mirror of
https://github.com/elyby/oauth2-server.git
synced 2024-11-26 16:52:04 +05:30
454 lines
20 KiB
PHP
454 lines
20 KiB
PHP
<?php
|
|
|
|
namespace LeagueTests\Grant;
|
|
|
|
use DateInterval;
|
|
use League\OAuth2\Server\CryptKey;
|
|
use League\OAuth2\Server\Entities\AccessTokenEntityInterface;
|
|
use League\OAuth2\Server\Entities\RefreshTokenEntityInterface;
|
|
use League\OAuth2\Server\Grant\RefreshTokenGrant;
|
|
use League\OAuth2\Server\Repositories\AccessTokenRepositoryInterface;
|
|
use League\OAuth2\Server\Repositories\ClientRepositoryInterface;
|
|
use League\OAuth2\Server\Repositories\RefreshTokenRepositoryInterface;
|
|
use League\OAuth2\Server\Repositories\ScopeRepositoryInterface;
|
|
use LeagueTests\Stubs\AccessTokenEntity;
|
|
use LeagueTests\Stubs\ClientEntity;
|
|
use LeagueTests\Stubs\CryptTraitStub;
|
|
use LeagueTests\Stubs\RefreshTokenEntity;
|
|
use LeagueTests\Stubs\ScopeEntity;
|
|
use LeagueTests\Stubs\StubResponseType;
|
|
use PHPUnit\Framework\TestCase;
|
|
use Zend\Diactoros\ServerRequest;
|
|
|
|
class RefreshTokenGrantTest extends TestCase
|
|
{
|
|
/**
|
|
* @var CryptTraitStub
|
|
*/
|
|
protected $cryptStub;
|
|
|
|
public function setUp(): void
|
|
{
|
|
$this->cryptStub = new CryptTraitStub();
|
|
}
|
|
|
|
public function testGetIdentifier()
|
|
{
|
|
$refreshTokenRepositoryMock = $this->getMockBuilder(RefreshTokenRepositoryInterface::class)->getMock();
|
|
|
|
$grant = new RefreshTokenGrant($refreshTokenRepositoryMock);
|
|
$this->assertEquals('refresh_token', $grant->getIdentifier());
|
|
}
|
|
|
|
public function testRespondToRequest()
|
|
{
|
|
$client = new ClientEntity();
|
|
$client->setIdentifier('foo');
|
|
$clientRepositoryMock = $this->getMockBuilder(ClientRepositoryInterface::class)->getMock();
|
|
$clientRepositoryMock->method('getClientEntity')->willReturn($client);
|
|
|
|
$scopeEntity = new ScopeEntity();
|
|
$scopeEntity->setIdentifier('foo');
|
|
$scopeRepositoryMock = $this->getMockBuilder(ScopeRepositoryInterface::class)->getMock();
|
|
$scopeRepositoryMock->method('getScopeEntityByIdentifier')->willReturn($scopeEntity);
|
|
|
|
$accessTokenRepositoryMock = $this->getMockBuilder(AccessTokenRepositoryInterface::class)->getMock();
|
|
$accessTokenRepositoryMock->method('getNewToken')->willReturn(new AccessTokenEntity());
|
|
$accessTokenRepositoryMock->expects($this->once())->method('persistNewAccessToken')->willReturnSelf();
|
|
|
|
$refreshTokenRepositoryMock = $this->getMockBuilder(RefreshTokenRepositoryInterface::class)->getMock();
|
|
$refreshTokenRepositoryMock->method('getNewRefreshToken')->willReturn(new RefreshTokenEntity());
|
|
$refreshTokenRepositoryMock->expects($this->once())->method('persistNewRefreshToken')->willReturnSelf();
|
|
|
|
$grant = new RefreshTokenGrant($refreshTokenRepositoryMock);
|
|
$grant->setClientRepository($clientRepositoryMock);
|
|
$grant->setScopeRepository($scopeRepositoryMock);
|
|
$grant->setAccessTokenRepository($accessTokenRepositoryMock);
|
|
$grant->setEncryptionKey($this->cryptStub->getKey());
|
|
$grant->setPrivateKey(new CryptKey('file://' . __DIR__ . '/../Stubs/private.key'));
|
|
|
|
$oldRefreshToken = $this->cryptStub->doEncrypt(
|
|
json_encode(
|
|
[
|
|
'client_id' => 'foo',
|
|
'refresh_token_id' => 'zyxwvu',
|
|
'access_token_id' => 'abcdef',
|
|
'scopes' => ['foo'],
|
|
'user_id' => 123,
|
|
'expire_time' => time() + 3600,
|
|
]
|
|
)
|
|
);
|
|
|
|
$serverRequest = (new ServerRequest())->withParsedBody([
|
|
'client_id' => 'foo',
|
|
'client_secret' => 'bar',
|
|
'refresh_token' => $oldRefreshToken,
|
|
'scopes' => ['foo'],
|
|
]);
|
|
|
|
$responseType = new StubResponseType();
|
|
$grant->respondToAccessTokenRequest($serverRequest, $responseType, new DateInterval('PT5M'));
|
|
|
|
$this->assertInstanceOf(AccessTokenEntityInterface::class, $responseType->getAccessToken());
|
|
$this->assertInstanceOf(RefreshTokenEntityInterface::class, $responseType->getRefreshToken());
|
|
}
|
|
|
|
public function testRespondToRequestNullRefreshToken()
|
|
{
|
|
$client = new ClientEntity();
|
|
$client->setIdentifier('foo');
|
|
|
|
$clientRepositoryMock = $this->getMockBuilder(ClientRepositoryInterface::class)->getMock();
|
|
$clientRepositoryMock->method('getClientEntity')->willReturn($client);
|
|
|
|
$scopeEntity = new ScopeEntity();
|
|
$scopeEntity->setIdentifier('foo');
|
|
|
|
$scopeRepositoryMock = $this->getMockBuilder(ScopeRepositoryInterface::class)->getMock();
|
|
$scopeRepositoryMock->method('getScopeEntityByIdentifier')->willReturn($scopeEntity);
|
|
|
|
$accessTokenRepositoryMock = $this->getMockBuilder(AccessTokenRepositoryInterface::class)->getMock();
|
|
$accessTokenRepositoryMock->method('getNewToken')->willReturn(new AccessTokenEntity());
|
|
$accessTokenRepositoryMock->expects($this->once())->method('persistNewAccessToken')->willReturnSelf();
|
|
|
|
$refreshTokenRepositoryMock = $this->getMockBuilder(RefreshTokenRepositoryInterface::class)->getMock();
|
|
$refreshTokenRepositoryMock->method('getNewRefreshToken')->willReturn(null);
|
|
$refreshTokenRepositoryMock->expects($this->never())->method('persistNewRefreshToken');
|
|
|
|
$grant = new RefreshTokenGrant($refreshTokenRepositoryMock);
|
|
$grant->setClientRepository($clientRepositoryMock);
|
|
$grant->setScopeRepository($scopeRepositoryMock);
|
|
$grant->setAccessTokenRepository($accessTokenRepositoryMock);
|
|
$grant->setEncryptionKey($this->cryptStub->getKey());
|
|
$grant->setPrivateKey(new CryptKey('file://' . __DIR__ . '/../Stubs/private.key'));
|
|
|
|
$oldRefreshToken = $this->cryptStub->doEncrypt(
|
|
json_encode(
|
|
[
|
|
'client_id' => 'foo',
|
|
'refresh_token_id' => 'zyxwvu',
|
|
'access_token_id' => 'abcdef',
|
|
'scopes' => ['foo'],
|
|
'user_id' => 123,
|
|
'expire_time' => time() + 3600,
|
|
]
|
|
)
|
|
);
|
|
|
|
$serverRequest = (new ServerRequest())->withParsedBody([
|
|
'client_id' => 'foo',
|
|
'client_secret' => 'bar',
|
|
'refresh_token' => $oldRefreshToken,
|
|
'scopes' => ['foo'],
|
|
]);
|
|
|
|
$responseType = new StubResponseType();
|
|
$grant->respondToAccessTokenRequest($serverRequest, $responseType, new \DateInterval('PT5M'));
|
|
|
|
$this->assertInstanceOf(AccessTokenEntityInterface::class, $responseType->getAccessToken());
|
|
$this->assertNull($responseType->getRefreshToken());
|
|
}
|
|
|
|
public function testRespondToReducedScopes()
|
|
{
|
|
$client = new ClientEntity();
|
|
$client->setIdentifier('foo');
|
|
$clientRepositoryMock = $this->getMockBuilder(ClientRepositoryInterface::class)->getMock();
|
|
$clientRepositoryMock->method('getClientEntity')->willReturn($client);
|
|
|
|
$accessTokenRepositoryMock = $this->getMockBuilder(AccessTokenRepositoryInterface::class)->getMock();
|
|
$accessTokenRepositoryMock->method('getNewToken')->willReturn(new AccessTokenEntity());
|
|
$accessTokenRepositoryMock->method('persistNewAccessToken')->willReturnSelf();
|
|
|
|
$refreshTokenRepositoryMock = $this->getMockBuilder(RefreshTokenRepositoryInterface::class)->getMock();
|
|
$refreshTokenRepositoryMock->method('persistNewRefreshToken')->willReturnSelf();
|
|
$refreshTokenRepositoryMock->method('getNewRefreshToken')->willReturn(new RefreshTokenEntity());
|
|
|
|
$scope = new ScopeEntity();
|
|
$scope->setIdentifier('foo');
|
|
$scopeRepositoryMock = $this->getMockBuilder(ScopeRepositoryInterface::class)->getMock();
|
|
$scopeRepositoryMock->method('getScopeEntityByIdentifier')->willReturn($scope);
|
|
|
|
$grant = new RefreshTokenGrant($refreshTokenRepositoryMock);
|
|
$grant->setClientRepository($clientRepositoryMock);
|
|
$grant->setAccessTokenRepository($accessTokenRepositoryMock);
|
|
$grant->setScopeRepository($scopeRepositoryMock);
|
|
$grant->setEncryptionKey($this->cryptStub->getKey());
|
|
$grant->setPrivateKey(new CryptKey('file://' . __DIR__ . '/../Stubs/private.key'));
|
|
|
|
$oldRefreshToken = $this->cryptStub->doEncrypt(
|
|
json_encode(
|
|
[
|
|
'client_id' => 'foo',
|
|
'refresh_token_id' => 'zyxwvu',
|
|
'access_token_id' => 'abcdef',
|
|
'scopes' => ['foo', 'bar'],
|
|
'user_id' => 123,
|
|
'expire_time' => time() + 3600,
|
|
]
|
|
)
|
|
);
|
|
|
|
$serverRequest = (new ServerRequest())->withParsedBody([
|
|
'client_id' => 'foo',
|
|
'client_secret' => 'bar',
|
|
'refresh_token' => $oldRefreshToken,
|
|
'scope' => 'foo',
|
|
]);
|
|
|
|
$responseType = new StubResponseType();
|
|
$grant->respondToAccessTokenRequest($serverRequest, $responseType, new DateInterval('PT5M'));
|
|
|
|
$this->assertInstanceOf(AccessTokenEntityInterface::class, $responseType->getAccessToken());
|
|
$this->assertInstanceOf(RefreshTokenEntityInterface::class, $responseType->getRefreshToken());
|
|
}
|
|
|
|
public function testRespondToUnexpectedScope()
|
|
{
|
|
$client = new ClientEntity();
|
|
$client->setIdentifier('foo');
|
|
$clientRepositoryMock = $this->getMockBuilder(ClientRepositoryInterface::class)->getMock();
|
|
$clientRepositoryMock->method('getClientEntity')->willReturn($client);
|
|
|
|
$accessTokenRepositoryMock = $this->getMockBuilder(AccessTokenRepositoryInterface::class)->getMock();
|
|
$accessTokenRepositoryMock->method('persistNewAccessToken')->willReturnSelf();
|
|
|
|
$refreshTokenRepositoryMock = $this->getMockBuilder(RefreshTokenRepositoryInterface::class)->getMock();
|
|
$refreshTokenRepositoryMock->method('persistNewRefreshToken')->willReturnSelf();
|
|
|
|
$scope = new ScopeEntity();
|
|
$scope->setIdentifier('foobar');
|
|
$scopeRepositoryMock = $this->getMockBuilder(ScopeRepositoryInterface::class)->getMock();
|
|
$scopeRepositoryMock->method('getScopeEntityByIdentifier')->willReturn($scope);
|
|
|
|
$grant = new RefreshTokenGrant($refreshTokenRepositoryMock);
|
|
$grant->setClientRepository($clientRepositoryMock);
|
|
$grant->setAccessTokenRepository($accessTokenRepositoryMock);
|
|
$grant->setScopeRepository($scopeRepositoryMock);
|
|
$grant->setEncryptionKey($this->cryptStub->getKey());
|
|
$grant->setPrivateKey(new CryptKey('file://' . __DIR__ . '/../Stubs/private.key'));
|
|
|
|
$oldRefreshToken = $this->cryptStub->doEncrypt(
|
|
json_encode(
|
|
[
|
|
'client_id' => 'foo',
|
|
'refresh_token_id' => 'zyxwvu',
|
|
'access_token_id' => 'abcdef',
|
|
'scopes' => ['foo', 'bar'],
|
|
'user_id' => 123,
|
|
'expire_time' => time() + 3600,
|
|
]
|
|
)
|
|
);
|
|
|
|
$serverRequest = (new ServerRequest())->withParsedBody([
|
|
'client_id' => 'foo',
|
|
'client_secret' => 'bar',
|
|
'refresh_token' => $oldRefreshToken,
|
|
'scope' => 'foobar',
|
|
]);
|
|
|
|
$responseType = new StubResponseType();
|
|
|
|
$this->expectException(\League\OAuth2\Server\Exception\OAuthServerException::class);
|
|
$this->expectExceptionCode(5);
|
|
|
|
$grant->respondToAccessTokenRequest($serverRequest, $responseType, new DateInterval('PT5M'));
|
|
}
|
|
|
|
public function testRespondToRequestMissingOldToken()
|
|
{
|
|
$client = new ClientEntity();
|
|
$client->setIdentifier('foo');
|
|
$clientRepositoryMock = $this->getMockBuilder(ClientRepositoryInterface::class)->getMock();
|
|
$clientRepositoryMock->method('getClientEntity')->willReturn($client);
|
|
|
|
$accessTokenRepositoryMock = $this->getMockBuilder(AccessTokenRepositoryInterface::class)->getMock();
|
|
$refreshTokenRepositoryMock = $this->getMockBuilder(RefreshTokenRepositoryInterface::class)->getMock();
|
|
|
|
$grant = new RefreshTokenGrant($refreshTokenRepositoryMock);
|
|
$grant->setClientRepository($clientRepositoryMock);
|
|
$grant->setAccessTokenRepository($accessTokenRepositoryMock);
|
|
$grant->setEncryptionKey($this->cryptStub->getKey());
|
|
$grant->setPrivateKey(new CryptKey('file://' . __DIR__ . '/../Stubs/private.key'));
|
|
|
|
$serverRequest = (new ServerRequest())->withParsedBody([
|
|
'client_id' => 'foo',
|
|
'client_secret' => 'bar',
|
|
]);
|
|
|
|
$responseType = new StubResponseType();
|
|
|
|
$this->expectException(\League\OAuth2\Server\Exception\OAuthServerException::class);
|
|
$this->expectExceptionCode(3);
|
|
|
|
$grant->respondToAccessTokenRequest($serverRequest, $responseType, new DateInterval('PT5M'));
|
|
}
|
|
|
|
public function testRespondToRequestInvalidOldToken()
|
|
{
|
|
$client = new ClientEntity();
|
|
$client->setIdentifier('foo');
|
|
$clientRepositoryMock = $this->getMockBuilder(ClientRepositoryInterface::class)->getMock();
|
|
$clientRepositoryMock->method('getClientEntity')->willReturn($client);
|
|
|
|
$accessTokenRepositoryMock = $this->getMockBuilder(AccessTokenRepositoryInterface::class)->getMock();
|
|
$refreshTokenRepositoryMock = $this->getMockBuilder(RefreshTokenRepositoryInterface::class)->getMock();
|
|
|
|
$grant = new RefreshTokenGrant($refreshTokenRepositoryMock);
|
|
$grant->setClientRepository($clientRepositoryMock);
|
|
$grant->setAccessTokenRepository($accessTokenRepositoryMock);
|
|
$grant->setEncryptionKey($this->cryptStub->getKey());
|
|
$grant->setPrivateKey(new CryptKey('file://' . __DIR__ . '/../Stubs/private.key'));
|
|
|
|
$oldRefreshToken = 'foobar';
|
|
|
|
$serverRequest = (new ServerRequest())->withParsedBody([
|
|
'client_id' => 'foo',
|
|
'client_secret' => 'bar',
|
|
'refresh_token' => $oldRefreshToken,
|
|
]);
|
|
|
|
$responseType = new StubResponseType();
|
|
|
|
$this->expectException(\League\OAuth2\Server\Exception\OAuthServerException::class);
|
|
$this->expectExceptionCode(8);
|
|
|
|
$grant->respondToAccessTokenRequest($serverRequest, $responseType, new DateInterval('PT5M'));
|
|
}
|
|
|
|
public function testRespondToRequestClientMismatch()
|
|
{
|
|
$client = new ClientEntity();
|
|
$client->setIdentifier('foo');
|
|
$clientRepositoryMock = $this->getMockBuilder(ClientRepositoryInterface::class)->getMock();
|
|
$clientRepositoryMock->method('getClientEntity')->willReturn($client);
|
|
|
|
$accessTokenRepositoryMock = $this->getMockBuilder(AccessTokenRepositoryInterface::class)->getMock();
|
|
$accessTokenRepositoryMock->method('persistNewAccessToken')->willReturnSelf();
|
|
|
|
$refreshTokenRepositoryMock = $this->getMockBuilder(RefreshTokenRepositoryInterface::class)->getMock();
|
|
$refreshTokenRepositoryMock->method('persistNewRefreshToken')->willReturnSelf();
|
|
|
|
$grant = new RefreshTokenGrant($refreshTokenRepositoryMock);
|
|
$grant->setClientRepository($clientRepositoryMock);
|
|
$grant->setAccessTokenRepository($accessTokenRepositoryMock);
|
|
$grant->setEncryptionKey($this->cryptStub->getKey());
|
|
$grant->setPrivateKey(new CryptKey('file://' . __DIR__ . '/../Stubs/private.key'));
|
|
|
|
$oldRefreshToken = $this->cryptStub->doEncrypt(
|
|
json_encode(
|
|
[
|
|
'client_id' => 'bar',
|
|
'refresh_token_id' => 'zyxwvu',
|
|
'access_token_id' => 'abcdef',
|
|
'scopes' => ['foo'],
|
|
'user_id' => 123,
|
|
'expire_time' => time() + 3600,
|
|
]
|
|
)
|
|
);
|
|
|
|
$serverRequest = (new ServerRequest())->withParsedBody([
|
|
'client_id' => 'foo',
|
|
'client_secret' => 'bar',
|
|
'refresh_token' => $oldRefreshToken,
|
|
]);
|
|
|
|
$responseType = new StubResponseType();
|
|
|
|
$this->expectException(\League\OAuth2\Server\Exception\OAuthServerException::class);
|
|
$this->expectExceptionCode(8);
|
|
|
|
$grant->respondToAccessTokenRequest($serverRequest, $responseType, new DateInterval('PT5M'));
|
|
}
|
|
|
|
public function testRespondToRequestExpiredToken()
|
|
{
|
|
$client = new ClientEntity();
|
|
$client->setIdentifier('foo');
|
|
$clientRepositoryMock = $this->getMockBuilder(ClientRepositoryInterface::class)->getMock();
|
|
$clientRepositoryMock->method('getClientEntity')->willReturn($client);
|
|
|
|
$accessTokenRepositoryMock = $this->getMockBuilder(AccessTokenRepositoryInterface::class)->getMock();
|
|
$refreshTokenRepositoryMock = $this->getMockBuilder(RefreshTokenRepositoryInterface::class)->getMock();
|
|
|
|
$grant = new RefreshTokenGrant($refreshTokenRepositoryMock);
|
|
$grant->setClientRepository($clientRepositoryMock);
|
|
$grant->setAccessTokenRepository($accessTokenRepositoryMock);
|
|
$grant->setEncryptionKey($this->cryptStub->getKey());
|
|
$grant->setPrivateKey(new CryptKey('file://' . __DIR__ . '/../Stubs/private.key'));
|
|
|
|
$oldRefreshToken = $this->cryptStub->doEncrypt(
|
|
json_encode(
|
|
[
|
|
'client_id' => 'foo',
|
|
'refresh_token_id' => 'zyxwvu',
|
|
'access_token_id' => 'abcdef',
|
|
'scopes' => ['foo'],
|
|
'user_id' => 123,
|
|
'expire_time' => time() - 3600,
|
|
]
|
|
)
|
|
);
|
|
|
|
$serverRequest = (new ServerRequest())->withParsedBody([
|
|
'client_id' => 'foo',
|
|
'client_secret' => 'bar',
|
|
'refresh_token' => $oldRefreshToken,
|
|
]);
|
|
|
|
$responseType = new StubResponseType();
|
|
|
|
$this->expectException(\League\OAuth2\Server\Exception\OAuthServerException::class);
|
|
$this->expectExceptionCode(8);
|
|
|
|
$grant->respondToAccessTokenRequest($serverRequest, $responseType, new DateInterval('PT5M'));
|
|
}
|
|
|
|
public function testRespondToRequestRevokedToken()
|
|
{
|
|
$client = new ClientEntity();
|
|
$client->setIdentifier('foo');
|
|
$clientRepositoryMock = $this->getMockBuilder(ClientRepositoryInterface::class)->getMock();
|
|
$clientRepositoryMock->method('getClientEntity')->willReturn($client);
|
|
|
|
$accessTokenRepositoryMock = $this->getMockBuilder(AccessTokenRepositoryInterface::class)->getMock();
|
|
$refreshTokenRepositoryMock = $this->getMockBuilder(RefreshTokenRepositoryInterface::class)->getMock();
|
|
$refreshTokenRepositoryMock->method('isRefreshTokenRevoked')->willReturn(true);
|
|
|
|
$grant = new RefreshTokenGrant($refreshTokenRepositoryMock);
|
|
$grant->setClientRepository($clientRepositoryMock);
|
|
$grant->setAccessTokenRepository($accessTokenRepositoryMock);
|
|
$grant->setEncryptionKey($this->cryptStub->getKey());
|
|
$grant->setPrivateKey(new CryptKey('file://' . __DIR__ . '/../Stubs/private.key'));
|
|
|
|
$oldRefreshToken = $this->cryptStub->doEncrypt(
|
|
json_encode(
|
|
[
|
|
'client_id' => 'foo',
|
|
'refresh_token_id' => 'zyxwvu',
|
|
'access_token_id' => 'abcdef',
|
|
'scopes' => ['foo'],
|
|
'user_id' => 123,
|
|
'expire_time' => time() + 3600,
|
|
]
|
|
)
|
|
);
|
|
|
|
$serverRequest = (new ServerRequest())->withParsedBody([
|
|
'client_id' => 'foo',
|
|
'client_secret' => 'bar',
|
|
'refresh_token' => $oldRefreshToken,
|
|
]);
|
|
|
|
$responseType = new StubResponseType();
|
|
|
|
$this->expectException(\League\OAuth2\Server\Exception\OAuthServerException::class);
|
|
$this->expectExceptionCode(8);
|
|
|
|
$grant->respondToAccessTokenRequest($serverRequest, $responseType, new DateInterval('PT5M'));
|
|
}
|
|
}
|