123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182 |
- <?php
- /**
- * SPDX-FileCopyrightText: 2016-2024 Nextcloud GmbH and Nextcloud contributors
- * SPDX-FileCopyrightText: 2016 ownCloud, Inc.
- * SPDX-License-Identifier: AGPL-3.0-only
- */
- namespace OCA\Federation\Tests\Controller;
- use OC\BackgroundJob\JobList;
- use OCA\Federation\Controller\OCSAuthAPIController;
- use OCA\Federation\DbHandler;
- use OCA\Federation\TrustedServers;
- use OCP\AppFramework\OCS\OCSForbiddenException;
- use OCP\AppFramework\Utility\ITimeFactory;
- use OCP\IRequest;
- use OCP\Security\Bruteforce\IThrottler;
- use OCP\Security\ISecureRandom;
- use Psr\Log\LoggerInterface;
- use Test\TestCase;
- class OCSAuthAPIControllerTest extends TestCase {
- /** @var \PHPUnit\Framework\MockObject\MockObject|IRequest */
- private $request;
- /** @var \PHPUnit\Framework\MockObject\MockObject|ISecureRandom */
- private $secureRandom;
- /** @var \PHPUnit\Framework\MockObject\MockObject|JobList */
- private $jobList;
- /** @var \PHPUnit\Framework\MockObject\MockObject|TrustedServers */
- private $trustedServers;
- /** @var \PHPUnit\Framework\MockObject\MockObject|DbHandler */
- private $dbHandler;
- /** @var \PHPUnit\Framework\MockObject\MockObject|LoggerInterface */
- private $logger;
- /** @var \PHPUnit\Framework\MockObject\MockObject|ITimeFactory */
- private $timeFactory;
- /** @var \PHPUnit\Framework\MockObject\MockObject|IThrottler */
- private $throttler;
- private OCSAuthAPIController $ocsAuthApi;
- /** @var int simulated timestamp */
- private int $currentTime = 1234567;
- protected function setUp(): void {
- parent::setUp();
- $this->request = $this->createMock(IRequest::class);
- $this->secureRandom = $this->createMock(ISecureRandom::class);
- $this->trustedServers = $this->createMock(TrustedServers::class);
- $this->dbHandler = $this->createMock(DbHandler::class);
- $this->jobList = $this->createMock(JobList::class);
- $this->logger = $this->createMock(LoggerInterface::class);
- $this->timeFactory = $this->createMock(ITimeFactory::class);
- $this->throttler = $this->createMock(IThrottler::class);
- $this->ocsAuthApi = new OCSAuthAPIController(
- 'federation',
- $this->request,
- $this->secureRandom,
- $this->jobList,
- $this->trustedServers,
- $this->dbHandler,
- $this->logger,
- $this->timeFactory,
- $this->throttler
- );
- $this->timeFactory->method('getTime')
- ->willReturn($this->currentTime);
- }
- /**
- * @dataProvider dataTestRequestSharedSecret
- */
- public function testRequestSharedSecret(string $token, string $localToken, bool $isTrustedServer, bool $ok): void {
- $url = 'url';
- $this->trustedServers
- ->expects($this->once())
- ->method('isTrustedServer')->with($url)->willReturn($isTrustedServer);
- $this->dbHandler->expects($this->any())
- ->method('getToken')->with($url)->willReturn($localToken);
- if ($ok) {
- $this->jobList->expects($this->once())->method('add')
- ->with('OCA\Federation\BackgroundJob\GetSharedSecret', ['url' => $url, 'token' => $token, 'created' => $this->currentTime]);
- } else {
- $this->jobList->expects($this->never())->method('add');
- $this->jobList->expects($this->never())->method('remove');
- if (!$isTrustedServer) {
- $this->throttler->expects($this->once())
- ->method('registerAttempt')
- ->with('federationSharedSecret');
- }
- }
- try {
- $this->ocsAuthApi->requestSharedSecret($url, $token);
- $this->assertTrue($ok);
- } catch (OCSForbiddenException $e) {
- $this->assertFalse($ok);
- }
- }
- public function dataTestRequestSharedSecret() {
- return [
- ['token2', 'token1', true, true],
- ['token1', 'token2', false, false],
- ['token1', 'token2', true, false],
- ];
- }
- /**
- * @dataProvider dataTestGetSharedSecret
- */
- public function testGetSharedSecret(bool $isTrustedServer, bool $isValidToken, bool $ok): void {
- $url = 'url';
- $token = 'token';
- /** @var OCSAuthAPIController | \PHPUnit\Framework\MockObject\MockObject $ocsAuthApi */
- $ocsAuthApi = $this->getMockBuilder('OCA\Federation\Controller\OCSAuthAPIController')
- ->setConstructorArgs(
- [
- 'federation',
- $this->request,
- $this->secureRandom,
- $this->jobList,
- $this->trustedServers,
- $this->dbHandler,
- $this->logger,
- $this->timeFactory,
- $this->throttler
- ]
- )->setMethods(['isValidToken'])->getMock();
- $this->trustedServers
- ->expects($this->any())
- ->method('isTrustedServer')->with($url)->willReturn($isTrustedServer);
- $ocsAuthApi->expects($this->any())
- ->method('isValidToken')->with($url, $token)->willReturn($isValidToken);
- if ($ok) {
- $this->secureRandom->expects($this->once())->method('generate')->with(32)
- ->willReturn('secret');
- $this->trustedServers->expects($this->once())
- ->method('addSharedSecret')->with($url, 'secret');
- } else {
- $this->secureRandom->expects($this->never())->method('generate');
- $this->trustedServers->expects($this->never())->method('addSharedSecret');
- $this->throttler->expects($this->once())
- ->method('registerAttempt')
- ->with('federationSharedSecret');
- }
- try {
- $result = $ocsAuthApi->getSharedSecret($url, $token);
- $this->assertTrue($ok);
- $data = $result->getData();
- $this->assertSame('secret', $data['sharedSecret']);
- } catch (OCSForbiddenException $e) {
- $this->assertFalse($ok);
- }
- }
- public function dataTestGetSharedSecret() {
- return [
- [true, true, true],
- [false, true, false],
- [true, false, false],
- [false, false, false],
- ];
- }
- }
|