12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576 |
- <?php
- /*
- * This file is part of the Symfony package.
- *
- * (c) Fabien Potencier <fabien@symfony.com>
- *
- * For the full copyright and license information, please view the LICENSE
- * file that was distributed with this source code.
- */
- namespace Symfony\Component\Security\Http\Tests\Logout;
- use PHPUnit\Framework\TestCase;
- use Symfony\Component\HttpFoundation\Request;
- use Symfony\Component\HttpFoundation\Response;
- use Symfony\Component\HttpFoundation\Session\Session;
- use Symfony\Component\HttpFoundation\Session\Storage\MockArraySessionStorage;
- use Symfony\Component\Security\Csrf\TokenStorage\SessionTokenStorage;
- use Symfony\Component\Security\Http\Logout\CsrfTokenClearingLogoutHandler;
- class CsrfTokenClearingLogoutHandlerTest extends TestCase
- {
- private $session;
- private $csrfTokenStorage;
- private $csrfTokenClearingLogoutHandler;
- protected function setUp()
- {
- $this->session = new Session(new MockArraySessionStorage());
- $this->csrfTokenStorage = new SessionTokenStorage($this->session, 'foo');
- $this->csrfTokenStorage->setToken('foo', 'bar');
- $this->csrfTokenStorage->setToken('foobar', 'baz');
- $this->csrfTokenClearingLogoutHandler = new CsrfTokenClearingLogoutHandler($this->csrfTokenStorage);
- }
- public function testCsrfTokenCookieWithSameNamespaceIsRemoved()
- {
- $this->assertSame('bar', $this->session->get('foo/foo'));
- $this->assertSame('baz', $this->session->get('foo/foobar'));
- $this->csrfTokenClearingLogoutHandler->logout(new Request(), new Response(), $this->getMockBuilder('Symfony\Component\Security\Core\Authentication\Token\TokenInterface')->getMock());
- $this->assertFalse($this->csrfTokenStorage->hasToken('foo'));
- $this->assertFalse($this->csrfTokenStorage->hasToken('foobar'));
- $this->assertFalse($this->session->has('foo/foo'));
- $this->assertFalse($this->session->has('foo/foobar'));
- }
- public function testCsrfTokenCookieWithDifferentNamespaceIsNotRemoved()
- {
- $barNamespaceCsrfSessionStorage = new SessionTokenStorage($this->session, 'bar');
- $barNamespaceCsrfSessionStorage->setToken('foo', 'bar');
- $barNamespaceCsrfSessionStorage->setToken('foobar', 'baz');
- $this->assertSame('bar', $this->session->get('foo/foo'));
- $this->assertSame('baz', $this->session->get('foo/foobar'));
- $this->assertSame('bar', $this->session->get('bar/foo'));
- $this->assertSame('baz', $this->session->get('bar/foobar'));
- $this->csrfTokenClearingLogoutHandler->logout(new Request(), new Response(), $this->getMockBuilder('Symfony\Component\Security\Core\Authentication\Token\TokenInterface')->getMock());
- $this->assertTrue($barNamespaceCsrfSessionStorage->hasToken('foo'));
- $this->assertTrue($barNamespaceCsrfSessionStorage->hasToken('foobar'));
- $this->assertSame('bar', $barNamespaceCsrfSessionStorage->getToken('foo'));
- $this->assertSame('baz', $barNamespaceCsrfSessionStorage->getToken('foobar'));
- $this->assertFalse($this->csrfTokenStorage->hasToken('foo'));
- $this->assertFalse($this->csrfTokenStorage->hasToken('foobar'));
- $this->assertFalse($this->session->has('foo/foo'));
- $this->assertFalse($this->session->has('foo/foobar'));
- $this->assertSame('bar', $this->session->get('bar/foo'));
- $this->assertSame('baz', $this->session->get('bar/foobar'));
- }
- }
|