9.5/_backend_form_protection_test_8php_source.html

<?php

namespace ‪TYPO3\CMS\Core\Tests\Unit\FormProtection;


/*

 * This file is part of the TYPO3 CMS project.

 *

 * It is free software; you can redistribute it and/or modify it under

 * the terms of the GNU General Public License, either version 2

 * of the License, or any later version.

 *

 * For the full copyright and license information, please read the

 * LICENSE.txt file that was distributed with this source code.

 *

 * The TYPO3 project - inspiring people to share!

 */


use ‪TYPO3\CMS\Core\Authentication\BackendUserAuthentication;

use ‪TYPO3\CMS\Core\FormProtection\BackendFormProtection;

use ‪TYPO3\CMS\Core\Registry;

use TYPO3\TestingFramework\Core\Unit\UnitTestCase;


class ‪BackendFormProtectionTest extends UnitTestCase

{

    protected ‪$subject;


    protected ‪$backendUserMock;


    protected ‪$registryMock;


    protected function ‪setUp()

    {

        $this->backendUserMock = $this->createMock(\‪TYPO3\CMS\Core\Authentication\BackendUserAuthentication::class);

        $this->backendUserMock->user['uid'] = 1;

        $this->registryMock = $this->createMock(Registry::class);

        $this->subject = new ‪BackendFormProtection(

            $this->backendUserMock,

            $this->registryMock,

            function () {

                throw new \Exception('Closure called', 1442592030);

            }

        );

    }


    public function ‪generateTokenReadsTokenFromSessionData()

    {

        $this->backendUserMock

            ->expects($this->once())

            ->method('getSessionData')

            ->with('formProtectionSessionToken')

            ->will($this->returnValue([]));

        $this->subject->generateToken('foo');

    }


    public function ‪tokenFromSessionDataIsAvailableForValidateToken()

    {

        $sessionToken = '881ffea2159ac72182557b79dc0c723f5a8d20136f9fab56cdd4f8b3a1dbcfcd';

        $formName = 'foo';

        $action = 'edit';

        $formInstanceName = '42';


        $tokenId = \TYPO3\CMS\Core\Utility\GeneralUtility::hmac(

            $formName . $action . $formInstanceName . $sessionToken

        );


        $this->backendUserMock

            ->expects($this->atLeastOnce())

            ->method('getSessionData')

            ->with('formProtectionSessionToken')

            ->will($this->returnValue($sessionToken));


        $this->assertTrue(

            $this->subject->validateToken($tokenId, $formName, $action, $formInstanceName)

        );

    }


    public function ‪restoreSessionTokenFromRegistryThrowsExceptionIfSessionTokenIsEmpty()

    {

        $this->expectException(\UnexpectedValueException::class);

        $this->expectExceptionCode(1301827270);


        $this->subject->setSessionTokenFromRegistry();

    }


    public function ‪persistSessionTokenWritesTokenToSession()

    {

        $this->backendUserMock

            ->expects($this->once())

            ->method('setAndSaveSessionData');

        $this->subject->persistSessionToken();

    }


    public function ‪failingTokenValidationInvokesFailingTokenClosure()

    {

        $this->expectException(\Exception::class);

        $this->expectExceptionCode(1442592030);


        $this->subject->validateToken('foo', 'bar');

    }

}