2016-02-14 23:20:10 +05:30
|
|
|
<?php
|
2019-08-23 13:58:04 +05:30
|
|
|
declare(strict_types=1);
|
|
|
|
|
2019-02-21 01:28:52 +05:30
|
|
|
namespace api\tests\functional\oauth;
|
2016-02-14 23:20:10 +05:30
|
|
|
|
2019-02-21 01:28:52 +05:30
|
|
|
use api\tests\FunctionalTester;
|
2016-02-14 23:20:10 +05:30
|
|
|
|
2017-06-12 17:04:39 +05:30
|
|
|
class AuthCodeCest {
|
2016-02-14 23:20:10 +05:30
|
|
|
|
2019-09-06 05:02:57 +05:30
|
|
|
public function completeSuccess(FunctionalTester $I) {
|
|
|
|
$I->amAuthenticated();
|
|
|
|
$I->wantTo('get auth code if I require some scope and pass accept field');
|
|
|
|
$I->sendPOST('/api/oauth2/v1/complete?' . http_build_query([
|
|
|
|
'client_id' => 'ely',
|
|
|
|
'redirect_uri' => 'http://ely.by',
|
|
|
|
'response_type' => 'code',
|
|
|
|
'scope' => 'minecraft_server_session',
|
|
|
|
]), ['accept' => true]);
|
|
|
|
$I->canSeeResponseCodeIs(200);
|
|
|
|
$I->canSeeResponseContainsJson([
|
|
|
|
'success' => true,
|
|
|
|
]);
|
|
|
|
$I->canSeeResponseJsonMatchesJsonPath('$.redirectUri');
|
2016-02-14 23:20:10 +05:30
|
|
|
}
|
|
|
|
|
2019-09-06 05:02:57 +05:30
|
|
|
/**
|
|
|
|
* @before completeSuccess
|
|
|
|
*/
|
|
|
|
public function completeSuccessWithLessScopes(FunctionalTester $I) {
|
|
|
|
$I->amAuthenticated();
|
|
|
|
$I->wantTo('get auth code with less scopes as passed in the previous request without accept param');
|
|
|
|
$I->sendPOST('/api/oauth2/v1/complete?' . http_build_query([
|
|
|
|
'client_id' => 'ely',
|
|
|
|
'redirect_uri' => 'http://ely.by',
|
|
|
|
'response_type' => 'code',
|
|
|
|
]));
|
|
|
|
$I->canSeeResponseCodeIs(200);
|
|
|
|
$I->canSeeResponseContainsJson([
|
|
|
|
'success' => true,
|
|
|
|
]);
|
|
|
|
$I->canSeeResponseJsonMatchesJsonPath('$.redirectUri');
|
2016-02-14 23:20:10 +05:30
|
|
|
}
|
|
|
|
|
2019-09-06 05:02:57 +05:30
|
|
|
/**
|
|
|
|
* @before completeSuccess
|
|
|
|
*/
|
|
|
|
public function completeSuccessWithSameScopes(FunctionalTester $I) {
|
2017-01-24 04:30:08 +05:30
|
|
|
$I->amAuthenticated();
|
2019-09-06 05:02:57 +05:30
|
|
|
$I->wantTo('get auth code with the same scopes as passed in the previous request without accept param');
|
|
|
|
$I->sendPOST('/api/oauth2/v1/complete?' . http_build_query([
|
|
|
|
'client_id' => 'ely',
|
|
|
|
'redirect_uri' => 'http://ely.by',
|
|
|
|
'response_type' => 'code',
|
|
|
|
'scope' => 'minecraft_server_session',
|
|
|
|
]));
|
|
|
|
$I->canSeeResponseCodeIs(200);
|
|
|
|
$I->canSeeResponseContainsJson([
|
|
|
|
'success' => true,
|
|
|
|
]);
|
|
|
|
$I->canSeeResponseJsonMatchesJsonPath('$.redirectUri');
|
2016-02-14 23:20:10 +05:30
|
|
|
}
|
|
|
|
|
2019-09-06 05:02:57 +05:30
|
|
|
public function acceptRequiredOnFirstAuthRequest1(FunctionalTester $I) {
|
2017-01-24 04:30:08 +05:30
|
|
|
$I->amAuthenticated();
|
2016-11-24 03:29:44 +05:30
|
|
|
$I->wantTo('get accept_required if I don\'t require any scope, but this is first time request');
|
2019-09-06 05:02:57 +05:30
|
|
|
$I->sendPOST('/api/oauth2/v1/complete?' . http_build_query([
|
|
|
|
'client_id' => 'ely',
|
|
|
|
'redirect_uri' => 'http://ely.by',
|
|
|
|
'response_type' => 'code',
|
|
|
|
]));
|
2016-02-14 23:20:10 +05:30
|
|
|
$I->canSeeResponseCodeIs(401);
|
|
|
|
$I->canSeeResponseContainsJson([
|
|
|
|
'success' => false,
|
|
|
|
'error' => 'accept_required',
|
|
|
|
'parameter' => '',
|
|
|
|
'statusCode' => 401,
|
|
|
|
]);
|
2019-09-06 05:02:57 +05:30
|
|
|
}
|
2016-02-14 23:20:10 +05:30
|
|
|
|
2019-09-06 05:02:57 +05:30
|
|
|
public function acceptRequiredOnFirstAuthRequest2(FunctionalTester $I) {
|
|
|
|
$I->amAuthenticated();
|
2016-02-14 23:20:10 +05:30
|
|
|
$I->wantTo('get accept_required if I require some scopes on first time');
|
2019-09-06 05:02:57 +05:30
|
|
|
$I->sendPOST('/api/oauth2/v1/complete?' . http_build_query([
|
|
|
|
'client_id' => 'ely',
|
|
|
|
'redirect_uri' => 'http://ely.by',
|
|
|
|
'response_type' => 'code',
|
|
|
|
'scope' => 'minecraft_server_session',
|
|
|
|
]));
|
2016-02-14 23:20:10 +05:30
|
|
|
$I->canSeeResponseCodeIs(401);
|
|
|
|
$I->canSeeResponseContainsJson([
|
|
|
|
'success' => false,
|
|
|
|
'error' => 'accept_required',
|
|
|
|
'parameter' => '',
|
|
|
|
'statusCode' => 401,
|
|
|
|
]);
|
|
|
|
}
|
|
|
|
|
2019-09-06 05:02:57 +05:30
|
|
|
public function acceptRequiredOnNewScope(FunctionalTester $I) {
|
2017-01-24 04:30:08 +05:30
|
|
|
$I->amAuthenticated();
|
2016-02-14 23:20:10 +05:30
|
|
|
$I->wantTo('get accept_required if I have previous successful request, but now require some new scope');
|
2019-09-06 05:02:57 +05:30
|
|
|
$I->sendPOST('/api/oauth2/v1/complete?' . http_build_query([
|
|
|
|
'client_id' => 'ely',
|
|
|
|
'redirect_uri' => 'http://ely.by',
|
|
|
|
'response_type' => 'code',
|
|
|
|
'scope' => 'minecraft_server_session',
|
|
|
|
]), ['accept' => true]);
|
|
|
|
$I->sendPOST('/api/oauth2/v1/complete?' . http_build_query([
|
|
|
|
'client_id' => 'ely',
|
|
|
|
'redirect_uri' => 'http://ely.by',
|
|
|
|
'response_type' => 'code',
|
|
|
|
'scope' => 'minecraft_server_session account_info',
|
|
|
|
]));
|
2016-02-14 23:20:10 +05:30
|
|
|
$I->canSeeResponseCodeIs(401);
|
|
|
|
$I->canSeeResponseContainsJson([
|
|
|
|
'success' => false,
|
|
|
|
'error' => 'accept_required',
|
|
|
|
'parameter' => '',
|
|
|
|
'statusCode' => 401,
|
|
|
|
]);
|
|
|
|
}
|
|
|
|
|
2016-05-10 17:37:32 +05:30
|
|
|
public function testCompleteActionWithDismissState(FunctionalTester $I) {
|
2017-01-24 04:30:08 +05:30
|
|
|
$I->amAuthenticated();
|
2016-02-14 23:20:10 +05:30
|
|
|
$I->wantTo('get access_denied error if I pass accept in false state');
|
2019-09-06 05:02:57 +05:30
|
|
|
$I->sendPOST('/api/oauth2/v1/complete?' . http_build_query([
|
|
|
|
'client_id' => 'ely',
|
|
|
|
'redirect_uri' => 'http://ely.by',
|
|
|
|
'response_type' => 'code',
|
|
|
|
'scope' => 'minecraft_server_session',
|
|
|
|
]), ['accept' => false]);
|
2016-02-14 23:20:10 +05:30
|
|
|
$I->canSeeResponseCodeIs(401);
|
|
|
|
$I->canSeeResponseContainsJson([
|
|
|
|
'success' => false,
|
|
|
|
'error' => 'access_denied',
|
|
|
|
'parameter' => '',
|
|
|
|
'statusCode' => 401,
|
|
|
|
]);
|
|
|
|
$I->canSeeResponseJsonMatchesJsonPath('$.redirectUri');
|
|
|
|
}
|
|
|
|
|
2019-09-06 05:02:57 +05:30
|
|
|
public function invalidClientId(FunctionalTester $I) {
|
|
|
|
$I->amAuthenticated();
|
2016-02-14 23:20:10 +05:30
|
|
|
$I->wantTo('check behavior on invalid client id');
|
2019-09-06 05:02:57 +05:30
|
|
|
$I->sendPOST('/api/oauth2/v1/complete?' . http_build_query([
|
|
|
|
'client_id' => 'non-exists-client',
|
|
|
|
'redirect_uri' => 'http://some-resource.by',
|
|
|
|
'response_type' => 'code',
|
|
|
|
]));
|
2016-02-14 23:20:10 +05:30
|
|
|
$I->canSeeResponseCodeIs(401);
|
|
|
|
$I->canSeeResponseIsJson();
|
|
|
|
$I->canSeeResponseContainsJson([
|
|
|
|
'success' => false,
|
|
|
|
'error' => 'invalid_client',
|
|
|
|
'statusCode' => 401,
|
|
|
|
]);
|
2019-09-06 05:02:57 +05:30
|
|
|
}
|
2016-02-14 23:20:10 +05:30
|
|
|
|
2019-09-06 05:02:57 +05:30
|
|
|
public function invalidScopes(FunctionalTester $I) {
|
|
|
|
$I->amAuthenticated();
|
2016-02-14 23:20:10 +05:30
|
|
|
$I->wantTo('check behavior on some invalid scopes');
|
2019-09-06 05:02:57 +05:30
|
|
|
$I->sendPOST('/api/oauth2/v1/complete?' . http_build_query([
|
|
|
|
'client_id' => 'ely',
|
|
|
|
'redirect_uri' => 'http://ely.by',
|
|
|
|
'response_type' => 'code',
|
|
|
|
'scope' => 'minecraft_server_session some_wrong_scope',
|
2016-02-14 23:20:10 +05:30
|
|
|
]));
|
|
|
|
$I->canSeeResponseCodeIs(400);
|
|
|
|
$I->canSeeResponseIsJson();
|
|
|
|
$I->canSeeResponseContainsJson([
|
|
|
|
'success' => false,
|
|
|
|
'error' => 'invalid_scope',
|
|
|
|
'parameter' => 'some_wrong_scope',
|
|
|
|
'statusCode' => 400,
|
|
|
|
]);
|
|
|
|
$I->canSeeResponseJsonMatchesJsonPath('$.redirectUri');
|
2019-09-06 05:02:57 +05:30
|
|
|
}
|
2016-12-10 02:12:07 +05:30
|
|
|
|
2019-09-06 05:02:57 +05:30
|
|
|
public function requestInternalScope(FunctionalTester $I) {
|
|
|
|
$I->amAuthenticated();
|
2016-12-10 02:12:07 +05:30
|
|
|
$I->wantTo('check behavior on request internal scope');
|
2019-09-06 05:02:57 +05:30
|
|
|
$I->sendPOST('/api/oauth2/v1/complete?' . http_build_query([
|
|
|
|
'client_id' => 'ely',
|
|
|
|
'redirect_uri' => 'http://ely.by',
|
|
|
|
'response_type' => 'code',
|
|
|
|
'scope' => 'minecraft_server_session block_account',
|
2016-12-10 02:12:07 +05:30
|
|
|
]));
|
|
|
|
$I->canSeeResponseCodeIs(400);
|
|
|
|
$I->canSeeResponseIsJson();
|
|
|
|
$I->canSeeResponseContainsJson([
|
|
|
|
'success' => false,
|
|
|
|
'error' => 'invalid_scope',
|
2019-09-06 05:02:57 +05:30
|
|
|
'parameter' => 'block_account',
|
2016-12-10 02:12:07 +05:30
|
|
|
'statusCode' => 400,
|
|
|
|
]);
|
|
|
|
$I->canSeeResponseJsonMatchesJsonPath('$.redirectUri');
|
2016-02-14 23:20:10 +05:30
|
|
|
}
|
|
|
|
|
|
|
|
}
|