Rewrite of the authentication and authorization system
This commit is contained in:
Frederic Guillot
52
tests/units/Auth/DatabaseAuthTest.php
Normal file
52
tests/units/Auth/DatabaseAuthTest.php
Normal file
@@ -0,0 +1,52 @@
|
||||
<?php
|
||||
|
||||
require_once __DIR__.'/../Base.php';
|
||||
|
||||
use Kanboard\Auth\DatabaseAuth;
|
||||
|
||||
class DatabaseAuthTest extends Base
|
||||
{
|
||||
public function testGetName()
|
||||
{
|
||||
$provider = new DatabaseAuth($this->container);
|
||||
$this->assertEquals('Database', $provider->getName());
|
||||
}
|
||||
|
||||
public function testAuthenticate()
|
||||
{
|
||||
$provider = new DatabaseAuth($this->container);
|
||||
|
||||
$provider->setUsername('admin');
|
||||
$provider->setPassword('admin');
|
||||
$this->assertTrue($provider->authenticate());
|
||||
|
||||
$provider->setUsername('admin');
|
||||
$provider->setPassword('test');
|
||||
$this->assertFalse($provider->authenticate());
|
||||
}
|
||||
|
||||
public function testGetUser()
|
||||
{
|
||||
$provider = new DatabaseAuth($this->container);
|
||||
$this->assertEquals(null, $provider->getUser());
|
||||
|
||||
$provider = new DatabaseAuth($this->container);
|
||||
$provider->setUsername('admin');
|
||||
$provider->setPassword('admin');
|
||||
|
||||
$this->assertTrue($provider->authenticate());
|
||||
$this->assertInstanceOf('Kanboard\User\DatabaseUserProvider', $provider->getUser());
|
||||
}
|
||||
|
||||
public function testIsvalidSession()
|
||||
{
|
||||
$provider = new DatabaseAuth($this->container);
|
||||
$this->assertFalse($provider->isValidSession());
|
||||
|
||||
$this->container['sessionStorage']->user = array('id' => 1);
|
||||
$this->assertTrue($provider->isValidSession());
|
||||
|
||||
$this->container['sessionStorage']->user = array('id' => 2);
|
||||
$this->assertFalse($provider->isValidSession());
|
||||
}
|
||||
}
|
||||
@@ -1,697 +0,0 @@
|
||||
<?php
|
||||
|
||||
namespace Kanboard\Auth;
|
||||
|
||||
require_once __DIR__.'/../Base.php';
|
||||
|
||||
function ldap_connect($hostname, $port)
|
||||
{
|
||||
return LdapTest::$functions->ldap_connect($hostname, $port);
|
||||
}
|
||||
|
||||
function ldap_set_option()
|
||||
{
|
||||
}
|
||||
|
||||
function ldap_bind($link_identifier, $bind_rdn, $bind_password)
|
||||
{
|
||||
return LdapTest::$functions->ldap_bind($link_identifier, $bind_rdn, $bind_password);
|
||||
}
|
||||
|
||||
function ldap_search($link_identifier, $base_dn, $filter, array $attributes)
|
||||
{
|
||||
return LdapTest::$functions->ldap_search($link_identifier, $base_dn, $filter, $attributes);
|
||||
}
|
||||
|
||||
function ldap_get_entries($link_identifier, $result_identifier)
|
||||
{
|
||||
return LdapTest::$functions->ldap_get_entries($link_identifier, $result_identifier);
|
||||
}
|
||||
|
||||
class LdapTest extends \Base
|
||||
{
|
||||
public static $functions;
|
||||
private $ldap;
|
||||
|
||||
public function setUp()
|
||||
{
|
||||
parent::setup();
|
||||
|
||||
self::$functions = $this
|
||||
->getMockBuilder('stdClass')
|
||||
->setMethods(array(
|
||||
'ldap_connect',
|
||||
'ldap_set_option',
|
||||
'ldap_bind',
|
||||
'ldap_search',
|
||||
'ldap_get_entries',
|
||||
))
|
||||
->getMock();
|
||||
}
|
||||
|
||||
public function tearDown()
|
||||
{
|
||||
parent::tearDown();
|
||||
self::$functions = null;
|
||||
}
|
||||
|
||||
public function testGetAttributes()
|
||||
{
|
||||
$ldap = new Ldap($this->container);
|
||||
$this->assertCount(3, $ldap->getProfileAttributes());
|
||||
$this->assertContains(LDAP_ACCOUNT_FULLNAME, $ldap->getProfileAttributes());
|
||||
$this->assertContains(LDAP_ACCOUNT_EMAIL, $ldap->getProfileAttributes());
|
||||
$this->assertContains(LDAP_ACCOUNT_MEMBEROF, $ldap->getProfileAttributes());
|
||||
}
|
||||
|
||||
public function testConnectSuccess()
|
||||
{
|
||||
$ldap = $this
|
||||
->getMockBuilder('\Kanboard\Auth\Ldap')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('getLdapServer'))
|
||||
->getMock();
|
||||
|
||||
$ldap
|
||||
->expects($this->once())
|
||||
->method('getLdapServer')
|
||||
->will($this->returnValue('my_ldap_server'));
|
||||
|
||||
self::$functions
|
||||
->expects($this->once())
|
||||
->method('ldap_connect')
|
||||
->with(
|
||||
$this->equalTo('my_ldap_server'),
|
||||
$this->equalTo($ldap->getLdapPort())
|
||||
)
|
||||
->will($this->returnValue('my_ldap_resource'));
|
||||
|
||||
$this->assertNotFalse($ldap->connect());
|
||||
}
|
||||
|
||||
public function testConnectFailure()
|
||||
{
|
||||
$ldap = $this
|
||||
->getMockBuilder('\Kanboard\Auth\Ldap')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('getLdapServer'))
|
||||
->getMock();
|
||||
|
||||
$ldap
|
||||
->expects($this->once())
|
||||
->method('getLdapServer')
|
||||
->will($this->returnValue('my_ldap_server'));
|
||||
|
||||
self::$functions
|
||||
->expects($this->once())
|
||||
->method('ldap_connect')
|
||||
->with(
|
||||
$this->equalTo('my_ldap_server'),
|
||||
$this->equalTo($ldap->getLdapPort())
|
||||
)
|
||||
->will($this->returnValue(false));
|
||||
|
||||
$this->assertFalse($ldap->connect());
|
||||
}
|
||||
|
||||
public function testBindAnonymous()
|
||||
{
|
||||
$ldap = $this
|
||||
->getMockBuilder('\Kanboard\Auth\Ldap')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('getLdapBindType'))
|
||||
->getMock();
|
||||
|
||||
$ldap
|
||||
->expects($this->any())
|
||||
->method('getLdapBindType')
|
||||
->will($this->returnValue('anonymous'));
|
||||
|
||||
self::$functions
|
||||
->expects($this->once())
|
||||
->method('ldap_bind')
|
||||
->with(
|
||||
$this->equalTo('my_ldap_connection'),
|
||||
$this->equalTo(null),
|
||||
$this->equalTo(null)
|
||||
)
|
||||
->will($this->returnValue(true));
|
||||
|
||||
$this->assertTrue($ldap->bind('my_ldap_connection', 'my_user', 'my_password'));
|
||||
}
|
||||
|
||||
public function testBindUser()
|
||||
{
|
||||
$ldap = $this
|
||||
->getMockBuilder('\Kanboard\Auth\Ldap')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('getLdapUsername', 'getLdapBindType'))
|
||||
->getMock();
|
||||
|
||||
$ldap
|
||||
->expects($this->once())
|
||||
->method('getLdapUsername')
|
||||
->will($this->returnValue('uid=my_user'));
|
||||
|
||||
$ldap
|
||||
->expects($this->any())
|
||||
->method('getLdapBindType')
|
||||
->will($this->returnValue('user'));
|
||||
|
||||
self::$functions
|
||||
->expects($this->once())
|
||||
->method('ldap_bind')
|
||||
->with(
|
||||
$this->equalTo('my_ldap_connection'),
|
||||
$this->equalTo('uid=my_user'),
|
||||
$this->equalTo('my_password')
|
||||
)
|
||||
->will($this->returnValue(true));
|
||||
|
||||
$this->assertTrue($ldap->bind('my_ldap_connection', 'my_user', 'my_password'));
|
||||
}
|
||||
|
||||
public function testBindProxy()
|
||||
{
|
||||
$ldap = $this
|
||||
->getMockBuilder('\Kanboard\Auth\Ldap')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('getLdapUsername', 'getLdapPassword', 'getLdapBindType'))
|
||||
->getMock();
|
||||
|
||||
$ldap
|
||||
->expects($this->once())
|
||||
->method('getLdapUsername')
|
||||
->will($this->returnValue('someone'));
|
||||
|
||||
$ldap
|
||||
->expects($this->once())
|
||||
->method('getLdapPassword')
|
||||
->will($this->returnValue('something'));
|
||||
|
||||
$ldap
|
||||
->expects($this->any())
|
||||
->method('getLdapBindType')
|
||||
->will($this->returnValue('proxy'));
|
||||
|
||||
self::$functions
|
||||
->expects($this->once())
|
||||
->method('ldap_bind')
|
||||
->with(
|
||||
$this->equalTo('my_ldap_connection'),
|
||||
$this->equalTo('someone'),
|
||||
$this->equalTo('something')
|
||||
)
|
||||
->will($this->returnValue(true));
|
||||
|
||||
$this->assertTrue($ldap->bind('my_ldap_connection', 'my_user', 'my_password'));
|
||||
}
|
||||
|
||||
public function testSearchSuccess()
|
||||
{
|
||||
$entries = array(
|
||||
'count' => 1,
|
||||
0 => array(
|
||||
'count' => 2,
|
||||
'dn' => 'uid=my_user,ou=People,dc=kanboard,dc=local',
|
||||
'displayname' => array(
|
||||
'count' => 1,
|
||||
0 => 'My user',
|
||||
),
|
||||
'mail' => array(
|
||||
'count' => 2,
|
||||
0 => 'user1@localhost',
|
||||
1 => 'user2@localhost',
|
||||
),
|
||||
0 => 'displayname',
|
||||
1 => 'mail',
|
||||
)
|
||||
);
|
||||
|
||||
$expected = array(
|
||||
'username' => 'my_user',
|
||||
'name' => 'My user',
|
||||
'email' => 'user1@localhost',
|
||||
'is_admin' => 0,
|
||||
'is_project_admin' => 0,
|
||||
'is_ldap_user' => 1,
|
||||
);
|
||||
|
||||
$ldap = $this
|
||||
->getMockBuilder('\Kanboard\Auth\Ldap')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('getLdapUserPattern', 'getLdapBaseDn'))
|
||||
->getMock();
|
||||
|
||||
$ldap
|
||||
->expects($this->once())
|
||||
->method('getLdapUserPattern')
|
||||
->will($this->returnValue('uid=my_user'));
|
||||
|
||||
$ldap
|
||||
->expects($this->once())
|
||||
->method('getLdapBaseDn')
|
||||
->will($this->returnValue('ou=People,dc=kanboard,dc=local'));
|
||||
|
||||
self::$functions
|
||||
->expects($this->at(0))
|
||||
->method('ldap_search')
|
||||
->with(
|
||||
$this->equalTo('my_ldap_connection'),
|
||||
$this->equalTo('ou=People,dc=kanboard,dc=local'),
|
||||
$this->equalTo('uid=my_user'),
|
||||
$this->equalTo($ldap->getProfileAttributes())
|
||||
)
|
||||
->will($this->returnValue('my_result_identifier'));
|
||||
|
||||
self::$functions
|
||||
->expects($this->at(1))
|
||||
->method('ldap_get_entries')
|
||||
->with(
|
||||
$this->equalTo('my_ldap_connection'),
|
||||
$this->equalTo('my_result_identifier')
|
||||
)
|
||||
->will($this->returnValue($entries));
|
||||
|
||||
self::$functions
|
||||
->expects($this->at(2))
|
||||
->method('ldap_bind')
|
||||
->with(
|
||||
$this->equalTo('my_ldap_connection'),
|
||||
$this->equalTo('uid=my_user,ou=People,dc=kanboard,dc=local'),
|
||||
$this->equalTo('my_password')
|
||||
)
|
||||
->will($this->returnValue(true));
|
||||
|
||||
$this->assertEquals($expected, $ldap->getProfile('my_ldap_connection', 'my_user', 'my_password'));
|
||||
}
|
||||
|
||||
public function testSearchWithBadPassword()
|
||||
{
|
||||
$entries = array(
|
||||
'count' => 1,
|
||||
0 => array(
|
||||
'count' => 2,
|
||||
'dn' => 'uid=my_user,ou=People,dc=kanboard,dc=local',
|
||||
'displayname' => array(
|
||||
'count' => 1,
|
||||
0 => 'My user',
|
||||
),
|
||||
'mail' => array(
|
||||
'count' => 2,
|
||||
0 => 'user1@localhost',
|
||||
1 => 'user2@localhost',
|
||||
),
|
||||
0 => 'displayname',
|
||||
1 => 'mail',
|
||||
)
|
||||
);
|
||||
|
||||
$ldap = $this
|
||||
->getMockBuilder('\Kanboard\Auth\Ldap')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('getLdapUserPattern', 'getLdapBaseDn'))
|
||||
->getMock();
|
||||
|
||||
$ldap
|
||||
->expects($this->once())
|
||||
->method('getLdapUserPattern')
|
||||
->will($this->returnValue('uid=my_user'));
|
||||
|
||||
$ldap
|
||||
->expects($this->once())
|
||||
->method('getLdapBaseDn')
|
||||
->will($this->returnValue('ou=People,dc=kanboard,dc=local'));
|
||||
|
||||
self::$functions
|
||||
->expects($this->at(0))
|
||||
->method('ldap_search')
|
||||
->with(
|
||||
$this->equalTo('my_ldap_connection'),
|
||||
$this->equalTo('ou=People,dc=kanboard,dc=local'),
|
||||
$this->equalTo('uid=my_user'),
|
||||
$this->equalTo($ldap->getProfileAttributes())
|
||||
)
|
||||
->will($this->returnValue('my_result_identifier'));
|
||||
|
||||
self::$functions
|
||||
->expects($this->at(1))
|
||||
->method('ldap_get_entries')
|
||||
->with(
|
||||
$this->equalTo('my_ldap_connection'),
|
||||
$this->equalTo('my_result_identifier')
|
||||
)
|
||||
->will($this->returnValue($entries));
|
||||
|
||||
self::$functions
|
||||
->expects($this->at(2))
|
||||
->method('ldap_bind')
|
||||
->with(
|
||||
$this->equalTo('my_ldap_connection'),
|
||||
$this->equalTo('uid=my_user,ou=People,dc=kanboard,dc=local'),
|
||||
$this->equalTo('my_password')
|
||||
)
|
||||
->will($this->returnValue(false));
|
||||
|
||||
$this->assertFalse($ldap->getProfile('my_ldap_connection', 'my_user', 'my_password'));
|
||||
}
|
||||
|
||||
public function testSearchWithUserNotFound()
|
||||
{
|
||||
$ldap = $this
|
||||
->getMockBuilder('\Kanboard\Auth\Ldap')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('getLdapUserPattern', 'getLdapBaseDn'))
|
||||
->getMock();
|
||||
|
||||
$ldap
|
||||
->expects($this->once())
|
||||
->method('getLdapUserPattern')
|
||||
->will($this->returnValue('uid=my_user'));
|
||||
|
||||
$ldap
|
||||
->expects($this->once())
|
||||
->method('getLdapBaseDn')
|
||||
->will($this->returnValue('ou=People,dc=kanboard,dc=local'));
|
||||
|
||||
self::$functions
|
||||
->expects($this->at(0))
|
||||
->method('ldap_search')
|
||||
->with(
|
||||
$this->equalTo('my_ldap_connection'),
|
||||
$this->equalTo('ou=People,dc=kanboard,dc=local'),
|
||||
$this->equalTo('uid=my_user'),
|
||||
$this->equalTo($ldap->getProfileAttributes())
|
||||
)
|
||||
->will($this->returnValue('my_result_identifier'));
|
||||
|
||||
self::$functions
|
||||
->expects($this->at(1))
|
||||
->method('ldap_get_entries')
|
||||
->with(
|
||||
$this->equalTo('my_ldap_connection'),
|
||||
$this->equalTo('my_result_identifier')
|
||||
)
|
||||
->will($this->returnValue(array()));
|
||||
|
||||
$this->assertFalse($ldap->getProfile('my_ldap_connection', 'my_user', 'my_password'));
|
||||
}
|
||||
|
||||
public function testSuccessfulAuthentication()
|
||||
{
|
||||
$this->container['userSession'] = $this
|
||||
->getMockBuilder('\Kanboard\Model\UserSession')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('initialize'))
|
||||
->getMock();
|
||||
|
||||
$this->container['user'] = $this
|
||||
->getMockBuilder('\Kanboard\Model\User')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('getByUsername'))
|
||||
->getMock();
|
||||
|
||||
$ldap = $this
|
||||
->getMockBuilder('\Kanboard\Auth\Ldap')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('findUser'))
|
||||
->getMock();
|
||||
|
||||
$ldap
|
||||
->expects($this->once())
|
||||
->method('findUser')
|
||||
->with(
|
||||
$this->equalTo('user'),
|
||||
$this->equalTo('password')
|
||||
)
|
||||
->will($this->returnValue(array('username' => 'user', 'name' => 'My user', 'email' => 'user@here')));
|
||||
|
||||
$this->container['user']
|
||||
->expects($this->once())
|
||||
->method('getByUsername')
|
||||
->with(
|
||||
$this->equalTo('user')
|
||||
)
|
||||
->will($this->returnValue(array('id' => 2, 'username' => 'user', 'is_ldap_user' => 1)));
|
||||
|
||||
$this->container['userSession']
|
||||
->expects($this->once())
|
||||
->method('initialize');
|
||||
|
||||
$this->assertTrue($ldap->authenticate('user', 'password'));
|
||||
}
|
||||
|
||||
public function testAuthenticationWithExistingLocalUser()
|
||||
{
|
||||
$this->container['userSession'] = $this
|
||||
->getMockBuilder('\Kanboard\Model\UserSession')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('initialize'))
|
||||
->getMock();
|
||||
|
||||
$this->container['user'] = $this
|
||||
->getMockBuilder('\Kanboard\Model\User')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('getByUsername'))
|
||||
->getMock();
|
||||
|
||||
$ldap = $this
|
||||
->getMockBuilder('\Kanboard\Auth\Ldap')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('findUser'))
|
||||
->getMock();
|
||||
|
||||
$ldap
|
||||
->expects($this->once())
|
||||
->method('findUser')
|
||||
->with(
|
||||
$this->equalTo('user'),
|
||||
$this->equalTo('password')
|
||||
)
|
||||
->will($this->returnValue(array('username' => 'user', 'name' => 'My user', 'email' => 'user@here')));
|
||||
|
||||
$this->container['user']
|
||||
->expects($this->once())
|
||||
->method('getByUsername')
|
||||
->with(
|
||||
$this->equalTo('user')
|
||||
)
|
||||
->will($this->returnValue(array('id' => 2, 'username' => 'user', 'is_ldap_user' => 0)));
|
||||
|
||||
$this->container['userSession']
|
||||
->expects($this->never())
|
||||
->method('initialize');
|
||||
|
||||
$this->assertFalse($ldap->authenticate('user', 'password'));
|
||||
}
|
||||
|
||||
public function testAuthenticationWithAutomaticAccountCreation()
|
||||
{
|
||||
$ldap_profile = array('username' => 'user', 'name' => 'My user', 'email' => 'user@here');
|
||||
|
||||
$this->container['userSession'] = $this
|
||||
->getMockBuilder('\Kanboard\Model\UserSession')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('initialize'))
|
||||
->getMock();
|
||||
|
||||
$this->container['user'] = $this
|
||||
->getMockBuilder('\Kanboard\Model\User')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('getByUsername', 'create'))
|
||||
->getMock();
|
||||
|
||||
$ldap = $this
|
||||
->getMockBuilder('\Kanboard\Auth\Ldap')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('findUser'))
|
||||
->getMock();
|
||||
|
||||
$ldap
|
||||
->expects($this->at(0))
|
||||
->method('findUser')
|
||||
->with(
|
||||
$this->equalTo('user'),
|
||||
$this->equalTo('password')
|
||||
)
|
||||
->will($this->returnValue($ldap_profile));
|
||||
|
||||
$this->container['user']
|
||||
->expects($this->at(0))
|
||||
->method('getByUsername')
|
||||
->with(
|
||||
$this->equalTo('user')
|
||||
)
|
||||
->will($this->returnValue(null));
|
||||
|
||||
$this->container['user']
|
||||
->expects($this->at(1))
|
||||
->method('create')
|
||||
->with(
|
||||
$this->equalTo($ldap_profile)
|
||||
)
|
||||
->will($this->returnValue(true));
|
||||
|
||||
$this->container['user']
|
||||
->expects($this->at(2))
|
||||
->method('getByUsername')
|
||||
->with(
|
||||
$this->equalTo('user')
|
||||
)
|
||||
->will($this->returnValue(array('id' => 2, 'username' => 'user', 'is_ldap_user' => 1)));
|
||||
|
||||
$this->container['userSession']
|
||||
->expects($this->once())
|
||||
->method('initialize');
|
||||
|
||||
$this->assertTrue($ldap->authenticate('user', 'password'));
|
||||
}
|
||||
|
||||
public function testAuthenticationWithAutomaticAccountCreationFailed()
|
||||
{
|
||||
$ldap_profile = array('username' => 'user', 'name' => 'My user', 'email' => 'user@here');
|
||||
|
||||
$this->container['userSession'] = $this
|
||||
->getMockBuilder('\Kanboard\Model\UserSession')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('initialize'))
|
||||
->getMock();
|
||||
|
||||
$this->container['user'] = $this
|
||||
->getMockBuilder('\Kanboard\Model\User')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('getByUsername', 'create'))
|
||||
->getMock();
|
||||
|
||||
$ldap = $this
|
||||
->getMockBuilder('\Kanboard\Auth\Ldap')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('findUser'))
|
||||
->getMock();
|
||||
|
||||
$ldap
|
||||
->expects($this->at(0))
|
||||
->method('findUser')
|
||||
->with(
|
||||
$this->equalTo('user'),
|
||||
$this->equalTo('password')
|
||||
)
|
||||
->will($this->returnValue($ldap_profile));
|
||||
|
||||
$this->container['user']
|
||||
->expects($this->at(0))
|
||||
->method('getByUsername')
|
||||
->with(
|
||||
$this->equalTo('user')
|
||||
)
|
||||
->will($this->returnValue(null));
|
||||
|
||||
$this->container['user']
|
||||
->expects($this->at(1))
|
||||
->method('create')
|
||||
->with(
|
||||
$this->equalTo($ldap_profile)
|
||||
)
|
||||
->will($this->returnValue(false));
|
||||
|
||||
$this->container['userSession']
|
||||
->expects($this->never())
|
||||
->method('initialize');
|
||||
|
||||
$this->assertFalse($ldap->authenticate('user', 'password'));
|
||||
}
|
||||
|
||||
public function testLookup()
|
||||
{
|
||||
$entries = array(
|
||||
'count' => 1,
|
||||
0 => array(
|
||||
'count' => 2,
|
||||
'dn' => 'uid=my_user,ou=People,dc=kanboard,dc=local',
|
||||
'displayname' => array(
|
||||
'count' => 1,
|
||||
0 => 'My LDAP user',
|
||||
),
|
||||
'mail' => array(
|
||||
'count' => 2,
|
||||
0 => 'user1@localhost',
|
||||
1 => 'user2@localhost',
|
||||
),
|
||||
'samaccountname' => array(
|
||||
'count' => 1,
|
||||
0 => 'my_ldap_user',
|
||||
),
|
||||
0 => 'displayname',
|
||||
1 => 'mail',
|
||||
2 => 'samaccountname',
|
||||
)
|
||||
);
|
||||
|
||||
$expected = array(
|
||||
'username' => 'my_ldap_user',
|
||||
'name' => 'My LDAP user',
|
||||
'email' => 'user1@localhost',
|
||||
'is_admin' => 0,
|
||||
'is_project_admin' => 0,
|
||||
'is_ldap_user' => 1,
|
||||
);
|
||||
|
||||
$ldap = $this
|
||||
->getMockBuilder('\Kanboard\Auth\Ldap')
|
||||
->setConstructorArgs(array($this->container))
|
||||
->setMethods(array('connect', 'getLdapUserPattern', 'getLdapBaseDn', 'getLdapAccountId'))
|
||||
->getMock();
|
||||
|
||||
$ldap
|
||||
->expects($this->once())
|
||||
->method('connect')
|
||||
->will($this->returnValue('my_ldap_connection'));
|
||||
|
||||
$ldap
|
||||
->expects($this->once())
|
||||
->method('getLdapUserPattern')
|
||||
->will($this->returnValue('sAMAccountName=my_user'));
|
||||
|
||||
$ldap
|
||||
->expects($this->any())
|
||||
->method('getLdapAccountId')
|
||||
->will($this->returnValue('samaccountname'));
|
||||
|
||||
$ldap
|
||||
->expects($this->once())
|
||||
->method('getLdapBaseDn')
|
||||
->will($this->returnValue('ou=People,dc=kanboard,dc=local'));
|
||||
|
||||
self::$functions
|
||||
->expects($this->at(0))
|
||||
->method('ldap_bind')
|
||||
->with(
|
||||
$this->equalTo('my_ldap_connection'),
|
||||
$this->equalTo(null),
|
||||
$this->equalTo(null)
|
||||
)
|
||||
->will($this->returnValue(true));
|
||||
|
||||
self::$functions
|
||||
->expects($this->at(1))
|
||||
->method('ldap_search')
|
||||
->with(
|
||||
$this->equalTo('my_ldap_connection'),
|
||||
$this->equalTo('ou=People,dc=kanboard,dc=local'),
|
||||
$this->equalTo('(&(sAMAccountName=my_user)(mail=user@localhost))'),
|
||||
$this->equalTo($ldap->getProfileAttributes())
|
||||
)
|
||||
->will($this->returnValue('my_result_identifier'));
|
||||
|
||||
self::$functions
|
||||
->expects($this->at(2))
|
||||
->method('ldap_get_entries')
|
||||
->with(
|
||||
$this->equalTo('my_ldap_connection'),
|
||||
$this->equalTo('my_result_identifier')
|
||||
)
|
||||
->will($this->returnValue($entries));
|
||||
|
||||
$this->assertEquals($expected, $ldap->lookup('my_user', 'user@localhost'));
|
||||
}
|
||||
}
|
||||
@@ -1,37 +0,0 @@
|
||||
<?php
|
||||
|
||||
require_once __DIR__.'/../Base.php';
|
||||
|
||||
use Kanboard\Auth\ReverseProxy;
|
||||
use Kanboard\Model\User;
|
||||
|
||||
class ReverseProxyTest extends Base
|
||||
{
|
||||
public function setUp()
|
||||
{
|
||||
parent::setup();
|
||||
$_SERVER = array();
|
||||
}
|
||||
|
||||
public function testFailedAuthentication()
|
||||
{
|
||||
$auth = new ReverseProxy($this->container);
|
||||
$this->assertFalse($auth->authenticate());
|
||||
}
|
||||
|
||||
public function testSuccessfulAuthentication()
|
||||
{
|
||||
$_SERVER[REVERSE_PROXY_USER_HEADER] = 'my_user';
|
||||
|
||||
$a = new ReverseProxy($this->container);
|
||||
$u = new User($this->container);
|
||||
|
||||
$this->assertTrue($a->authenticate());
|
||||
|
||||
$user = $u->getByUsername('my_user');
|
||||
$this->assertNotEmpty($user);
|
||||
$this->assertEquals(0, $user['is_admin']);
|
||||
$this->assertEquals(1, $user['is_ldap_user']);
|
||||
$this->assertEquals(1, $user['disable_login_form']);
|
||||
}
|
||||
}
|
||||
63
tests/units/Auth/TotpAuthTest.php
Normal file
63
tests/units/Auth/TotpAuthTest.php
Normal file
@@ -0,0 +1,63 @@
|
||||
<?php
|
||||
|
||||
require_once __DIR__.'/../Base.php';
|
||||
|
||||
use Kanboard\Auth\TotpAuth;
|
||||
|
||||
class TotpAuthTest extends Base
|
||||
{
|
||||
public function testGetName()
|
||||
{
|
||||
$provider = new TotpAuth($this->container);
|
||||
$this->assertEquals('Time-based One-time Password Algorithm', $provider->getName());
|
||||
}
|
||||
|
||||
public function testGetSecret()
|
||||
{
|
||||
$provider = new TotpAuth($this->container);
|
||||
$secret = $provider->getSecret();
|
||||
|
||||
$this->assertNotEmpty($secret);
|
||||
$this->assertEquals($secret, $provider->getSecret());
|
||||
$this->assertEquals($secret, $provider->getSecret());
|
||||
}
|
||||
|
||||
public function testSetSecret()
|
||||
{
|
||||
$provider = new TotpAuth($this->container);
|
||||
$provider->setSecret('mySecret');
|
||||
$this->assertEquals('mySecret', $provider->getSecret());
|
||||
}
|
||||
|
||||
public function testGetUrl()
|
||||
{
|
||||
$provider = new TotpAuth($this->container);
|
||||
$this->assertEmpty($provider->getQrCodeUrl('me'));
|
||||
$this->assertEmpty($provider->getKeyUrl('me'));
|
||||
|
||||
$provider->setSecret('mySecret');
|
||||
$this->assertEquals(
|
||||
'https://chart.googleapis.com/chart?chs=200x200&cht=qr&chld=M|0&chl=otpauth%3A%2F%2Ftotp%2Fme%3Fsecret%3DmySecret',
|
||||
$provider->getQrCodeUrl('me')
|
||||
);
|
||||
|
||||
$this->assertEquals('otpauth://totp/me?secret=mySecret', $provider->getKeyUrl('me'));
|
||||
}
|
||||
|
||||
public function testAuthentication()
|
||||
{
|
||||
$provider = new TotpAuth($this->container);
|
||||
|
||||
$secret = $provider->getSecret();
|
||||
$this->assertNotEmpty($secret);
|
||||
|
||||
$provider->setCode('1234');
|
||||
$this->assertFalse($provider->authenticate());
|
||||
|
||||
if (!!`which oathtool`) {
|
||||
$code = shell_exec('oathtool --totp -b '.$secret);
|
||||
$provider->setCode(trim($code));
|
||||
$this->assertTrue($provider->authenticate());
|
||||
}
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user