PublicKeyTokenMapperTest.php 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268
  1. <?php
  2. declare(strict_types=1);
  3. /**
  4. * @copyright Copyright (c) 2018 Roeland Jago Douma <roeland@famdouma.nl>
  5. *
  6. * @author Roeland Jago Douma <roeland@famdouma.nl>
  7. *
  8. * @license GNU AGPL version 3 or any later version
  9. *
  10. * This program is free software: you can redistribute it and/or modify
  11. * it under the terms of the GNU Affero General Public License as
  12. * published by the Free Software Foundation, either version 3 of the
  13. * License, or (at your option) any later version.
  14. *
  15. * This program is distributed in the hope that it will be useful,
  16. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  17. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  18. * GNU Affero General Public License for more details.
  19. *
  20. * You should have received a copy of the GNU Affero General Public License
  21. * along with this program. If not, see <http://www.gnu.org/licenses/>.
  22. *
  23. */
  24. namespace Test\Authentication\Token;
  25. use OC;
  26. use OC\Authentication\Token\IToken;
  27. use OC\Authentication\Token\PublicKeyToken;
  28. use OC\Authentication\Token\PublicKeyTokenMapper;
  29. use OCP\DB\QueryBuilder\IQueryBuilder;
  30. use OCP\IDBConnection;
  31. use OCP\IUser;
  32. use Test\TestCase;
  33. /**
  34. * @group DB
  35. */
  36. class PublicKeyTokenMapperTest extends TestCase {
  37. /** @var PublicKeyTokenMapper */
  38. private $mapper;
  39. /** @var IDBConnection */
  40. private $dbConnection;
  41. /** @var int */
  42. private $time;
  43. protected function setUp(): void {
  44. parent::setUp();
  45. $this->dbConnection = OC::$server->getDatabaseConnection();
  46. $this->time = time();
  47. $this->resetDatabase();
  48. $this->mapper = new PublicKeyTokenMapper($this->dbConnection);
  49. }
  50. private function resetDatabase() {
  51. $qb = $this->dbConnection->getQueryBuilder();
  52. $qb->delete('authtoken')->execute();
  53. $qb->insert('authtoken')->values([
  54. 'uid' => $qb->createNamedParameter('user1'),
  55. 'login_name' => $qb->createNamedParameter('User1'),
  56. 'password' => $qb->createNamedParameter('a75c7116460c082912d8f6860a850904|3nz5qbG1nNSLLi6V|c55365a0e54cfdfac4a175bcf11a7612aea74492277bba6e5d96a24497fa9272488787cb2f3ad34d8b9b8060934fce02f008d371df3ff3848f4aa61944851ff0'),
  57. 'name' => $qb->createNamedParameter('Firefox on Linux'),
  58. 'token' => $qb->createNamedParameter('9c5a2e661482b65597408a6bb6c4a3d1af36337381872ac56e445a06cdb7fea2b1039db707545c11027a4966919918b19d875a8b774840b18c6cbb7ae56fe206'),
  59. 'type' => $qb->createNamedParameter(IToken::TEMPORARY_TOKEN),
  60. 'last_activity' => $qb->createNamedParameter($this->time - 120, IQueryBuilder::PARAM_INT), // Two minutes ago
  61. 'last_check' => $this->time - 60 * 10, // 10mins ago
  62. 'public_key' => $qb->createNamedParameter('public key'),
  63. 'private_key' => $qb->createNamedParameter('private key'),
  64. 'version' => $qb->createNamedParameter(2),
  65. ])->execute();
  66. $qb->insert('authtoken')->values([
  67. 'uid' => $qb->createNamedParameter('user2'),
  68. 'login_name' => $qb->createNamedParameter('User2'),
  69. 'password' => $qb->createNamedParameter('971a337057853344700bbeccf836519f|UwOQwyb34sJHtqPV|036d4890f8c21d17bbc7b88072d8ef049a5c832a38e97f3e3d5f9186e896c2593aee16883f617322fa242728d0236ff32d163caeb4bd45e14ca002c57a88665f'),
  70. 'name' => $qb->createNamedParameter('Firefox on Android'),
  71. 'token' => $qb->createNamedParameter('1504445f1524fc801035448a95681a9378ba2e83930c814546c56e5d6ebde221198792fd900c88ed5ead0555780dad1ebce3370d7e154941cd5de87eb419899b'),
  72. 'type' => $qb->createNamedParameter(IToken::TEMPORARY_TOKEN),
  73. 'last_activity' => $qb->createNamedParameter($this->time - 60 * 60 * 24 * 3, IQueryBuilder::PARAM_INT), // Three days ago
  74. 'last_check' => $this->time - 10, // 10secs ago
  75. 'public_key' => $qb->createNamedParameter('public key'),
  76. 'private_key' => $qb->createNamedParameter('private key'),
  77. 'version' => $qb->createNamedParameter(2),
  78. ])->execute();
  79. $qb->insert('authtoken')->values([
  80. 'uid' => $qb->createNamedParameter('user1'),
  81. 'login_name' => $qb->createNamedParameter('User1'),
  82. 'password' => $qb->createNamedParameter('063de945d6f6b26862d9b6f40652f2d5|DZ/z520tfdXPtd0T|395f6b89be8d9d605e409e20b9d9abe477fde1be38a3223f9e508f979bf906e50d9eaa4dca983ca4fb22a241eb696c3f98654e7775f78c4caf13108f98642b53'),
  83. 'name' => $qb->createNamedParameter('Iceweasel on Linux'),
  84. 'token' => $qb->createNamedParameter('47af8697ba590fb82579b5f1b3b6e8066773a62100abbe0db09a289a62f5d980dc300fa3d98b01d7228468d1ab05c1aa14c8d14bd5b6eee9cdf1ac14864680c3'),
  85. 'type' => $qb->createNamedParameter(IToken::TEMPORARY_TOKEN),
  86. 'last_activity' => $qb->createNamedParameter($this->time - 120, IQueryBuilder::PARAM_INT), // Two minutes ago
  87. 'last_check' => $this->time - 60 * 10, // 10mins ago
  88. 'public_key' => $qb->createNamedParameter('public key'),
  89. 'private_key' => $qb->createNamedParameter('private key'),
  90. 'version' => $qb->createNamedParameter(2),
  91. ])->execute();
  92. $qb->insert('authtoken')->values([
  93. 'uid' => $qb->createNamedParameter('user3'),
  94. 'login_name' => $qb->createNamedParameter('User3'),
  95. 'password' => $qb->createNamedParameter('063de945d6f6b26862d9b6f40652f2d5|DZ/z520tfdXPtd0T|395f6b89be8d9d605e409e20b9d9abe477fde1be38a3223f9e508f979bf906e50d9eaa4dca983ca4fb22a241eb696c3f98654e7775f78c4caf13108f98642b53'),
  96. 'name' => $qb->createNamedParameter('Iceweasel on Linux'),
  97. 'token' => $qb->createNamedParameter('6d9a290d239d09f2cc33a03cc54cccd46f7dc71630dcc27d39214824bd3e093f1feb4e2b55eb159d204caa15dee9556c202a5aa0b9d67806c3f4ec2cde11af67'),
  98. 'type' => $qb->createNamedParameter(IToken::TEMPORARY_TOKEN),
  99. 'last_activity' => $qb->createNamedParameter($this->time - 120, IQueryBuilder::PARAM_INT), // Two minutes ago
  100. 'last_check' => $this->time - 60 * 10, // 10mins ago
  101. 'public_key' => $qb->createNamedParameter('public key'),
  102. 'private_key' => $qb->createNamedParameter('private key'),
  103. 'version' => $qb->createNamedParameter(2),
  104. 'password_invalid' => $qb->createNamedParameter(1),
  105. ])->execute();
  106. }
  107. private function getNumberOfTokens() {
  108. $qb = $this->dbConnection->getQueryBuilder();
  109. $result = $qb->select($qb->func()->count('*', 'count'))
  110. ->from('authtoken')
  111. ->execute()
  112. ->fetch();
  113. return (int) $result['count'];
  114. }
  115. public function testInvalidate() {
  116. $token = '9c5a2e661482b65597408a6bb6c4a3d1af36337381872ac56e445a06cdb7fea2b1039db707545c11027a4966919918b19d875a8b774840b18c6cbb7ae56fe206';
  117. $this->mapper->invalidate($token);
  118. $this->assertSame(3, $this->getNumberOfTokens());
  119. }
  120. public function testInvalidateInvalid() {
  121. $token = 'youwontfindthisoneinthedatabase';
  122. $this->mapper->invalidate($token);
  123. $this->assertSame(4, $this->getNumberOfTokens());
  124. }
  125. public function testInvalidateOld() {
  126. $olderThan = $this->time - 60 * 60; // One hour
  127. $this->mapper->invalidateOld($olderThan);
  128. $this->assertSame(3, $this->getNumberOfTokens());
  129. }
  130. public function testGetToken() {
  131. $token = new PublicKeyToken();
  132. $token->setUid('user2');
  133. $token->setLoginName('User2');
  134. $token->setPassword('971a337057853344700bbeccf836519f|UwOQwyb34sJHtqPV|036d4890f8c21d17bbc7b88072d8ef049a5c832a38e97f3e3d5f9186e896c2593aee16883f617322fa242728d0236ff32d163caeb4bd45e14ca002c57a88665f');
  135. $token->setName('Firefox on Android');
  136. $token->setToken('1504445f1524fc801035448a95681a9378ba2e83930c814546c56e5d6ebde221198792fd900c88ed5ead0555780dad1ebce3370d7e154941cd5de87eb419899b');
  137. $token->setType(IToken::TEMPORARY_TOKEN);
  138. $token->setRemember(IToken::DO_NOT_REMEMBER);
  139. $token->setLastActivity($this->time - 60 * 60 * 24 * 3);
  140. $token->setLastCheck($this->time - 10);
  141. $token->setPublicKey('public key');
  142. $token->setPrivateKey('private key');
  143. $token->setVersion(PublicKeyToken::VERSION);
  144. $dbToken = $this->mapper->getToken($token->getToken());
  145. $token->setId($dbToken->getId()); // We don't know the ID
  146. $token->resetUpdatedFields();
  147. $this->assertEquals($token, $dbToken);
  148. }
  149. public function testGetInvalidToken() {
  150. $this->expectException(\OCP\AppFramework\Db\DoesNotExistException::class);
  151. $token = 'thisisaninvalidtokenthatisnotinthedatabase';
  152. $this->mapper->getToken($token);
  153. }
  154. public function testGetTokenById() {
  155. $token = new PublicKeyToken();
  156. $token->setUid('user2');
  157. $token->setLoginName('User2');
  158. $token->setPassword('971a337057853344700bbeccf836519f|UwOQwyb34sJHtqPV|036d4890f8c21d17bbc7b88072d8ef049a5c832a38e97f3e3d5f9186e896c2593aee16883f617322fa242728d0236ff32d163caeb4bd45e14ca002c57a88665f');
  159. $token->setName('Firefox on Android');
  160. $token->setToken('1504445f1524fc801035448a95681a9378ba2e83930c814546c56e5d6ebde221198792fd900c88ed5ead0555780dad1ebce3370d7e154941cd5de87eb419899b');
  161. $token->setType(IToken::TEMPORARY_TOKEN);
  162. $token->setRemember(IToken::DO_NOT_REMEMBER);
  163. $token->setLastActivity($this->time - 60 * 60 * 24 * 3);
  164. $token->setLastCheck($this->time - 10);
  165. $token->setPublicKey('public key');
  166. $token->setPrivateKey('private key');
  167. $token->setVersion(PublicKeyToken::VERSION);
  168. $dbToken = $this->mapper->getToken($token->getToken());
  169. $token->setId($dbToken->getId()); // We don't know the ID
  170. $token->resetUpdatedFields();
  171. $dbToken = $this->mapper->getTokenById($token->getId());
  172. $this->assertEquals($token, $dbToken);
  173. }
  174. public function testGetTokenByIdNotFound() {
  175. $this->expectException(\OCP\AppFramework\Db\DoesNotExistException::class);
  176. $this->mapper->getTokenById(-1);
  177. }
  178. public function testGetInvalidTokenById() {
  179. $this->expectException(\OCP\AppFramework\Db\DoesNotExistException::class);
  180. $id = '42';
  181. $this->mapper->getToken($id);
  182. }
  183. public function testGetTokenByUser() {
  184. $this->assertCount(2, $this->mapper->getTokenByUser('user1'));
  185. }
  186. public function testGetTokenByUserNotFound() {
  187. $this->assertCount(0, $this->mapper->getTokenByUser('user1000'));
  188. }
  189. public function testDeleteById() {
  190. /** @var IUser|\PHPUnit\Framework\MockObject\MockObject $user */
  191. $user = $this->createMock(IUser::class);
  192. $qb = $this->dbConnection->getQueryBuilder();
  193. $qb->select('id')
  194. ->from('authtoken')
  195. ->where($qb->expr()->eq('token', $qb->createNamedParameter('9c5a2e661482b65597408a6bb6c4a3d1af36337381872ac56e445a06cdb7fea2b1039db707545c11027a4966919918b19d875a8b774840b18c6cbb7ae56fe206')));
  196. $result = $qb->execute();
  197. $id = $result->fetch()['id'];
  198. $this->mapper->deleteById('user1', (int)$id);
  199. $this->assertEquals(3, $this->getNumberOfTokens());
  200. }
  201. public function testDeleteByIdWrongUser() {
  202. /** @var IUser|\PHPUnit\Framework\MockObject\MockObject $user */
  203. $user = $this->createMock(IUser::class);
  204. $id = 33;
  205. $this->mapper->deleteById('user1000', $id);
  206. $this->assertEquals(4, $this->getNumberOfTokens());
  207. }
  208. public function testDeleteByName() {
  209. $qb = $this->dbConnection->getQueryBuilder();
  210. $qb->select('name')
  211. ->from('authtoken')
  212. ->where($qb->expr()->eq('token', $qb->createNamedParameter('9c5a2e661482b65597408a6bb6c4a3d1af36337381872ac56e445a06cdb7fea2b1039db707545c11027a4966919918b19d875a8b774840b18c6cbb7ae56fe206')));
  213. $result = $qb->execute();
  214. $name = $result->fetch()['name'];
  215. $this->mapper->deleteByName($name);
  216. $this->assertEquals(3, $this->getNumberOfTokens());
  217. }
  218. public function testHasExpiredTokens() {
  219. $this->assertFalse($this->mapper->hasExpiredTokens('user1'));
  220. $this->assertTrue($this->mapper->hasExpiredTokens('user3'));
  221. }
  222. }