* Facebook support

5 files changed, 397 insertions, 0 deletions

diff --git a/lib/facebook-graph-sdk/tests/Helpers/FacebookCanvasHelperTest.php b/lib/facebook-graph-sdk/tests/Helpers/FacebookCanvasHelperTest.php
new file mode 100644
index 0000000..294440e
--- /dev/null
+++ b/lib/facebook-graph-sdk/tests/Helpers/FacebookCanvasHelperTest.php
@@ -0,0 +1,53 @@
+<?php
+/**
+ * Copyright 2014 Facebook, Inc.
+ *
+ * You are hereby granted a non-exclusive, worldwide, royalty-free license to
+ * use, copy, modify, and distribute this software in source code or binary
+ * form for use in connection with the web services and APIs provided by
+ * Facebook.
+ *
+ * As with any software that integrates with the Facebook platform, your use
+ * of this software is subject to the Facebook Developer Principles and
+ * Policies [http://developers.facebook.com/policy/]. This copyright notice
+ * shall be included in all copies or substantial portions of the software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
+ * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+ * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+ * DEALINGS IN THE SOFTWARE.
+ *
+ */
+namespace Facebook\Tests\Helpers;
+
+use Facebook\FacebookApp;
+use Facebook\FacebookClient;
+use Facebook\Helpers\FacebookCanvasHelper;
+
+class FacebookCanvasHelperTest extends \PHPUnit_Framework_TestCase
+{
+    public $rawSignedRequestAuthorized = 'vdZXlVEQ5NTRRTFvJ7Jeo_kP4SKnBDvbNP0fEYKS0Sg=.eyJvYXV0aF90b2tlbiI6ImZvb190b2tlbiIsImFsZ29yaXRobSI6IkhNQUMtU0hBMjU2IiwiaXNzdWVkX2F0IjoxNDAyNTUxMDMxLCJ1c2VyX2lkIjoiMTIzIn0=';
+
+    /**
+     * @var FacebookCanvasHelper
+     */
+    protected $helper;
+
+    public function setUp()
+    {
+        $app = new FacebookApp('123', 'foo_app_secret');
+        $this->helper = new FacebookCanvasHelper($app, new FacebookClient());
+    }
+
+    public function testSignedRequestDataCanBeRetrievedFromPostData()
+    {
+        $_POST['signed_request'] = $this->rawSignedRequestAuthorized;
+
+        $rawSignedRequest = $this->helper->getRawSignedRequest();
+
+        $this->assertEquals($this->rawSignedRequestAuthorized, $rawSignedRequest);
+    }
+}
diff --git a/lib/facebook-graph-sdk/tests/Helpers/FacebookJavaScriptHelperTest.php b/lib/facebook-graph-sdk/tests/Helpers/FacebookJavaScriptHelperTest.php
new file mode 100644
index 0000000..3f9cb88
--- /dev/null
+++ b/lib/facebook-graph-sdk/tests/Helpers/FacebookJavaScriptHelperTest.php
@@ -0,0 +1,45 @@
+<?php
+/**
+ * Copyright 2014 Facebook, Inc.
+ *
+ * You are hereby granted a non-exclusive, worldwide, royalty-free license to
+ * use, copy, modify, and distribute this software in source code or binary
+ * form for use in connection with the web services and APIs provided by
+ * Facebook.
+ *
+ * As with any software that integrates with the Facebook platform, your use
+ * of this software is subject to the Facebook Developer Principles and
+ * Policies [http://developers.facebook.com/policy/]. This copyright notice
+ * shall be included in all copies or substantial portions of the software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
+ * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+ * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+ * DEALINGS IN THE SOFTWARE.
+ *
+ */
+namespace Facebook\Tests\Helpers;
+
+use Facebook\FacebookApp;
+use Facebook\FacebookClient;
+use Facebook\Helpers\FacebookJavaScriptHelper;
+
+class FacebookJavaScriptHelperTest extends \PHPUnit_Framework_TestCase
+{
+    public $rawSignedRequestAuthorized = 'vdZXlVEQ5NTRRTFvJ7Jeo_kP4SKnBDvbNP0fEYKS0Sg=.eyJvYXV0aF90b2tlbiI6ImZvb190b2tlbiIsImFsZ29yaXRobSI6IkhNQUMtU0hBMjU2IiwiaXNzdWVkX2F0IjoxNDAyNTUxMDMxLCJ1c2VyX2lkIjoiMTIzIn0=';
+
+    public function testARawSignedRequestCanBeRetrievedFromCookieData()
+    {
+        $_COOKIE['fbsr_123'] = $this->rawSignedRequestAuthorized;
+
+        $app = new FacebookApp('123', 'foo_app_secret');
+        $helper = new FacebookJavaScriptHelper($app, new FacebookClient());
+
+        $rawSignedRequest = $helper->getRawSignedRequest();
+
+        $this->assertEquals($this->rawSignedRequestAuthorized, $rawSignedRequest);
+    }
+}
diff --git a/lib/facebook-graph-sdk/tests/Helpers/FacebookPageTabHelperTest.php b/lib/facebook-graph-sdk/tests/Helpers/FacebookPageTabHelperTest.php
new file mode 100644
index 0000000..a4b06c1
--- /dev/null
+++ b/lib/facebook-graph-sdk/tests/Helpers/FacebookPageTabHelperTest.php
@@ -0,0 +1,46 @@
+<?php
+/**
+ * Copyright 2014 Facebook, Inc.
+ *
+ * You are hereby granted a non-exclusive, worldwide, royalty-free license to
+ * use, copy, modify, and distribute this software in source code or binary
+ * form for use in connection with the web services and APIs provided by
+ * Facebook.
+ *
+ * As with any software that integrates with the Facebook platform, your use
+ * of this software is subject to the Facebook Developer Principles and
+ * Policies [http://developers.facebook.com/policy/]. This copyright notice
+ * shall be included in all copies or substantial portions of the software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
+ * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+ * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+ * DEALINGS IN THE SOFTWARE.
+ *
+ */
+namespace Facebook\Tests\Helpers;
+
+use Facebook\FacebookApp;
+use Facebook\FacebookClient;
+use Facebook\Helpers\FacebookPageTabHelper;
+
+class FacebookPageTabHelperTest extends \PHPUnit_Framework_TestCase
+{
+    protected $rawSignedRequestAuthorized = '6Hi26ECjkj347belC0O8b8H5lwiIz5eA6V9VVjTg-HU=.eyJhbGdvcml0aG0iOiJITUFDLVNIQTI1NiIsImlzc3VlZF9hdCI6MzIxLCJvYXV0aF90b2tlbiI6ImZvb190b2tlbiIsInVzZXJfaWQiOiIxMjMiLCJwYWdlIjp7ImlkIjoiNDIiLCJsaWtlZCI6dHJ1ZSwiYWRtaW4iOmZhbHNlfX0=';
+
+    public function testPageDataCanBeAccessed()
+    {
+        $_POST['signed_request'] = $this->rawSignedRequestAuthorized;
+
+        $app = new FacebookApp('123', 'foo_app_secret');
+        $helper = new FacebookPageTabHelper($app, new FacebookClient());
+
+        $this->assertFalse($helper->isAdmin());
+        $this->assertEquals('42', $helper->getPageId());
+        $this->assertEquals('42', $helper->getPageData('id'));
+        $this->assertEquals('default', $helper->getPageData('foo', 'default'));
+    }
+}
diff --git a/lib/facebook-graph-sdk/tests/Helpers/FacebookRedirectLoginHelperTest.php b/lib/facebook-graph-sdk/tests/Helpers/FacebookRedirectLoginHelperTest.php
new file mode 100644
index 0000000..faa4647
--- /dev/null
+++ b/lib/facebook-graph-sdk/tests/Helpers/FacebookRedirectLoginHelperTest.php
@@ -0,0 +1,140 @@
+<?php
+/**
+ * Copyright 2014 Facebook, Inc.
+ *
+ * You are hereby granted a non-exclusive, worldwide, royalty-free license to
+ * use, copy, modify, and distribute this software in source code or binary
+ * form for use in connection with the web services and APIs provided by
+ * Facebook.
+ *
+ * As with any software that integrates with the Facebook platform, your use
+ * of this software is subject to the Facebook Developer Principles and
+ * Policies [http://developers.facebook.com/policy/]. This copyright notice
+ * shall be included in all copies or substantial portions of the software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
+ * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+ * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+ * DEALINGS IN THE SOFTWARE.
+ *
+ */
+namespace Facebook\Tests\Helpers;
+
+use Facebook\Facebook;
+use Facebook\FacebookApp;
+use Facebook\FacebookClient;
+use Facebook\Authentication\OAuth2Client;
+use Facebook\Helpers\FacebookRedirectLoginHelper;
+use Facebook\PersistentData\FacebookMemoryPersistentDataHandler;
+use Facebook\PseudoRandomString\PseudoRandomStringGeneratorInterface;
+
+class FooPseudoRandomStringGenerator implements PseudoRandomStringGeneratorInterface
+{
+    public function getPseudoRandomString($length)
+    {
+        return 'csprs123';
+    }
+}
+
+class FooRedirectLoginOAuth2Client extends OAuth2Client
+{
+    public function getAccessTokenFromCode($code, $redirectUri = '', $machineId = null)
+    {
+        return 'foo_token_from_code|' . $code . '|' . $redirectUri;
+    }
+}
+
+class FacebookRedirectLoginHelperTest extends \PHPUnit_Framework_TestCase
+{
+    /**
+     * @var FacebookMemoryPersistentDataHandler
+     */
+    protected $persistentDataHandler;
+
+    /**
+     * @var FacebookRedirectLoginHelper
+     */
+    protected $redirectLoginHelper;
+
+    const REDIRECT_URL = 'http://invalid.zzz';
+
+    public function setUp()
+    {
+        $this->persistentDataHandler = new FacebookMemoryPersistentDataHandler();
+
+        $app = new FacebookApp('123', 'foo_app_secret');
+        $oAuth2Client = new FooRedirectLoginOAuth2Client($app, new FacebookClient(), 'v1337');
+        $this->redirectLoginHelper = new FacebookRedirectLoginHelper($oAuth2Client, $this->persistentDataHandler);
+    }
+
+    public function testLoginURL()
+    {
+        $scope = ['foo', 'bar'];
+        $loginUrl = $this->redirectLoginHelper->getLoginUrl(self::REDIRECT_URL, $scope);
+
+        $expectedUrl = 'https://www.facebook.com/v1337/dialog/oauth?';
+        $this->assertTrue(strpos($loginUrl, $expectedUrl) === 0, 'Unexpected base login URL returned from getLoginUrl().');
+
+        $params = [
+            'client_id' => '123',
+            'redirect_uri' => self::REDIRECT_URL,
+            'state' => $this->persistentDataHandler->get('state'),
+            'sdk' => 'php-sdk-' . Facebook::VERSION,
+            'scope' => implode(',', $scope),
+        ];
+        foreach ($params as $key => $value) {
+            $this->assertContains($key . '=' . urlencode($value), $loginUrl);
+        }
+    }
+
+    public function testLogoutURL()
+    {
+        $logoutUrl = $this->redirectLoginHelper->getLogoutUrl('foo_token', self::REDIRECT_URL);
+        $expectedUrl = 'https://www.facebook.com/logout.php?';
+        $this->assertTrue(strpos($logoutUrl, $expectedUrl) === 0, 'Unexpected base logout URL returned from getLogoutUrl().');
+
+        $params = [
+            'next' => self::REDIRECT_URL,
+            'access_token' => 'foo_token',
+        ];
+        foreach ($params as $key => $value) {
+            $this->assertTrue(
+                strpos($logoutUrl, $key . '=' . urlencode($value)) !== false
+            );
+        }
+    }
+
+    public function testAnAccessTokenCanBeObtainedFromRedirect()
+    {
+        $this->persistentDataHandler->set('state', 'foo_state');
+        $_GET['state'] = 'foo_state';
+        $_GET['code'] = 'foo_code';
+
+        $accessToken = $this->redirectLoginHelper->getAccessToken(self::REDIRECT_URL);
+
+        $this->assertEquals('foo_token_from_code|foo_code|' . self::REDIRECT_URL, (string)$accessToken);
+    }
+
+    public function testACustomCsprsgCanBeInjected()
+    {
+        $app = new FacebookApp('123', 'foo_app_secret');
+        $accessTokenClient = new FooRedirectLoginOAuth2Client($app, new FacebookClient(), 'v1337');
+        $fooPrsg = new FooPseudoRandomStringGenerator();
+        $helper = new FacebookRedirectLoginHelper($accessTokenClient, $this->persistentDataHandler, null, $fooPrsg);
+
+        $loginUrl = $helper->getLoginUrl(self::REDIRECT_URL);
+
+        $this->assertContains('state=csprs123', $loginUrl);
+    }
+
+    public function testThePseudoRandomStringGeneratorWillAutoDetectCsprsg()
+    {
+        $this->assertInstanceOf(
+            'Facebook\PseudoRandomString\PseudoRandomStringGeneratorInterface',
+            $this->redirectLoginHelper->getPseudoRandomStringGenerator()
+        );
+    }
+}
diff --git a/lib/facebook-graph-sdk/tests/Helpers/FacebookSignedRequestFromInputHelperTest.php b/lib/facebook-graph-sdk/tests/Helpers/FacebookSignedRequestFromInputHelperTest.php
new file mode 100644
index 0000000..d9bd803
--- /dev/null
+++ b/lib/facebook-graph-sdk/tests/Helpers/FacebookSignedRequestFromInputHelperTest.php
@@ -0,0 +1,113 @@
+<?php
+/**
+ * Copyright 2014 Facebook, Inc.
+ *
+ * You are hereby granted a non-exclusive, worldwide, royalty-free license to
+ * use, copy, modify, and distribute this software in source code or binary
+ * form for use in connection with the web services and APIs provided by
+ * Facebook.
+ *
+ * As with any software that integrates with the Facebook platform, your use
+ * of this software is subject to the Facebook Developer Principles and
+ * Policies [http://developers.facebook.com/policy/]. This copyright notice
+ * shall be included in all copies or substantial portions of the software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
+ * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+ * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+ * DEALINGS IN THE SOFTWARE.
+ *
+ */
+namespace Facebook\Tests\Helpers;
+
+use Facebook\FacebookApp;
+use Facebook\FacebookClient;
+use Facebook\FacebookRequest;
+use Facebook\FacebookResponse;
+use Facebook\Helpers\FacebookSignedRequestFromInputHelper;
+
+class FooSignedRequestHelper extends FacebookSignedRequestFromInputHelper
+{
+    public function getRawSignedRequest()
+    {
+        return null;
+    }
+}
+
+class FooSignedRequestHelperFacebookClient extends FacebookClient
+{
+    public function sendRequest(FacebookRequest $request)
+    {
+        $params = $request->getParams();
+        $rawResponse = json_encode([
+            'access_token' => 'foo_access_token_from:' . $params['code'],
+        ]);
+
+        return new FacebookResponse($request, $rawResponse, 200);
+    }
+}
+
+class FacebookSignedRequestFromInputHelperTest extends \PHPUnit_Framework_TestCase
+{
+    /**
+     * @var FooSignedRequestHelper
+     */
+    protected $helper;
+
+    public $rawSignedRequestAuthorizedWithAccessToken = 'vdZXlVEQ5NTRRTFvJ7Jeo_kP4SKnBDvbNP0fEYKS0Sg=.eyJvYXV0aF90b2tlbiI6ImZvb190b2tlbiIsImFsZ29yaXRobSI6IkhNQUMtU0hBMjU2IiwiaXNzdWVkX2F0IjoxNDAyNTUxMDMxLCJ1c2VyX2lkIjoiMTIzIn0=';
+    public $rawSignedRequestAuthorizedWithCode = 'oBtmZlsFguNQvGRETDYQQu1-PhwcArgbBBEK4urbpRA=.eyJjb2RlIjoiZm9vX2NvZGUiLCJhbGdvcml0aG0iOiJITUFDLVNIQTI1NiIsImlzc3VlZF9hdCI6MTQwNjMxMDc1MiwidXNlcl9pZCI6IjEyMyJ9';
+    public $rawSignedRequestUnauthorized = 'KPlyhz-whtYAhHWr15N5TkbS_avz-2rUJFpFkfXKC88=.eyJhbGdvcml0aG0iOiJITUFDLVNIQTI1NiIsImlzc3VlZF9hdCI6MTQwMjU1MTA4Nn0=';
+
+    public function setUp()
+    {
+        $app = new FacebookApp('123', 'foo_app_secret');
+        $this->helper = new FooSignedRequestHelper($app, new FooSignedRequestHelperFacebookClient());
+    }
+
+    public function testSignedRequestDataCanBeRetrievedFromPostData()
+    {
+        $_POST['signed_request'] = 'foo_signed_request';
+
+        $rawSignedRequest = $this->helper->getRawSignedRequestFromPost();
+
+        $this->assertEquals('foo_signed_request', $rawSignedRequest);
+    }
+
+    public function testSignedRequestDataCanBeRetrievedFromCookieData()
+    {
+        $_COOKIE['fbsr_123'] = 'foo_signed_request';
+
+        $rawSignedRequest = $this->helper->getRawSignedRequestFromCookie();
+
+        $this->assertEquals('foo_signed_request', $rawSignedRequest);
+    }
+
+    public function testAccessTokenWillBeNullWhenAUserHasNotYetAuthorizedTheApp()
+    {
+        $this->helper->instantiateSignedRequest($this->rawSignedRequestUnauthorized);
+        $accessToken = $this->helper->getAccessToken();
+
+        $this->assertNull($accessToken);
+    }
+
+    public function testAnAccessTokenCanBeInstantiatedWhenRedirectReturnsAnAccessToken()
+    {
+        $this->helper->instantiateSignedRequest($this->rawSignedRequestAuthorizedWithAccessToken);
+        $accessToken = $this->helper->getAccessToken();
+
+        $this->assertInstanceOf('Facebook\Authentication\AccessToken', $accessToken);
+        $this->assertEquals('foo_token', $accessToken->getValue());
+    }
+
+    public function testAnAccessTokenCanBeInstantiatedWhenRedirectReturnsACode()
+    {
+        $this->helper->instantiateSignedRequest($this->rawSignedRequestAuthorizedWithCode);
+        $accessToken = $this->helper->getAccessToken();
+
+        $this->assertInstanceOf('Facebook\Authentication\AccessToken', $accessToken);
+        $this->assertEquals('foo_access_token_from:foo_code', $accessToken->getValue());
+    }
+}