BackendUserAuthenticatorTest.php

Go to the documentation of this file.

<?php
 
declare(strict_types=1);
 
/*
 * This file is part of the TYPO3 CMS project.
 *
 * It is free software; you can redistribute it and/or modify it under
 * the terms of the GNU General Public License, either version 2
 * of the License, or any later version.
 *
 * For the full copyright and license information, please read the
 * LICENSE.txt file that was distributed with this source code.
 *
 * The TYPO3 project - inspiring people to share!
 */
 
namespace ‪TYPO3\CMS\Frontend\Tests\Functional\Middleware;
 
use PHPUnit\Framework\Attributes\Test;
use ‪TYPO3\CMS\Core\Tests\Functional\SiteHandling\SiteBasedTestTrait;
use TYPO3\TestingFramework\Core\Functional\Framework\Frontend\InternalRequest;
use TYPO3\TestingFramework\Core\Functional\Framework\Frontend\InternalRequestContext;
use TYPO3\TestingFramework\Core\Functional\FunctionalTestCase;
 
final class ‪BackendUserAuthenticatorTest extends FunctionalTestCase
{
    use ‪SiteBasedTestTrait;
 
    protected const ‪LANGUAGE_PRESETS = [
        'EN' => ['id' => 0, 'title' => 'English', 'locale' => 'en_US.UTF8'],
    ];
 
    protected function ‪setUp(): void
    {
        parent::setUp();
        $this->importCsvDataSet(__DIR__ . '/../Fixtures/pages.csv');
        $this->importCSVDataSet(__DIR__ . '/../Fixtures/be_users.csv');
        $this->setUpBackendUser(1);
        $this->‪writeSiteConfiguration(
            'acme-com',
            $this->‪buildSiteConfiguration(1, 'https://acme.com/'),
            [
                $this->‪buildDefaultLanguageConfiguration('EN', '/'),
            ]
        );
    }
 
    #[Test]
    public function ‪nonAuthenticatedRequestDoesNotSendHeaders(): void
    {
        $response = $this->executeFrontendSubRequest((new InternalRequest())->withPageId(1));
        self::assertArrayNotHasKey('Cache-Control', $response->getHeaders());
        self::assertArrayNotHasKey('Pragma', $response->getHeaders());
        self::assertArrayNotHasKey('Expires', $response->getHeaders());
    }
 
    #[Test]
    public function ‪authenticatedRequestIncludesInvalidCacheHeaders(): void
    {
        $response = $this->executeFrontendSubRequest(
            (new InternalRequest())->withPageId(1),
            (new InternalRequestContext())->withBackendUserId(1)
        );
        self::assertEquals('no-cache, no-store', $response->getHeaders()['Cache-Control'][0]);
        self::assertEquals('no-cache', $response->getHeaders()['Pragma'][0]);
        self::assertEquals(0, $response->getHeaders()['Expires'][0]);
    }
}