HashServiceTest.php

Go to the documentation of this file.

<?php
namespace ‪TYPO3\CMS\Extbase\Tests\Unit\Security\Cryptography;
 
/*
 * This file is part of the TYPO3 CMS project.
 *
 * It is free software; you can redistribute it and/or modify it under
 * the terms of the GNU General Public License, either version 2
 * of the License, or any later version.
 *
 * For the full copyright and license information, please read the
 * LICENSE.txt file that was distributed with this source code.
 *
 * The TYPO3 project - inspiring people to share!
 */
use ‪TYPO3\CMS\Extbase\Security\Exception\InvalidArgumentForHashGenerationException;
use ‪TYPO3\CMS\Extbase\Security\Exception\InvalidHashException;
use TYPO3\TestingFramework\Core\Unit\UnitTestCase;
 
class ‪HashServiceTest extends UnitTestCase
{
    protected ‪$hashService;
 
    protected function ‪setUp()
    {
        $this->hashService = new \TYPO3\CMS\Extbase\Security\Cryptography\HashService();
        ‪$GLOBALS['TYPO3_CONF_VARS']['SYS']['encryptionKey'] = 'Testing';
    }
 
    public function ‪generateHmacReturnsHashStringIfStringIsGiven()
    {
        $hash = $this->hashService->generateHmac('asdf');
        $this->assertTrue(is_string($hash));
    }
 
    public function ‪generateHmacReturnsHashStringWhichContainsSomeSalt()
    {
        $hash = $this->hashService->generateHmac('asdf');
        $this->assertNotEquals(sha1('asdf'), $hash);
    }
 
    public function ‪generateHmacReturnsDifferentHashStringsForDifferentInputStrings()
    {
        $hash1 = $this->hashService->generateHmac('asdf');
        $hash2 = $this->hashService->generateHmac('blubb');
        $this->assertNotEquals($hash1, $hash2);
    }
 
    public function ‪generateHmacThrowsExceptionIfNoStringGiven()
    {
        $this->expectException(InvalidArgumentForHashGenerationException::class);
        $this->expectExceptionCode(1255069587);
        $this->hashService->generateHmac(null);
    }
 
    public function ‪generatedHmacCanBeValidatedAgain()
    {
        $string = 'asdf';
        $hash = $this->hashService->generateHmac($string);
        $this->assertTrue($this->hashService->validateHmac($string, $hash));
    }
 
    public function ‪generatedHmacWillNotBeValidatedIfHashHasBeenChanged()
    {
        $string = 'asdf';
        $hash = 'myhash';
        $this->assertFalse($this->hashService->validateHmac($string, $hash));
    }
 
    public function ‪appendHmacThrowsExceptionIfNoStringGiven()
    {
        $this->expectException(InvalidArgumentForHashGenerationException::class);
        $this->expectExceptionCode(1255069587);
        $this->hashService->appendHmac(null);
    }
 
    public function ‪appendHmacAppendsHmacToGivenString()
    {
        $string = 'This is some arbitrary string ';
        $hashedString = $this->hashService->appendHmac($string);
        $this->assertSame($string, substr($hashedString, 0, -40));
    }
 
    public function ‪validateAndStripHmacThrowsExceptionIfNoStringGiven()
    {
        $this->expectException(InvalidArgumentForHashGenerationException::class);
        $this->expectExceptionCode(1320829762);
        $this->hashService->validateAndStripHmac(null);
    }
 
    public function ‪validateAndStripHmacThrowsExceptionIfGivenStringIsTooShort()
    {
        $this->expectException(InvalidArgumentForHashGenerationException::class);
        $this->expectExceptionCode(1320830276);
        $this->hashService->validateAndStripHmac('string with less than 40 characters');
    }
 
    public function ‪validateAndStripHmacThrowsExceptionIfGivenStringHasNoHashAppended()
    {
        $this->expectException(InvalidHashException::class);
        $this->expectExceptionCode(1320830018);
        $this->hashService->validateAndStripHmac('string with exactly a length 40 of chars');
    }
 
    public function ‪validateAndStripHmacThrowsExceptionIfTheAppendedHashIsInvalid()
    {
        $this->expectException(InvalidHashException::class);
        $this->expectExceptionCode(1320830018);
        $this->hashService->validateAndStripHmac('some Stringac43682075d36592d4cb320e69ff0aa515886eab');
    }
 
    public function ‪validateAndStripHmacReturnsTheStringWithoutHmac()
    {
        $string = ' Some arbitrary string with special characters: öäüß!"§$ ';
        $hashedString = $this->hashService->appendHmac($string);
        $actualResult = $this->hashService->validateAndStripHmac($hashedString);
        $this->assertSame($string, $actualResult);
    }
}