2018-01-02 23:13:32 +03:00
|
|
|
<?php
|
|
|
|
/**
|
|
|
|
* @copyright 2018, Roeland Jago Douma <roeland@famdouma.nl>
|
|
|
|
*
|
|
|
|
* @author Roeland Jago Douma <roeland@famdouma.nl>
|
|
|
|
*
|
|
|
|
* @license GNU AGPL version 3 or any later version
|
|
|
|
*
|
|
|
|
* This program is free software: you can redistribute it and/or modify
|
|
|
|
* it under the terms of the GNU Affero General Public License as
|
|
|
|
* published by the Free Software Foundation, either version 3 of the
|
|
|
|
* License, or (at your option) any later version.
|
|
|
|
*
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU Affero General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU Affero General Public License
|
|
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
namespace Test\AppFramework\Middleware\Security;
|
|
|
|
|
|
|
|
use OC\AppFramework\Middleware\Security\Exceptions\NotConfirmedException;
|
|
|
|
use OC\AppFramework\Middleware\Security\PasswordConfirmationMiddleware;
|
|
|
|
use OC\AppFramework\Utility\ControllerMethodReflector;
|
|
|
|
use OCP\AppFramework\Controller;
|
|
|
|
use OCP\AppFramework\Utility\ITimeFactory;
|
|
|
|
use OCP\ISession;
|
|
|
|
use OCP\IUser;
|
|
|
|
use OCP\IUserSession;
|
|
|
|
use Test\TestCase;
|
|
|
|
|
|
|
|
class PasswordConfirmationMiddlewareTest extends TestCase {
|
|
|
|
/** @var ControllerMethodReflector */
|
|
|
|
private $reflector;
|
|
|
|
/** @var ISession|\PHPUnit_Framework_MockObject_MockObject */
|
|
|
|
private $session;
|
|
|
|
/** @var IUserSession|\PHPUnit_Framework_MockObject_MockObject */
|
|
|
|
private $userSession;
|
|
|
|
/** @var IUser|\PHPUnit_Framework_MockObject_MockObject */
|
|
|
|
private $user;
|
|
|
|
/** @var PasswordConfirmationMiddleware */
|
|
|
|
private $middleware;
|
|
|
|
/** @var Controller */
|
|
|
|
private $contoller;
|
|
|
|
/** @var ITimeFactory|\PHPUnit_Framework_MockObject_MockObject */
|
|
|
|
private $timeFactory;
|
|
|
|
|
|
|
|
protected function setUp() {
|
|
|
|
$this->reflector = new ControllerMethodReflector();
|
|
|
|
$this->session = $this->createMock(ISession::class);
|
|
|
|
$this->userSession = $this->createMock(IUserSession::class);
|
|
|
|
$this->user = $this->createMock(IUser::class);
|
|
|
|
$this->contoller = $this->createMock(Controller::class);
|
|
|
|
$this->timeFactory = $this->createMock(ITimeFactory::class);
|
|
|
|
|
|
|
|
$this->middleware = new PasswordConfirmationMiddleware(
|
|
|
|
$this->reflector,
|
|
|
|
$this->session,
|
|
|
|
$this->userSession,
|
|
|
|
$this->timeFactory
|
|
|
|
);
|
|
|
|
}
|
|
|
|
|
|
|
|
public function testNoAnnotation() {
|
|
|
|
$this->reflector->reflect(__CLASS__, __FUNCTION__);
|
|
|
|
$this->session->expects($this->never())
|
|
|
|
->method($this->anything());
|
|
|
|
$this->userSession->expects($this->never())
|
|
|
|
->method($this->anything());
|
|
|
|
|
|
|
|
$this->middleware->beforeController($this->contoller, __FUNCTION__);
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @TestAnnotation
|
|
|
|
*/
|
|
|
|
public function testDifferentAnnotation() {
|
|
|
|
$this->reflector->reflect(__CLASS__, __FUNCTION__);
|
|
|
|
$this->session->expects($this->never())
|
|
|
|
->method($this->anything());
|
|
|
|
$this->userSession->expects($this->never())
|
|
|
|
->method($this->anything());
|
|
|
|
|
|
|
|
$this->middleware->beforeController($this->contoller, __FUNCTION__);
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @PasswordConfirmationRequired
|
2018-01-25 13:23:12 +03:00
|
|
|
* @dataProvider dataProvider
|
2018-01-02 23:13:32 +03:00
|
|
|
*/
|
|
|
|
public function testAnnotation($backend, $lastConfirm, $currentTime, $exception) {
|
|
|
|
$this->reflector->reflect(__CLASS__, __FUNCTION__);
|
|
|
|
|
|
|
|
$this->user->method('getBackendClassName')
|
|
|
|
->willReturn($backend);
|
|
|
|
$this->userSession->method('getUser')
|
|
|
|
->willReturn($this->user);
|
|
|
|
|
|
|
|
$this->session->method('get')
|
|
|
|
->with('last-password-confirm')
|
|
|
|
->willReturn($lastConfirm);
|
|
|
|
|
|
|
|
$this->timeFactory->method('getTime')
|
|
|
|
->willReturn($currentTime);
|
|
|
|
|
|
|
|
$thrown = false;
|
|
|
|
try {
|
|
|
|
$this->middleware->beforeController($this->contoller, __FUNCTION__);
|
|
|
|
} catch (NotConfirmedException $e) {
|
|
|
|
$thrown = true;
|
|
|
|
}
|
|
|
|
|
|
|
|
$this->assertSame($exception, $thrown);
|
|
|
|
}
|
|
|
|
|
2018-01-25 13:23:12 +03:00
|
|
|
public function dataProvider() {
|
2018-01-02 23:13:32 +03:00
|
|
|
return [
|
|
|
|
['foo', 2000, 4000, true],
|
|
|
|
['foo', 2000, 3000, false],
|
|
|
|
['user_saml', 2000, 4000, false],
|
|
|
|
['user_saml', 2000, 3000, false],
|
|
|
|
['foo', 2000, 3815, false],
|
|
|
|
['foo', 2000, 3816, true],
|
|
|
|
];
|
|
|
|
}
|
|
|
|
}
|