SilverStripe\MFA\Tests\Extension\SecurityAdminAccountResetExtensionTest

Complexity

Total Complexity

5

Size/Duplication

Total Lines	67
Duplicated Lines	0 %

Importance

Changes

0

5 Methods

Rating	Name	Duplication	Size	Complexity
A	testResetCannotBeInitiatedByStandardUser()	0	17	1
A	testEndpointRequiresCSRF()	0	11	1
A	testResetCanBeInitiatedByAdmin()	0	17	1
A	tearDown()	0	5	1
A	setUp()	0	5	1

<?php

namespace SilverStripe\MFA\Tests\Extension;

use SilverStripe\Admin\SecurityAdmin;
use SilverStripe\Dev\FunctionalTest;
use SilverStripe\MFA\Extension\SecurityAdminAccountResetExtension;
use SilverStripe\Security\Member;
use SilverStripe\Security\SecurityToken;

class SecurityAdminAccountResetExtensionTest extends FunctionalTest
{
    protected static $fixture_file = 'SecurityAdminAccountResetExtensionTest.yml';

    protected function setUp()
    {
        parent::setUp();

        SecurityToken::enable();
    }

    protected function tearDown()
    {
        parent::tearDown();

        SecurityToken::disable();
    }

    public function testEndpointRequiresCSRF()
    {
        $this->logInAs('admin');

        /** @var Member $member */
        $member = $this->objFromFixture(Member::class, 'squib');

        $response = $this->post(SecurityAdmin::singleton()->Link("reset/{$member->ID}"), [true]);

        $this->assertEquals(400, $response->getStatusCode(), $response->getBody());
        $this->assertContains('Invalid or missing CSRF', $response->getBody());
    }

    public function testResetCanBeInitiatedByAdmin()
    {
        $this->logInAs('admin');

        /** @var Member $member */
        $member = $this->objFromFixture(Member::class, 'squib');

        $response = $this->post(
            SecurityAdmin::singleton()->Link("reset/{$member->ID}"),
            [true],
            null,
            null,
            json_encode(['csrf_token' => SecurityToken::inst()->getValue()])
        );

        $this->assertEquals(200, $response->getStatusCode(), $response->getBody());
        $this->assertEmailSent($member->Email);
    }

    public function testResetCannotBeInitiatedByStandardUser()
    {
        $this->logInAs('squib');

        /** @var Member $member */
        $member = $this->objFromFixture(Member::class, 'admin');

        $response = $this->post(
            SecurityAdmin::singleton()->Link("reset/{$member->ID}"),
            [true],
            null,
            null,
            json_encode(['csrf_token' => SecurityToken::inst()->getValue()])
        );

        $this->assertEquals(403, $response->getStatusCode(), $response->getBody());
        $this->assertContains('Insufficient permissions', $response->getBody());
    }
}