110 lines
		
	
	
		
			4.3 KiB
		
	
	
	
		
			PHP
		
	
	
	
			
		
		
	
	
			110 lines
		
	
	
		
			4.3 KiB
		
	
	
	
		
			PHP
		
	
	
	
| <?php
 | |
| 
 | |
| use BookStack\Services\LdapService;
 | |
| use BookStack\User;
 | |
| 
 | |
| class LdapTest extends \TestCase
 | |
| {
 | |
| 
 | |
|     protected $mockLdap;
 | |
|     protected $mockUser;
 | |
|     protected $resourceId = 'resource-test';
 | |
| 
 | |
|     public function setUp()
 | |
|     {
 | |
|         parent::setUp();
 | |
|         app('config')->set(['auth.method' => 'ldap', 'services.ldap.base_dn' => 'dc=ldap,dc=local', 'auth.providers.users.driver' => 'ldap']);
 | |
|         $this->mockLdap = Mockery::mock(BookStack\Services\Ldap::class);
 | |
|         $this->app['BookStack\Services\Ldap'] = $this->mockLdap;
 | |
|         $this->mockUser = factory(User::class)->make();
 | |
|     }
 | |
| 
 | |
|     public function test_login()
 | |
|     {
 | |
|         $this->mockLdap->shouldReceive('connect')->once()->andReturn($this->resourceId);
 | |
|         $this->mockLdap->shouldReceive('setOption')->once();
 | |
|         $this->mockLdap->shouldReceive('searchAndGetEntries')->times(4)
 | |
|             ->with($this->resourceId, config('services.ldap.base_dn'), Mockery::type('string'), Mockery::type('array'))
 | |
|             ->andReturn(['count' => 1, 0 => [
 | |
|                 'uid' => [$this->mockUser->name],
 | |
|                 'cn' => [$this->mockUser->name],
 | |
|                 'dn'    => ['dc=test'.config('services.ldap.base_dn')]
 | |
|             ]]);
 | |
|         $this->mockLdap->shouldReceive('bind')->times(6)->andReturn(true);
 | |
| 
 | |
|         $this->visit('/login')
 | |
|             ->see('Username')
 | |
|             ->type($this->mockUser->name, '#username')
 | |
|             ->type($this->mockUser->password, '#password')
 | |
|             ->press('Sign In')
 | |
|             ->seePageIs('/login')->see('Please enter an email to use for this account.');
 | |
| 
 | |
|         $this->type($this->mockUser->email, '#email')
 | |
|             ->press('Sign In')
 | |
|             ->seePageIs('/')
 | |
|             ->see($this->mockUser->name)
 | |
|             ->seeInDatabase('users', ['email' => $this->mockUser->email, 'email_confirmed' => 1, 'external_auth_id' => $this->mockUser->name]);
 | |
|     }
 | |
| 
 | |
|     public function test_initial_incorrect_details()
 | |
|     {
 | |
|         $this->mockLdap->shouldReceive('connect')->once()->andReturn($this->resourceId);
 | |
|         $this->mockLdap->shouldReceive('setOption')->once();
 | |
|         $this->mockLdap->shouldReceive('searchAndGetEntries')->times(2)
 | |
|             ->with($this->resourceId, config('services.ldap.base_dn'), Mockery::type('string'), Mockery::type('array'))
 | |
|             ->andReturn(['count' => 1, 0 => [
 | |
|                 'uid' => [$this->mockUser->name],
 | |
|                 'cn' => [$this->mockUser->name],
 | |
|                 'dn'    => ['dc=test'.config('services.ldap.base_dn')]
 | |
|             ]]);
 | |
|         $this->mockLdap->shouldReceive('bind')->times(3)->andReturn(true, true, false);
 | |
| 
 | |
|         $this->visit('/login')
 | |
|             ->see('Username')
 | |
|             ->type($this->mockUser->name, '#username')
 | |
|             ->type($this->mockUser->password, '#password')
 | |
|             ->press('Sign In')
 | |
|             ->seePageIs('/login')->see('These credentials do not match our records.')
 | |
|             ->dontSeeInDatabase('users', ['external_auth_id' => $this->mockUser->name]);
 | |
|     }
 | |
| 
 | |
|     public function test_create_user_form()
 | |
|     {
 | |
|         $this->asAdmin()->visit('/users/create')
 | |
|             ->dontSee('Password')
 | |
|             ->type($this->mockUser->name, '#name')
 | |
|             ->type($this->mockUser->email, '#email')
 | |
|             ->press('Save')
 | |
|             ->see('The external auth id field is required.')
 | |
|             ->type($this->mockUser->name, '#external_auth_id')
 | |
|             ->press('Save')
 | |
|             ->seePageIs('/users')
 | |
|             ->seeInDatabase('users', ['email' => $this->mockUser->email, 'external_auth_id' => $this->mockUser->name, 'email_confirmed' => true]);
 | |
|     }
 | |
| 
 | |
|     public function test_user_edit_form()
 | |
|     {
 | |
|         $editUser = User::all()->last();
 | |
|         $this->asAdmin()->visit('/users/' . $editUser->id)
 | |
|             ->see('Edit User')
 | |
|             ->dontSee('Password')
 | |
|             ->type('test_auth_id', '#external_auth_id')
 | |
|             ->press('Save')
 | |
|             ->seePageIs('/users')
 | |
|             ->seeInDatabase('users', ['email' => $editUser->email, 'external_auth_id' => 'test_auth_id']);
 | |
|     }
 | |
| 
 | |
|     public function test_registration_disabled()
 | |
|     {
 | |
|         $this->visit('/register')
 | |
|             ->seePageIs('/login');
 | |
|     }
 | |
| 
 | |
|     public function test_non_admins_cannot_change_auth_id()
 | |
|     {
 | |
|         $testUser = User::all()->last();
 | |
|         $this->actingAs($testUser)->visit('/users/' . $testUser->id)
 | |
|             ->dontSee('External Authentication');
 | |
|     }
 | |
| 
 | |
| } |