SilverStripe\SecurityExtensions\Tests\Control\SudoModeControllerTest

Complexity

Total Complexity

9

Size/Duplication

Total Lines	103
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

8 Methods

Rating	Name	Duplication	Size	Complexity
A	testCheckReturnsFalse()	0	6	1
A	setUp()	0	12	1
A	testActivateSudoModeWithValidCredentials()	0	14	1
A	testActivateChecksCSRFToken()	0	11	1
A	testClientConfig()	0	16	1
A	tearDown()	0	7	2
A	testActivateFailsWithIncorrectPassword()	0	10	1
A	testActivateFailsWithGetRequest()	0	4	1

<?php

declare(strict_types=1);

namespace SilverStripe\SecurityExtensions\Tests\Control;

use PHPUnit_Framework_MockObject_MockObject;
use SilverStripe\Control\HTTPRequest;
use SilverStripe\Control\Session;
use SilverStripe\Core\Injector\Injector;
use SilverStripe\Dev\FunctionalTest;
use SilverStripe\Security\Member;
use SilverStripe\Security\SecurityToken;
use SilverStripe\SecurityExtensions\Control\SudoModeController;
use SilverStripe\SecurityExtensions\Service\SudoModeServiceInterface;

class SudoModeControllerTest extends FunctionalTest
{
    protected $usesDatabase = true;

    /**
     * @var bool
     */
    private $securityTokenEnabled;

    protected function setUp()
    {
        parent::setUp();

        $this->securityTokenEnabled = SecurityToken::is_enabled();
        SecurityToken::disable();

        $memberID = $this->logInWithPermission();

        /** @var Member $member */
        $member = Member::get()->byID($memberID);
        $member->changePassword('0p3nS3samE!');
    }

    protected function tearDown()
    {
        if ($this->securityTokenEnabled) {
            SecurityToken::enable();
        }

        parent::tearDown();
    }

    public function testCheckReturnsFalse()
    {
        $response = $this->get(SudoModeController::singleton()->Link('check'));
        $this->assertSame(200, $response->getStatusCode());
        $result = json_decode((string) $response->getBody(), true);
        $this->assertFalse($result['active'], 'Sudo mode should not be active yet');
    }

    public function testActivateFailsWithIncorrectPassword()
    {
        $response = $this->post(SudoModeController::singleton()->Link('activate'), [
            'Password' => 'wrongpassword!',
        ]);

        $this->assertSame(200, $response->getStatusCode());
        $result = json_decode((string) $response->getBody(), true);
        $this->assertFalse($result['result'], 'Should have failed with incorrect password');
        $this->assertEquals('Incorrect password', $result['message']);
    }

    public function testActivateSudoModeWithValidCredentials()
    {
        $activateResponse = $this->post(SudoModeController::singleton()->Link('activate'), [
            'Password' => '0p3nS3samE!',
        ]);

        $this->assertSame(200, $activateResponse->getStatusCode());
        $result = json_decode((string) $activateResponse->getBody(), true);
        $this->assertTrue($result['result'], 'Should have activated sudo mode');

        $checkResponse = $this->get(SudoModeController::singleton()->Link('check'));
        $this->assertSame(200, $checkResponse->getStatusCode());
        $checkResult = json_decode((string) $checkResponse->getBody(), true);
        $this->assertTrue($checkResult['active'], 'Sudo mode should be active after activate() called');
    }

    public function testActivateFailsWithGetRequest()
    {
        $response = $this->get(SudoModeController::singleton()->Link('activate'));
        $this->assertSame(404, $response->getStatusCode());
    }

    public function testActivateChecksCSRFToken()
    {
        SecurityToken::enable();
        $activateResponse = $this->post(SudoModeController::singleton()->Link('activate'), [
            'Password' => 'wrongpassword!',
        ]);

        $this->assertSame(403, $activateResponse->getStatusCode());
        $result = json_decode((string) $activateResponse->getBody(), true);
        $this->assertFalse($result['result'], 'Should have failed on CSRF token validation');
        $this->assertSame($result['message'], 'Session timed out, please refresh and try again.');
    }

    public function testClientConfig()
    {
        /** @var SudoModeServiceInterface&PHPUnit_Framework_MockObject_MockObject $serviceMock */
        $serviceMock = $this->createMock(SudoModeServiceInterface::class);
        $serviceMock->expects($this->once())->method('check')->willReturn(true);

        $controller = new SudoModeController();
        $controller->setSudoModeService($serviceMock);

        $request = new HTTPRequest('GET', '/');
        $request->setSession(new Session([]));
        Injector::inst()->registerService($request, HTTPRequest::class);

        $result = $controller->getClientConfig();
        $this->assertArrayHasKey('activate', $result['endpoints'], 'Client config should provide activation endpoint');
        $this->assertTrue($result['sudoModeActive'], 'Client config should expose sudo mode status');
    }
}