AtlassianConnectBundle\Tests\Functional\AuthenticationTest

Complexity

Total Complexity

5

Size/Duplication

Total Lines	61
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

5 Methods

Rating	Name	Duplication	Size	Complexity
A	testProtectedRouteWithBearerToken()	0	6	1
A	getTenantJWTCode()	0	9	1
A	testProtectedRouteWithQueryToken()	0	6	1
A	testProtectedRouteInDevEnvironment()	0	6	1
A	testProtectedRouteWithoutAuthentication()	0	8	1

<?php declare(strict_types = 1);

namespace AtlassianConnectBundle\Tests\Functional;

use AtlassianConnectBundle\Service\QSHGenerator;
use Firebase\JWT\JWT;

/**
 * Class AuthenticationTest
 */
final class AuthenticationTest extends AbstractWebTestCase
{
    /**
     * test a protected route without any authentication headers
     * also test the entry point response
     */
    public function testProtectedRouteWithoutAuthentication(): void
    {
        $client = self::createClient(['environment' => 'prod']);

        $client->request('GET', '/protected/route');

        $this->assertResponseStatusCodeSame(401);
        $this->assertSame('Authentication header required', $client->getResponse()->getContent());
    }

    /**
     * test authentication with bearer endpoint
     */
    public function testProtectedRouteWithBearerToken(): void
    {
        $client = self::createClient(['environment' => 'prod'], ['HTTP_AUTHORIZATION' => 'Bearer '.$this->getTenantJWTCode()]);

        $client->request('GET', '/protected/route');
        $this->assertResponseIsSuccessful();
    }

    /**
     * test authentication with jwt endpoint
     */
    public function testProtectedRouteWithQueryToken(): void
    {
        $client = self::createClient(['environment' => 'prod']);

        $client->request('GET', '/protected/route?jwt='.$this->getTenantJWTCode());
        $this->assertResponseIsSuccessful();
    }

    /**
     * test authentication in dev mode
     */
    public function testProtectedRouteInDevEnvironment(): void
    {
        $client = self::createClient(['environment' => 'dev']);

        $client->request('GET', '/protected/route');
        $this->assertResponseIsSuccessful();
    }

    /**
     * @return string
     */
    public function getTenantJWTCode(): string
    {
        return JWT::encode([
            'iss' => 'client_key',
            'iat' => \time(),
            'exp' => \strtotime('+1 day'),
            'qsh' => QSHGenerator::generate('/protected_route', 'GET'),
            'sub' => 'admin',
        ], 'shared_secret');
    }
}