Page MenuHomeWickedGov Phorge
Files F4071768

SessionTest.php
No OneTemporary
Actions

Size
4 KB
Referenced Files
None
Subscribers
None

SessionTest.php
View Options

<?php
namespace MediaWiki\Tests\Session;
use MediaWiki\User\User;
use MediaWikiIntegrationTestCase;
use Psr\Log\LogLevel;
use TestLogger;
use Wikimedia\TestingAccessWrapper;
/**
* @group Session
* @covers \MediaWiki\Session\Session
*/
class SessionTest extends MediaWikiIntegrationTestCase {
public function testClear() {
$session = TestUtils::getDummySession();
$priv = TestingAccessWrapper::newFromObject( $session );
$backend = $this->getMockBuilder( DummySessionBackend::class )
->addMethods( [ 'canSetUser', 'setUser', 'save' ] )
->getMock();
$backend->expects( $this->once() )->method( 'canSetUser' )
->willReturn( true );
$backend->expects( $this->once() )->method( 'setUser' )
->with( $this->callback( static function ( $user ) {
return $user instanceof User && $user->isAnon();
} ) );
$backend->expects( $this->once() )->method( 'save' );
$priv->backend = $backend;
$session->clear();
$this->assertSame( [], $backend->data );
$this->assertTrue( $backend->dirty );
$backend = $this->getMockBuilder( DummySessionBackend::class )
->addMethods( [ 'canSetUser', 'setUser', 'save' ] )
->getMock();
$backend->data = [];
$backend->expects( $this->once() )->method( 'canSetUser' )
->willReturn( true );
$backend->expects( $this->once() )->method( 'setUser' )
->with( $this->callback( static function ( $user ) {
return $user instanceof User && $user->isAnon();
} ) );
$backend->expects( $this->once() )->method( 'save' );
$priv->backend = $backend;
$session->clear();
$this->assertFalse( $backend->dirty );
$backend = $this->getMockBuilder( DummySessionBackend::class )
->addMethods( [ 'canSetUser', 'setUser', 'save' ] )
->getMock();
$backend->expects( $this->once() )->method( 'canSetUser' )
->willReturn( false );
$backend->expects( $this->never() )->method( 'setUser' );
$backend->expects( $this->once() )->method( 'save' );
$priv->backend = $backend;
$session->clear();
$this->assertSame( [], $backend->data );
$this->assertTrue( $backend->dirty );
}
public function testSecrets() {
$logger = new TestLogger;
$session = TestUtils::getDummySession( null, -1, $logger );
// Simple defaulting
$this->assertEquals( 'defaulted', $session->getSecret( 'test', 'defaulted' ) );
// Bad encrypted data
$session->set( 'test', 'foobar' );
$logger->setCollect( true );
$this->assertEquals( 'defaulted', $session->getSecret( 'test', 'defaulted' ) );
$logger->setCollect( false );
$this->assertSame( [
[ LogLevel::WARNING, 'Invalid sealed-secret format' ]
], $logger->getBuffer() );
$logger->clearBuffer();
// Tampered data
$session->setSecret( 'test', 'foobar' );
$encrypted = $session->get( 'test' );
$session->set( 'test', $encrypted . 'x' );
$logger->setCollect( true );
$this->assertEquals( 'defaulted', $session->getSecret( 'test', 'defaulted' ) );
$logger->setCollect( false );
$this->assertSame( [
[ LogLevel::WARNING, 'Sealed secret has been tampered with, aborting.' ]
], $logger->getBuffer() );
$logger->clearBuffer();
// Unserializable data
$iv = random_bytes( 16 );
[ $encKey, $hmacKey ] = TestingAccessWrapper::newFromObject( $session )->getSecretKeys();
$ciphertext = openssl_encrypt( 'foobar', 'aes-256-ctr', $encKey, OPENSSL_RAW_DATA, $iv );
$sealed = base64_encode( $iv ) . '.' . base64_encode( $ciphertext );
$hmac = hash_hmac( 'sha256', $sealed, $hmacKey, true );
$encrypted = base64_encode( $hmac ) . '.' . $sealed;
$session->set( 'test', $encrypted );
$this->assertEquals( 'defaulted', @$session->getSecret( 'test', 'defaulted' ) );
}
/**
* @dataProvider provideSecretsRoundTripping
*/
public function testSecretsRoundTripping( $data ) {
$session = TestUtils::getDummySession();
// Simple round-trip
$session->setSecret( 'secret', $data );
// Cast to strings because PHPUnit sometimes considers true as equal to a string,
// depending on the other of the parameters (T317750)
$raw = $session->get( 'secret' );
$this->assertIsString( $raw );
if ( is_scalar( $data ) ) {
$this->assertNotSame( (string)$data, $raw );
}
$this->assertEquals( $data, $session->getSecret( 'secret', 'defaulted' ) );
}
public static function provideSecretsRoundTripping() {
return [
[ 'Foobar' ],
[ 42 ],
[ [ 'foo', 'bar' => 'baz', 'subarray' => [ 1, 2, 3 ] ] ],
[ (object)[ 'foo', 'bar' => 'baz', 'subarray' => [ 1, 2, 3 ] ] ],
[ true ],
[ false ],
[ null ],
];
}
}

File Metadata

Mime Type
text/x-php
Expires
Aug 17 2026, 05:11 (11 w, 4 d ago)
Storage Engine
local-disk
Storage Format
Raw Data
Storage Handle
a2/a5/c4f01c93f3b4308b668cb76e3de9
Default Alt Text
SessionTest.php (4 KB)

Event Timeline