9.5/_functional_2_authentication_2_abstract_user_authentication_test_8php_source.html

<?php

declare(strict_types = 1);

namespace ‪TYPO3\CMS\Core\Tests\Functional\Authentication;


/*

 * This file is part of the TYPO3 CMS project.

 *

 * It is free software; you can redistribute it and/or modify it under

 * the terms of the GNU General Public License, either version 2

 * of the License, or any later version.

 *

 * For the full copyright and license information, please read the

 * LICENSE.txt file that was distributed with this source code.

 *

 * The TYPO3 project - inspiring people to share!

 */


use ‪TYPO3\CMS\Core\Tests\Functional\Authentication\Fixtures\AnyUserAuthentication;

use TYPO3\TestingFramework\Core\Functional\FunctionalTestCase;


class ‪AbstractUserAuthenticationTest extends FunctionalTestCase

{

    private ‪$sessionId;


    private ‪$subject;


    protected function ‪setUp(): void

    {

        parent::setUp();

        ‪$GLOBALS['TYPO3_CONF_VARS']['SYS']['encryptionKey'] = '12345';

        ‪$GLOBALS['TYPO3_CONF_VARS']['ANY']['lockIP'] = 0;

        ‪$GLOBALS['TYPO3_CONF_VARS']['ANY']['lockIPv6'] = 0;

        $this->sessionId = bin2hex(random_bytes(20));

        $this->subject = new ‪AnyUserAuthentication($this->sessionId);

    }


    protected function ‪tearDown(): void

    {

        unset($this->sessionId, $this->subject);

        unset(‪$GLOBALS['TYPO3_CONF_VARS']['SYS']['encryptionKey']);

        parent::tearDown();

    }


    public function ‪pushModuleDataDoesNotRevealPlainSessionId(): void

    {

        $this->subject->pushModuleData(self::class, true);

        self::assertNotContains($this->sessionId, $this->subject->uc['moduleSessionID']);

    }


    public function ‪getModuleDataResolvesHashedSessionId(): void

    {

        $this->subject->pushModuleData(self::class, true);

        self::assertTrue($this->subject->getModuleData(self::class));

    }


    public function ‪getModuleDataFallsBackToPlainSessionId(): void

    {

        $this->subject->uc['moduleData'][self::class] = true;

        $this->subject->uc['moduleSessionID'][self::class] = ‪$this->sessionId;

        self::assertTrue($this->subject->getModuleData(self::class));

    }

}