mirror of
https://github.com/elyby/accounts.git
synced 2024-12-13 08:59:01 +05:30
97 lines
2.8 KiB
PHP
97 lines
2.8 KiB
PHP
<?php
|
|
namespace tests\codeception\api;
|
|
|
|
use common\models\OauthScope as S;
|
|
use tests\codeception\api\_pages\OauthRoute;
|
|
use tests\codeception\api\functional\_steps\OauthSteps;
|
|
|
|
class OauthAccessTokenCest {
|
|
|
|
/**
|
|
* @var OauthRoute
|
|
*/
|
|
private $route;
|
|
|
|
public function _before(FunctionalTester $I) {
|
|
$this->route = new OauthRoute($I);
|
|
}
|
|
|
|
public function testIssueTokenWithWrongArgs(FunctionalTester $I) {
|
|
$I->wantTo('check behavior on on request without any credentials');
|
|
$this->route->issueToken();
|
|
$I->canSeeResponseCodeIs(400);
|
|
$I->canSeeResponseContainsJson([
|
|
'error' => 'invalid_request',
|
|
]);
|
|
|
|
$I->wantTo('check behavior on passing invalid auth code');
|
|
$this->route->issueToken($this->buildParams(
|
|
'wrong-auth-code',
|
|
'ely',
|
|
'ZuM1vGchJz-9_UZ5HC3H3Z9Hg5PzdbkM',
|
|
'http://ely.by'
|
|
));
|
|
$I->canSeeResponseCodeIs(400);
|
|
$I->canSeeResponseContainsJson([
|
|
'error' => 'invalid_request',
|
|
]);
|
|
}
|
|
|
|
public function testIssueToken(OauthSteps $I) {
|
|
$authCode = $I->getAuthCode();
|
|
$this->route->issueToken($this->buildParams(
|
|
$authCode,
|
|
'ely',
|
|
'ZuM1vGchJz-9_UZ5HC3H3Z9Hg5PzdbkM',
|
|
'http://ely.by'
|
|
));
|
|
$I->canSeeResponseCodeIs(200);
|
|
$I->canSeeResponseIsJson();
|
|
$I->canSeeResponseContainsJson([
|
|
'token_type' => 'Bearer',
|
|
]);
|
|
$I->canSeeResponseJsonMatchesJsonPath('$.access_token');
|
|
$I->canSeeResponseJsonMatchesJsonPath('$.expires_in');
|
|
}
|
|
|
|
public function testIssueTokenWithRefreshToken(OauthSteps $I) {
|
|
$authCode = $I->getAuthCode([S::OFFLINE_ACCESS]);
|
|
$this->route->issueToken($this->buildParams(
|
|
$authCode,
|
|
'ely',
|
|
'ZuM1vGchJz-9_UZ5HC3H3Z9Hg5PzdbkM',
|
|
'http://ely.by'
|
|
));
|
|
$I->canSeeResponseCodeIs(200);
|
|
$I->canSeeResponseIsJson();
|
|
$I->canSeeResponseContainsJson([
|
|
'token_type' => 'Bearer',
|
|
]);
|
|
$I->canSeeResponseJsonMatchesJsonPath('$.access_token');
|
|
$I->canSeeResponseJsonMatchesJsonPath('$.refresh_token');
|
|
$I->canSeeResponseJsonMatchesJsonPath('$.expires_in');
|
|
}
|
|
|
|
private function buildParams($code = null, $clientId = null, $clientSecret = null, $redirectUri = null) {
|
|
$params = ['grant_type' => 'authorization_code'];
|
|
if ($code !== null) {
|
|
$params['code'] = $code;
|
|
}
|
|
|
|
if ($clientId !== null) {
|
|
$params['client_id'] = $clientId;
|
|
}
|
|
|
|
if ($clientSecret !== null) {
|
|
$params['client_secret'] = $clientSecret;
|
|
}
|
|
|
|
if ($redirectUri !== null) {
|
|
$params['redirect_uri'] = $redirectUri;
|
|
}
|
|
|
|
return $params;
|
|
}
|
|
|
|
}
|