2 files changed, 114 insertions, 2 deletions
diff --git a/tests/units/Auth/ReverseProxyAuthTest.php b/tests/units/Auth/ReverseProxyAuthTest.php
new file mode 100644
index 00000000..cdbc247d
--- /dev/null
+++ b/tests/units/Auth/ReverseProxyAuthTest.php
@@ -0,0 +1,111 @@
+<?php
+
+use Kanboard\Auth\ReverseProxyAuth;
+use Kanboard\Core\Security\Role;
+use Kanboard\Model\UserModel;
+
+require_once __DIR__.'/../Base.php';
+
+class ReverseProxyAuthTest extends Base
+{
+    public function setUp()
+    {
+        parent::setUp();
+
+        $this->container['request'] = $this
+            ->getMockBuilder('\Kanboard\Core\Http\Request')
+            ->setConstructorArgs(array($this->container))
+            ->setMethods(array('getRemoteUser'))
+            ->getMock();
+    }
+
+    public function testGetName()
+    {
+        $provider = new ReverseProxyAuth($this->container);
+        $this->assertEquals('ReverseProxy', $provider->getName());
+    }
+
+    public function testAuthenticateSuccess()
+    {
+        $this->container['request']
+            ->expects($this->once())
+            ->method('getRemoteUser')
+            ->will($this->returnValue('admin'));
+
+        $provider = new ReverseProxyAuth($this->container);
+        $this->assertTrue($provider->authenticate());
+    }
+
+    public function testAuthenticateFailure()
+    {
+        $this->container['request']
+            ->expects($this->once())
+            ->method('getRemoteUser')
+            ->will($this->returnValue(''));
+
+        $provider = new ReverseProxyAuth($this->container);
+        $this->assertFalse($provider->authenticate());
+    }
+
+    public function testValidSession()
+    {
+        $this->container['request']
+            ->expects($this->once())
+            ->method('getRemoteUser')
+            ->will($this->returnValue('admin'));
+
+        $this->container['sessionStorage']->user = array(
+            'username' => 'admin'
+        );
+
+        $provider = new ReverseProxyAuth($this->container);
+        $this->assertTrue($provider->isValidSession());
+    }
+
+    public function testInvalidSession()
+    {
+        $this->container['request']
+            ->expects($this->once())
+            ->method('getRemoteUser')
+            ->will($this->returnValue('foobar'));
+
+        $this->container['sessionStorage']->user = array(
+            'username' => 'admin'
+        );
+
+        $provider = new ReverseProxyAuth($this->container);
+        $this->assertFalse($provider->isValidSession());
+    }
+
+    public function testRoleForNewUser()
+    {
+        $this->container['request']
+            ->expects($this->once())
+            ->method('getRemoteUser')
+            ->will($this->returnValue('someone'));
+
+        $provider = new ReverseProxyAuth($this->container);
+        $this->assertTrue($provider->authenticate());
+
+        $user = $provider->getUser();
+        $this->assertEquals(Role::APP_USER, $user->getRole());
+    }
+
+    public function testRoleIsPreservedForExistingUser()
+    {
+        $this->container['request']
+            ->expects($this->once())
+            ->method('getRemoteUser')
+            ->will($this->returnValue('someone'));
+
+        $provider = new ReverseProxyAuth($this->container);
+        $userModel = new UserModel($this->container);
+
+        $this->assertEquals(2, $userModel->create(array('username' => 'someone', 'role' => Role::APP_MANAGER)));
+
+        $this->assertTrue($provider->authenticate());
+
+        $user = $provider->getUser();
+        $this->assertEquals(Role::APP_MANAGER, $user->getRole());
+    }
+}
diff --git a/tests/units/Auth/TotpAuthTest.php b/tests/units/Auth/TotpAuthTest.php
index c8dcfb28..3a82c01c 100644
--- a/tests/units/Auth/TotpAuthTest.php
+++ b/tests/units/Auth/TotpAuthTest.php
@@ -35,16 +35,17 @@ class TotpAuthTest extends Base
     public function testGetUrl()
     {
         $provider = new TotpAuth($this->container);
+
         $this->assertEmpty($provider->getQrCodeUrl('me'));
         $this->assertEmpty($provider->getKeyUrl('me'));
 
         $provider->setSecret('mySecret');
         $this->assertEquals(
-            'https://chart.googleapis.com/chart?chs=200x200&cht=qr&chld=M|0&chl=otpauth%3A%2F%2Ftotp%2Fme%3Fsecret%3DmySecret',
+            'https://chart.googleapis.com/chart?chs=200x200&cht=qr&chld=M|0&chl=otpauth%3A%2F%2Ftotp%2Fme%3Fsecret%3DmySecret%26issuer%3DKanboard',
             $provider->getQrCodeUrl('me')
         );
 
-        $this->assertEquals('otpauth://totp/me?secret=mySecret', $provider->getKeyUrl('me'));
+        $this->assertEquals('otpauth://totp/me?secret=mySecret&issuer=Kanboard', $provider->getKeyUrl('me'));
     }
 
     public function testAuthentication()