CodeIgniter-Aauth/tests/Aauth/Libraries/Aauth/LoginTest.php

<?php namespace Tests\Aauth\Libraries\Aauth;

use Config\Aauth as AauthConfig;
use Config\App;
use Config\Logger;
use Tests\Support\Log\TestLogger;
use Tests\Support\HTTP\MockResponse;
use Tests\Support\Session\MockSession;
use CodeIgniter\Config\Services;
use CodeIgniter\HTTP\IncomingRequest;
use CodeIgniter\HTTP\URI;
use CodeIgniter\HTTP\UserAgent;
use CodeIgniter\Session\Handlers\FileHandler;
use CodeIgniter\Test\CIDatabaseTestCase;
use App\Libraries\Aauth;
use App\Models\Aauth\UserVariableModel;
use App\Models\Aauth\LoginTokenModel;

/**
 * @runTestsInSeparateProcesses
 * @preserveGlobalState         disabled
 */
class LoginTest extends CIDatabaseTestCase
{
	protected $refresh = true;

	protected $basePath = TESTPATH . '../application' . 'Database/Migrations';

	protected $namespace = 'App';

	public function setUp()
	{
		parent::setUp();

        Services::injectMock('response', new MockResponse(new App()));
        $this->response = service('response');
		$this->request = new IncomingRequest(new App(), new URI(), null, new UserAgent());
        Services::injectMock('request', $this->request);

		$this->library  = new Aauth(null, true);
		$_COOKIE        = [];
		$_SESSION       = [];
	}

	public function tearDown()
	{
	}

	protected function getInstance($options = [])
	{
		$defaults = [
			'sessionDriver'            => 'CodeIgniter\Session\Handlers\FileHandler',
			'sessionCookieName'        => 'ci_session',
			'sessionExpiration'        => 7200,
			'sessionSavePath'          => 'null',
			'sessionMatchIP'           => false,
			'sessionTimeToUpdate'      => 300,
			'sessionRegenerateDestroy' => false,
			'cookieDomain'             => '',
			'cookiePrefix'             => '',
			'cookiePath'               => '/',
			'cookieSecure'             => false,
		];

		$config = (object)$defaults;

		$session = new MockSession(new FileHandler($config, Services::request()->getIPAddress()), $config);
		$session->setLogger(new TestLogger(new Logger()));
		$session->start();

		return $session;
	}

	//--------------------------------------------------------------------

	public function testLogin()
	{
		$session                  = $this->getInstance();
		$config                   = new AauthConfig();
		$config->loginUseUsername = true;

		$this->library = new Aauth($config, $session);
		$this->assertTrue($this->library->login('admin', 'password123456'));

		$this->assertTrue($this->library->login('admin', 'password123456', true));
		$this->seeInDatabase($config->dbTableLoginTokens, [
			'user_id' => 1,
		]);
		$this->assertTrue($this->response->hasCookie('remember'));

		$this->assertFalse($this->library->login('admin', 'passwor'));
		$this->assertEquals(lang('Aauth.loginFailedUsername'), $this->library->getErrorsArray()[0]);

		$this->library->clearErrors();
		$this->assertFalse($this->library->login('user99', 'password123456'));
		$this->assertEquals(lang('Aauth.notFoundUser'), $this->library->getErrorsArray()[0]);
		// $config->loginUseUsername = false;

		$this->library = new Aauth(null, $session);
		$this->assertTrue($this->library->login('admin@example.com', 'password123456'));

		$this->assertFalse($this->library->login('adminaexample.com', 'password123456'));
		$this->assertEquals(lang('Aauth.loginFailedEmail'), $this->library->getErrorsArray()[0]);

		$this->library->clearErrors();
		$this->assertFalse($this->library->login('admin@example.com', 'passwor'));
		$this->assertEquals(lang('Aauth.loginFailedEmail'), $this->library->getErrorsArray()[0]);

		$this->library->clearErrors();
		$this->assertFalse($this->library->login('admina@example.com', 'password123456'));
		$this->assertEquals(lang('Aauth.notFoundUser'), $this->library->getErrorsArray()[0]);

		$this->library->clearErrors();
		$this->assertFalse($this->library->login('admin@example.com', 'password1234567'));
		$this->assertEquals(lang('Aauth.loginFailedAll'), $this->library->getErrorsArray()[0]);

		$this->library->banUser(1);
		$this->library->clearErrors();
		$this->assertFalse($this->library->login('admin@example.com', 'password123456'));
		$this->assertEquals(lang('Aauth.invalidUserBanned'), $this->library->getErrorsArray()[0]);

		$userVariableModel = new UserVariableModel();
		$userVariableModel->save(1, 'verification_code', '12345678', true);
		$this->library->clearErrors();
		$this->assertFalse($this->library->login('admin@example.com', 'password123456'));
		$this->assertEquals(lang('Aauth.notVerified'), $this->library->getErrorsArray()[0]);

		$this->library->login('admina@example.com', 'password123456');
		$this->library->login('admina@example.com', 'password123456');
		$this->library->login('admina@example.com', 'password123456');
		$this->library->clearErrors();
		$this->assertFalse($this->library->login('admina@example.com', 'password123456'));
		$this->assertEquals(lang('Aauth.loginAttemptsExceeded'), $this->library->getErrorsArray()[0]);
	}

	public function testIsLoggedIn()
	{
		$config        = new AauthConfig();
		$session       = $this->getInstance();
		$this->library = new Aauth(null, $session);
		$session->set('user', [
			'loggedIn' => true,
		]);
		$this->assertTrue($this->library->isLoggedIn());
		$session->remove('user');

		helper('text');
		$session        = $this->getInstance();
		$this->library  = new Aauth(null, $session);
		$randomString   = random_string('alnum', 32);
		$selectorString = random_string('alnum', 16);

		$_COOKIE['remember'] = base64_encode(1) . ';' . $randomString . ';' . $selectorString;
		set_cookie('remember', base64_encode(1) . ';' . $randomString . ';' . $selectorString, 9999);

		$this->hasInDatabase($config->dbTableLoginTokens, [
			'user_id'       => 1,
			'random_hash'   => password_hash($randomString, PASSWORD_DEFAULT),
			'selector_hash' => password_hash($selectorString, PASSWORD_DEFAULT),
			'expires_at'    => date('Y-m-d H:i:s', strtotime('+1 week')),
		]);
		$this->assertTrue($this->library->isLoggedIn());

		// $session->set('user', [
		// 	'loggedIn' => true,
		// ]);
		// $this->assertTrue($this->library->isLoggedIn());
		// $session->remove('user');

		// $session        = $this->getInstance();
		// $this->library  = new Aauth(null, $session);
		// $config         = new AauthConfig();
		// $randomString   = random_string('alnum', 32);
		// $selectorString = random_string('alnum', 16);

		// $this->hasInDatabase($config->dbTableLoginTokens, [
		// 	'user_id'       => 1,
		// 	'random_hash'   => password_hash($randomString, PASSWORD_DEFAULT),
		// 	'selector_hash' => password_hash($selectorString, PASSWORD_DEFAULT),
		// 	'expires_at'    => date('Y-m-d H:i:s', strtotime('+1 week')),
		// ]);
		// $_COOKIE['remember'] = base64_encode(1) . ';' . $randomString . ';' . $selectorString;

		// $this->assertTrue($this->library->isLoggedIn());
		// $session->remove('user');

		// $randomString   = random_string('alnum', 32);
		// $selectorString = random_string('alnum', 16);
		// $this->hasInDatabase($config->dbTableLoginTokens, [
		// 	'user_id'       => 3,
		// 	'random_hash'   => password_hash($randomString, PASSWORD_DEFAULT),
		// 	'selector_hash' => password_hash($selectorString, PASSWORD_DEFAULT),
		// 	'expires_at'    => date('Y-m-d H:i:s', strtotime('+1 week')),
		// ]);

		// $_COOKIE['remember'] = base64_encode(3) . ';' . $randomString . ';' . $selectorString;

		// $this->assertFalse($this->library->isLoggedIn());

		// $_COOKIE['remember'] = base64_encode(1) . ';' . $selectorString . ';' . $randomString;

		// $this->assertFalse($this->library->isLoggedIn());

		// $randomString   = random_string('alnum', 32);
		// $selectorString = random_string('alnum', 16);
		// $this->hasInDatabase($config->dbTableLoginTokens, [
		// 	'user_id'       => 1,
		// 	'random_hash'   => password_hash($randomString, PASSWORD_DEFAULT),
		// 	'selector_hash' => password_hash($selectorString, PASSWORD_DEFAULT),
		// 	'expires_at'    => date('Y-m-d H:i:s', strtotime('-1 week')),
		// ]);
		// $_COOKIE['remember'] = base64_encode(1) . ';' . $randomString . ';' . $selectorString;

		// $this->assertFalse($this->library->isLoggedIn());
	}

	public function testLogout()
	{
		$session       = $this->getInstance();
		$this->library = new Aauth(null, $session);
		$session->set('user', [
			'loggedIn' => true,
		]);
		$this->assertTrue($this->library->isLoggedIn());
		$this->library->logout();
		$this->library = new Aauth(null, $session);
		$this->assertFalse($this->library->isLoggedIn());
	}
}