oauth2-server/tests/resource/ResourceServerTest.php

227 lines
6.9 KiB
PHP
Raw Normal View History

2013-02-05 21:50:56 +05:30
<?php
use \Mockery as m;
class Resource_Server_test extends PHPUnit_Framework_TestCase
{
private $session;
2013-02-05 21:50:56 +05:30
public function setUp()
{
$this->session = M::mock('League\OAuth2\Server\Storage\SessionInterface');
}
2013-02-05 21:50:56 +05:30
private function returnDefault()
{
return new League\OAuth2\Server\Resource($this->session);
}
2013-02-05 21:50:56 +05:30
public function test_setRequest()
2013-02-05 21:50:56 +05:30
{
$s = $this->returnDefault();
$request = new League\OAuth2\Server\Util\Request();
2013-02-05 21:50:56 +05:30
$s->setRequest($request);
$reflector = new ReflectionClass($s);
$requestProperty = $reflector->getProperty('request');
$requestProperty->setAccessible(true);
$v = $requestProperty->getValue($s);
$this->assertTrue($v instanceof League\OAuth2\Server\Util\RequestInterface);
2013-02-05 21:50:56 +05:30
}
public function test_getRequest()
{
$s = $this->returnDefault();
$request = new League\OAuth2\Server\Util\Request();
2013-02-05 21:50:56 +05:30
$s->setRequest($request);
$v = $s->getRequest();
$this->assertTrue($v instanceof League\OAuth2\Server\Util\RequestInterface);
2013-02-05 21:50:56 +05:30
}
public function test_getTokenKey()
{
$s = $this->returnDefault();
$this->assertEquals('access_token', $s->getTokenKey());
2013-02-05 21:50:56 +05:30
}
public function test_setTokenKey()
{
$s = $this->returnDefault();
$s->setTokenKey('oauth_token');
2013-02-05 21:50:56 +05:30
$reflector = new ReflectionClass($s);
$requestProperty = $reflector->getProperty('tokenKey');
$requestProperty->setAccessible(true);
$v = $requestProperty->getValue($s);
$this->assertEquals('oauth_token', $v);
2013-02-05 21:50:56 +05:30
}
2013-05-06 23:39:36 +05:30
public function test_getScopes()
{
$s = $this->returnDefault();
$this->assertEquals(array(), $s->getScopes());
}
2013-02-05 21:50:56 +05:30
/**
* @expectedException League\OAuth2\Server\Exception\InvalidAccessTokenException
2013-02-05 21:50:56 +05:30
*/
public function test_determineAccessToken_missingToken()
{
$_SERVER['HTTP_AUTHORIZATION'] = 'Bearer';
$request = new League\OAuth2\Server\Util\Request(array(), array(), array(), array(), $_SERVER);
2013-02-05 21:50:56 +05:30
$s = $this->returnDefault();
$s->setRequest($request);
2013-02-05 21:50:56 +05:30
$reflector = new ReflectionClass($s);
$method = $reflector->getMethod('determineAccessToken');
$method->setAccessible(true);
2013-02-05 21:50:56 +05:30
$method->invoke($s);
2013-02-05 21:50:56 +05:30
}
/**
* @expectedException League\OAuth2\Server\Exception\InvalidAccessTokenException
*/
public function test_determineAccessToken_brokenCurlRequest()
{
$_SERVER['HTTP_AUTHORIZATION'] = 'Bearer, Bearer abcdef';
$request = new League\OAuth2\Server\Util\Request(array(), array(), array(), array(), $_SERVER);
$s = $this->returnDefault();
$s->setRequest($request);
$reflector = new ReflectionClass($s);
$method = $reflector->getMethod('determineAccessToken');
$method->setAccessible(true);
$method->invoke($s);
}
2013-02-05 21:50:56 +05:30
public function test_determineAccessToken_fromHeader()
{
$request = new League\OAuth2\Server\Util\Request();
2013-02-05 21:50:56 +05:30
2013-02-08 17:10:33 +05:30
$requestReflector = new ReflectionClass($request);
$param = $requestReflector->getProperty('headers');
$param->setAccessible(true);
$param->setValue($request, array(
2013-03-22 16:07:01 +05:30
'Authorization' => 'Bearer abcdef'
2013-02-08 17:10:33 +05:30
));
$s = $this->returnDefault();
$s->setRequest($request);
2013-02-05 21:50:56 +05:30
$reflector = new ReflectionClass($s);
2013-02-08 17:10:33 +05:30
$method = $reflector->getMethod('determineAccessToken');
$method->setAccessible(true);
2013-02-05 21:50:56 +05:30
$result = $method->invoke($s);
2013-02-05 21:50:56 +05:30
$this->assertEquals('abcdef', $result);
2013-02-05 21:50:56 +05:30
}
public function test_determineAccessToken_fromBrokenCurlHeader()
{
$request = new League\OAuth2\Server\Util\Request();
$requestReflector = new ReflectionClass($request);
$param = $requestReflector->getProperty('headers');
$param->setAccessible(true);
$param->setValue($request, array(
'Authorization' => 'Bearer abcdef, Bearer abcdef'
));
$s = $this->returnDefault();
$s->setRequest($request);
$reflector = new ReflectionClass($s);
$method = $reflector->getMethod('determineAccessToken');
$method->setAccessible(true);
$result = $method->invoke($s);
$this->assertEquals('abcdef', $result);
}
2013-02-05 21:50:56 +05:30
public function test_determineAccessToken_fromMethod()
{
$s = $this->returnDefault();
2013-02-05 21:50:56 +05:30
$_GET[$s->getTokenKey()] = 'abcdef';
$_SERVER['REQUEST_METHOD'] = 'get';
2013-02-05 21:50:56 +05:30
$request = new League\OAuth2\Server\Util\Request($_GET, array(), array(), array(), $_SERVER);
$s->setRequest($request);
2013-02-05 21:50:56 +05:30
$reflector = new ReflectionClass($s);
$method = $reflector->getMethod('determineAccessToken');
$method->setAccessible(true);
2013-02-05 21:50:56 +05:30
$result = $method->invoke($s);
2013-02-05 21:50:56 +05:30
$this->assertEquals('abcdef', $result);
2013-02-05 21:50:56 +05:30
}
/**
* @expectedException League\OAuth2\Server\Exception\InvalidAccessTokenException
*/
2013-02-05 21:50:56 +05:30
public function test_isValid_notValid()
{
$this->session->shouldReceive('validateAccessToken')->andReturn(false);
2013-02-05 21:50:56 +05:30
$request = new League\OAuth2\Server\Util\Request();
2013-02-08 17:10:33 +05:30
$requestReflector = new ReflectionClass($request);
$param = $requestReflector->getProperty('headers');
$param->setAccessible(true);
$param->setValue($request, array(
2013-03-22 16:07:01 +05:30
'Authorization' => 'Bearer abcdef'
2013-02-08 17:10:33 +05:30
));
$s = $this->returnDefault();
$s->setRequest($request);
2013-02-05 21:50:56 +05:30
$s->isValid();
2013-02-05 21:50:56 +05:30
}
public function test_isValid_valid()
{
$this->session->shouldReceive('validateAccessToken')->andReturn(array(
'session_id' => 1,
'owner_type' => 'user',
'owner_id' => 123,
2013-05-06 22:58:49 +05:30
'client_id' => 'testapp'
));
2013-05-06 22:58:49 +05:30
$this->session->shouldReceive('getScopes')->andReturn(array(
2013-05-28 00:08:07 +05:30
array('scope' => 'foo'),
array('scope' => 'bar')
2013-05-06 22:58:49 +05:30
));
2013-02-05 21:50:56 +05:30
$request = new League\OAuth2\Server\Util\Request();
2013-02-08 17:10:33 +05:30
$requestReflector = new ReflectionClass($request);
$param = $requestReflector->getProperty('headers');
$param->setAccessible(true);
$param->setValue($request, array(
2013-03-22 16:07:01 +05:30
'Authorization' => 'Bearer abcdef'
2013-02-08 17:10:33 +05:30
));
2013-05-06 22:58:49 +05:30
2013-02-08 17:10:33 +05:30
$s = $this->returnDefault();
$s->setRequest($request);
2013-02-05 21:50:56 +05:30
$this->assertTrue($s->isValid());
$this->assertEquals(123, $s->getOwnerId());
$this->assertEquals('user', $s->getOwnerType());
$this->assertEquals('abcdef', $s->getAccessToken());
2013-05-09 06:42:18 +05:30
$this->assertEquals('testapp', $s->getClientId());
$this->assertTrue($s->hasScope('foo'));
$this->assertTrue($s->hasScope('bar'));
$this->assertTrue($s->hasScope(array('foo', 'bar')));
$this->assertFalse($s->hasScope(array('foobar')));
$this->assertFalse($s->hasScope('foobar'));
$this->assertFalse($s->hasScope(new StdClass));
2013-02-05 21:50:56 +05:30
}
}