ManageTokenTest::testManageTokenWithoutAuthenticationThrowsException()

Size

Total Lines	26
Code Lines	14

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

1 Method

Rating	Name	Duplication	Size	Complexity
A	ManageTokenTest.php$3 ➔ loadState()	0	4	1

<?php

declare(strict_types=1);

namespace SimpleSAML\Test\Module\webauthn\Controller;

use Exception;
use PHPUnit\Framework\TestCase;
use SimpleSAML\Auth\State;
use SimpleSAML\Configuration;
use SimpleSAML\Error;
use SimpleSAML\HTTP\RunnableResponse;
use SimpleSAML\Logger;
use SimpleSAML\Module\webauthn\Controller;
use SimpleSAML\Session;
use SimpleSAML\XHTML\Template;
use Symfony\Component\HttpFoundation\Request;

/**
 * Set of tests for the controllers in the "webauthn" module.
 *
 * @package SimpleSAML\Test
 */
class ManageTokenTest extends TestCase
{
    /** @var \SimpleSAML\Configuration */
    protected $config;

    /** @var \SimpleSAML\Logger */
    protected $logger;

    /** @var \SimpleSAML\Session */
    protected $session;


    /**
     * Set up for each test.
     */
    protected function setUp(): void
    {
        parent::setUp();

        $this->config = Configuration::loadFromArray(
            [
                'module.enable' => ['webauthn' => true],
                'secretsalt' => 'abc123',
                'enable.saml20-idp' => true,
            ],
            '[ARRAY]',
            'simplesaml'
        );

        $this->session = Session::getSessionFromRequest();

        $this->logger = new class () extends Logger {
            public static function info(string $str): void
            {
                // do nothing
            }
        };
    }


    /**
     */
    public function testManageTokenWithSubmitNeverMind(): void
    {
        $_SERVER['REQUEST_URI'] = '/module.php/webauthn/managetoken';
        $request = Request::create(
            '/managetoken',
            'POST',
            ['StateId' => 'someStateId', 'submit' => 'NEVERMIND']
        );


        $c = new Controller\ManageToken($this->config, $this->session);
        $c->setLogger($this->logger);
        $c->setAuthState(new class () extends State {
            public static function loadState(string $id, string $stage, bool $allowMissing = false): ?array
            {
                return [
                    'FIDO2AuthSuccessful' => true,
                ];
            }
        });

        $response = $c->main($request);

        $this->assertTrue($response->isSuccessful());
    }


    /**
    public function testManageTokenWithSubmitDelete(): void
    {
        $_SERVER['REQUEST_URI'] = '/module.php/webauthn/managetoken';
        $_SERVER['REQUEST_METHOD'] = 'POST';
        $request = Request::create(
            '/managetoken',
            'POST',
            ['StateId' => 'someStateId', 'submit' => 'DELETE']
        );


        $c = new Controller\ManageToken($this->config, $this->session);
        $c->setLogger($this->logger);
        $c->setAuthState(new class () extends State {
            public static function loadState(string $id, string $stage, bool $allowMissing = false): ?array
            {
                return [
                    'FIDO2AuthSuccessful' => true,
                ];
            }
        });

        $response = $c->main($request);

        $this->assertTrue($response->isSuccessful());
    }
     */


    /**
     */
    public function testManageTokenWithoutSubmitThrowsException(): void
    {
        $_SERVER['REQUEST_URI'] = '/module.php/webauthn/managetoken';
        $_SERVER['REQUEST_METHOD'] = 'POST';
        $request = Request::create(
            '/managetoken',
            'POST',
            ['StateId' => 'someStateId', 'submit' => 'submit']
        );


        $c = new Controller\ManageToken($this->config, $this->session);
        $c->setLogger($this->logger);
        $c->setAuthState(new class () extends State {
            public static function loadState(string $id, string $stage, bool $allowMissing = false): ?array
            {
                return [
                    'FIDO2AuthSuccessful' => true,
                ];
            }
        });

        $this->expectException(Exception::class);
        $this->expectExceptionMessage('Unknown submit button state.');

        $c->main($request);
    }


    /**
     */
    public function testManageTokenWithoutAuthenticationThrowsException(): void
    {
        $_SERVER['REQUEST_URI'] = '/module.php/webauthn/managetoken';
        $_SERVER['REQUEST_METHOD'] = 'POST';
        $request = Request::create(
            '/managetoken',
            'POST',
            ['StateId' => 'someStateId', 'submit' => 'submit']
        );


        $c = new Controller\ManageToken($this->config, $this->session);
        $c->setLogger($this->logger);
        $c->setAuthState(new class () extends State {
            public static function loadState(string $id, string $stage, bool $allowMissing = false): ?array
            {
                return [
                    'FIDO2AuthSuccessful' => false,
                ];
            }
        });

        $this->expectException(Exception::class);
        $this->expectExceptionMessage('Attempt to access the token management page unauthenticated.');

        $c->main($request);
    }
}