9.5/_unit_2_authentication_2_authentication_service_test_8php_source.html

<?php

declare(strict_types = 1);

namespace ‪TYPO3\CMS\Core\Tests\Unit\Authentication;


/*

 * This file is part of the TYPO3 CMS project.

 *

 * It is free software; you can redistribute it and/or modify it under

 * the terms of the GNU General Public License, either version 2

 * of the License, or any later version.

 *

 * For the full copyright and license information, please read the

 * LICENSE.txt file that was distributed with this source code.

 *

 * The TYPO3 project - inspiring people to share!

 */


use ‪TYPO3\CMS\Core\Authentication\AbstractUserAuthentication;

use ‪TYPO3\CMS\Core\Authentication\AuthenticationService;

use ‪TYPO3\CMS\Core\Crypto\PasswordHashing\InvalidPasswordHashException;

use ‪TYPO3\CMS\Core\Log\Logger;

use TYPO3\TestingFramework\Core\Unit\UnitTestCase;


class ‪AuthenticationServiceTest extends UnitTestCase

{

    protected ‪$resetSingletonInstances = true;


    public function ‪processLoginDataProvider(): array

    {

        return [

            'Backend login with securityLevel "normal"' => [

                'normal',

                [

                    'status' => 'login',

                    'uname' => 'admin',

                    'uident' => 'password',

                ],

                [

                    'status' => 'login',

                    'uname' => 'admin',

                    'uident' => 'password',

                    'uident_text' => 'password',

                ]

            ],

            'Frontend login with securityLevel "normal"' => [

                'normal',

                [

                    'status' => 'login',

                    'uname' => 'admin',

                    'uident' => 'password',

                ],

                [

                    'status' => 'login',

                    'uname' => 'admin',

                    'uident' => 'password',

                    'uident_text' => 'password',

                ]

            ],

        ];

    }


    public function ‪processLoginReturnsCorrectData($passwordSubmissionStrategy, $loginData, $expectedProcessedData): void

    {

        $subject = new ‪AuthenticationService();

        // Login data is modified by reference

        $subject->processLoginData($loginData, $passwordSubmissionStrategy);

        $this->assertEquals($expectedProcessedData, $loginData);

    }


    public function ‪authUserReturns100IfSubmittedPasswordIsEmpty(): void

    {

        $subject = new ‪AuthenticationService();

        $subject->initAuth('mode', ['uident_text' => '', 'uname' => 'user'], [], null);

        $this->assertSame(100, $subject->authUser([]));

    }


    public function ‪authUserReturns100IfUserSubmittedUsernameIsEmpty(): void

    {

        $subject = new ‪AuthenticationService();

        $subject->initAuth('mode', ['uident_text' => 'foo', 'uname' => ''], [], null);

        $this->assertSame(100, $subject->authUser([]));

    }


    public function ‪authUserThrowsExceptionIfUserTableIsNotSet(): void

    {

        $subject = new ‪AuthenticationService();

        $subject->initAuth('mode', ['uident_text' => 'password', 'uname' => 'user'], [], null);

        $this->expectException(\RuntimeException::class);

        $this->expectExceptionCode(1533159150);

        $subject->authUser([]);

    }


    public function ‪authUserThrowsExceptionIfPasswordInDbDoesNotResolveToAValidHash(): void

    {

        $subject = new ‪AuthenticationService();

        $pObjProphecy = $this->prophesize(AbstractUserAuthentication::class);

        $loggerProphecy = $this->prophesize(Logger::class);

        $subject->setLogger($loggerProphecy->reveal());

        $subject->initAuth(

            'authUserBE',

            [

                'uident_text' => 'password',

                'uname' => 'lolli'

            ],

            [

                'db_user' => ['table' => 'be_users'],

                'HTTP_HOST' => ''

            ],

            $pObjProphecy->reveal()

        );

        $dbUser = [

            'password' => 'aPlainTextPassword',

            'lockToDomain' => ''

        ];

        $this->expectException(InvalidPasswordHashException::class);

        $this->expectExceptionCode(1533818591);

        $subject->authUser($dbUser);

    }


    public function ‪authUserReturns0IfPasswordDoesNotMatch(): void

    {

        $subject = new ‪AuthenticationService();

        $pObjProphecy = $this->prophesize(AbstractUserAuthentication::class);

        $loggerProphecy = $this->prophesize(Logger::class);

        $subject->setLogger($loggerProphecy->reveal());

        $subject->initAuth(

            'authUserBE',

            [

                'uident_text' => 'notMyPassword',

                'uname' => 'lolli'

            ],

            [

                'db_user' => ['table' => 'be_users'],

                'HTTP_HOST' => '',

            ],

            $pObjProphecy->reveal()

        );

        $dbUser = [

            // a phpass hash of 'myPassword'

            'password' => '$P$C/2Vr3ywuuPo5C7cs75YBnVhgBWpMP1',

            'lockToDomain' => ''

        ];

        $this->assertSame(0, $subject->authUser($dbUser));

    }


    public function ‪authUserReturns200IfPasswordMatch(): void

    {

        $subject = new ‪AuthenticationService();

        $pObjProphecy = $this->prophesize(AbstractUserAuthentication::class);

        $loggerProphecy = $this->prophesize(Logger::class);

        $subject->setLogger($loggerProphecy->reveal());

        $subject->initAuth(

            'authUserBE',

            [

                'uident_text' => 'myPassword',

                'uname' => 'lolli'

            ],

            [

                'db_user' => ['table' => 'be_users'],

                'HTTP_HOST' => ''

            ],

            $pObjProphecy->reveal()

        );

        $dbUser = [

            // an argon2i hash of 'myPassword'

            'password' => '$argon2i$v=19$m=65536,t=16,p=1$eGpyelFZbkpRdXN3QVhsUA$rd4abz2fcuksGu3b3fipglQZtHbIy+M3XoIS+sNVSl4',

            'lockToDomain' => ''

        ];

        $this->assertSame(200, $subject->authUser($dbUser));

    }


    public function ‪authUserReturns0IfPasswordMatchButDomainLockDoesNotMatch(): void

    {

        $subject = new ‪AuthenticationService();

        $pObjProphecy = $this->prophesize(AbstractUserAuthentication::class);

        $loggerProphecy = $this->prophesize(Logger::class);

        $subject->setLogger($loggerProphecy->reveal());

        $subject->initAuth(

            'authUserBE',

            [

                'uident_text' => 'myPassword',

                'uname' => 'lolli'

            ],

            [

                'db_user' => [

                    'table' => 'be_users',

                    'username_column' => 'username',

                ],

                'REMOTE_HOST' => '',

                'HTTP_HOST' => 'example.com',

            ],

            $pObjProphecy->reveal()

        );

        $dbUser = [

            // an argon2i hash of 'myPassword'

            'password' => '$argon2i$v=19$m=65536,t=16,p=2$LnUzc3ZISWJwQWlSbmpkYw$qD1sRsJFzkUmjcEaKzDeg6LtflwdTpo49VbH3tMeMXU',

            'username' => 'lolli',

            'lockToDomain' => 'not.example.com'

        ];

        $this->assertSame(0, $subject->authUser($dbUser));

    }

}