oauth2-server/tests/resource/ResourceServerTest.php

<?php

use \Mockery as m;

class Resource_Server_test extends PHPUnit_Framework_TestCase
{
    private $session;

    public function setUp()
    {
        $this->session = M::mock('League\OAuth2\Server\Storage\SessionInterface');
    }

    private function returnDefault()
    {
        return new League\OAuth2\Server\Resource($this->session);
    }

    public function test_setRequest()
    {
        $s = $this->returnDefault();
        $request = new League\OAuth2\Server\Util\Request();
        $s->setRequest($request);

        $reflector = new ReflectionClass($s);
        $requestProperty = $reflector->getProperty('request');
        $requestProperty->setAccessible(true);
        $v = $requestProperty->getValue($s);

        $this->assertTrue($v instanceof League\OAuth2\Server\Util\RequestInterface);
    }

    public function test_getRequest()
    {
        $s = $this->returnDefault();
        $request = new League\OAuth2\Server\Util\Request();
        $s->setRequest($request);
        $v = $s->getRequest();

        $this->assertTrue($v instanceof League\OAuth2\Server\Util\RequestInterface);
    }

    public function test_getTokenKey()
    {
        $s = $this->returnDefault();
        $this->assertEquals('access_token', $s->getTokenKey());
    }

    public function test_setTokenKey()
    {
        $s = $this->returnDefault();
           $s->setTokenKey('oauth_token');

        $reflector = new ReflectionClass($s);
        $requestProperty = $reflector->getProperty('tokenKey');
        $requestProperty->setAccessible(true);
        $v = $requestProperty->getValue($s);

        $this->assertEquals('oauth_token', $v);
    }

    public function test_getScopes()
    {
        $s = $this->returnDefault();
        $this->assertEquals(array(), $s->getScopes());
    }

    /**
     * @expectedException League\OAuth2\Server\Exception\InvalidAccessTokenException
     */
    public function test_determineAccessToken_missingToken()
    {
        $_SERVER['HTTP_AUTHORIZATION'] = 'Bearer';
           $request = new League\OAuth2\Server\Util\Request(array(), array(), array(), array(), $_SERVER);

        $s = $this->returnDefault();
        $s->setRequest($request);

        $reflector = new ReflectionClass($s);
        $method = $reflector->getMethod('determineAccessToken');
        $method->setAccessible(true);

        $method->invoke($s);
    }

    /**
     * @expectedException League\OAuth2\Server\Exception\InvalidAccessTokenException
     */
    public function test_determineAccessToken_brokenCurlRequest()
    {
        $_SERVER['HTTP_AUTHORIZATION'] = 'Bearer, Bearer abcdef';
        $request = new League\OAuth2\Server\Util\Request(array(), array(), array(), array(), $_SERVER);

        $s = $this->returnDefault();
        $s->setRequest($request);

        $reflector = new ReflectionClass($s);
        $method = $reflector->getMethod('determineAccessToken');
        $method->setAccessible(true);

        $method->invoke($s);
    }

    public function test_determineAccessToken_fromHeader()
    {
        $request = new League\OAuth2\Server\Util\Request();

        $requestReflector = new ReflectionClass($request);
        $param = $requestReflector->getProperty('headers');
        $param->setAccessible(true);
        $param->setValue($request, array(
            'Authorization' =>  'Bearer abcdef'
        ));
        $s = $this->returnDefault();
        $s->setRequest($request);

        $reflector = new ReflectionClass($s);

        $method = $reflector->getMethod('determineAccessToken');
        $method->setAccessible(true);

        $result = $method->invoke($s);

        $this->assertEquals('abcdef', $result);
    }

    public function test_determineAccessToken_fromBrokenCurlHeader()
    {
        $request = new League\OAuth2\Server\Util\Request();

        $requestReflector = new ReflectionClass($request);
        $param = $requestReflector->getProperty('headers');
        $param->setAccessible(true);
        $param->setValue($request, array(
            'Authorization' =>  'Bearer abcdef, Bearer abcdef'
        ));
        $s = $this->returnDefault();
        $s->setRequest($request);

        $reflector = new ReflectionClass($s);

        $method = $reflector->getMethod('determineAccessToken');
        $method->setAccessible(true);

        $result = $method->invoke($s);

        $this->assertEquals('abcdef', $result);
    }

    public function test_determineAccessToken_fromMethod()
    {
        $s = $this->returnDefault();

        $_GET[$s->getTokenKey()] = 'abcdef';
        $_SERVER['REQUEST_METHOD'] = 'get';

           $request = new League\OAuth2\Server\Util\Request($_GET, array(), array(), array(), $_SERVER);
        $s->setRequest($request);

        $reflector = new ReflectionClass($s);
        $method = $reflector->getMethod('determineAccessToken');
        $method->setAccessible(true);

        $result = $method->invoke($s);

        $this->assertEquals('abcdef', $result);
    }

    /**
     * @expectedException League\OAuth2\Server\Exception\InvalidAccessTokenException
     */
    public function test_isValid_notValid()
    {
        $this->session->shouldReceive('validateAccessToken')->andReturn(false);

        $request = new League\OAuth2\Server\Util\Request();
        $requestReflector = new ReflectionClass($request);
        $param = $requestReflector->getProperty('headers');
        $param->setAccessible(true);
        $param->setValue($request, array(
            'Authorization' =>  'Bearer abcdef'
        ));
        $s = $this->returnDefault();
        $s->setRequest($request);

        $s->isValid();
    }

    public function test_isValid_valid()
    {
        $this->session->shouldReceive('validateAccessToken')->andReturn(array(
            'session_id'  =>    1,
            'owner_type'  =>    'user',
            'owner_id'    =>    123,
            'client_id' =>  'testapp'
        ));

        $this->session->shouldReceive('getScopes')->andReturn(array(
            array('scope' =>  'foo'),
            array('scope' =>  'bar')
        ));

           $request = new League\OAuth2\Server\Util\Request();
        $requestReflector = new ReflectionClass($request);
        $param = $requestReflector->getProperty('headers');
        $param->setAccessible(true);
        $param->setValue($request, array(
            'Authorization' =>  'Bearer abcdef'
        ));

        $s = $this->returnDefault();
        $s->setRequest($request);

        $this->assertTrue($s->isValid());
        $this->assertEquals(123, $s->getOwnerId());
        $this->assertEquals('user', $s->getOwnerType());
        $this->assertEquals('abcdef', $s->getAccessToken());
        $this->assertEquals('testapp', $s->getClientId());
        $this->assertTrue($s->hasScope('foo'));
        $this->assertTrue($s->hasScope('bar'));
        $this->assertTrue($s->hasScope(array('foo', 'bar')));
        $this->assertFalse($s->hasScope(array('foobar')));
        $this->assertFalse($s->hasScope('foobar'));
        $this->assertFalse($s->hasScope(new StdClass));
    }
}