Spiral\Tests\Auth\CookieTransportTest

Complexity

Total Complexity

10

Size/Duplication

Total Lines	203
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

8 Methods

Rating	Name	Duplication	Size	Complexity
A	testDeleteToken()	0	26	1
A	setUp()	0	3	1
A	testCommitTokenLifetime()	0	29	1
A	testCommitToken()	0	15	1
A	getCore()	0	31	1
A	testCommitTokenOtherParams()	0	19	1
A	testCookieToken()	0	30	2
A	testBadCookieToken()	0	30	2

<?php

/**
 * Spiral Framework.
 *
 * @license   MIT
 * @author    Anton Titov (Wolfy-J)
 */

declare(strict_types=1);

namespace Spiral\Tests\Auth;

use PHPUnit\Framework\TestCase;
use Psr\Http\Message\ResponseInterface;
use Psr\Http\Message\ServerRequestInterface;
use Spiral\Auth\HttpTransportInterface;
use Spiral\Auth\Middleware\AuthMiddleware;
use Spiral\Auth\Transport\CookieTransport;
use Spiral\Auth\TransportRegistry;
use Spiral\Cookies\Cookie\SameSite;
use Spiral\Core\Container;
use Spiral\Http\Config\HttpConfig;
use Spiral\Http\Http;
use Spiral\Http\Pipeline;
use Spiral\Tests\Auth\Diactoros\ResponseFactory;
use Laminas\Diactoros\ServerRequest;
use Spiral\Tests\Auth\Stub\TestProvider;

This use statement conflicts with another class in this namespace, Spiral\Tests\Auth\TestProvider. Consider defining an alias.

use Spiral\Tests\Auth\Stub\TestStorage;
use Spiral\Tests\Auth\Stub\TestToken;

This use statement conflicts with another class in this namespace, Spiral\Tests\Auth\TestToken. Consider defining an alias.

class CookieTransportTest extends TestCase
{
    private $container;

    public function setUp(): void
    {
        $this->container = new Container();
    }

    public function testCookieToken(): void
    {
        $http = $this->getCore(new CookieTransport('auth-token'));

        $http->setHandler(
            static function (ServerRequestInterface $request, ResponseInterface $response): void {

The parameter $response is not used and could be removed.

                if ($request->getAttribute('authContext')->getToken() === null) {
                    echo 'no token';
                } else {
                    echo $request->getAttribute('authContext')->getToken()->getID();
                    echo ':';
                    echo json_encode($request->getAttribute('authContext')->getToken()->getPayload());
                }
            }
        );

        $response = $http->handle(
            new ServerRequest(
                [],
                [],
                null,
                'GET',
                'php://input',
                [],
                ['auth-token' => 'good-token']
            )
        );

        self::assertSame(['text/html; charset=UTF-8'], $response->getHeader('Content-Type'));
        self::assertSame('good-token:{"id":"good-token"}', (string)$response->getBody());
    }

    public function testBadCookieToken(): void
    {
        $http = $this->getCore(new CookieTransport('auth-token'));

        $http->setHandler(
            static function (ServerRequestInterface $request, ResponseInterface $response): void {

The parameter $response is not used and could be removed.

                if ($request->getAttribute('authContext')->getToken() === null) {
                    echo 'no token';
                } else {
                    echo $request->getAttribute('authContext')->getToken()->getID();
                    echo ':';
                    echo json_encode($request->getAttribute('authContext')->getToken()->getPayload());
                }
            }
        );

        $response = $http->handle(
            new ServerRequest(
                [],
                [],
                null,
                'GET',
                'php://input',
                [],
                ['auth-token' => 'bad']
            )
        );

        self::assertSame(['text/html; charset=UTF-8'], $response->getHeader('Content-Type'));
        self::assertSame('no token', (string)$response->getBody());
    }

    public function testDeleteToken(): void
    {
        $http = $this->getCore(new CookieTransport('auth-token'));

        $http->setHandler(
            static function (ServerRequestInterface $request, ResponseInterface $response): void {

The parameter $response is not used and could be removed.

                $request->getAttribute('authContext')->close();

                echo 'closed';
            }
        );

        $response = $http->handle(
            new ServerRequest(
                [],
                [],
                null,
                'GET',
                'php://input',
                [],
                ['auth-token' => 'good-token']
            )
        );

        self::assertSame(['auth-token=; Path=/; HttpOnly'], $response->getHeader('Set-Cookie'));
        self::assertSame('closed', (string)$response->getBody());
    }

    public function testCommitToken(): void
    {
        $http = $this->getCore(new CookieTransport('auth-token'));

        $http->setHandler(
            static function (ServerRequestInterface $request, ResponseInterface $response): void {

The parameter $response is not used and could be removed.

                $request->getAttribute('authContext')->start(
                    new TestToken('new-token', ['ok' => 1])
                );
            }
        );

        $response = $http->handle(new ServerRequest([], [], null, 'GET', 'php://input', []));

        self::assertSame(['auth-token=new-token; Path=/; HttpOnly'], $response->getHeader('Set-Cookie'));
    }

    public function testCommitTokenOtherParams(): void
    {
        $http = $this->getCore(
            new CookieTransport('auth-token', '/', 'localhost', true, false, SameSite::NONE)
        );

        $http->setHandler(
            static function (ServerRequestInterface $request, ResponseInterface $response): void {

The parameter $response is not used and could be removed.

                $request->getAttribute('authContext')->start(
                    new TestToken('new-token', ['ok' => 1])
                );
            }
        );

        $response = $http->handle(new ServerRequest([], [], null, 'GET', 'php://input', []));

        self::assertSame(
            ['auth-token=new-token; Path=/; Domain=localhost; Secure; SameSite=None'],
            $response->getHeader('Set-Cookie')
        );
    }

    public function testCommitTokenLifetime(): void
    {
        $http = $this->getCore(new CookieTransport('auth-token'));

        $http->setHandler(
            static function (ServerRequestInterface $request, ResponseInterface $response): void {

The parameter $response is not used and could be removed.

                $request->getAttribute('authContext')->start(
                    new TestToken('new-token', ['ok' => 1], (new \DateTime('now'))->modify('+1 hour'))
                );
            }
        );

        $response = $http->handle(new ServerRequest([], [], null, 'GET', 'php://input', []));

        $cookie = explode('; ', $response->getHeader('Set-Cookie')[0]);

        self::assertSame(
            'auth-token=new-token',
            $cookie[0]
        );

        self::assertSame(
            'Expires=' . gmdate(DATE_COOKIE, time() + 3600),
            $cookie[1]
        );

        self::assertSame(
            'Max-Age=3600',
            $cookie[2]
        );
    }

    protected function getCore(HttpTransportInterface $transport): Http
    {
        $config = new HttpConfig(
            [
                'basePath'   => '/',
                'headers'    => [
                    'Content-Type' => 'text/html; charset=UTF-8'
                ],
                'middleware' => [],
            ]
        );

        $http = new Http(
            $config,
            new Pipeline($this->container),
            new ResponseFactory($config),
            $this->container
        );

        $http->getPipeline()->pushMiddleware(
            new AuthMiddleware(
                $this->container,
                new TestProvider(),
                new TestStorage(),
                $reg = new TransportRegistry()
            )
        );
        $reg->setDefaultTransport('transport');
        $reg->setTransport('transport', $transport);

        return $http;
    }
}