Next major version 2 with PHP 8.1, Symfony 6, Tabler UI, 2FA ... (#2902)

2022-12-31 21:19:55 +01:00
parent 95e06746bd
commit 90a0fd8a22
2164 changed files with 83700 additions and 86426 deletions
--- a/tests/Saml/SamlProviderTest.php
+++ b/tests/Saml/SamlProviderTest.php
@@ -0,0 +1,125 @@
+<?php
+
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Tests\Saml;
+
+use App\Configuration\SamlConfiguration;
+use App\Entity\User;
+use App\Repository\UserRepository;
+use App\Saml\SamlLoginAttributes;
+use App\Saml\SamlProvider;
+use App\Tests\Configuration\TestConfigLoader;
+use App\Tests\Mocks\SystemConfigurationFactory;
+use PHPUnit\Framework\TestCase;
+use Symfony\Component\Security\Core\Exception\AuthenticationException;
+use Symfony\Component\Security\Core\User\UserProviderInterface;
+
+/**
+ * @covers \App\Saml\SamlProvider
+ */
+class SamlProviderTest extends TestCase
+{
+    protected function getSamlProvider(array $mapping = null, ?User $user = null): SamlProvider
+    {
+        if (null === $mapping) {
+            $mapping = [
+                'mapping' => [
+                    ['saml' => '$Email', 'kimai' => 'email'],
+                    ['saml' => '$title', 'kimai' => 'title'],
+                ],
+                'roles' => [
+                    'attribute' => '',
+                    'mapping' => []
+                ]
+            ];
+        }
+
+        $configuration = SystemConfigurationFactory::create(new TestConfigLoader([]), [
+            'saml' => $mapping
+        ]);
+        $samlConfig = new SamlConfiguration($configuration);
+
+        // can be replaced, once loadUserByIdentifier is in the interface with SF6?
+        $userProvider = $this->getMockBuilder(UserProviderInterface::class)->disableOriginalConstructor();
+        $userProvider->onlyMethods(['refreshUser', 'supportsClass', 'loadUserByIdentifier']);
+        $userProvider = $userProvider->getMock();
+
+        $repository = $this->getMockBuilder(UserRepository::class)->disableOriginalConstructor()->getMock();
+        if ($user !== null) {
+            $userProvider->method('loadUserByIdentifier')->willReturn($user);
+        } else {
+            $userProvider->method('loadUserByIdentifier')->willReturn(new User());
+        }
+
+        $provider = new SamlProvider($repository, $userProvider, $samlConfig);
+
+        return $provider;
+    }
+
+    public function testFindUserHydratesUser()
+    {
+        $user = new User();
+        $user->setAuth(User::AUTH_INTERNAL);
+        $user->setUserIdentifier('foo1@example.com');
+        $user->setTitle('jagfkjhsgf');
+
+        $token = new SamlLoginAttributes();
+        $token->setUserIdentifier($user->getUserIdentifier());
+        $token->setAttributes([
+            'Email' => ['foo@example.com'],
+            'title' => ['Tralalala'],
+        ]);
+
+        $sut = $this->getSamlProvider(null, $user);
+        $tokenUser = $sut->findUser($token);
+
+        self::assertSame($user, $tokenUser);
+        self::assertTrue($tokenUser->isSamlUser());
+        self::assertEquals('foo1@example.com', $tokenUser->getUserIdentifier());
+        self::assertEquals('Tralalala', $tokenUser->getTitle());
+        self::assertEquals('foo@example.com', $tokenUser->getEmail());
+    }
+
+    public function testFindUserCreatesNewUser()
+    {
+        $token = new SamlLoginAttributes();
+        $token->setUserIdentifier('foo2@example.com');
+        $token->setAttributes([
+            'Email' => ['foo@example.com'],
+            'title' => ['Tralalala'],
+        ]);
+
+        $sut = $this->getSamlProvider(null);
+        $tokenUser = $sut->findUser($token);
+
+        self::assertTrue($tokenUser->isSamlUser());
+        self::assertEquals('foo2@example.com', $tokenUser->getUserIdentifier());
+        self::assertEquals('Tralalala', $tokenUser->getTitle());
+        self::assertEquals('foo@example.com', $tokenUser->getEmail());
+    }
+
+    public function testAuthenticateThrowsAuthenticationException()
+    {
+        $this->expectException(AuthenticationException::class);
+        $this->expectExceptionMessage('Failed creating or hydrating user "foo1@example.com": Missing user attribute: Email');
+
+        $user = new User();
+        $user->setAuth(User::AUTH_SAML);
+        $user->setUserIdentifier('foo1@example.com');
+
+        $token = new SamlLoginAttributes();
+        $token->setUserIdentifier($user->getUserIdentifier());
+        $token->setAttributes([
+            'Chicken' => ['foo@example.com'],
+        ]);
+
+        $sut = $this->getSamlProvider(null, $user);
+        $sut->findUser($token);
+    }
+}