Page MenuHomeWickedGov Phorge
Files F4061129

ResetPasswordSecondaryAuthenticationProviderTest.php
No OneTemporary
Actions

Size
12 KB
Referenced Files
None
Subscribers
None

ResetPasswordSecondaryAuthenticationProviderTest.php
View Options

<?php
namespace MediaWiki\Tests\Auth;
use DynamicPropertyTestHelper;
use MediaWiki\Auth\AuthenticationRequest;
use MediaWiki\Auth\AuthenticationResponse;
use MediaWiki\Auth\AuthManager;
use MediaWiki\Auth\ButtonAuthenticationRequest;
use MediaWiki\Auth\PasswordAuthenticationRequest;
use MediaWiki\Auth\ResetPasswordSecondaryAuthenticationProvider;
use MediaWiki\Config\HashConfig;
use MediaWiki\MainConfigNames;
use MediaWiki\Request\FauxRequest;
use MediaWiki\Tests\Unit\Auth\AuthenticationProviderTestTrait;
use MediaWiki\Tests\Unit\DummyServicesTrait;
use MediaWiki\User\BotPasswordStore;
use MediaWiki\User\User;
use MediaWiki\User\UserNameUtils;
use MediaWikiIntegrationTestCase;
use StatusValue;
use stdClass;
use UnexpectedValueException;
use Wikimedia\TestingAccessWrapper;
/**
* @group AuthManager
* @covers \MediaWiki\Auth\ResetPasswordSecondaryAuthenticationProvider
*/
class ResetPasswordSecondaryAuthenticationProviderTest extends MediaWikiIntegrationTestCase {
use AuthenticationProviderTestTrait;
use DummyServicesTrait;
/**
* @dataProvider provideGetAuthenticationRequests
* @param string $action
* @param array $response
*/
public function testGetAuthenticationRequests( $action, $response ) {
$provider = new ResetPasswordSecondaryAuthenticationProvider();
$this->assertEquals( $response, $provider->getAuthenticationRequests( $action, [] ) );
}
public static function provideGetAuthenticationRequests() {
return [
[ AuthManager::ACTION_LOGIN, [] ],
[ AuthManager::ACTION_CREATE, [] ],
[ AuthManager::ACTION_LINK, [] ],
[ AuthManager::ACTION_CHANGE, [] ],
[ AuthManager::ACTION_REMOVE, [] ],
];
}
public function testBasics() {
$user = $this->createMock( User::class );
$user2 = new User;
$obj = new stdClass;
$reqs = [ new stdClass ];
$mb = $this->getMockBuilder( ResetPasswordSecondaryAuthenticationProvider::class )
->onlyMethods( [ 'tryReset' ] );
$methods = [
'beginSecondaryAuthentication' => [ $user, $reqs ],
'continueSecondaryAuthentication' => [ $user, $reqs ],
'beginSecondaryAccountCreation' => [ $user, $user2, $reqs ],
'continueSecondaryAccountCreation' => [ $user, $user2, $reqs ],
];
foreach ( $methods as $method => $args ) {
$mock = $mb->getMock();
$mock->expects( $this->once() )->method( 'tryReset' )
->with( $this->identicalTo( $user ), $this->identicalTo( $reqs ) )
->willReturn( $obj );
$this->assertSame( $obj, $mock->$method( ...$args ) );
}
}
public function testTryReset() {
$username = 'TestTryReset';
$user = User::newFromName( $username );
$provider = $this->getMockBuilder(
ResetPasswordSecondaryAuthenticationProvider::class
)
->onlyMethods( [
'providerAllowsAuthenticationDataChange', 'providerChangeAuthenticationData'
] )
->getMock();
$provider->method( 'providerAllowsAuthenticationDataChange' )
->willReturnCallback( function ( $req ) use ( $username ) {
$this->assertSame( $username, $req->username );
return DynamicPropertyTestHelper::getDynamicProperty( $req, 'allow' );
} );
$provider->method( 'providerChangeAuthenticationData' )
->willReturnCallback( function ( $req ) use ( $username ) {
$this->assertSame( $username, $req->username );
DynamicPropertyTestHelper::setDynamicProperty( $req, 'done', true );
} );
$config = new HashConfig( [
MainConfigNames::AuthManagerConfig => [
'preauth' => [],
'primaryauth' => [],
'secondaryauth' => [
[ 'factory' => static function () use ( $provider ) {
return $provider;
} ],
],
],
] );
$mwServices = $this->getServiceContainer();
$manager = new AuthManager(
new FauxRequest,
$config,
$this->getDummyObjectFactory(),
$this->createHookContainer(),
$mwServices->getReadOnlyMode(),
$this->createNoOpMock( UserNameUtils::class ),
$mwServices->getBlockManager(),
$mwServices->getWatchlistManager(),
$mwServices->getDBLoadBalancer(),
$mwServices->getContentLanguage(),
$mwServices->getLanguageConverterFactory(),
$this->createMock( BotPasswordStore::class ),
$mwServices->getUserFactory(),
$mwServices->getUserIdentityLookup(),
$mwServices->getUserOptionsManager()
);
$this->initProvider( $provider, null, null, $manager );
$provider = TestingAccessWrapper::newFromObject( $provider );
$msg = wfMessage( 'foo' );
$skipReq = new ButtonAuthenticationRequest(
'skipReset',
wfMessage( 'authprovider-resetpass-skip-label' ),
wfMessage( 'authprovider-resetpass-skip-help' )
);
$passReq = new PasswordAuthenticationRequest();
$passReq->action = AuthManager::ACTION_CHANGE;
$passReq->password = 'Foo';
$passReq->retype = 'Bar';
DynamicPropertyTestHelper::setDynamicProperty( $passReq, 'allow', StatusValue::newGood() );
DynamicPropertyTestHelper::setDynamicProperty( $passReq, 'done', false );
$passReq2 = $this->getMockBuilder( PasswordAuthenticationRequest::class )
->enableProxyingToOriginalMethods()
->getMock();
$passReq2->action = AuthManager::ACTION_CHANGE;
$passReq2->password = 'Foo';
$passReq2->retype = 'Foo';
DynamicPropertyTestHelper::setDynamicProperty( $passReq2, 'allow', StatusValue::newGood() );
DynamicPropertyTestHelper::setDynamicProperty( $passReq2, 'done', false );
$passReq3 = new PasswordAuthenticationRequest();
$passReq3->action = AuthManager::ACTION_LOGIN;
$passReq3->password = 'Foo';
$passReq3->retype = 'Foo';
DynamicPropertyTestHelper::setDynamicProperty( $passReq3, 'allow', StatusValue::newGood() );
DynamicPropertyTestHelper::setDynamicProperty( $passReq3, 'done', false );
$this->assertEquals(
AuthenticationResponse::newAbstain(),
$provider->tryReset( $user, [] )
);
$manager->setAuthenticationSessionData( 'reset-pass', 'foo' );
try {
$provider->tryReset( $user, [] );
$this->fail( 'Expected exception not thrown' );
} catch ( UnexpectedValueException $ex ) {
$this->assertSame( 'reset-pass is not valid', $ex->getMessage() );
}
$manager->setAuthenticationSessionData( 'reset-pass', (object)[] );
try {
$provider->tryReset( $user, [] );
$this->fail( 'Expected exception not thrown' );
} catch ( UnexpectedValueException $ex ) {
$this->assertSame( 'reset-pass msg is missing', $ex->getMessage() );
}
$manager->setAuthenticationSessionData( 'reset-pass', [
'msg' => 'foo',
] );
try {
$provider->tryReset( $user, [] );
$this->fail( 'Expected exception not thrown' );
} catch ( UnexpectedValueException $ex ) {
$this->assertSame( 'reset-pass msg is not valid', $ex->getMessage() );
}
$manager->setAuthenticationSessionData( 'reset-pass', [
'msg' => $msg,
] );
try {
$provider->tryReset( $user, [] );
$this->fail( 'Expected exception not thrown' );
} catch ( UnexpectedValueException $ex ) {
$this->assertSame( 'reset-pass hard is missing', $ex->getMessage() );
}
$manager->setAuthenticationSessionData( 'reset-pass', [
'msg' => $msg,
'hard' => true,
'req' => 'foo',
] );
try {
$provider->tryReset( $user, [] );
$this->fail( 'Expected exception not thrown' );
} catch ( UnexpectedValueException $ex ) {
$this->assertSame( 'reset-pass req is not valid', $ex->getMessage() );
}
$manager->setAuthenticationSessionData( 'reset-pass', [
'msg' => $msg,
'hard' => false,
'req' => $passReq3,
] );
try {
$provider->tryReset( $user, [ $passReq ] );
$this->fail( 'Expected exception not thrown' );
} catch ( UnexpectedValueException $ex ) {
$this->assertSame( 'reset-pass req is not valid', $ex->getMessage() );
}
$manager->setAuthenticationSessionData( 'reset-pass', [
'msg' => $msg,
'hard' => true,
] );
$res = $provider->tryReset( $user, [] );
$this->assertInstanceOf( AuthenticationResponse::class, $res );
$this->assertSame( AuthenticationResponse::UI, $res->status );
$this->assertEquals( $msg, $res->message );
$this->assertCount( 1, $res->neededRequests );
$this->assertInstanceOf(
PasswordAuthenticationRequest::class,
$res->neededRequests[0]
);
$this->assertNotNull( $manager->getAuthenticationSessionData( 'reset-pass' ) );
$this->assertFalse( DynamicPropertyTestHelper::getDynamicProperty( $passReq, 'done' ) );
$manager->setAuthenticationSessionData( 'reset-pass', [
'msg' => $msg,
'hard' => false,
'req' => $passReq,
] );
$res = $provider->tryReset( $user, [] );
$this->assertInstanceOf( AuthenticationResponse::class, $res );
$this->assertSame( AuthenticationResponse::UI, $res->status );
$this->assertEquals( $msg, $res->message );
$this->assertCount( 2, $res->neededRequests );
$expectedPassReq = clone $passReq;
$expectedPassReq->required = AuthenticationRequest::OPTIONAL;
$this->assertEquals( $expectedPassReq, $res->neededRequests[0] );
$this->assertEquals( $skipReq, $res->neededRequests[1] );
$this->assertNotNull( $manager->getAuthenticationSessionData( 'reset-pass' ) );
$this->assertFalse( DynamicPropertyTestHelper::getDynamicProperty( $passReq, 'done' ) );
$passReq->retype = 'Bad';
$manager->setAuthenticationSessionData( 'reset-pass', [
'msg' => $msg,
'hard' => false,
'req' => $passReq,
] );
$res = $provider->tryReset( $user, [ $skipReq, $passReq ] );
$this->assertEquals( AuthenticationResponse::newPass(), $res );
$this->assertNull( $manager->getAuthenticationSessionData( 'reset-pass' ) );
$this->assertFalse( DynamicPropertyTestHelper::getDynamicProperty( $passReq, 'done' ) );
$passReq->retype = 'Bad';
$manager->setAuthenticationSessionData( 'reset-pass', [
'msg' => $msg,
'hard' => true,
] );
$res = $provider->tryReset( $user, [ $skipReq, $passReq ] );
$this->assertSame( AuthenticationResponse::UI, $res->status );
$this->assertSame( 'badretype', $res->message->getKey() );
$this->assertCount( 1, $res->neededRequests );
$this->assertInstanceOf(
PasswordAuthenticationRequest::class,
$res->neededRequests[0]
);
$this->assertNotNull( $manager->getAuthenticationSessionData( 'reset-pass' ) );
$this->assertFalse( DynamicPropertyTestHelper::getDynamicProperty( $passReq, 'done' ) );
$manager->setAuthenticationSessionData( 'reset-pass', [
'msg' => $msg,
'hard' => true,
] );
$res = $provider->tryReset( $user, [ $skipReq, $passReq3 ] );
$this->assertSame( AuthenticationResponse::UI, $res->status );
$this->assertEquals( $msg, $res->message );
$this->assertCount( 1, $res->neededRequests );
$this->assertInstanceOf(
PasswordAuthenticationRequest::class,
$res->neededRequests[0]
);
$this->assertNotNull( $manager->getAuthenticationSessionData( 'reset-pass' ) );
$this->assertFalse( DynamicPropertyTestHelper::getDynamicProperty( $passReq, 'done' ) );
$passReq->retype = $passReq->password;
DynamicPropertyTestHelper::setDynamicProperty( $passReq, 'allow', StatusValue::newFatal( 'arbitrary-fail' ) );
$res = $provider->tryReset( $user, [ $skipReq, $passReq ] );
$this->assertSame( AuthenticationResponse::UI, $res->status );
$this->assertSame( 'arbitrary-fail', $res->message->getKey() );
$this->assertCount( 1, $res->neededRequests );
$this->assertInstanceOf(
PasswordAuthenticationRequest::class,
$res->neededRequests[0]
);
$this->assertNotNull( $manager->getAuthenticationSessionData( 'reset-pass' ) );
$this->assertFalse( DynamicPropertyTestHelper::getDynamicProperty( $passReq, 'done' ) );
DynamicPropertyTestHelper::setDynamicProperty( $passReq, 'allow', StatusValue::newGood() );
$res = $provider->tryReset( $user, [ $skipReq, $passReq ] );
$this->assertEquals( AuthenticationResponse::newPass(), $res );
$this->assertNull( $manager->getAuthenticationSessionData( 'reset-pass' ) );
$this->assertTrue( DynamicPropertyTestHelper::getDynamicProperty( $passReq, 'done' ) );
$manager->setAuthenticationSessionData( 'reset-pass', [
'msg' => $msg,
'hard' => false,
'req' => $passReq2,
] );
$res = $provider->tryReset( $user, [ $passReq2 ] );
$this->assertEquals( AuthenticationResponse::newPass(), $res );
$this->assertNull( $manager->getAuthenticationSessionData( 'reset-pass' ) );
$this->assertTrue( DynamicPropertyTestHelper::getDynamicProperty( $passReq2, 'done' ) );
DynamicPropertyTestHelper::setDynamicProperty( $passReq, 'done', false );
DynamicPropertyTestHelper::setDynamicProperty( $passReq2, 'done', false );
$manager->setAuthenticationSessionData( 'reset-pass', [
'msg' => $msg,
'hard' => false,
'req' => $passReq2,
] );
$res = $provider->tryReset( $user, [ $passReq ] );
$this->assertInstanceOf( AuthenticationResponse::class, $res );
$this->assertSame( AuthenticationResponse::UI, $res->status );
$this->assertEquals( $msg, $res->message );
$this->assertCount( 2, $res->neededRequests );
$expectedPassReq = clone $passReq2;
$expectedPassReq->required = AuthenticationRequest::OPTIONAL;
$this->assertEquals( $expectedPassReq, $res->neededRequests[0] );
$this->assertEquals( $skipReq, $res->neededRequests[1] );
$this->assertNotNull( $manager->getAuthenticationSessionData( 'reset-pass' ) );
$this->assertFalse( DynamicPropertyTestHelper::getDynamicProperty( $passReq, 'done' ) );
$this->assertFalse( DynamicPropertyTestHelper::getDynamicProperty( $passReq2, 'done' ) );
}
}

File Metadata

Mime Type
text/x-php
Expires
Aug 16 2026, 08:49 (12 w, 1 d ago)
Storage Engine
local-disk
Storage Format
Raw Data
Storage Handle
94/13/88d70fe8925dbdbf56ed8c9a0b48
Default Alt Text
ResetPasswordSecondaryAuthenticationProviderTest.php (12 KB)

Event Timeline