0byt3m1n1

Path: /data/applications/aps/tikiwiki/7.0-0/standard/htdocs/lib/test/auth/ [ Home ]
File: AuthTokensTest.php
<?php
// (c) Copyright 2002-2011 by authors of the Tiki Wiki CMS Groupware Project
// 
// All Rights Reserved. See copyright.txt for details and a complete list of authors.
// Licensed under the GNU LESSER GENERAL PUBLIC LICENSE. See license.txt for details.
// $Id: AuthTokensTest.php 33195 2011-03-02 17:43:40Z changi67 $

/** 
 * @group integration
 */

require_once 'lib/auth/tokens.php';

class AuthTokensTest extends PHPUnit_Framework_TestCase
{
	private $db;
	
	function setUp() {
		$this->db = TikiDb::get();
		$this->db->query( 'TRUNCATE tiki_auth_tokens' );
	}

	function tearDown() {
		if ($this->db) {
			$this->db->query( 'TRUNCATE tiki_auth_tokens' );
		}
	}
		
	function testNoTokensIsDenied() {
		$lib = new AuthTokens( $this->db );

		$params = array();
		$groups = $lib->getGroups( 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 'tiki-index.php', $params );
		$this->assertNull( $groups );
	}

	function testCreateToken() {
		$lib = new AuthTokens( $this->db );
		$data = array(
			'tokenId' => 1,
			'timeout' => 5,
			'entry' => 'tiki-index.php',
			'parameters' => '{"page":"HomePage"}',
			'groups' => '["Registered"]',
		);

		$token = $lib->createToken( 'tiki-index.php', array('page' => 'HomePage'), array( 'Registered' ), array( 'timeout' => 5 ) );

		$this->assertEquals( $data, $this->db->query( 'SELECT tokenId, timeout, entry, parameters, groups FROM tiki_auth_tokens' )->fetchRow() );
		$this->assertEquals( 32, strlen( $token['token'] ) );
	}

	function testTokenMatchesCompleteHash() {
		$lib = new AuthTokens( $this->db );

		$token = $lib->createToken( 'tiki-index.php', array('page' => 'HomePage'), array( 'Registered' ) );

		$row = $this->db->query( 'SELECT tokenId, creation, timeout, entry, parameters, groups FROM tiki_auth_tokens' )->fetchRow();

		$this->assertEquals( md5( implode('', $row) ), $token['token'] );
	}

	function testRetrieveGroupsForToken() {
		$lib = new AuthTokens( $this->db );
		$token = $lib->createToken( 'tiki-index.php', array('page' => 'HomePage'), array( 'Registered' ) );
		$this->assertEquals( array( 'Registered' ), $lib->getGroups( $token['token'], 'tiki-index.php', array('page' => 'HomePage') ) );
	}

	function testAccessExpiredToken() {
		$lib = new AuthTokens( $this->db );
		$this->db->query( 'INSERT INTO tiki_auth_tokens (tokenId, creation, timeout, entry, parameters, groups, token) VALUES(?, ?, ?, ?, ?, ?, ?)', array( 1, '2009-11-05 11:45:16', 5, 'tiki-index.php', '{"page":"HomePage"}', '["Registered"]', "946fc2fa0a5e1cecd54440ce733b8fb4" ) );

		$this->assertNull( $lib->getGroups( "946fc2fa0a5e1cecd54440ce733b8fb4", 'tiki-index.php', array( 'page' => 'HomePage' ) ) );
	}

	function testAlteredDataCancels() {
		$lib = new AuthTokens( $this->db );
		$token = $lib->createToken( 'tiki-index.php', array('page' => 'HomePage'), array( 'Registered' ) );
		$this->db->query( 'UPDATE tiki_auth_tokens SET groups = \'["Admins"]\'' );
		$this->assertNull( $lib->getGroups( $token['token'], 'tiki-index.php', array('page' => 'HomePage') ) );
	}

	function testExtraDataCancels() {
		$lib = new AuthTokens( $this->db );
		$token = $lib->createToken( 'tiki-index.php', array('page' => 'HomePage'), array( 'Registered' ) );
		$this->assertNull( $lib->getGroups( $token['token'], 'tiki-index.php', array('page' => 'HomePage', 'hello' => 'world') ) );
	}

	function testMissingDataCancels() {
		$lib = new AuthTokens( $this->db );
		$token = $lib->createToken( 'tiki-index.php', array('page' => 'HomePage', 'foobar' => 'baz'), array( 'Registered' ) );
		$this->assertNull( $lib->getGroups( $token['token'], 'tiki-index.php', array('page' => 'HomePage') ) );
	}

	function testDifferingEntryCancels() {
		$lib = new AuthTokens( $this->db );
		$token = $lib->createToken( 'tiki-index.php', array('page' => 'HomePage'), array( 'Registered' ) );
		$this->assertNull( $lib->getGroups( $token['token'], 'tiki-print.php', array('page' => 'HomePage') ) );
	}

	function testDifferingValueCancels() {
		$lib = new AuthTokens( $this->db );
		$token = $lib->createToken( 'tiki-index.php', array('page' => 'HomePage'), array( 'Registered' ) );
		$this->assertNull( $lib->getGroups( $token['token'], 'tiki-index.php', array('page' => 'Home') ) );
	}

	function testNoParamerers() {
		$lib = new AuthTokens( $this->db );
		$token = $lib->createToken( 'tiki-index.php', array(), array( 'Registered' ) );
		$this->assertEquals( array( 'Registered' ), $lib->getGroups( $token['token'], 'tiki-index.php', array() ) );
	}

	function testMaximumTimeout() {
		$lib = new AuthTokens( $this->db, array(
			'maxTimeout' => 10,
		) );
		$token = $lib->createToken( 'tiki-index.php', array('page' => 'HomePage'), array( 'Registered' ), array( 'timeout' => 3600 ) );
		
		$this->assertEquals( 10, $this->db->getOne( 'SELECT timeout FROM tiki_auth_tokens WHERE tokenId = 1' ) );
	}

	function testSameTokenTwice() {
		$lib = new AuthTokens( $this->db );
		$token = $lib->createToken( 'tiki-index.php', array('page' => 'HomePage'), array( 'Registered' ) );
		$lib->getGroups( $token['token'], 'tiki-index.php', array('page' => 'HomePage') );

		$this->assertNull( $lib->getGroups( $token['token'], 'tiki-index.php', array('page' => 'HomePage') ) );
	}

	function testAllowMultipleHits() {
		$lib = new AuthTokens( $this->db, array( 'maxHits' => 100 ) );
		$token = $lib->createToken( 'tiki-index.php', array('page' => 'HomePage'), array( 'Registered' ), array( 'hits' => 3 ) );
		$lib->getGroups( $token['token'], 'tiki-index.php', array('page' => 'HomePage') );
		$lib->getGroups( $token['token'], 'tiki-index.php', array('page' => 'HomePage') );

		$this->assertEquals( array( 'Registered' ), $lib->getGroups( $token['token'], 'tiki-index.php', array('page' => 'HomePage') ) );
		$this->assertNull( $lib->getGroups( $token['token'], 'tiki-index.php', array('page' => 'HomePage') ) );
	}

	function testLimitOnAccessCount() {
		$lib = new AuthTokens( $this->db, array(
			'maxHits' => 10,
		) );
		$token = $lib->createToken( 'tiki-index.php', array('page' => 'HomePage'), array( 'Registered' ), array( 'hits' => 3600 ) );
		
		$this->assertEquals( 10, $this->db->getOne( 'SELECT hits FROM tiki_auth_tokens WHERE tokenId = 1' ) );
	}

	function testIncludeToken() {
		$lib = new AuthTokens( $this->db );

		$url = 'http://example.com/tiki/tiki-index.php?page=SomePage';
		$new = $lib->includeToken( $url );

		$this->assertRegExp( '/TOKEN=[a-z0-9]{32}/i', $new );
		$this->assertContains( 'http://example.com/tiki/tiki-index.php', $new );
		$this->assertContains( 'page=SomePage', $new );
	}

	function testIncludeTokenNoPath() {
		$lib = new AuthTokens( $this->db );

		$url = 'http://example.com/tiki-index.php';
		$new = $lib->includeToken( $url );

		$this->assertRegExp( '/TOKEN=[a-z0-9]{32}/i', $new );
		$this->assertContains( 'http://example.com/tiki-index.php', $new );
	}

	function testWithFragment() {
		$lib = new AuthTokens( $this->db );

		$url = 'http://example.com/tiki-index.php#Test';
		$new = $lib->includeToken( $url );

		$this->assertRegExp( '/TOKEN=[a-z0-9]{32}#Test/i', $new );
	}
}