added support for saml login (#1408)

tests/EventSubscriber/ResetPasswordSubscriberTest.php

@@ -0,0 +1,89 @@
+<?php
+
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\EventSubscriber;
+
+use App\Entity\User;
+use App\EventSubscriber\ResetPasswordSubscriber;
+use App\Tests\Security\TestUserEntity;
+use FOS\UserBundle\Event\GetResponseNullableUserEvent;
+use FOS\UserBundle\FOSUserEvents;
+use PHPUnit\Framework\TestCase;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
+
+/**
+ * @covers \App\EventSubscriber\ResetPasswordSubscriber
+ */
+class ResetPasswordSubscriberTest extends TestCase
+{
+    public function testGetSubscribedEvents()
+    {
+        $events = ResetPasswordSubscriber::getSubscribedEvents();
+        self::assertCount(1, $events);
+        $this->assertArrayHasKey(FOSUserEvents::RESETTING_SEND_EMAIL_INITIALIZE, $events);
+        $methodName = $events[FOSUserEvents::RESETTING_SEND_EMAIL_INITIALIZE][0];
+        $this->assertTrue(method_exists(ResetPasswordSubscriber::class, $methodName));
+    }
+
+    public function testUnknownUserTypeIsIgnored()
+    {
+        $user = new TestUserEntity();
+        $user->setUsername('foo@bar');
+
+        $request = $this->createMock(Request::class);
+        $event = new GetResponseNullableUserEvent($user, $request);
+
+        $sut = new ResetPasswordSubscriber();
+        $sut->onInitializeResetPassword($event);
+
+        self::assertNull($event->getResponse());
+    }
+
+    public function testInternalAuthTypeIsIgnored()
+    {
+        $user = new User();
+        $user->setUsername('foo@bar');
+
+        $request = $this->createMock(Request::class);
+        $event = new GetResponseNullableUserEvent($user, $request);
+
+        $sut = new ResetPasswordSubscriber();
+        $sut->onInitializeResetPassword($event);
+
+        self::assertNull($event->getResponse());
+    }
+
+    /**
+     * @dataProvider getAuthTypeData
+     */
+    public function testNonInternalAuthTypeThrowsAccessDeniedException(string $authType)
+    {
+        $this->expectException(AccessDeniedHttpException::class);
+        $this->expectExceptionMessage(sprintf('The user "foo@bar" tried to reset the password, but it is registered as "%s" auth-type.', $authType));
+
+        $user = new User();
+        $user->setUsername('foo@bar');
+        $user->setAuth($authType);
+
+        $request = $this->createMock(Request::class);
+        $event = new GetResponseNullableUserEvent($user, $request);
+
+        $sut = new ResetPasswordSubscriber();
+        $sut->onInitializeResetPassword($event);
+    }
+
+    public function getAuthTypeData()
+    {
+        return [
+            [User::AUTH_SAML],
+            [User::AUTH_LDAP],
+        ];
+    }
+}