' => ['name' => 'Nick']],
                            ['node' => null],
                        ],
                    ],
                ],
            ],
        ];

        $this->assertResponse($this->userFriendsQuery, $expected, static::USER_ADMIN);
    }

    public function testUserAccessToUserIsEnabledWithExpressionLanguageEvaluationFailed()

This method seems to be duplicated in your project.

    {
        $expected = [
            'data' => [
                'user' => [
                    'isEnabled' => null,
                ],
            ],
            'errors' => [
                [
                    'message' => 'Access denied to this field.',
                    'locations' => [['line' => 1, 'column' => 24]],
                ],
            ],
        ];

        $this->assertResponse($this->userIsEnabledQuery, $expected, static::USER_ADMIN);
    }

    private function expectedFailedUserRoles()
    {
        return [
            'data' => [
                'user' => [
                    'roles' => [],
                ],
            ],
        ];
    }

    private static function assertResponse($query, array $expected, $username)

This method seems to be duplicated in your project.

    {
        $client = self::createClientAuthenticated($username);
        $client->request('GET', '/', ['query' => $query]);

        $result = $client->getResponse()->getContent();

        static::assertEquals($expected, json_decode($result, true), $result);

        return $client;
    }

    private static function createClientAuthenticated($username)
    {
        $client = static::createClient(['test_case' => 'access']);

        if ($username) {
            $client->setServerParameters([
                'PHP_AUTH_USER' => $username,
                'PHP_AUTH_PW' => '123',
            ]);
        }

        return $client;
    }
}