mirror of
https://github.com/Icinga/icingaweb2.git
synced 2025-07-29 00:34:03 +02:00
ad08691362
Remove the old calls to DbAdapterFactory and use ResourceFactory instead. Remove the DbAdapterFactory and fix all unit tests that have been broken due to the changes. Change the functionality of the ResourceFactory to also handle LdapConnections resolves #4587
375 lines
12 KiB
PHP
375 lines
12 KiB
PHP
<?php
|
|
// {{{ICINGA_LICENSE_HEADER}}}
|
|
/**
|
|
* This file is part of Icinga Web 2.
|
|
*
|
|
* Icinga Web 2 - Head for multiple monitoring backends.
|
|
* Copyright (C) 2013 Icinga Development Team
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
*
|
|
* @copyright 2013 Icinga Development Team <info@icinga.org>
|
|
* @license http://www.gnu.org/licenses/gpl-2.0.txt GPL, version 2
|
|
* @author Icinga Development Team <info@icinga.org>
|
|
*
|
|
*/
|
|
// {{{ICINGA_LICENSE_HEADER}}}
|
|
|
|
namespace Tests\Icinga\Authentication;
|
|
|
|
// @codingStandardsIgnoreStart
|
|
require_once realpath(__DIR__ . '/../../../../../library/Icinga/Test/BaseTestCase.php');
|
|
// @codingStandardsIgnoreEnd
|
|
|
|
use Icinga\Application\Logger;
|
|
use \Icinga\Test\BaseTestCase;
|
|
|
|
// @codingStandardsIgnoreStart
|
|
require_once 'Zend/Log.php';
|
|
require_once 'Zend/Config.php';
|
|
require_once BaseTestCase::$libDir . '/Application/Logger.php';
|
|
require_once BaseTestCase::$libDir . '/Authentication/Manager.php';
|
|
require_once BaseTestCase::$libDir . '/Authentication/Credential.php';
|
|
require_once BaseTestCase::$libDir . '/Exception/ConfigurationError.php';
|
|
require_once BaseTestCase::$libDir . '/Exception/ProgrammingError.php';
|
|
require_once 'BackendMock.php';
|
|
require_once 'ErrorProneBackendMock.php';
|
|
require_once 'SessionMock.php';
|
|
// @codingStandardsIgnoreEnd
|
|
|
|
use \Zend_Config;
|
|
use \Icinga\Authentication\Manager as AuthManager;
|
|
use \Icinga\Authentication\Credential;
|
|
use \Icinga\Exception\ConfigurationError;
|
|
|
|
/**
|
|
* @backupStaticAttributes enabled
|
|
*/
|
|
class ManagerTest extends BaseTestCase
|
|
{
|
|
public function getTestCredentials()
|
|
{
|
|
return array(
|
|
new Credential("jdoe", "passjdoe"),
|
|
new Credential("root", "passroot"),
|
|
new Credential("test", "passtest")
|
|
);
|
|
}
|
|
|
|
public function getManagerInstance(
|
|
&$session = null,
|
|
$write = false,
|
|
$nobackend = false,
|
|
Zend_Config $managerConfig = null
|
|
) {
|
|
if ($session == null) {
|
|
$session = new SessionMock();
|
|
}
|
|
|
|
if ($managerConfig === null) {
|
|
$managerConfig = new Zend_Config(array());
|
|
}
|
|
|
|
$managerOptions = array(
|
|
'sessionClass' => $session,
|
|
'writeSession' => $write,
|
|
'noDefaultConfig' => true
|
|
);
|
|
|
|
$manager = AuthManager::getInstance($managerConfig, $managerOptions);
|
|
|
|
if ($nobackend === false) {
|
|
$backend = new BackendMock();
|
|
$backend->allowedCredentials = $this->getTestCredentials();
|
|
$manager->addUserBackend($backend);
|
|
}
|
|
|
|
return $manager;
|
|
}
|
|
|
|
public function testManagerInstanciation()
|
|
{
|
|
$authMgr = $this->getManagerInstance();
|
|
$this->assertSame($authMgr, AuthManager::getInstance());
|
|
}
|
|
|
|
public function testManagerProducingDependencies()
|
|
{
|
|
$authMgr = $this->getManagerInstance($session, true);
|
|
$this->assertSame($authMgr, AuthManager::getInstance());
|
|
|
|
$backend = new BackendMock();
|
|
$backend->setCredentials($this->getTestCredentials());
|
|
|
|
$authMgr->addUserBackend($backend);
|
|
|
|
$this->assertTrue(
|
|
$authMgr->authenticate(
|
|
new Credential('jdoe', 'passjdoe')
|
|
)
|
|
);
|
|
|
|
$this->assertInstanceOf('Icinga\User', $authMgr->getUser());
|
|
$this->assertSame('Username', $authMgr->getUser()->getUsername());
|
|
|
|
$this->assertInstanceOf(
|
|
'Tests\Icinga\Authentication\SessionMock',
|
|
$authMgr->getSession()
|
|
);
|
|
|
|
$authMgr->removeAuthorization();
|
|
|
|
$this->assertNull($authMgr->getUser());
|
|
}
|
|
|
|
public function testAuthentication()
|
|
{
|
|
$auth = $this->getManagerInstance();
|
|
$this->assertFalse(
|
|
$auth->authenticate(
|
|
new Credential("jhoe", "passjdoe"),
|
|
false
|
|
)
|
|
);
|
|
$this->assertFalse(
|
|
$auth->authenticate(
|
|
new Credential("joe", "passjhoe"),
|
|
false
|
|
)
|
|
);
|
|
$this->assertTrue(
|
|
$auth->authenticate(
|
|
new Credential("jdoe", "passjdoe"),
|
|
false
|
|
)
|
|
);
|
|
}
|
|
|
|
public function testPersistAuthInSession()
|
|
{
|
|
$session = new SessionMock();
|
|
$auth = $this->getManagerInstance($session, true);
|
|
$this->assertFalse($auth->isAuthenticated(true));
|
|
$auth->authenticate(new Credential("jdoe", "passjdoe"));
|
|
$this->assertNotEquals(null, $session->get("user"));
|
|
$user = $session->get("user");
|
|
$this->assertEquals("Username", $user->getUsername());
|
|
$this->assertTrue($auth->isAuthenticated(true));
|
|
}
|
|
|
|
public function testAuthenticateFromSession()
|
|
{
|
|
$session = new SessionMock();
|
|
$session->set("user", BackendMock::getDummyUser());
|
|
$auth = $this->getManagerInstance($session, false);
|
|
$this->assertFalse($auth->isAuthenticated(true));
|
|
$this->assertTrue($auth->isAuthenticated());
|
|
$this->assertTrue($auth->isAuthenticated());
|
|
}
|
|
|
|
/**
|
|
* @expectedException Exception
|
|
* @expectedExceptionMessage Session write after close
|
|
*/
|
|
public function testWriteSessionTwice()
|
|
{
|
|
$auth = $this->getManagerInstance($session, false);
|
|
$this->assertFalse($auth->isAuthenticated(true));
|
|
$auth->authenticate(new Credential("jdoe", "passjdoe"));
|
|
}
|
|
|
|
/**
|
|
* @expectedException Icinga\Exception\ConfigurationError
|
|
* @expectedExceptionMessage No authentication backend set
|
|
*/
|
|
public function testErrorProneBackendsFromConfigurationWhenInitiate()
|
|
{
|
|
$managerConfig = new Zend_Config(
|
|
array(
|
|
'provider1' => array(
|
|
'class' => 'Tests\Icinga\Authentication\ErrorProneBackendMock'
|
|
)
|
|
),
|
|
true
|
|
);
|
|
|
|
ErrorProneBackendMock::$throwOnCreate = true;
|
|
|
|
$authManager = $this->getManagerInstance($session, true, true, $managerConfig);
|
|
|
|
$this->assertNull(
|
|
$authManager->getUserBackend('provider1')
|
|
);
|
|
|
|
$authManager->authenticate(
|
|
new Credential('jdoe', 'passjdoe')
|
|
);
|
|
}
|
|
|
|
/**
|
|
* @expectedException Icinga\Exception\ConfigurationError
|
|
* @expectedExceptionMessage No working backend found. Unable to authenticate any
|
|
*/
|
|
public function testErrorProneBackendsFromConfigurationWhenAuthenticate()
|
|
{
|
|
$managerConfig = new Zend_Config(
|
|
array(
|
|
'provider1' => array(
|
|
'class' => 'Tests\Icinga\Authentication\ErrorProneBackendMock'
|
|
),
|
|
'provider2' => array(
|
|
'class' => 'Tests\Icinga\Authentication\ErrorProneBackendMock'
|
|
)
|
|
),
|
|
true
|
|
);
|
|
|
|
ErrorProneBackendMock::$throwOnCreate = false;
|
|
|
|
$authManager = $this->getManagerInstance($session, false, true, $managerConfig);
|
|
|
|
$this->assertInstanceOf(
|
|
'Tests\Icinga\Authentication\ErrorProneBackendMock',
|
|
$authManager->getUserBackend('provider1')
|
|
);
|
|
|
|
$this->assertInstanceOf(
|
|
'Tests\Icinga\Authentication\ErrorProneBackendMock',
|
|
$authManager->getUserBackend('provider2')
|
|
);
|
|
|
|
$authManager->authenticate(
|
|
new Credential('jdoe', 'passjdoe')
|
|
);
|
|
}
|
|
|
|
public function testAuthenticationChainWithGoodProviders()
|
|
{
|
|
$managerConfig = new Zend_Config(
|
|
array(
|
|
'provider1' => array(
|
|
'class' => 'Tests\Icinga\Authentication\BackendMock'
|
|
),
|
|
'provider2' => array(
|
|
'class' => 'Tests\Icinga\Authentication\BackendMock'
|
|
)
|
|
),
|
|
true
|
|
);
|
|
|
|
$authManager = $this->getManagerInstance($session, true, true, $managerConfig);
|
|
|
|
$authManager->getUserBackend('provider1')->setCredentials(
|
|
array(
|
|
new Credential('p1-user1', 'p1-passwd1'),
|
|
new Credential('p1-user2', 'p1-passwd2')
|
|
)
|
|
);
|
|
|
|
$authManager->getUserBackend('provider2')->setCredentials(
|
|
array(
|
|
new Credential('p2-user1', 'p2-passwd1'),
|
|
new Credential('p2-user2', 'p2-passwd2')
|
|
)
|
|
);
|
|
|
|
$this->assertTrue(
|
|
$authManager->authenticate(new Credential('p2-user2', 'p2-passwd2'))
|
|
);
|
|
}
|
|
|
|
public function testAuthenticationChainWithBadProviders()
|
|
{
|
|
$managerConfig = new Zend_Config(
|
|
array(
|
|
'provider1' => array(
|
|
'class' => 'Tests\Icinga\Authentication\ErrorProneBackendMock'
|
|
),
|
|
'provider2' => array(
|
|
'class' => 'Tests\Icinga\Authentication\ErrorProneBackendMock'
|
|
),
|
|
'provider3' => array(
|
|
'class' => 'Tests\Icinga\Authentication\ErrorProneBackendMock'
|
|
),
|
|
'provider4' => array(
|
|
'class' => 'Tests\Icinga\Authentication\BackendMock'
|
|
)
|
|
),
|
|
true
|
|
);
|
|
|
|
$authManager = $this->getManagerInstance($session, false, true, $managerConfig);
|
|
|
|
$this->assertInstanceOf(
|
|
'Tests\Icinga\Authentication\ErrorProneBackendMock',
|
|
$authManager->getUserBackend('provider1')
|
|
);
|
|
|
|
$this->assertInstanceOf(
|
|
'Tests\Icinga\Authentication\BackendMock',
|
|
$authManager->getUserBackend('provider4')
|
|
);
|
|
|
|
$authManager->getUserBackend('provider4')->setCredentials(
|
|
array(
|
|
new Credential('p4-user1', 'p4-passwd1'),
|
|
new Credential('p4-user2', 'p4-passwd2')
|
|
)
|
|
);
|
|
|
|
$session->isOpen = true;
|
|
|
|
$this->assertTrue(
|
|
$authManager->authenticate(new Credential('p4-user2', 'p4-passwd2'))
|
|
);
|
|
|
|
$session->isOpen = true;
|
|
|
|
$this->assertTrue(
|
|
$authManager->authenticate(new Credential('p4-user1', 'p4-passwd1'))
|
|
);
|
|
|
|
$session->isOpen = true;
|
|
|
|
$this->assertFalse(
|
|
$authManager->authenticate(new Credential('p4-user2', 'p4-passwd1-WRONG123123'))
|
|
);
|
|
}
|
|
|
|
public function testErrorConditionsInConfiguration()
|
|
{
|
|
$managerConfig = new Zend_Config(
|
|
array(
|
|
'provider1' => array(
|
|
'backend' => 'db'
|
|
),
|
|
'provider2' => array(
|
|
'target' => 'user'
|
|
),
|
|
'provider3' => array(
|
|
'class' => 'Uhh\Ahh\WeDoNotCare123'
|
|
)
|
|
),
|
|
true
|
|
);
|
|
|
|
$authManager = $this->getManagerInstance($session, true, true, $managerConfig);
|
|
|
|
$this->assertNull($authManager->getUserBackend('provider1'));
|
|
$this->assertNull($authManager->getUserBackend('provider2'));
|
|
$this->assertNull($authManager->getUserBackend('provider3'));
|
|
}
|
|
}
|