91 lines
2.8 KiB
PHP
91 lines
2.8 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
/*
|
||
|
|
* This file is part of the Silex framework.
|
||
|
|
*
|
||
|
|
* (c) Fabien Potencier <fabien@symfony.com>
|
||
|
|
*
|
||
|
|
* This source file is subject to the MIT license that is bundled
|
||
|
|
* with this source code in the file LICENSE.
|
||
|
|
*/
|
||
|
|
|
||
|
|
namespace Silex\Tests\Application;
|
||
|
|
|
||
|
|
use Silex\Provider\SecurityServiceProvider;
|
||
|
|
use Symfony\Component\Security\Core\User\User;
|
||
|
|
use Symfony\Component\HttpFoundation\Request;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* SecurityTrait test cases.
|
||
|
|
*
|
||
|
|
* @author Fabien Potencier <fabien@symfony.com>
|
||
|
|
*/
|
||
|
|
class SecurityTraitTest extends \PHPUnit_Framework_TestCase
|
||
|
|
{
|
||
|
|
public function testEncodePassword()
|
||
|
|
{
|
||
|
|
$app = $this->createApplication(array(
|
||
|
|
'fabien' => array('ROLE_ADMIN', '$2y$15$lzUNsTegNXvZW3qtfucV0erYBcEqWVeyOmjolB7R1uodsAVJ95vvu'),
|
||
|
|
));
|
||
|
|
|
||
|
|
$user = new User('foo', 'bar');
|
||
|
|
$password = 'foo';
|
||
|
|
$encoded = $app->encodePassword($user, $password);
|
||
|
|
|
||
|
|
$this->assertTrue(
|
||
|
|
$app['security.encoder_factory']->getEncoder($user)->isPasswordValid($encoded, $password, $user->getSalt())
|
||
|
|
);
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* @expectedException \Symfony\Component\Security\Core\Exception\AuthenticationCredentialsNotFoundException
|
||
|
|
*/
|
||
|
|
public function testIsGrantedWithoutTokenThrowsException()
|
||
|
|
{
|
||
|
|
$app = $this->createApplication();
|
||
|
|
$app->get('/', function () { return 'foo'; });
|
||
|
|
$app->handle(Request::create('/'));
|
||
|
|
$app->isGranted('ROLE_ADMIN');
|
||
|
|
}
|
||
|
|
|
||
|
|
public function testIsGranted()
|
||
|
|
{
|
||
|
|
$request = Request::create('/');
|
||
|
|
|
||
|
|
$app = $this->createApplication(array(
|
||
|
|
'fabien' => array('ROLE_ADMIN', '$2y$15$lzUNsTegNXvZW3qtfucV0erYBcEqWVeyOmjolB7R1uodsAVJ95vvu'),
|
||
|
|
'monique' => array('ROLE_USER', '$2y$15$lzUNsTegNXvZW3qtfucV0erYBcEqWVeyOmjolB7R1uodsAVJ95vvu'),
|
||
|
|
));
|
||
|
|
$app->get('/', function () { return 'foo'; });
|
||
|
|
|
||
|
|
// User is Monique (ROLE_USER)
|
||
|
|
$request->headers->set('PHP_AUTH_USER', 'monique');
|
||
|
|
$request->headers->set('PHP_AUTH_PW', 'foo');
|
||
|
|
$app->handle($request);
|
||
|
|
$this->assertTrue($app->isGranted('ROLE_USER'));
|
||
|
|
$this->assertFalse($app->isGranted('ROLE_ADMIN'));
|
||
|
|
|
||
|
|
// User is Fabien (ROLE_ADMIN)
|
||
|
|
$request->headers->set('PHP_AUTH_USER', 'fabien');
|
||
|
|
$request->headers->set('PHP_AUTH_PW', 'foo');
|
||
|
|
$app->handle($request);
|
||
|
|
$this->assertFalse($app->isGranted('ROLE_USER'));
|
||
|
|
$this->assertTrue($app->isGranted('ROLE_ADMIN'));
|
||
|
|
}
|
||
|
|
|
||
|
|
public function createApplication($users = array())
|
||
|
|
{
|
||
|
|
$app = new SecurityApplication();
|
||
|
|
$app->register(new SecurityServiceProvider(), array(
|
||
|
|
'security.firewalls' => array(
|
||
|
|
'default' => array(
|
||
|
|
'http' => true,
|
||
|
|
'users' => $users,
|
||
|
|
),
|
||
|
|
),
|
||
|
|
));
|
||
|
|
|
||
|
|
return $app;
|
||
|
|
}
|
||
|
|
}
|