mirror of
https://github.com/wallabag/wallabag.git
synced 2024-12-17 18:59:35 +01:00
320 lines
10 KiB
PHP
320 lines
10 KiB
PHP
<?php
|
|
|
|
namespace Wallabag\CoreBundle\Tests\Controller;
|
|
|
|
use Symfony\Component\Filesystem\Filesystem;
|
|
use Symfony\Component\Finder\Finder;
|
|
use Wallabag\CoreBundle\Tests\WallabagCoreTestCase;
|
|
|
|
class SecurityControllerTest extends WallabagCoreTestCase
|
|
{
|
|
public function testRegister()
|
|
{
|
|
$client = $this->getClient();
|
|
|
|
$crawler = $client->request('GET', '/register/');
|
|
|
|
$this->assertEquals(200, $client->getResponse()->getStatusCode());
|
|
$this->assertContains('Register', $client->getResponse()->getContent());
|
|
}
|
|
|
|
public function dataForCreateAccountFailed()
|
|
{
|
|
return array(
|
|
array(
|
|
array(
|
|
'fos_user_registration_form[email]' => '',
|
|
'fos_user_registration_form[username]' => 'newuser',
|
|
'fos_user_registration_form[plainPassword][first]' => 'mypassword',
|
|
'fos_user_registration_form[plainPassword][second]' => 'mypassword',
|
|
),
|
|
'Please enter an email',
|
|
),
|
|
array(
|
|
array(
|
|
'fos_user_registration_form[email]' => 'newuser@wallabag.org',
|
|
'fos_user_registration_form[username]' => 'admin',
|
|
'fos_user_registration_form[plainPassword][first]' => 'mypassword',
|
|
'fos_user_registration_form[plainPassword][second]' => 'mypassword',
|
|
),
|
|
'The username is already used',
|
|
),
|
|
array(
|
|
array(
|
|
'fos_user_registration_form[email]' => 'newuser@wallabag.org',
|
|
'fos_user_registration_form[username]' => 'newuser',
|
|
'fos_user_registration_form[plainPassword][first]' => 'mypassword1',
|
|
'fos_user_registration_form[plainPassword][second]' => 'mypassword2',
|
|
),
|
|
'The entered passwords don't match',
|
|
),
|
|
);
|
|
}
|
|
|
|
/**
|
|
* @dataProvider dataForCreateAccountFailed
|
|
*/
|
|
public function testCreateAccountFailed($data, $expectedMessage)
|
|
{
|
|
$client = $this->getClient();
|
|
|
|
$crawler = $client->request('GET', '/register/');
|
|
|
|
$form = $crawler->filter('input[type=submit]')->form();
|
|
|
|
$client->submit($form, $data);
|
|
|
|
$this->assertEquals(200, $client->getResponse()->getStatusCode());
|
|
$this->assertContains($expectedMessage, $client->getResponse()->getContent());
|
|
}
|
|
|
|
public function dataForCreateAccountSuccess()
|
|
{
|
|
return array(
|
|
array(
|
|
array(
|
|
'fos_user_registration_form[email]' => 'newuser@wallabag.org',
|
|
'fos_user_registration_form[username]' => 'newuser',
|
|
'fos_user_registration_form[plainPassword][first]' => 'mypassword',
|
|
'fos_user_registration_form[plainPassword][second]' => 'mypassword',
|
|
),
|
|
),
|
|
);
|
|
}
|
|
|
|
/**
|
|
* @dataProvider dataForCreateAccountSuccess
|
|
*/
|
|
public function testCreateAccountSuccess($data)
|
|
{
|
|
$client = $this->getClient();
|
|
|
|
$crawler = $client->request('GET', '/register/');
|
|
|
|
$form = $crawler->filter('input[type=submit]')->form();
|
|
|
|
$client->submit($form, $data);
|
|
$this->assertEquals(302, $client->getResponse()->getStatusCode());
|
|
|
|
$crawler = $client->followRedirect();
|
|
|
|
$this->assertContains('The user has been created successfully', $client->getResponse()->getContent());
|
|
}
|
|
|
|
public function testRegistrationConfirmation()
|
|
{
|
|
$client = $this->getClient();
|
|
$client->followRedirects();
|
|
|
|
$user = $client->getContainer()
|
|
->get('doctrine.orm.entity_manager')
|
|
->getRepository('WallabagCoreBundle:User')
|
|
->findOneByUsername('newuser');
|
|
|
|
$this->assertNull($user->getConfig());
|
|
|
|
$client->request('GET', '/register/confirm/b4dT0k3n');
|
|
$this->assertEquals(404, $client->getResponse()->getStatusCode());
|
|
|
|
$crawler = $client->request('GET', '/register/confirm/'.$user->getConfirmationToken());
|
|
$this->assertEquals(200, $client->getResponse()->getStatusCode());
|
|
|
|
$user = $client->getContainer()
|
|
->get('doctrine.orm.entity_manager')
|
|
->getRepository('WallabagCoreBundle:User')
|
|
->findOneByUsername('newuser');
|
|
$this->assertNotNull($user->getConfig());
|
|
}
|
|
|
|
public function testLogin()
|
|
{
|
|
$client = $this->getClient();
|
|
|
|
$crawler = $client->request('GET', '/new');
|
|
|
|
$this->assertEquals(302, $client->getResponse()->getStatusCode());
|
|
$this->assertContains('login', $client->getResponse()->headers->get('location'));
|
|
}
|
|
|
|
public function testLoginFail()
|
|
{
|
|
$client = $this->getClient();
|
|
|
|
$crawler = $client->request('GET', '/login');
|
|
|
|
$form = $crawler->filter('button[type=submit]')->form();
|
|
$data = array(
|
|
'_username' => 'admin',
|
|
'_password' => 'admin',
|
|
);
|
|
|
|
$client->submit($form, $data);
|
|
|
|
$this->assertEquals(302, $client->getResponse()->getStatusCode());
|
|
$this->assertContains('login', $client->getResponse()->headers->get('location'));
|
|
|
|
$crawler = $client->followRedirect();
|
|
|
|
$this->assertContains('Bad credentials', $client->getResponse()->getContent());
|
|
}
|
|
|
|
public function testRedirectionAfterLogin()
|
|
{
|
|
$client = $this->getClient();
|
|
$client->followRedirects();
|
|
|
|
$crawler = $client->request('GET', '/config');
|
|
|
|
$form = $crawler->filter('button[type=submit]')->form();
|
|
|
|
$data = array(
|
|
'_username' => 'admin',
|
|
'_password' => 'mypassword',
|
|
);
|
|
|
|
$client->submit($form, $data);
|
|
|
|
$this->assertContains('RSS', $client->getResponse()->getContent());
|
|
}
|
|
|
|
public function testForgotPassword()
|
|
{
|
|
$client = $this->getClient();
|
|
|
|
$crawler = $client->request('GET', '/forgot-password');
|
|
|
|
$this->assertEquals(200, $client->getResponse()->getStatusCode());
|
|
|
|
$this->assertContains('Forgot password', $client->getResponse()->getContent());
|
|
|
|
$form = $crawler->filter('button[type=submit]');
|
|
|
|
$this->assertCount(1, $form);
|
|
|
|
return array(
|
|
'form' => $form->form(),
|
|
'client' => $client,
|
|
);
|
|
}
|
|
|
|
/**
|
|
* @depends testForgotPassword
|
|
*/
|
|
public function testSubmitForgotPasswordFail($parameters)
|
|
{
|
|
$form = $parameters['form'];
|
|
$client = $parameters['client'];
|
|
|
|
$data = array(
|
|
'forgot_password[email]' => 'material',
|
|
);
|
|
|
|
$client->submit($form, $data);
|
|
|
|
$this->assertEquals(200, $client->getResponse()->getStatusCode());
|
|
$this->assertContains('No user found with this email', $client->getResponse()->getContent());
|
|
}
|
|
|
|
/**
|
|
* @depends testForgotPassword
|
|
*
|
|
* Instead of using collector which slow down the test suite
|
|
* http://symfony.com/doc/current/cookbook/email/testing.html
|
|
*
|
|
* Use a different way where Swift store email as file
|
|
*/
|
|
public function testSubmitForgotPassword($parameters)
|
|
{
|
|
$form = $parameters['form'];
|
|
$client = $parameters['client'];
|
|
|
|
$spoolDir = $client->getKernel()->getContainer()->getParameter('swiftmailer.spool.default.file.path');
|
|
|
|
// cleanup pool dir
|
|
$filesystem = new Filesystem();
|
|
$filesystem->remove($spoolDir);
|
|
|
|
// to use `getCollector` since `collect: false` in config_test.yml
|
|
$client->enableProfiler();
|
|
|
|
$data = array(
|
|
'forgot_password[email]' => 'bobby@wallabag.org',
|
|
);
|
|
|
|
$client->submit($form, $data);
|
|
|
|
$this->assertEquals(302, $client->getResponse()->getStatusCode());
|
|
|
|
$crawler = $client->followRedirect();
|
|
|
|
$this->assertContains('An email has been sent to', $client->getResponse()->getContent());
|
|
|
|
// find every files (ie: emails) inside the spool dir except hidden files
|
|
$finder = new Finder();
|
|
$finder
|
|
->in($spoolDir)
|
|
->ignoreDotFiles(true)
|
|
->files();
|
|
|
|
$this->assertCount(1, $finder, 'Only one email has been sent');
|
|
|
|
foreach ($finder as $file) {
|
|
$message = unserialize(file_get_contents($file));
|
|
|
|
$this->assertInstanceOf('Swift_Message', $message);
|
|
$this->assertEquals('Reset Password', $message->getSubject());
|
|
$this->assertEquals('no-reply@wallabag.org', key($message->getFrom()));
|
|
$this->assertEquals('bobby@wallabag.org', key($message->getTo()));
|
|
$this->assertContains(
|
|
'To reset your password - please visit',
|
|
$message->getBody()
|
|
);
|
|
}
|
|
}
|
|
|
|
public function testReset()
|
|
{
|
|
$client = $this->getClient();
|
|
$user = $client->getContainer()
|
|
->get('doctrine.orm.entity_manager')
|
|
->getRepository('WallabagCoreBundle:User')
|
|
->findOneByEmail('bobby@wallabag.org');
|
|
|
|
$crawler = $client->request('GET', '/forgot-password/'.$user->getConfirmationToken());
|
|
|
|
$this->assertEquals(200, $client->getResponse()->getStatusCode());
|
|
$this->assertCount(2, $crawler->filter('input[type=password]'));
|
|
$this->assertCount(1, $form = $crawler->filter('button[type=submit]'));
|
|
$this->assertCount(1, $form);
|
|
|
|
$data = array(
|
|
'change_passwd[new_password][first]' => 'mypassword',
|
|
'change_passwd[new_password][second]' => 'mypassword',
|
|
);
|
|
|
|
$client->submit($form->form(), $data);
|
|
|
|
$this->assertEquals(302, $client->getResponse()->getStatusCode());
|
|
$this->assertContains('login', $client->getResponse()->headers->get('location'));
|
|
}
|
|
|
|
public function testResetBadToken()
|
|
{
|
|
$client = $this->getClient();
|
|
|
|
$client->request('GET', '/forgot-password/UIZOAU29UE902IEPZO');
|
|
|
|
$this->assertEquals(404, $client->getResponse()->getStatusCode());
|
|
}
|
|
|
|
public function testCheckEmailWithoutEmail()
|
|
{
|
|
$client = $this->getClient();
|
|
|
|
$client->request('GET', '/forgot-password/check-email');
|
|
|
|
$this->assertEquals(302, $client->getResponse()->getStatusCode());
|
|
$this->assertContains('forgot-password', $client->getResponse()->headers->get('location'));
|
|
}
|
|
}
|