AtlassianConnectBundle\Tests\Functional\AuthenticatorTest

Complexity

Total Complexity

6

Size/Duplication

Total Lines	73
Duplicated Lines	0 %

Importance

Changes

0

6 Methods

Rating	Name	Duplication	Size	Complexity
A	getTenantJWTCode()	0	9	1
A	testProtectedRouteWithBearerToken()	0	6	1
A	testProtectedRouteWithInvalidJWTToken()	0	7	1
A	testProtectedRouteWithQueryToken()	0	6	1
A	testProtectedRouteWithoutAuthentication()	0	8	1
A	testProtectedRouteInDevEnvironment()	0	6	1

<?php declare(strict_types = 1);

namespace AtlassianConnectBundle\Tests\Functional;

use AtlassianConnectBundle\Service\QSHGenerator;
use Firebase\JWT\JWT;

/**
 * Class AuthenticatorTest
 *
 * Tests JWTAuthenticator and LegacyJWTAuthenticator
 */
final class AuthenticatorTest extends AbstractWebTestCase
{
    /**
     * test a protected route without any authentication headers
     * also test the entry point response
     */
    public function testProtectedRouteWithoutAuthentication(): void
    {
        $client = self::createClient();

        $client->request('GET', '/protected/route');

        $this->assertResponseStatusCodeSame(401);
        $this->assertSame('Authentication header required', $client->getResponse()->getContent());
    }

    /**
     * test authentication with bearer endpoint
     */
    public function testProtectedRouteWithBearerToken(): void
    {
        $client = self::createClient([], ['HTTP_AUTHORIZATION' => 'Bearer '.$this->getTenantJWTCode()]);

        $client->request('GET', '/protected/route');
        $this->assertResponseIsSuccessful();
    }

    /**
     * test authentication with jwt endpoint
     */
    public function testProtectedRouteWithQueryToken(): void
    {
        $client = self::createClient();

        $client->request('GET', '/protected/route?jwt='.$this->getTenantJWTCode());
        $this->assertResponseIsSuccessful();
    }

    /**
     * test authentication in dev mode
     */
    public function testProtectedRouteInDevEnvironment(): void
    {
        $client = self::createClient(['environment' => 'dev']);

        $client->request('GET', '/protected/route');
        $this->assertResponseIsSuccessful();
    }

    /**
     * test authentication with invalid jwt token
     */
    public function testProtectedRouteWithInvalidJWTToken(): void
    {
        $client = self::createClient();

        $client->request('GET', '/protected/route?jwt=invalid');
        $this->assertResponseStatusCodeSame(403);
        $this->assertEquals('Authentication Failed: Failed to parse token', $client->getResponse()->getContent());
    }

    /**
     * @return string
     */
    public function getTenantJWTCode(): string
    {
        return JWT::encode([
            'iss' => 'client_key',
            'iat' => \time(),
            'exp' => \strtotime('+1 day'),
            'qsh' => QSHGenerator::generate('/protected_route', 'GET'),
            'sub' => 'admin',
        ], 'shared_secret');
    }
}