oauth2-server/tests/Middleware/Psr15ResourceServerMiddlewareTest.php at 203a78c6be932fc251bff4fc0f16dffa1a5231b9 · thephpleague/oauth2-server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
<?php

namespace LeagueTests\Middleware;

use DateInterval;
use DateTimeImmutable;
use League\OAuth2\Server\CryptKey;
use League\OAuth2\Server\Middleware\Psr15ResourceServerMiddleware;
use League\OAuth2\Server\Repositories\AccessTokenRepositoryInterface;
use League\OAuth2\Server\ResourceServer;
use LeagueTests\Stubs\AccessTokenEntity;
use LeagueTests\Stubs\ClientEntity;
use PHPUnit\Framework\TestCase;
use Psr\Http\Message\ResponseFactoryInterface;
use Psr\Http\Server\RequestHandlerInterface;
use Zend\Diactoros\Response;
use Zend\Diactoros\ServerRequest;

class Psr15ResourceServerMiddlewareTest extends TestCase
{
    public function testValidResponse()
    {
        $server = new ResourceServer(
                $this->getMockBuilder(AccessTokenRepositoryInterface::class)->getMock(),
                'file://' . __DIR__ . '/../Stubs/public.key'
        );

        $client = new ClientEntity();
        $client->setIdentifier('clientName');
        $client->setConfidential();

        $accessToken = new AccessTokenEntity();
        $accessToken->setIdentifier('test');
        $accessToken->setUserIdentifier(123);
        $accessToken->setExpiryDateTime((new DateTimeImmutable())->add(new DateInterval('PT1H')));
        $accessToken->setClient($client);
        $accessToken->setPrivateKey(new CryptKey('file://' . __DIR__ . '/../Stubs/private.key'));

        $token = (string) $accessToken;

        $request = new ServerRequest();
        $request = $request->withHeader('authorization', sprintf('Bearer %s', $token));

        $responseFactoryMock = $this->getMockBuilder(ResponseFactoryInterface::class)->getMock();
        $responseFactoryMock->method('createResponse')->willReturn(new Response());
        $requestHandlerMock = $this->getMockBuilder(RequestHandlerInterface::class)->getMock();
        $requestHandlerMock->method('handle')->willReturn(new Response());

        $middleware = new Psr15ResourceServerMiddleware($server, $responseFactoryMock);
        $response = $middleware->process(
                $request,
                $requestHandlerMock
        );

        $this->assertEquals(200, $response->getStatusCode());
    }

    public function testValidResponseExpiredToken()
    {
        $server = new ResourceServer(
                $this->getMockBuilder(AccessTokenRepositoryInterface::class)->getMock(),
                'file://' . __DIR__ . '/../Stubs/public.key'
        );

        $client = new ClientEntity();
        $client->setIdentifier('clientName');

        $accessToken = new AccessTokenEntity();
        $accessToken->setIdentifier('test');
        $accessToken->setUserIdentifier(123);
        $accessToken->setExpiryDateTime((new DateTimeImmutable())->sub(new DateInterval('PT1H')));
        $accessToken->setClient($client);
        $accessToken->setPrivateKey(new CryptKey('file://' . __DIR__ . '/../Stubs/private.key'));

        $token = (string) $accessToken;

        $request = new ServerRequest();
        $request = $request->withHeader('authorization', sprintf('Bearer %s', $token));

        $responseFactoryMock = $this->getMockBuilder(ResponseFactoryInterface::class)->getMock();
        $responseFactoryMock->method('createResponse')->willReturn(new Response());
        $requestHandlerMock = $this->getMockBuilder(RequestHandlerInterface::class)->getMock();
        $requestHandlerMock->method('handle')->willReturn(new Response());

        $middleware = new Psr15ResourceServerMiddleware($server, $responseFactoryMock);
        $response = $middleware->process(
                $request,
                $requestHandlerMock
        );

        $this->assertEquals(401, $response->getStatusCode());
    }

    public function testErrorResponse()
    {
        $server = new ResourceServer(
                $this->getMockBuilder(AccessTokenRepositoryInterface::class)->getMock(),
                'file://' . __DIR__ . '/../Stubs/public.key'
        );

        $request = new ServerRequest();
        $request = $request->withHeader('authorization', '');

        $responseFactoryMock = $this->getMockBuilder(ResponseFactoryInterface::class)->getMock();
        $responseFactoryMock->method('createResponse')->willReturn(new Response());
        $requestHandlerMock = $this->getMockBuilder(RequestHandlerInterface::class)->getMock();
        $requestHandlerMock->method('handle')->willReturn(new Response());

        $middleware = new Psr15ResourceServerMiddleware($server, $responseFactoryMock);
        $response = $middleware->process(
                $request,
                $requestHandlerMock
        );

        $this->assertEquals(401, $response->getStatusCode());
    }
}