anonymous//tests/lib/Controller/AuthProcessTest.php$0 ➔ setUp()

Complexity

Conditions

1

Size

Total Lines

19

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

1 Method

Rating	Name	Duplication	Size	Complexity
A	AuthProcessTest.php$0 ➔ info()	0	2	1

<?php

declare(strict_types=1);

namespace SimpleSAML\Test\Module\webauthn\Controller;

use Exception;
use PHPUnit\Framework\TestCase;
use SimpleSAML\Auth\State;
use SimpleSAML\Configuration;
use SimpleSAML\Error;
use SimpleSAML\HTTP\RunnableResponse;
use SimpleSAML\Logger;
use SimpleSAML\Module\webauthn\Controller;
use SimpleSAML\Session;
use SimpleSAML\Utils;
use SimpleSAML\XHTML\Template;
use Symfony\Component\HttpFoundation\Request;

/**
 * Set of tests for the controllers in the "webauthn" module.
 *
 * @package SimpleSAML\Test
 */
class AuthProcessTest extends TestCase
{
    /** @var \SimpleSAML\Configuration */
    protected $config;

    /** @var \SimpleSAML\Logger */
    protected $logger;

    /** @var \SimpleSAML\Session */
    protected $session;


    /**
     * Set up for each test.
     */
    protected function setUp(): void
    {
        parent::setUp();

        $this->config = Configuration::loadFromArray(
            [
                'module.enable' => ['webauthn' => true],
                'secretsalt' => 'abc123',
                'enable.saml20-idp' => true,
            ],
            '[ARRAY]',
            'simplesaml'
        );

        $this->session = Session::getSessionFromRequest();

        $this->logger = new class () extends Logger {
            public static function info($str)
            {
                // do nothing
            }
        };
    }


    /**
     */
    public function testAuthProcessWithoutProperTokenRaisesException(): void
    {
        $_SERVER['REQUEST_URI'] = '/module.php/webauthn/authprocess?StateId=someStateId';
        $request = Request::create(
            '/authprocess?StateId=someStateId',
            'POST',
            ['response_id' => 'abc123']
        );


        $c = new Controller\AuthProcess($this->config, $this->session);
        $c->setLogger($this->logger);
        $c->setAuthState(new class () extends State {
            public static function loadState($id, $stage, $allowMissing = false)
            {
                return [
                    'FIDO2Displayname' => 'Donald Duck',
                    'FIDO2Username' => 'dduck',
                    'FIDO2Scope' => 'Ducktown',
                    'FIDO2Tokens' => [],
                    'FIDO2SignupChallenge' => 'abc123',
                    'FIDO2AuthSuccessful' => true,
                    'requestTokenModel' => 'something',
                    'Source' => [
                        'entityid' => 'https://idp.example.com',
                    ],
                ];
            }
        });

        $this->expectException(Exception::class);
        $this->expectExceptionMessage(
            "User attempted to authenticate with an unknown credential ID. This should already have been prevented by the browser!"
        );
        $c->main($request);
    }
}