123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186 |
- <?php
- /*
- * This file is part of the Symfony package.
- *
- * (c) Fabien Potencier <fabien@symfony.com>
- *
- * For the full copyright and license information, please view the LICENSE
- * file that was distributed with this source code.
- */
- namespace Symfony\Component\Security\Guard\Tests\Provider;
- use PHPUnit\Framework\TestCase;
- use Symfony\Component\Security\Guard\Provider\GuardAuthenticationProvider;
- use Symfony\Component\Security\Guard\Token\PostAuthenticationGuardToken;
- use Symfony\Component\Security\Guard\Token\PreAuthenticationGuardToken;
- /**
- * @author Ryan Weaver <weaverryan@gmail.com>
- */
- class GuardAuthenticationProviderTest extends TestCase
- {
- private $userProvider;
- private $userChecker;
- private $preAuthenticationToken;
- public function testAuthenticate()
- {
- $providerKey = 'my_cool_firewall';
- $authenticatorA = $this->getMockBuilder('Symfony\Component\Security\Guard\GuardAuthenticatorInterface')->getMock();
- $authenticatorB = $this->getMockBuilder('Symfony\Component\Security\Guard\GuardAuthenticatorInterface')->getMock();
- $authenticatorC = $this->getMockBuilder('Symfony\Component\Security\Guard\GuardAuthenticatorInterface')->getMock();
- $authenticators = array($authenticatorA, $authenticatorB, $authenticatorC);
- // called 2 times - for authenticator A and B (stops on B because of match)
- $this->preAuthenticationToken->expects($this->exactly(2))
- ->method('getGuardProviderKey')
- // it will return the "1" index, which will match authenticatorB
- ->will($this->returnValue('my_cool_firewall_1'));
- $enteredCredentials = array(
- 'username' => '_weaverryan_test_user',
- 'password' => 'guard_auth_ftw',
- );
- $this->preAuthenticationToken->expects($this->atLeastOnce())
- ->method('getCredentials')
- ->will($this->returnValue($enteredCredentials));
- // authenticators A and C are never called
- $authenticatorA->expects($this->never())
- ->method('getUser');
- $authenticatorC->expects($this->never())
- ->method('getUser');
- $mockedUser = $this->getMockBuilder('Symfony\Component\Security\Core\User\UserInterface')->getMock();
- $authenticatorB->expects($this->once())
- ->method('getUser')
- ->with($enteredCredentials, $this->userProvider)
- ->will($this->returnValue($mockedUser));
- // checkCredentials is called
- $authenticatorB->expects($this->once())
- ->method('checkCredentials')
- ->with($enteredCredentials, $mockedUser)
- // authentication works!
- ->will($this->returnValue(true));
- $authedToken = $this->getMockBuilder('Symfony\Component\Security\Core\Authentication\Token\TokenInterface')->getMock();
- $authenticatorB->expects($this->once())
- ->method('createAuthenticatedToken')
- ->with($mockedUser, $providerKey)
- ->will($this->returnValue($authedToken));
- // user checker should be called
- $this->userChecker->expects($this->once())
- ->method('checkPreAuth')
- ->with($mockedUser);
- $this->userChecker->expects($this->once())
- ->method('checkPostAuth')
- ->with($mockedUser);
- $provider = new GuardAuthenticationProvider($authenticators, $this->userProvider, $providerKey, $this->userChecker);
- $actualAuthedToken = $provider->authenticate($this->preAuthenticationToken);
- $this->assertSame($authedToken, $actualAuthedToken);
- }
- /**
- * @expectedException \Symfony\Component\Security\Core\Exception\BadCredentialsException
- */
- public function testCheckCredentialsReturningNonTrueFailsAuthentication()
- {
- $providerKey = 'my_uncool_firewall';
- $authenticator = $this->getMockBuilder('Symfony\Component\Security\Guard\GuardAuthenticatorInterface')->getMock();
- // make sure the authenticator is used
- $this->preAuthenticationToken->expects($this->any())
- ->method('getGuardProviderKey')
- // the 0 index, to match the only authenticator
- ->will($this->returnValue('my_uncool_firewall_0'));
- $this->preAuthenticationToken->expects($this->atLeastOnce())
- ->method('getCredentials')
- ->will($this->returnValue('non-null-value'));
- $mockedUser = $this->getMockBuilder('Symfony\Component\Security\Core\User\UserInterface')->getMock();
- $authenticator->expects($this->once())
- ->method('getUser')
- ->will($this->returnValue($mockedUser));
- // checkCredentials is called
- $authenticator->expects($this->once())
- ->method('checkCredentials')
- // authentication fails :(
- ->will($this->returnValue(null));
- $provider = new GuardAuthenticationProvider(array($authenticator), $this->userProvider, $providerKey, $this->userChecker);
- $provider->authenticate($this->preAuthenticationToken);
- }
- /**
- * @expectedException \Symfony\Component\Security\Core\Exception\AuthenticationExpiredException
- */
- public function testGuardWithNoLongerAuthenticatedTriggersLogout()
- {
- $providerKey = 'my_firewall_abc';
- // create a token and mark it as NOT authenticated anymore
- // this mimics what would happen if a user "changed" between request
- $mockedUser = $this->getMockBuilder('Symfony\Component\Security\Core\User\UserInterface')->getMock();
- $token = new PostAuthenticationGuardToken($mockedUser, $providerKey, array('ROLE_USER'));
- $token->setAuthenticated(false);
- $provider = new GuardAuthenticationProvider(array(), $this->userProvider, $providerKey, $this->userChecker);
- $actualToken = $provider->authenticate($token);
- }
- public function testSupportsChecksGuardAuthenticatorsTokenOrigin()
- {
- $authenticatorA = $this->getMockBuilder('Symfony\Component\Security\Guard\GuardAuthenticatorInterface')->getMock();
- $authenticatorB = $this->getMockBuilder('Symfony\Component\Security\Guard\GuardAuthenticatorInterface')->getMock();
- $authenticators = array($authenticatorA, $authenticatorB);
- $mockedUser = $this->getMockBuilder('Symfony\Component\Security\Core\User\UserInterface')->getMock();
- $provider = new GuardAuthenticationProvider($authenticators, $this->userProvider, 'first_firewall', $this->userChecker);
- $token = new PreAuthenticationGuardToken($mockedUser, 'first_firewall_1');
- $supports = $provider->supports($token);
- $this->assertTrue($supports);
- $token = new PreAuthenticationGuardToken($mockedUser, 'second_firewall_0');
- $supports = $provider->supports($token);
- $this->assertFalse($supports);
- }
- /**
- * @expectedException \Symfony\Component\Security\Core\Exception\AuthenticationException
- * @expectedExceptionMessageRegExp /second_firewall_0/
- */
- public function testAuthenticateFailsOnNonOriginatingToken()
- {
- $authenticatorA = $this->getMockBuilder('Symfony\Component\Security\Guard\GuardAuthenticatorInterface')->getMock();
- $authenticators = array($authenticatorA);
- $mockedUser = $this->getMockBuilder('Symfony\Component\Security\Core\User\UserInterface')->getMock();
- $provider = new GuardAuthenticationProvider($authenticators, $this->userProvider, 'first_firewall', $this->userChecker);
- $token = new PreAuthenticationGuardToken($mockedUser, 'second_firewall_0');
- $provider->authenticate($token);
- }
- protected function setUp()
- {
- $this->userProvider = $this->getMockBuilder('Symfony\Component\Security\Core\User\UserProviderInterface')->getMock();
- $this->userChecker = $this->getMockBuilder('Symfony\Component\Security\Core\User\UserCheckerInterface')->getMock();
- $this->preAuthenticationToken = $this->getMockBuilder('Symfony\Component\Security\Guard\Token\PreAuthenticationGuardToken')
- ->disableOriginalConstructor()
- ->getMock();
- }
- protected function tearDown()
- {
- $this->userProvider = null;
- $this->userChecker = null;
- $this->preAuthenticationToken = null;
- }
- }
|