mirror of
https://github.com/shlinkio/shlink.git
synced 2024-12-24 21:48:23 +03:00
181 lines
6.9 KiB
PHP
181 lines
6.9 KiB
PHP
<?php
|
|
declare(strict_types=1);
|
|
|
|
namespace ShlinkioTest\Shlink\Rest\Middleware;
|
|
|
|
use PHPUnit\Framework\TestCase;
|
|
use Prophecy\Prophecy\MethodProphecy;
|
|
use Prophecy\Prophecy\ObjectProphecy;
|
|
use Psr\Http\Server\RequestHandlerInterface;
|
|
use Shlinkio\Shlink\Rest\Action\AuthenticateAction;
|
|
use Shlinkio\Shlink\Rest\Authentication\JWTService;
|
|
use Shlinkio\Shlink\Rest\Middleware\CheckAuthenticationMiddleware;
|
|
use ShlinkioTest\Shlink\Common\Util\TestUtils;
|
|
use Zend\Diactoros\Response;
|
|
use Zend\Diactoros\ServerRequestFactory;
|
|
use Zend\Expressive\Router\Route;
|
|
use Zend\Expressive\Router\RouteResult;
|
|
use Zend\I18n\Translator\Translator;
|
|
use function Zend\Stratigility\middleware;
|
|
|
|
class CheckAuthenticationMiddlewareTest extends TestCase
|
|
{
|
|
/**
|
|
* @var CheckAuthenticationMiddleware
|
|
*/
|
|
protected $middleware;
|
|
/**
|
|
* @var ObjectProphecy
|
|
*/
|
|
protected $jwtService;
|
|
|
|
/**
|
|
* @var callable
|
|
*/
|
|
protected $dummyMiddleware;
|
|
|
|
public function setUp()
|
|
{
|
|
$this->jwtService = $this->prophesize(JWTService::class);
|
|
$this->middleware = new CheckAuthenticationMiddleware($this->jwtService->reveal(), Translator::factory([]));
|
|
$this->dummyMiddleware = middleware(function ($request, $handler) {
|
|
return new Response\EmptyResponse;
|
|
});
|
|
}
|
|
|
|
/**
|
|
* @test
|
|
*/
|
|
public function someWhiteListedSituationsFallbackToNextMiddleware()
|
|
{
|
|
$request = ServerRequestFactory::fromGlobals();
|
|
$delegate = $this->prophesize(RequestHandlerInterface::class);
|
|
/** @var MethodProphecy $process */
|
|
$process = $delegate->handle($request)->willReturn(new Response());
|
|
|
|
$this->middleware->process($request, $delegate->reveal());
|
|
$process->shouldHaveBeenCalledTimes(1);
|
|
|
|
$request = ServerRequestFactory::fromGlobals()->withAttribute(
|
|
RouteResult::class,
|
|
RouteResult::fromRouteFailure(['GET'])
|
|
);
|
|
$delegate = $this->prophesize(RequestHandlerInterface::class);
|
|
/** @var MethodProphecy $process */
|
|
$process = $delegate->handle($request)->willReturn(new Response());
|
|
$this->middleware->process($request, $delegate->reveal());
|
|
$process->shouldHaveBeenCalledTimes(1);
|
|
|
|
$request = ServerRequestFactory::fromGlobals()->withAttribute(
|
|
RouteResult::class,
|
|
RouteResult::fromRoute(new Route(
|
|
'foo',
|
|
$this->dummyMiddleware,
|
|
Route::HTTP_METHOD_ANY,
|
|
AuthenticateAction::class
|
|
))
|
|
);
|
|
$delegate = $this->prophesize(RequestHandlerInterface::class);
|
|
/** @var MethodProphecy $process */
|
|
$process = $delegate->handle($request)->willReturn(new Response());
|
|
$this->middleware->process($request, $delegate->reveal());
|
|
$process->shouldHaveBeenCalledTimes(1);
|
|
|
|
$request = ServerRequestFactory::fromGlobals()->withAttribute(
|
|
RouteResult::class,
|
|
RouteResult::fromRoute(new Route('bar', $this->dummyMiddleware), [])
|
|
)->withMethod('OPTIONS');
|
|
$delegate = $this->prophesize(RequestHandlerInterface::class);
|
|
/** @var MethodProphecy $process */
|
|
$process = $delegate->handle($request)->willReturn(new Response());
|
|
$this->middleware->process($request, $delegate->reveal());
|
|
$process->shouldHaveBeenCalledTimes(1);
|
|
}
|
|
|
|
/**
|
|
* @test
|
|
*/
|
|
public function noHeaderReturnsError()
|
|
{
|
|
$request = ServerRequestFactory::fromGlobals()->withAttribute(
|
|
RouteResult::class,
|
|
RouteResult::fromRoute(new Route('bar', $this->dummyMiddleware), [])
|
|
);
|
|
$response = $this->middleware->process($request, TestUtils::createReqHandlerMock()->reveal());
|
|
$this->assertEquals(401, $response->getStatusCode());
|
|
}
|
|
|
|
/**
|
|
* @test
|
|
*/
|
|
public function provideAnAuthorizationWithoutTypeReturnsError()
|
|
{
|
|
$authToken = 'ABC-abc';
|
|
$request = ServerRequestFactory::fromGlobals()->withAttribute(
|
|
RouteResult::class,
|
|
RouteResult::fromRoute(new Route('bar', $this->dummyMiddleware), [])
|
|
)->withHeader(CheckAuthenticationMiddleware::AUTHORIZATION_HEADER, $authToken);
|
|
|
|
$response = $this->middleware->process($request, TestUtils::createReqHandlerMock()->reveal());
|
|
|
|
$this->assertEquals(401, $response->getStatusCode());
|
|
$this->assertTrue(strpos($response->getBody()->getContents(), 'You need to provide the Bearer type') > 0);
|
|
}
|
|
|
|
/**
|
|
* @test
|
|
*/
|
|
public function provideAnAuthorizationWithWrongTypeReturnsError()
|
|
{
|
|
$authToken = 'ABC-abc';
|
|
$request = ServerRequestFactory::fromGlobals()->withAttribute(
|
|
RouteResult::class,
|
|
RouteResult::fromRoute(new Route('bar', $this->dummyMiddleware), [])
|
|
)->withHeader(CheckAuthenticationMiddleware::AUTHORIZATION_HEADER, 'Basic ' . $authToken);
|
|
|
|
$response = $this->middleware->process($request, TestUtils::createReqHandlerMock()->reveal());
|
|
|
|
$this->assertEquals(401, $response->getStatusCode());
|
|
$this->assertTrue(
|
|
strpos($response->getBody()->getContents(), 'Provided authorization type Basic is not supported') > 0
|
|
);
|
|
}
|
|
|
|
/**
|
|
* @test
|
|
*/
|
|
public function provideAnExpiredTokenReturnsError()
|
|
{
|
|
$authToken = 'ABC-abc';
|
|
$request = ServerRequestFactory::fromGlobals()->withAttribute(
|
|
RouteResult::class,
|
|
RouteResult::fromRoute(new Route('bar', $this->dummyMiddleware), [])
|
|
)->withHeader(CheckAuthenticationMiddleware::AUTHORIZATION_HEADER, 'Bearer ' . $authToken);
|
|
$this->jwtService->verify($authToken)->willReturn(false)->shouldBeCalledTimes(1);
|
|
|
|
$response = $this->middleware->process($request, TestUtils::createReqHandlerMock()->reveal());
|
|
$this->assertEquals(401, $response->getStatusCode());
|
|
}
|
|
|
|
/**
|
|
* @test
|
|
*/
|
|
public function provideCorrectTokenUpdatesExpirationAndFallsBackToNextMiddleware()
|
|
{
|
|
$authToken = 'ABC-abc';
|
|
$request = ServerRequestFactory::fromGlobals()->withAttribute(
|
|
RouteResult::class,
|
|
RouteResult::fromRoute(new Route('bar', $this->dummyMiddleware), [])
|
|
)->withHeader(CheckAuthenticationMiddleware::AUTHORIZATION_HEADER, 'bearer ' . $authToken);
|
|
$this->jwtService->verify($authToken)->willReturn(true)->shouldBeCalledTimes(1);
|
|
$this->jwtService->refresh($authToken)->willReturn($authToken)->shouldBeCalledTimes(1);
|
|
|
|
$delegate = $this->prophesize(RequestHandlerInterface::class);
|
|
/** @var MethodProphecy $process */
|
|
$process = $delegate->handle($request)->willReturn(new Response());
|
|
$resp = $this->middleware->process($request, $delegate->reveal());
|
|
|
|
$process->shouldHaveBeenCalledTimes(1);
|
|
$this->assertArrayHasKey(CheckAuthenticationMiddleware::AUTHORIZATION_HEADER, $resp->getHeaders());
|
|
}
|
|
}
|