136 lines
3.5 KiB
PHP
Executable File
136 lines
3.5 KiB
PHP
Executable File
<?php
|
|
/**
|
|
* Copyright © Magento, Inc. All rights reserved.
|
|
* See COPYING.txt for license details.
|
|
*/
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace Magento\JwtUserToken\Model;
|
|
|
|
use Magento\Authorization\Model\UserContextInterface;
|
|
use Magento\Customer\Api\CustomerRepositoryInterface;
|
|
use Magento\Framework\Exception\AuthorizationException;
|
|
use Magento\JwtUserToken\Api\Data\Revoked;
|
|
use Magento\JwtUserToken\Api\RevokedRepositoryInterface;
|
|
use Magento\JwtUserToken\Model\Data\JwtUserContext;
|
|
use Magento\TestFramework\Helper\Bootstrap;
|
|
use Magento\User\Model\User as UserModel;
|
|
use PHPUnit\Framework\TestCase;
|
|
use Magento\Integration\Api\Data\UserTokenParametersInterface;
|
|
use Magento\Integration\Api\Data\UserTokenParametersInterfaceFactory;
|
|
|
|
class RevokerTest extends TestCase
|
|
{
|
|
/**
|
|
* @var Revoker;
|
|
*/
|
|
private $model;
|
|
|
|
/**
|
|
* @var Reader
|
|
*/
|
|
private $reader;
|
|
|
|
/**
|
|
* @var Issuer
|
|
*/
|
|
private $issuer;
|
|
|
|
/**
|
|
* @var CustomerRepositoryInterface
|
|
*/
|
|
private $customerRepo;
|
|
|
|
/**
|
|
* @var UserModel
|
|
*/
|
|
private $userModel;
|
|
|
|
/**
|
|
* @var UserTokenParametersInterfaceFactory
|
|
*/
|
|
private $paramsFactory;
|
|
|
|
/**
|
|
* @var RevokedValidator
|
|
*/
|
|
private $revokedValidator;
|
|
|
|
/**
|
|
* @var RevokedRepositoryInterface
|
|
*/
|
|
private $revokedRepo;
|
|
|
|
/**
|
|
* @var int|null
|
|
*/
|
|
private $clearForId;
|
|
|
|
/**
|
|
* @var int|null
|
|
*/
|
|
private $clearForType;
|
|
|
|
/**
|
|
* @inheritDoc
|
|
*/
|
|
protected function setUp(): void
|
|
{
|
|
parent::setUp();
|
|
|
|
$objectManager = Bootstrap::getObjectManager();
|
|
|
|
$this->model = $objectManager->get(Revoker::class);
|
|
$this->reader = $objectManager->get(Reader::class);
|
|
$this->issuer = $objectManager->get(Issuer::class);
|
|
$this->customerRepo = $objectManager->get(CustomerRepositoryInterface::class);
|
|
$this->userModel = $objectManager->create(UserModel::class);
|
|
$this->paramsFactory = $objectManager->get(UserTokenParametersInterfaceFactory::class);
|
|
$this->revokedValidator = $objectManager->get(RevokedValidator::class);
|
|
$this->revokedRepo = $objectManager->get(RevokedRepositoryInterface::class);
|
|
}
|
|
|
|
/**
|
|
* @inheritDoc
|
|
*/
|
|
protected function tearDown(): void
|
|
{
|
|
parent::tearDown();
|
|
|
|
if ($this->clearForId) {
|
|
$this->revokedRepo->saveRevoked(new Revoked($this->clearForType, $this->clearForId, time() - 60));
|
|
$this->clearForType = null;
|
|
$this->clearForId = null;
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Verify that a token can be issued for a customer.
|
|
*
|
|
* @return void
|
|
* @throws \Throwable
|
|
* @magentoDataFixture Magento/Customer/_files/customer.php
|
|
*/
|
|
public function testIssueForCustomer(): void
|
|
{
|
|
$customer = $this->customerRepo->get('customer@example.com');
|
|
/** @var UserTokenParametersInterface $params */
|
|
$params = $this->paramsFactory->create();
|
|
$token = $this->issuer->create(
|
|
new JwtUserContext((int) $customer->getId(), UserContextInterface::USER_TYPE_CUSTOMER),
|
|
$params
|
|
);
|
|
|
|
$this->model->revokeFor(
|
|
new JwtUserContext(
|
|
$this->clearForId = (int) $customer->getId(),
|
|
$this->clearForType = UserContextInterface::USER_TYPE_CUSTOMER
|
|
)
|
|
);
|
|
|
|
$this->expectException(AuthorizationException::class);
|
|
$this->revokedValidator->validate($this->reader->read($token));
|
|
}
|
|
}
|