mirror of
https://github.com/Icinga/icingaweb2.git
synced 2025-09-26 19:29:00 +02:00
2a0add3ec3
Store messages in the current user session to be able to fetch messages from other controllers, so that the use can be redirected back to the index, instead of staying in the original action refs #5100
364 lines
11 KiB
PHP
364 lines
11 KiB
PHP
<?php
|
|
// {{{ICINGA_LICENSE_HEADER}}}
|
|
/**
|
|
* This file is part of Icinga Web 2.
|
|
*
|
|
* Icinga Web 2 - Head for multiple monitoring backends.
|
|
* Copyright (C) 2013 Icinga Development Team
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
*
|
|
* @copyright 2013 Icinga Development Team <info@icinga.org>
|
|
* @license http://www.gnu.org/licenses/gpl-2.0.txt GPL, version 2
|
|
* @author Icinga Development Team <info@icinga.org>
|
|
*
|
|
*/
|
|
// {{{ICINGA_LICENSE_HEADER}}}
|
|
|
|
namespace Tests\Icinga\Authentication;
|
|
|
|
// @codingStandardsIgnoreStart
|
|
require_once realpath(__DIR__ . '/../../../../../library/Icinga/Test/BaseTestCase.php');
|
|
// @codingStandardsIgnoreEnd
|
|
|
|
use Icinga\Application\Logger;
|
|
use \Icinga\Test\BaseTestCase;
|
|
|
|
// @codingStandardsIgnoreStart
|
|
require_once 'Zend/Log.php';
|
|
require_once 'Zend/Config.php';
|
|
require_once BaseTestCase::$libDir . '/Application/Logger.php';
|
|
require_once BaseTestCase::$libDir . '/Authentication/Manager.php';
|
|
require_once BaseTestCase::$libDir . '/Authentication/Credential.php';
|
|
require_once BaseTestCase::$libDir . '/Exception/ConfigurationError.php';
|
|
require_once BaseTestCase::$libDir . '/Exception/ProgrammingError.php';
|
|
require_once 'BackendMock.php';
|
|
require_once 'ErrorProneBackendMock.php';
|
|
require_once 'SessionMock.php';
|
|
// @codingStandardsIgnoreEnd
|
|
|
|
use \Zend_Config;
|
|
use \Icinga\Authentication\Manager as AuthManager;
|
|
use \Icinga\Authentication\Credential;
|
|
use \Icinga\Exception\ConfigurationError;
|
|
|
|
/**
|
|
* @backupStaticAttributes enabled
|
|
*/
|
|
class ManagerTest extends BaseTestCase
|
|
{
|
|
public function getTestCredentials()
|
|
{
|
|
return array(
|
|
new Credential("jdoe", "passjdoe"),
|
|
new Credential("root", "passroot"),
|
|
new Credential("test", "passtest")
|
|
);
|
|
}
|
|
|
|
public function getManagerInstance(
|
|
&$session = null,
|
|
$write = false,
|
|
$nobackend = false,
|
|
Zend_Config $managerConfig = null
|
|
) {
|
|
if ($session == null) {
|
|
$session = new SessionMock();
|
|
}
|
|
|
|
if ($managerConfig === null) {
|
|
$managerConfig = new Zend_Config(array());
|
|
}
|
|
|
|
$managerOptions = array(
|
|
'sessionClass' => $session,
|
|
'writeSession' => $write,
|
|
'noDefaultConfig' => true
|
|
);
|
|
|
|
$manager = AuthManager::getInstance($managerConfig, $managerOptions);
|
|
|
|
if ($nobackend === false) {
|
|
$backend = new BackendMock();
|
|
$backend->allowedCredentials = $this->getTestCredentials();
|
|
$manager->addUserBackend($backend);
|
|
}
|
|
|
|
return $manager;
|
|
}
|
|
|
|
public function testManagerInstanciation()
|
|
{
|
|
$authMgr = $this->getManagerInstance();
|
|
$this->assertSame($authMgr, AuthManager::getInstance());
|
|
}
|
|
|
|
public function testManagerProducingDependencies()
|
|
{
|
|
$authMgr = $this->getManagerInstance($session, true);
|
|
$this->assertSame($authMgr, AuthManager::getInstance());
|
|
|
|
$backend = new BackendMock();
|
|
$backend->setCredentials($this->getTestCredentials());
|
|
|
|
$authMgr->addUserBackend($backend);
|
|
|
|
$this->assertTrue(
|
|
$authMgr->authenticate(
|
|
new Credential('jdoe', 'passjdoe')
|
|
)
|
|
);
|
|
|
|
$this->assertInstanceOf('Icinga\User', $authMgr->getUser());
|
|
$this->assertSame('Username', $authMgr->getUser()->getUsername());
|
|
|
|
$this->assertInstanceOf(
|
|
'Tests\Icinga\Authentication\SessionMock',
|
|
$authMgr->getSession()
|
|
);
|
|
|
|
$authMgr->removeAuthorization();
|
|
|
|
$this->assertNull($authMgr->getUser());
|
|
}
|
|
|
|
public function testAuthentication()
|
|
{
|
|
$auth = $this->getManagerInstance();
|
|
$this->assertFalse(
|
|
$auth->authenticate(
|
|
new Credential("jhoe", "passjdoe"),
|
|
false
|
|
)
|
|
);
|
|
$this->assertFalse(
|
|
$auth->authenticate(
|
|
new Credential("joe", "passjhoe"),
|
|
false
|
|
)
|
|
);
|
|
$this->assertTrue(
|
|
$auth->authenticate(
|
|
new Credential("jdoe", "passjdoe"),
|
|
false
|
|
)
|
|
);
|
|
}
|
|
|
|
public function testPersistAuthInSession()
|
|
{
|
|
$session = new SessionMock();
|
|
$auth = $this->getManagerInstance($session, true);
|
|
$this->assertFalse($auth->isAuthenticated(true));
|
|
$auth->authenticate(new Credential("jdoe", "passjdoe"));
|
|
$this->assertNotEquals(null, $session->get("user"));
|
|
$user = $session->get("user");
|
|
$this->assertEquals("Username", $user->getUsername());
|
|
$this->assertTrue($auth->isAuthenticated(true));
|
|
}
|
|
|
|
public function testAuthenticateFromSession()
|
|
{
|
|
$session = new SessionMock();
|
|
$session->set("user", BackendMock::getDummyUser());
|
|
$auth = $this->getManagerInstance($session, false);
|
|
$this->assertFalse($auth->isAuthenticated(true));
|
|
$this->assertTrue($auth->isAuthenticated());
|
|
$this->assertTrue($auth->isAuthenticated());
|
|
}
|
|
|
|
/**
|
|
* @expectedException Icinga\Exception\ConfigurationError
|
|
* @expectedExceptionMessage No authentication backend set
|
|
*/
|
|
public function testErrorProneBackendsFromConfigurationWhenInitiate()
|
|
{
|
|
$managerConfig = new Zend_Config(
|
|
array(
|
|
'provider1' => array(
|
|
'class' => 'Tests\Icinga\Authentication\ErrorProneBackendMock'
|
|
)
|
|
),
|
|
true
|
|
);
|
|
|
|
ErrorProneBackendMock::$throwOnCreate = true;
|
|
|
|
$authManager = $this->getManagerInstance($session, true, true, $managerConfig);
|
|
|
|
$this->assertNull(
|
|
$authManager->getUserBackend('provider1')
|
|
);
|
|
|
|
$authManager->authenticate(
|
|
new Credential('jdoe', 'passjdoe')
|
|
);
|
|
}
|
|
|
|
/**
|
|
* @expectedException Icinga\Exception\ConfigurationError
|
|
* @expectedExceptionMessage No working backend found. Unable to authenticate any
|
|
*/
|
|
public function testErrorProneBackendsFromConfigurationWhenAuthenticate()
|
|
{
|
|
$managerConfig = new Zend_Config(
|
|
array(
|
|
'provider1' => array(
|
|
'class' => 'Tests\Icinga\Authentication\ErrorProneBackendMock'
|
|
),
|
|
'provider2' => array(
|
|
'class' => 'Tests\Icinga\Authentication\ErrorProneBackendMock'
|
|
)
|
|
),
|
|
true
|
|
);
|
|
|
|
ErrorProneBackendMock::$throwOnCreate = false;
|
|
|
|
$authManager = $this->getManagerInstance($session, false, true, $managerConfig);
|
|
|
|
$this->assertInstanceOf(
|
|
'Tests\Icinga\Authentication\ErrorProneBackendMock',
|
|
$authManager->getUserBackend('provider1')
|
|
);
|
|
|
|
$this->assertInstanceOf(
|
|
'Tests\Icinga\Authentication\ErrorProneBackendMock',
|
|
$authManager->getUserBackend('provider2')
|
|
);
|
|
|
|
$authManager->authenticate(
|
|
new Credential('jdoe', 'passjdoe')
|
|
);
|
|
}
|
|
|
|
public function testAuthenticationChainWithGoodProviders()
|
|
{
|
|
$managerConfig = new Zend_Config(
|
|
array(
|
|
'provider1' => array(
|
|
'class' => 'Tests\Icinga\Authentication\BackendMock'
|
|
),
|
|
'provider2' => array(
|
|
'class' => 'Tests\Icinga\Authentication\BackendMock'
|
|
)
|
|
),
|
|
true
|
|
);
|
|
|
|
$authManager = $this->getManagerInstance($session, true, true, $managerConfig);
|
|
|
|
$authManager->getUserBackend('provider1')->setCredentials(
|
|
array(
|
|
new Credential('p1-user1', 'p1-passwd1'),
|
|
new Credential('p1-user2', 'p1-passwd2')
|
|
)
|
|
);
|
|
|
|
$authManager->getUserBackend('provider2')->setCredentials(
|
|
array(
|
|
new Credential('p2-user1', 'p2-passwd1'),
|
|
new Credential('p2-user2', 'p2-passwd2')
|
|
)
|
|
);
|
|
|
|
$this->assertTrue(
|
|
$authManager->authenticate(new Credential('p2-user2', 'p2-passwd2'))
|
|
);
|
|
}
|
|
|
|
public function testAuthenticationChainWithBadProviders()
|
|
{
|
|
$managerConfig = new Zend_Config(
|
|
array(
|
|
'provider1' => array(
|
|
'class' => 'Tests\Icinga\Authentication\ErrorProneBackendMock'
|
|
),
|
|
'provider2' => array(
|
|
'class' => 'Tests\Icinga\Authentication\ErrorProneBackendMock'
|
|
),
|
|
'provider3' => array(
|
|
'class' => 'Tests\Icinga\Authentication\ErrorProneBackendMock'
|
|
),
|
|
'provider4' => array(
|
|
'class' => 'Tests\Icinga\Authentication\BackendMock'
|
|
)
|
|
),
|
|
true
|
|
);
|
|
|
|
$authManager = $this->getManagerInstance($session, false, true, $managerConfig);
|
|
|
|
$this->assertInstanceOf(
|
|
'Tests\Icinga\Authentication\ErrorProneBackendMock',
|
|
$authManager->getUserBackend('provider1')
|
|
);
|
|
|
|
$this->assertInstanceOf(
|
|
'Tests\Icinga\Authentication\BackendMock',
|
|
$authManager->getUserBackend('provider4')
|
|
);
|
|
|
|
$authManager->getUserBackend('provider4')->setCredentials(
|
|
array(
|
|
new Credential('p4-user1', 'p4-passwd1'),
|
|
new Credential('p4-user2', 'p4-passwd2')
|
|
)
|
|
);
|
|
|
|
$session->isOpen = true;
|
|
|
|
$this->assertTrue(
|
|
$authManager->authenticate(new Credential('p4-user2', 'p4-passwd2'))
|
|
);
|
|
|
|
$session->isOpen = true;
|
|
|
|
$this->assertTrue(
|
|
$authManager->authenticate(new Credential('p4-user1', 'p4-passwd1'))
|
|
);
|
|
|
|
$session->isOpen = true;
|
|
|
|
$this->assertFalse(
|
|
$authManager->authenticate(new Credential('p4-user2', 'p4-passwd1-WRONG123123'))
|
|
);
|
|
}
|
|
|
|
public function testErrorConditionsInConfiguration()
|
|
{
|
|
$managerConfig = new Zend_Config(
|
|
array(
|
|
'provider1' => array(
|
|
'backend' => 'db'
|
|
),
|
|
'provider2' => array(
|
|
'target' => 'user'
|
|
),
|
|
'provider3' => array(
|
|
'class' => 'Uhh\Ahh\WeDoNotCare123'
|
|
)
|
|
),
|
|
true
|
|
);
|
|
|
|
$authManager = $this->getManagerInstance($session, true, true, $managerConfig);
|
|
|
|
$this->assertNull($authManager->getUserBackend('provider1'));
|
|
$this->assertNull($authManager->getUserBackend('provider2'));
|
|
$this->assertNull($authManager->getUserBackend('provider3'));
|
|
}
|
|
}
|