thecodingmachine / csrf-header-check-middleware

class CsrfHeaderCheckMiddlewareFactoryTest extends AbstractMiddlewareTest

{

    public function testFactory()

    {

        $request = new ServerRequest([], [], "http://alice.com/hello", "Get");

        $middleware = CsrfHeaderCheckMiddlewareFactory::createDefault();

        $response = $middleware->process($request, $this->getDelegate());

        $this->assertSame('foobar', (string) $response->getBody());

    }

}

class CsrfHeaderCheckMiddlewareTest extends AbstractMiddlewareTest

{

    public function testGetRequest()

    {

        $request = new ServerRequest([], [], "http://alice.com/hello", "Get");

        $middleware = new CsrfHeaderCheckMiddleware(IsSafeHttpMethod::fromDefaultSafeMethods());

        $response = $middleware->process($request, $this->getDelegate());

        $this->assertSame('foobar', (string) $response->getBody());

    }

    public function testFailingPostRequestNoOrigin()

    {

        $this->assertSame('foobar', (string) $response->getBody());

    }

    public function testFailingPostRequestNoOrigin()

    {

        $request = new ServerRequest([], [], "http://alice.com/hello", "Post");

        $middleware = new CsrfHeaderCheckMiddleware(IsSafeHttpMethod::fromDefaultSafeMethods());

        $this->expectException(CsrfHeaderCheckMiddlewareException::class);

        $this->expectExceptionMessage('Could not find neither the ORIGIN header nor the REFERER header in the HTTP request.');

        $response = $middleware->process($request, $this->getDelegate());

    }

    public function testFailingPostRequestNoHost()

    {