123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327 |
- <?php
- /*
- * This file is part of the Symfony package.
- *
- * (c) Fabien Potencier <fabien@symfony.com>
- *
- * For the full copyright and license information, please view the LICENSE
- * file that was distributed with this source code.
- */
- namespace Symfony\Component\Security\Http\Tests;
- use PHPUnit\Framework\TestCase;
- use Symfony\Component\HttpFoundation\Request;
- use Symfony\Component\Routing\Exception\MethodNotAllowedException;
- use Symfony\Component\Routing\Exception\ResourceNotFoundException;
- use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
- use Symfony\Component\Security\Core\Security;
- use Symfony\Component\Security\Http\HttpUtils;
- class HttpUtilsTest extends TestCase
- {
- public function testCreateRedirectResponseWithPath()
- {
- $utils = new HttpUtils($this->getUrlGenerator());
- $response = $utils->createRedirectResponse($this->getRequest(), '/foobar');
- $this->assertTrue($response->isRedirect('http://localhost/foobar'));
- $this->assertEquals(302, $response->getStatusCode());
- }
- public function testCreateRedirectResponseWithAbsoluteUrl()
- {
- $utils = new HttpUtils($this->getUrlGenerator());
- $response = $utils->createRedirectResponse($this->getRequest(), 'http://symfony.com/');
- $this->assertTrue($response->isRedirect('http://symfony.com/'));
- }
- public function testCreateRedirectResponseWithDomainRegexp()
- {
- $utils = new HttpUtils($this->getUrlGenerator(), null, '#^https?://symfony\.com$#i');
- $response = $utils->createRedirectResponse($this->getRequest(), 'http://symfony.com/blog');
- $this->assertTrue($response->isRedirect('http://symfony.com/blog'));
- }
- public function testCreateRedirectResponseWithRequestsDomain()
- {
- $utils = new HttpUtils($this->getUrlGenerator(), null, '#^https?://%s$#i');
- $response = $utils->createRedirectResponse($this->getRequest(), 'http://localhost/blog');
- $this->assertTrue($response->isRedirect('http://localhost/blog'));
- }
- /**
- * @dataProvider badRequestDomainUrls
- */
- public function testCreateRedirectResponseWithBadRequestsDomain($url)
- {
- $utils = new HttpUtils($this->getUrlGenerator(), null, '#^https?://%s$#i');
- $response = $utils->createRedirectResponse($this->getRequest(), $url);
- $this->assertTrue($response->isRedirect('http://localhost/'));
- }
- public function badRequestDomainUrls()
- {
- return array(
- array('http://pirate.net/foo'),
- array('http:\\\\pirate.net/foo'),
- array('http:/\\pirate.net/foo'),
- array('http:\\/pirate.net/foo'),
- array('http://////pirate.net/foo'),
- );
- }
- public function testCreateRedirectResponseWithProtocolRelativeTarget()
- {
- $utils = new HttpUtils($this->getUrlGenerator(), null, '#^https?://%s$#i');
- $response = $utils->createRedirectResponse($this->getRequest(), '//evil.com/do-bad-things');
- $this->assertTrue($response->isRedirect('http://localhost//evil.com/do-bad-things'), 'Protocol-relative redirection should not be supported for security reasons');
- }
- public function testCreateRedirectResponseWithRouteName()
- {
- $utils = new HttpUtils($urlGenerator = $this->getMockBuilder('Symfony\Component\Routing\Generator\UrlGeneratorInterface')->getMock());
- $urlGenerator
- ->expects($this->any())
- ->method('generate')
- ->with('foobar', array(), UrlGeneratorInterface::ABSOLUTE_URL)
- ->will($this->returnValue('http://localhost/foo/bar'))
- ;
- $urlGenerator
- ->expects($this->any())
- ->method('getContext')
- ->will($this->returnValue($this->getMockBuilder('Symfony\Component\Routing\RequestContext')->getMock()))
- ;
- $response = $utils->createRedirectResponse($this->getRequest(), 'foobar');
- $this->assertTrue($response->isRedirect('http://localhost/foo/bar'));
- }
- public function testCreateRequestWithPath()
- {
- $request = $this->getRequest();
- $request->server->set('Foo', 'bar');
- $utils = new HttpUtils($this->getUrlGenerator());
- $subRequest = $utils->createRequest($request, '/foobar');
- $this->assertEquals('GET', $subRequest->getMethod());
- $this->assertEquals('/foobar', $subRequest->getPathInfo());
- $this->assertEquals('bar', $subRequest->server->get('Foo'));
- }
- public function testCreateRequestWithRouteName()
- {
- $utils = new HttpUtils($urlGenerator = $this->getMockBuilder('Symfony\Component\Routing\Generator\UrlGeneratorInterface')->getMock());
- $urlGenerator
- ->expects($this->once())
- ->method('generate')
- ->will($this->returnValue('/foo/bar'))
- ;
- $urlGenerator
- ->expects($this->any())
- ->method('getContext')
- ->will($this->returnValue($this->getMockBuilder('Symfony\Component\Routing\RequestContext')->getMock()))
- ;
- $subRequest = $utils->createRequest($this->getRequest(), 'foobar');
- $this->assertEquals('/foo/bar', $subRequest->getPathInfo());
- }
- public function testCreateRequestWithAbsoluteUrl()
- {
- $utils = new HttpUtils($this->getMockBuilder('Symfony\Component\Routing\Generator\UrlGeneratorInterface')->getMock());
- $subRequest = $utils->createRequest($this->getRequest(), 'http://symfony.com/');
- $this->assertEquals('/', $subRequest->getPathInfo());
- }
- public function testCreateRequestPassesSessionToTheNewRequest()
- {
- $request = $this->getRequest();
- $request->setSession($session = $this->getMockBuilder('Symfony\Component\HttpFoundation\Session\SessionInterface')->getMock());
- $utils = new HttpUtils($this->getUrlGenerator());
- $subRequest = $utils->createRequest($request, '/foobar');
- $this->assertSame($session, $subRequest->getSession());
- }
- /**
- * @dataProvider provideSecurityContextAttributes
- */
- public function testCreateRequestPassesSecurityContextAttributesToTheNewRequest($attribute)
- {
- $request = $this->getRequest();
- $request->attributes->set($attribute, 'foo');
- $utils = new HttpUtils($this->getUrlGenerator());
- $subRequest = $utils->createRequest($request, '/foobar');
- $this->assertSame('foo', $subRequest->attributes->get($attribute));
- }
- public function provideSecurityContextAttributes()
- {
- return array(
- array(Security::AUTHENTICATION_ERROR),
- array(Security::ACCESS_DENIED_ERROR),
- array(Security::LAST_USERNAME),
- );
- }
- public function testCheckRequestPath()
- {
- $utils = new HttpUtils($this->getUrlGenerator());
- $this->assertTrue($utils->checkRequestPath($this->getRequest(), '/'));
- $this->assertFalse($utils->checkRequestPath($this->getRequest(), '/foo'));
- $this->assertTrue($utils->checkRequestPath($this->getRequest('/foo%20bar'), '/foo bar'));
- // Plus must not decoded to space
- $this->assertTrue($utils->checkRequestPath($this->getRequest('/foo+bar'), '/foo+bar'));
- // Checking unicode
- $this->assertTrue($utils->checkRequestPath($this->getRequest('/'.urlencode('вход')), '/вход'));
- }
- public function testCheckRequestPathWithUrlMatcherAndResourceNotFound()
- {
- $urlMatcher = $this->getMockBuilder('Symfony\Component\Routing\Matcher\UrlMatcherInterface')->getMock();
- $urlMatcher
- ->expects($this->any())
- ->method('match')
- ->with('/')
- ->will($this->throwException(new ResourceNotFoundException()))
- ;
- $utils = new HttpUtils(null, $urlMatcher);
- $this->assertFalse($utils->checkRequestPath($this->getRequest(), 'foobar'));
- }
- public function testCheckRequestPathWithUrlMatcherAndMethodNotAllowed()
- {
- $request = $this->getRequest();
- $urlMatcher = $this->getMockBuilder('Symfony\Component\Routing\Matcher\RequestMatcherInterface')->getMock();
- $urlMatcher
- ->expects($this->any())
- ->method('matchRequest')
- ->with($request)
- ->will($this->throwException(new MethodNotAllowedException(array())))
- ;
- $utils = new HttpUtils(null, $urlMatcher);
- $this->assertFalse($utils->checkRequestPath($request, 'foobar'));
- }
- public function testCheckRequestPathWithUrlMatcherAndResourceFoundByUrl()
- {
- $urlMatcher = $this->getMockBuilder('Symfony\Component\Routing\Matcher\UrlMatcherInterface')->getMock();
- $urlMatcher
- ->expects($this->any())
- ->method('match')
- ->with('/foo/bar')
- ->will($this->returnValue(array('_route' => 'foobar')))
- ;
- $utils = new HttpUtils(null, $urlMatcher);
- $this->assertTrue($utils->checkRequestPath($this->getRequest('/foo/bar'), 'foobar'));
- }
- public function testCheckRequestPathWithUrlMatcherAndResourceFoundByRequest()
- {
- $request = $this->getRequest();
- $urlMatcher = $this->getMockBuilder('Symfony\Component\Routing\Matcher\RequestMatcherInterface')->getMock();
- $urlMatcher
- ->expects($this->any())
- ->method('matchRequest')
- ->with($request)
- ->will($this->returnValue(array('_route' => 'foobar')))
- ;
- $utils = new HttpUtils(null, $urlMatcher);
- $this->assertTrue($utils->checkRequestPath($request, 'foobar'));
- }
- /**
- * @expectedException \RuntimeException
- */
- public function testCheckRequestPathWithUrlMatcherLoadingException()
- {
- $urlMatcher = $this->getMockBuilder('Symfony\Component\Routing\Matcher\UrlMatcherInterface')->getMock();
- $urlMatcher
- ->expects($this->any())
- ->method('match')
- ->will($this->throwException(new \RuntimeException()))
- ;
- $utils = new HttpUtils(null, $urlMatcher);
- $utils->checkRequestPath($this->getRequest(), 'foobar');
- }
- public function testCheckPathWithoutRouteParam()
- {
- $urlMatcher = $this->getMockBuilder('Symfony\Component\Routing\Matcher\UrlMatcherInterface')->getMock();
- $urlMatcher
- ->expects($this->any())
- ->method('match')
- ->willReturn(array('_controller' => 'PathController'))
- ;
- $utils = new HttpUtils(null, $urlMatcher);
- $this->assertFalse($utils->checkRequestPath($this->getRequest(), 'path/index.html'));
- }
- /**
- * @expectedException \InvalidArgumentException
- * @expectedExceptionMessage Matcher must either implement UrlMatcherInterface or RequestMatcherInterface
- */
- public function testUrlMatcher()
- {
- new HttpUtils($this->getUrlGenerator(), new \stdClass());
- }
- public function testGenerateUriRemovesQueryString()
- {
- $utils = new HttpUtils($this->getUrlGenerator('/foo/bar'));
- $this->assertEquals('/foo/bar', $utils->generateUri(new Request(), 'route_name'));
- $utils = new HttpUtils($this->getUrlGenerator('/foo/bar?param=value'));
- $this->assertEquals('/foo/bar', $utils->generateUri(new Request(), 'route_name'));
- }
- /**
- * @expectedException \LogicException
- * @expectedExceptionMessage You must provide a UrlGeneratorInterface instance to be able to use routes.
- */
- public function testUrlGeneratorIsRequiredToGenerateUrl()
- {
- $utils = new HttpUtils();
- $utils->generateUri(new Request(), 'route_name');
- }
- private function getUrlGenerator($generatedUrl = '/foo/bar')
- {
- $urlGenerator = $this->getMockBuilder('Symfony\Component\Routing\Generator\UrlGeneratorInterface')->getMock();
- $urlGenerator
- ->expects($this->any())
- ->method('generate')
- ->will($this->returnValue($generatedUrl))
- ;
- return $urlGenerator;
- }
- private function getRequest($path = '/')
- {
- return Request::create($path, 'get');
- }
- }
|