Tests\Unit\RbacMiddlewareTest

Complexity

Total Complexity

5

Size/Duplication

Total Lines	93
Duplicated Lines	0 %

Importance

Changes	2
Bugs	0	Features	0

5 Methods

Rating	Name	Duplication	Size	Complexity
A	setUp()	0	24	1
A	testCheckReadingUserIdFromCookie()	0	8	1
A	testCheckAccessSuccessCase()	0	6	1
A	testCheckAccessDeniedCase()	0	6	1
A	testCheckReadingUserIdFromHeader()	0	8	1

<?php

namespace Tests\Unit;

use Doctrine\ORM\Query\QueryException;
use GuzzleHttp\Psr7\Request;
use GuzzleHttp\Psr7\Response;
use GuzzleHttp\Psr7\ServerRequest;
use Potievdev\SlimRbac\Component\RbacMiddleware;
use Potievdev\SlimRbac\Exception\CyclicException;
use Potievdev\SlimRbac\Exception\DatabaseException;
use Potievdev\SlimRbac\Exception\InvalidArgumentException;
use Potievdev\SlimRbac\Exception\NotUniqueException;
use Potievdev\SlimRbac\Structure\RbacManagerOptions;

/**
 * Class for testing RbacMiddleware
 * Class RbacMiddlewareTest
 * @package Tests\Unit
 */
class RbacMiddlewareTest extends BaseTestCase
{
    /** @var callable $callable */
    protected $callable;

    /** @var ServerRequest $request */
    protected $request;

    /** @var Response $response */
    protected $response;

    /**
     * @throws CyclicException
     * @throws DatabaseException
     * @throws NotUniqueException
     * @throws QueryException
     */
    public function setUp(): void
    {
        parent::setUp();

        $this->rbacManager->removeAll();

        $edit = $this->rbacManager->createPermission('edit', 'Edit permission');
        $write = $this->rbacManager->createPermission('write', 'Write permission');

        $moderator = $this->rbacManager->createRole('moderator', 'Moderator role');
        $admin = $this->rbacManager->createRole('admin', 'Admin role');

        $this->rbacManager->attachPermission($moderator, $edit);
        $this->rbacManager->attachPermission($admin, $write);
        $this->rbacManager->attachChildRole($admin, $moderator);

        $this->rbacManager->assign($moderator, self::MODERATOR_USER_ID);
        $this->rbacManager->assign($admin, self::ADMIN_USER_ID);

        $this->callable = function (Request $request, Response $response) {
            return $response;
        };
        $this->request = new ServerRequest('GET', 'write');
        $this->response = new Response();
    }

    /**
     * @throws QueryException
     * @throws InvalidArgumentException
     */
    public function testCheckAccessSuccessCase()
    {
        $middleware = new RbacMiddleware($this->rbacManagerOptions);
        $request = $this->request->withAttribute($this->rbacManagerOptions->getUserIdFieldName(), self::ADMIN_USER_ID);
        $response = $middleware->__invoke($request, $this->response, $this->callable);
        $this->assertEquals(200, $response->getStatusCode());
    }

    /**
     * @throws QueryException
     * @throws InvalidArgumentException
     */
    public function testCheckAccessDeniedCase()
    {
        $middleware = new RbacMiddleware($this->rbacManagerOptions);
        $request = $this->request->withAttribute($this->rbacManagerOptions->getUserIdFieldName(), self::MODERATOR_USER_ID);
        $response = $middleware->__invoke($request, $this->response, $this->callable);
        $this->assertEquals(403, $response->getStatusCode());
    }

    /**
     * @throws QueryException
     * @throws InvalidArgumentException
     */
    public function testCheckReadingUserIdFromHeader()
    {
        $rbacManagerOptions = $this->rbacManagerOptions;
        $rbacManagerOptions->setUserIdStorageType(RbacManagerOptions::HEADER_STORAGE_TYPE);
        $middleware = new RbacMiddleware($rbacManagerOptions);
        $request = $this->request->withHeader($rbacManagerOptions->getUserIdFieldName(), self::ADMIN_USER_ID);
        $response = $middleware->__invoke($request, $this->response, $this->callable);
        $this->assertEquals(200, $response->getStatusCode());
    }

    /**
     * @throws QueryException
     * @throws InvalidArgumentException
     */
    public function testCheckReadingUserIdFromCookie()
    {
        $rbacManagerOptions = $this->rbacManagerOptions;
        $rbacManagerOptions->setUserIdStorageType(RbacManagerOptions::COOKIE_STORAGE_TYPE);
        $middleware = new RbacMiddleware($rbacManagerOptions);
        $request = $this->request->withCookieParams([$rbacManagerOptions->getUserIdFieldName() => self::ADMIN_USER_ID]);
        $response = $middleware->__invoke($request, $this->response, $this->callable);
        $this->assertEquals(200, $response->getStatusCode());
    }

}