summaryrefslogtreecommitdiff
path: root/tests/units/Core/User/UserSessionTest.php
blob: 2a1180797d7968cbcd367491cdc039b104fc0784 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
<?php

require_once __DIR__.'/../../Base.php';

use Kanboard\Core\User\UserSession;
use Kanboard\Core\Security\Role;

class UserSessionTest extends Base
{
    public function testInitialize()
    {
        $us = new UserSession($this->container);

        $user = array(
            'id' => '123',
            'username' => 'john',
            'password' => 'something',
            'twofactor_secret' => 'something else',
            'is_admin' => '1',
            'is_project_admin' => '0',
            'is_ldap_user' => '0',
            'twofactor_activated' => '0',
            'role' => Role::APP_MANAGER,
        );

        $us->initialize($user);

        $session = $this->container['sessionStorage']->getAll();

        $this->assertNotEmpty($session);
        $this->assertEquals(123, $session['user']['id']);
        $this->assertEquals('john', $session['user']['username']);
        $this->assertEquals(Role::APP_MANAGER, $session['user']['role']);
        $this->assertFalse($session['user']['is_ldap_user']);
        $this->assertFalse($session['user']['twofactor_activated']);
        $this->assertArrayNotHasKey('password', $session['user']);
        $this->assertArrayNotHasKey('twofactor_secret', $session['user']);
        $this->assertArrayNotHasKey('is_admin', $session['user']);
        $this->assertArrayNotHasKey('is_project_admin', $session['user']);

        $this->assertEquals('john', $us->getUsername());
    }

    public function testGetId()
    {
        $us = new UserSession($this->container);

        $this->assertEquals(0, $us->getId());

        $this->container['sessionStorage']->user = array('id' => 2);
        $this->assertEquals(2, $us->getId());

        $this->container['sessionStorage']->user = array('id' => '2');
        $this->assertEquals(2, $us->getId());
    }

    public function testIsLogged()
    {
        $us = new UserSession($this->container);

        $this->assertFalse($us->isLogged());

        $this->container['sessionStorage']->user = array();
        $this->assertFalse($us->isLogged());

        $this->container['sessionStorage']->user = array('id' => 1);
        $this->assertTrue($us->isLogged());
    }

    public function testIsAdmin()
    {
        $us = new UserSession($this->container);

        $this->assertFalse($us->isAdmin());

        $this->container['sessionStorage']->user = array('role' => Role::APP_ADMIN);
        $this->assertTrue($us->isAdmin());

        $this->container['sessionStorage']->user = array('role' => Role::APP_USER);
        $this->assertFalse($us->isAdmin());

        $this->container['sessionStorage']->user = array('role' => '');
        $this->assertFalse($us->isAdmin());
    }

    public function testFilters()
    {
        $us = new UserSession($this->container);
        $this->assertEquals('status:open', $us->getFilters(1));

        $us->setFilters(1, 'assignee:me');
        $this->assertEquals('assignee:me', $us->getFilters(1));

        $this->assertEquals('status:open', $us->getFilters(2));

        $us->setFilters(2, 'assignee:bob');
        $this->assertEquals('assignee:bob', $us->getFilters(2));
    }

    public function testPostAuthentication()
    {
        $us = new UserSession($this->container);
        $this->assertFalse($us->isPostAuthenticationValidated());

        $this->container['sessionStorage']->postAuthenticationValidated = false;
        $this->assertFalse($us->isPostAuthenticationValidated());

        $us->validatePostAuthentication();
        $this->assertTrue($us->isPostAuthenticationValidated());

        $this->container['sessionStorage']->user = array();
        $this->assertFalse($us->hasPostAuthentication());

        $this->container['sessionStorage']->user = array('twofactor_activated' => false);
        $this->assertFalse($us->hasPostAuthentication());

        $this->container['sessionStorage']->user = array('twofactor_activated' => true);
        $this->assertTrue($us->hasPostAuthentication());

        $us->disablePostAuthentication();
        $this->assertFalse($us->hasPostAuthentication());
    }
}