Subversion Repositories SmartDukaan

<?php
/**
 * FormAuthenticateTest file
 *
 * CakePHP(tm) : Rapid Development Framework (http://cakephp.org)
 * Copyright (c) Cake Software Foundation, Inc. (http://cakefoundation.org)
 *
 * Licensed under The MIT License
 * For full copyright and license information, please see the LICENSE.txt
 * Redistributions of files must retain the above copyright notice.
 *
 * @copyright     Copyright (c) Cake Software Foundation, Inc. (http://cakefoundation.org)
 * @link          http://cakephp.org CakePHP(tm) Project
 * @package       Cake.Test.Case.Controller.Component.Auth
 * @since         CakePHP(tm) v 2.0
 * @license       http://www.opensource.org/licenses/mit-license.php MIT License
 */

App::uses('AuthComponent', 'Controller/Component');
App::uses('FormAuthenticate', 'Controller/Component/Auth');
App::uses('AppModel', 'Model');
App::uses('CakeRequest', 'Network');
App::uses('CakeResponse', 'Network');

require_once CAKE . 'Test' . DS . 'Case' . DS . 'Model' . DS . 'models.php';

/**
 * Test case for FormAuthentication
 *
 * @package       Cake.Test.Case.Controller.Component.Auth
 */
class FormAuthenticateTest extends CakeTestCase {

/**
 * Fixtrues
 *
 * @var array
 */
        public $fixtures = array('core.user', 'core.auth_user');

/**
 * setup
 *
 * @return void
 */
        public function setUp() {
                parent::setUp();
                $this->Collection = $this->getMock('ComponentCollection');
                $this->auth = new FormAuthenticate($this->Collection, array(
                        'fields' => array('username' => 'user', 'password' => 'password'),
                        'userModel' => 'User'
                ));
                $password = Security::hash('password', null, true);
                $User = ClassRegistry::init('User');
                $User->updateAll(array('password' => $User->getDataSource()->value($password)));
                $this->response = $this->getMock('CakeResponse');
        }

/**
 * test applying settings in the constructor
 *
 * @return void
 */
        public function testConstructor() {
                $object = new FormAuthenticate($this->Collection, array(
                        'userModel' => 'AuthUser',
                        'fields' => array('username' => 'user', 'password' => 'password')
                ));
                $this->assertEquals('AuthUser', $object->settings['userModel']);
                $this->assertEquals(array('username' => 'user', 'password' => 'password'), $object->settings['fields']);
        }

/**
 * test the authenticate method
 *
 * @return void
 */
        public function testAuthenticateNoData() {
                $request = new CakeRequest('posts/index', false);
                $request->data = array();
                $this->assertFalse($this->auth->authenticate($request, $this->response));
        }

/**
 * test the authenticate method
 *
 * @return void
 */
        public function testAuthenticateNoUsername() {
                $request = new CakeRequest('posts/index', false);
                $request->data = array('User' => array('password' => 'foobar'));
                $this->assertFalse($this->auth->authenticate($request, $this->response));
        }

/**
 * test the authenticate method
 *
 * @return void
 */
        public function testAuthenticateNoPassword() {
                $request = new CakeRequest('posts/index', false);
                $request->data = array('User' => array('user' => 'mariano'));
                $this->assertFalse($this->auth->authenticate($request, $this->response));
        }

/**
 * test authenticate password is false method
 *
 * @return void
 */
        public function testAuthenticatePasswordIsFalse() {
                $request = new CakeRequest('posts/index', false);
                $request->data = array(
                        'User' => array(
                                'user' => 'mariano',
                                'password' => null
                ));
                $this->assertFalse($this->auth->authenticate($request, $this->response));
        }

/**
 * Test for password as empty string with _checkFields() call skipped
 * Refs https://github.com/cakephp/cakephp/pull/2441
 *
 * @return void
 */
        public function testAuthenticatePasswordIsEmptyString() {
                $request = new CakeRequest('posts/index', false);
                $request->data = array(
                        'User' => array(
                                'user' => 'mariano',
                                'password' => ''
                ));

                $this->auth = $this->getMock(
                        'FormAuthenticate',
                        array('_checkFields'),
                        array(
                                $this->Collection,
                                array(
                                        'fields' => array('username' => 'user', 'password' => 'password'),
                                        'userModel' => 'User'
                                )
                        )
                );

                // Simulate that check for ensuring password is not empty is missing.
                $this->auth->expects($this->once())
                        ->method('_checkFields')
                        ->will($this->returnValue(true));

                $this->assertFalse($this->auth->authenticate($request, $this->response));
        }

/**
 * test authenticate field is not string
 *
 * @return void
 */
        public function testAuthenticateFieldsAreNotString() {
                $request = new CakeRequest('posts/index', false);
                $request->data = array(
                        'User' => array(
                                'user' => array('mariano', 'phpnut'),
                                'password' => 'my password'
                ));
                $this->assertFalse($this->auth->authenticate($request, $this->response));

                $request->data = array(
                        'User' => array(
                                'user' => 'mariano',
                                'password' => array('password1', 'password2')
                ));
                $this->assertFalse($this->auth->authenticate($request, $this->response));
        }

/**
 * test the authenticate method
 *
 * @return void
 */
        public function testAuthenticateInjection() {
                $request = new CakeRequest('posts/index', false);
                $request->data = array(
                        'User' => array(
                                'user' => '> 1',
                                'password' => "' OR 1 = 1"
                ));
                $this->assertFalse($this->auth->authenticate($request, $this->response));
        }

/**
 * test authenticate success
 *
 * @return void
 */
        public function testAuthenticateSuccess() {
                $request = new CakeRequest('posts/index', false);
                $request->data = array('User' => array(
                        'user' => 'mariano',
                        'password' => 'password'
                ));
                $result = $this->auth->authenticate($request, $this->response);
                $expected = array(
                        'id' => 1,
                        'user' => 'mariano',
                        'created' => '2007-03-17 01:16:23',
                        'updated' => '2007-03-17 01:18:31'
                );
                $this->assertEquals($expected, $result);
        }

/**
 * test scope failure.
 *
 * @return void
 */
        public function testAuthenticateScopeFail() {
                $this->auth->settings['scope'] = array('user' => 'nate');
                $request = new CakeRequest('posts/index', false);
                $request->data = array('User' => array(
                        'user' => 'mariano',
                        'password' => 'password'
                ));

                $this->assertFalse($this->auth->authenticate($request, $this->response));
        }

/**
 * test a model in a plugin.
 *
 * @return void
 */
        public function testPluginModel() {
                Cache::delete('object_map', '_cake_core_');
                App::build(array(
                        'Plugin' => array(CAKE . 'Test' . DS . 'test_app' . DS . 'Plugin' . DS),
                ), App::RESET);
                CakePlugin::load('TestPlugin');

                $PluginModel = ClassRegistry::init('TestPlugin.TestPluginAuthUser');
                $user['id'] = 1;
                $user['username'] = 'gwoo';
                $user['password'] = Security::hash(Configure::read('Security.salt') . 'cake');
                $PluginModel->save($user, false);

                $this->auth->settings['userModel'] = 'TestPlugin.TestPluginAuthUser';
                $this->auth->settings['fields']['username'] = 'username';

                $request = new CakeRequest('posts/index', false);
                $request->data = array('TestPluginAuthUser' => array(
                        'username' => 'gwoo',
                        'password' => 'cake'
                ));

                $result = $this->auth->authenticate($request, $this->response);
                $expected = array(
                        'id' => 1,
                        'username' => 'gwoo',
                        'created' => '2007-03-17 01:16:23'
                );
                $this->assertEquals(self::date(), $result['updated']);
                unset($result['updated']);
                $this->assertEquals($expected, $result);
                CakePlugin::unload();
        }

/**
 * test password hasher settings
 *
 * @return void
 */
        public function testPasswordHasherSettings() {
                $this->auth->settings['passwordHasher'] = array(
                        'className' => 'Simple',
                        'hashType' => 'md5'
                );

                $passwordHasher = $this->auth->passwordHasher();
                $result = $passwordHasher->config();
                $this->assertEquals('md5', $result['hashType']);

                $hash = Security::hash('mypass', 'md5', true);
                $User = ClassRegistry::init('User');
                $User->updateAll(
                        array('password' => $User->getDataSource()->value($hash)),
                        array('User.user' => 'mariano')
                );

                $request = new CakeRequest('posts/index', false);
                $request->data = array('User' => array(
                        'user' => 'mariano',
                        'password' => 'mypass'
                ));

                $result = $this->auth->authenticate($request, $this->response);
                $expected = array(
                        'id' => 1,
                        'user' => 'mariano',
                        'created' => '2007-03-17 01:16:23',
                        'updated' => '2007-03-17 01:18:31'
                );
                $this->assertEquals($expected, $result);

                $this->auth = new FormAuthenticate($this->Collection, array(
                        'fields' => array('username' => 'user', 'password' => 'password'),
                        'userModel' => 'User'
                ));
                $this->auth->settings['passwordHasher'] = array(
                        'className' => 'Simple',
                        'hashType' => 'sha1'
                );
                $this->assertFalse($this->auth->authenticate($request, $this->response));
        }

}