* * For the full copyright and license information, please view the LICENSE * file that was distributed with this source code. */ namespace Symfony\Bundle\SecurityBundle\Tests\Functional; class LogoutTest extends WebTestCase { public function testSessionLessRememberMeLogout() { $client = $this->createClient(array('test_case' => 'RememberMeLogout', 'root_config' => 'config.yml')); $client->request('POST', '/login', array( '_username' => 'johannes', '_password' => 'test', )); $cookieJar = $client->getCookieJar(); $cookieJar->expire(session_name()); $this->assertNotNull($cookieJar->get('REMEMBERME')); $client->request('GET', '/logout'); $this->assertNull($cookieJar->get('REMEMBERME')); } public function testCsrfTokensAreClearedOnLogout() { $client = $this->createClient(array('test_case' => 'LogoutWithoutSessionInvalidation', 'root_config' => 'config.yml')); $client->getContainer()->get('security.csrf.token_storage')->setToken('foo', 'bar'); $client->request('POST', '/login', array( '_username' => 'johannes', '_password' => 'test', )); $this->assertTrue($client->getContainer()->get('security.csrf.token_storage')->hasToken('foo')); $this->assertSame('bar', $client->getContainer()->get('security.csrf.token_storage')->getToken('foo')); $client->request('GET', '/logout'); $this->assertFalse($client->getContainer()->get('security.csrf.token_storage')->hasToken('foo')); } public function testAccessControlDoesNotApplyOnLogout() { $client = $this->createClient(array('test_case' => 'LogoutAccess', 'root_config' => 'config.yml')); $client->request('POST', '/login', array('_username' => 'johannes', '_password' => 'test')); $client->request('GET', '/logout'); $this->assertRedirect($client->getResponse(), '/'); } }