1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162 |
- <?php
- /*
- * This file is part of the Symfony package.
- *
- * (c) Fabien Potencier <fabien@symfony.com>
- *
- * For the full copyright and license information, please view the LICENSE
- * file that was distributed with this source code.
- */
- namespace Symfony\Bundle\SecurityBundle\Tests\Functional;
- class LogoutTest extends WebTestCase
- {
- public function testSessionLessRememberMeLogout()
- {
- $client = $this->createClient(array('test_case' => 'RememberMeLogout', 'root_config' => 'config.yml'));
- $client->request('POST', '/login', array(
- '_username' => 'johannes',
- '_password' => 'test',
- ));
- $cookieJar = $client->getCookieJar();
- $cookieJar->expire(session_name());
- $this->assertNotNull($cookieJar->get('REMEMBERME'));
- $client->request('GET', '/logout');
- $this->assertNull($cookieJar->get('REMEMBERME'));
- }
- public function testCsrfTokensAreClearedOnLogout()
- {
- $client = $this->createClient(array('test_case' => 'LogoutWithoutSessionInvalidation', 'root_config' => 'config.yml'));
- $client->getContainer()->get('security.csrf.token_storage')->setToken('foo', 'bar');
- $client->request('POST', '/login', array(
- '_username' => 'johannes',
- '_password' => 'test',
- ));
- $this->assertTrue($client->getContainer()->get('security.csrf.token_storage')->hasToken('foo'));
- $this->assertSame('bar', $client->getContainer()->get('security.csrf.token_storage')->getToken('foo'));
- $client->request('GET', '/logout');
- $this->assertFalse($client->getContainer()->get('security.csrf.token_storage')->hasToken('foo'));
- }
- public function testAccessControlDoesNotApplyOnLogout()
- {
- $client = $this->createClient(array('test_case' => 'LogoutAccess', 'root_config' => 'config.yml'));
- $client->request('POST', '/login', array('_username' => 'johannes', '_password' => 'test'));
- $client->request('GET', '/logout');
- $this->assertRedirect($client->getResponse(), '/');
- }
- }
|