Page MenuHomeWickedGov Phorge
Files F4078161

CentralAuthApiSessionProviderTest.php
No OneTemporary
Actions

Size
3 KB
Referenced Files
None
Subscribers
None

CentralAuthApiSessionProviderTest.php
View Options

<?php
use MediaWiki\Api\ApiMain;
use MediaWiki\Api\ApiUsageException;
use MediaWiki\Config\HashConfig;
use MediaWiki\Context\RequestContext;
use MediaWiki\Extension\CentralAuth\CentralAuthServices;
use MediaWiki\HookContainer\HookRunner;
use MediaWiki\MainConfigNames;
use MediaWiki\Request\FauxRequest;
use MediaWiki\Request\WebRequest;
use MediaWiki\Session\SessionInfo;
use MediaWiki\Session\SessionManager;
use MediaWiki\Tests\Session\SessionProviderTestTrait;
use Psr\Log\NullLogger;
/**
* @covers CentralAuthApiSessionProvider
* @group medium
* @group Database
*/
class CentralAuthApiSessionProviderTest extends CentralAuthTokenSessionProviderTestBase {
use SessionProviderTestTrait;
/** @var \MediaWiki\HookContainer\HookContainer */
private $hookContainer;
public function setUp(): void {
parent::setUp();
if ( !defined( 'MW_API' ) ) {
define( 'MW_API', 'TEST' );
}
$this->hookContainer = $this->createHookContainer();
}
protected function makeRequest( $token ) {
return new FauxRequest( [ 'centralauthtoken' => $token ] );
}
protected function assertSessionInfoError(
WebRequest $request,
?SessionInfo $result,
?string $error = null,
?string $code = null
) {
parent::assertSessionInfoError( $request, $result, $error, $code );
$this->assertErrorFromApiBeforeMain( $request, $error );
}
private function assertErrorFromApiBeforeMain( WebRequest $request, $error ) {
$context = new RequestContext();
$context->setRequest( $request );
$processor = new ApiMain( RequestContext::getMain(), true );
try {
( new HookRunner( $this->hookContainer ) )->onApiBeforeMain( $processor );
$this->fail( 'Expected ApiUsageException' );
} catch ( ApiUsageException $ex ) {
$this->assertStatusError( $error, $ex->getStatusValue() );
}
}
protected function newSessionProvider() {
$config = new HashConfig( [
MainConfigNames::SecretKey => 'hunter2',
'CentralAuthTokenSessionTimeout' => 0
] );
$logger = new NullLogger();
$manager = new SessionManager( [
'config' => $config,
'logger' => $logger,
'store' => $this->sessionStore,
'hookContainer' => $this->hookContainer
] );
$services = $this->getServiceContainer();
$provider = new CentralAuthApiSessionProvider(
$services->getUserIdentityLookup(),
CentralAuthServices::getSessionManager( $services ),
CentralAuthServices::getTokenManager( $services )
);
$this->initProvider(
$provider, null, $config, $manager, $this->hookContainer, $services->getUserNameUtils()
);
return $provider;
}
/**
* @covers \MediaWiki\Extension\CentralAuth\Hooks\Handlers\ApiHookHandler::onAPIGetAllowedParams
*/
public function testApiParameterDeclared() {
// hook is registered dynamically when creating the SessionProvider
$this->newSessionProvider();
$this->overrideConfigValue( 'CentralAuthCookies', true );
$main = new ApiMain();
$params = $main->getFinalParams();
$this->assertArrayHasKey( 'centralauthtoken', $params );
}
public function testOptionsRequestReuseToken() {
$user = $this->makeCentralAuthUser( 'Frank' );
$token = $this->makeValidToken( [ 'userName' => $user->getName() ] );
$provider = $this->newSessionProvider();
$request = new class( [ 'centralauthtoken' => $token ] ) extends FauxRequest {
public function getMethod() {
return 'OPTIONS';
}
};
$result = $provider->provideSessionInfo( $request );
$this->assertSessionInfoOk( $result );
// The token should not have been consumed by the OPTIONS request,
// and using it again should succeed
$result = $provider->provideSessionInfo( $request );
$this->assertSessionInfoOk( $result );
}
}

File Metadata

Mime Type
text/x-php
Expires
Aug 18 2026, 03:52 (8 w, 6 d ago)
Storage Engine
local-disk
Storage Format
Raw Data
Storage Handle
fb/72/f8804d5b030fc9fa43a8fa16bbfb
Default Alt Text
CentralAuthApiSessionProviderTest.php (3 KB)

Event Timeline