mirror of
https://github.com/elyby/accounts.git
synced 2024-12-13 00:49:08 +05:30
125 lines
3.8 KiB
PHP
125 lines
3.8 KiB
PHP
<?php
|
|
namespace api\tests\functional\oauth;
|
|
|
|
use api\components\OAuth2\Storage\ScopeStorage as S;
|
|
use api\rbac\Permissions as P;
|
|
use api\tests\_pages\OauthRoute;
|
|
use api\tests\functional\_steps\OauthSteps;
|
|
use api\tests\FunctionalTester;
|
|
|
|
class RefreshTokenCest {
|
|
|
|
/**
|
|
* @var OauthRoute
|
|
*/
|
|
private $route;
|
|
|
|
public function _before(FunctionalTester $I) {
|
|
$this->route = new OauthRoute($I);
|
|
}
|
|
|
|
public function testInvalidRefreshToken(OauthSteps $I) {
|
|
$this->route->issueToken($this->buildParams(
|
|
'some-invalid-refresh-token',
|
|
'ely',
|
|
'ZuM1vGchJz-9_UZ5HC3H3Z9Hg5PzdbkM'
|
|
));
|
|
$I->canSeeResponseContainsJson([
|
|
'error' => 'invalid_request',
|
|
'message' => 'The refresh token is invalid.',
|
|
]);
|
|
}
|
|
|
|
public function testRefreshToken(OauthSteps $I) {
|
|
$refreshToken = $I->getRefreshToken();
|
|
$this->route->issueToken($this->buildParams(
|
|
$refreshToken,
|
|
'ely',
|
|
'ZuM1vGchJz-9_UZ5HC3H3Z9Hg5PzdbkM'
|
|
));
|
|
$this->canSeeRefreshTokenSuccess($I);
|
|
}
|
|
|
|
public function testRefreshTokenWithSameScopes(OauthSteps $I) {
|
|
$refreshToken = $I->getRefreshToken([P::MINECRAFT_SERVER_SESSION]);
|
|
$this->route->issueToken($this->buildParams(
|
|
$refreshToken,
|
|
'ely',
|
|
'ZuM1vGchJz-9_UZ5HC3H3Z9Hg5PzdbkM',
|
|
[P::MINECRAFT_SERVER_SESSION, S::OFFLINE_ACCESS]
|
|
));
|
|
$this->canSeeRefreshTokenSuccess($I);
|
|
}
|
|
|
|
public function testRefreshTokenTwice(OauthSteps $I) {
|
|
$refreshToken = $I->getRefreshToken([P::MINECRAFT_SERVER_SESSION]);
|
|
$this->route->issueToken($this->buildParams(
|
|
$refreshToken,
|
|
'ely',
|
|
'ZuM1vGchJz-9_UZ5HC3H3Z9Hg5PzdbkM',
|
|
[P::MINECRAFT_SERVER_SESSION, S::OFFLINE_ACCESS]
|
|
));
|
|
$this->canSeeRefreshTokenSuccess($I);
|
|
|
|
$this->route->issueToken($this->buildParams(
|
|
$refreshToken,
|
|
'ely',
|
|
'ZuM1vGchJz-9_UZ5HC3H3Z9Hg5PzdbkM',
|
|
[P::MINECRAFT_SERVER_SESSION, S::OFFLINE_ACCESS]
|
|
));
|
|
$this->canSeeRefreshTokenSuccess($I);
|
|
}
|
|
|
|
public function testRefreshTokenWithNewScopes(OauthSteps $I) {
|
|
$refreshToken = $I->getRefreshToken([P::MINECRAFT_SERVER_SESSION]);
|
|
$this->route->issueToken($this->buildParams(
|
|
$refreshToken,
|
|
'ely',
|
|
'ZuM1vGchJz-9_UZ5HC3H3Z9Hg5PzdbkM',
|
|
[P::MINECRAFT_SERVER_SESSION, S::OFFLINE_ACCESS, 'account_email']
|
|
));
|
|
$I->canSeeResponseCodeIs(400);
|
|
$I->canSeeResponseIsJson();
|
|
$I->canSeeResponseContainsJson([
|
|
'error' => 'invalid_scope',
|
|
]);
|
|
}
|
|
|
|
private function buildParams($refreshToken = null, $clientId = null, $clientSecret = null, $scopes = []) {
|
|
$params = ['grant_type' => 'refresh_token'];
|
|
if ($refreshToken !== null) {
|
|
$params['refresh_token'] = $refreshToken;
|
|
}
|
|
|
|
if ($clientId !== null) {
|
|
$params['client_id'] = $clientId;
|
|
}
|
|
|
|
if ($clientSecret !== null) {
|
|
$params['client_secret'] = $clientSecret;
|
|
}
|
|
|
|
if (!empty($scopes)) {
|
|
if (is_array($scopes)) {
|
|
$scopes = implode(',', $scopes);
|
|
}
|
|
|
|
$params['scope'] = $scopes;
|
|
}
|
|
|
|
return $params;
|
|
}
|
|
|
|
private function canSeeRefreshTokenSuccess(OauthSteps $I) {
|
|
$I->canSeeResponseCodeIs(200);
|
|
$I->canSeeResponseIsJson();
|
|
$I->canSeeResponseContainsJson([
|
|
'token_type' => 'Bearer',
|
|
]);
|
|
$I->canSeeResponseJsonMatchesJsonPath('$.access_token');
|
|
$I->canSeeResponseJsonMatchesJsonPath('$.expires_in');
|
|
$I->cantSeeResponseJsonMatchesJsonPath('$.refresh_token');
|
|
}
|
|
|
|
}
|