[project @ Added trust root handling code and tests]

2 files changed, 286 insertions, 0 deletions

diff --git a/Tests/Auth/OpenID/TrustRoot.php b/Tests/Auth/OpenID/TrustRoot.php
new file mode 100644
index 0000000..54694d0
--- /dev/null
+++ b/Tests/Auth/OpenID/TrustRoot.php
@@ -0,0 +1,171 @@
+<?php
+
+/**
+ * Tests for the TrustRoot module
+ */
+
+require_once "Auth/OpenID/TrustRoot.php";
+require_once "Tests/Auth/OpenID/Util.php";
+require_once "PHPUnit.php";
+
+class Tests_Auth_OpenID_TRParseCase extends PHPUnit_TestCase {
+    function Tests_Auth_OpenID_TRParseCase($desc, $case, $expected)
+    {
+        $this->setName($desc);
+        $this->case = $case;
+        $this->expected = $expected;
+    }
+
+    function runTest()
+    {
+        $is_sane = Auth_OpenID_saneTrustRoot($this->case);
+        $parsed = (bool)Auth_OpenID___normalizeTrustRoot($this->case);
+        switch ($this->expected) {
+        case 'sane':
+            $this->assertTrue($is_sane);
+            $this->assertTrue($parsed);
+            break;
+        case 'insane':
+            $this->assertTrue($parsed);
+            $this->assertFalse($is_sane);
+            break;
+        default:
+            $this->assertFalse($parsed);
+            $this->assertFalse($is_sane);
+        }
+    }
+}
+
+class Tests_Auth_OpenID_TRMatchCase extends PHPUnit_TestCase {
+    function Tests_Auth_OpenID_TRMatchCase($desc, $tr, $rt, $matches)
+    {
+        $this->setName($desc);
+        $this->tr = $tr;
+        $this->rt = $rt;
+        $this->matches = $matches;
+    }
+
+    function runTest()
+    {
+        $matches = Auth_OpenID_matchTrustRoot($this->tr, $this->rt);
+        if ($this->matches && !$matches) {
+            var_export(Auth_OpenID___normalizeTrustRoot($this->tr));
+            var_export(Auth_OpenID___normalizeTrustRoot($this->rt));
+        }
+            
+        $this->assertEquals((bool)$this->matches, (bool)$matches);
+    }
+}
+
+function Tests_Auth_OpenID_parseHeadings($data, $c)
+{
+    $heading_pat = '/(^|\n)' . $c . '{40}\n([^\n]+)\n' . $c . '{40}\n()/';
+    $offset = 0;
+    $headings = array();
+    while (true) {
+        preg_match($heading_pat, $data, $matches, PREG_OFFSET_CAPTURE, $offset);
+        if (!$matches) {
+            break;
+        }
+        $start = $matches[0][1];
+        $heading = $matches[2][0];
+        $end = $matches[3][1];
+        $headings[] = array('heading' => $heading,
+                            'start' => $start,
+                            'end' => $end,
+                            );
+        $offset = $end;
+    }
+    return $headings;
+}
+
+function Tests_Auth_OpenID_getSections($data)
+{
+    $headings = Tests_Auth_OpenID_parseHeadings($data, '-');
+    $sections = array();
+    $n = count($headings);
+    for ($i = 0; $i < $n; ) {
+        $secdata = $headings[$i];
+        list($numtests, $desc) = explode(': ', $secdata['heading']);
+        $start = $secdata['end'];
+        $i += 1;
+        if ($i < $n) {
+            $blob = substr($data, $start, $headings[$i]['start'] - $start);
+        } else {
+            $blob = substr($data, $start);
+        }
+        $lines = explode("\n", trim($blob));
+        if (count($lines) != $numtests) {
+            trigger_error('Parse failure: ' . var_export($secdata, true),
+                          E_USER_ERROR);
+        }
+        $sections[] = array('desc' => $desc, 'lines' => $lines,);
+    }
+    return $sections;
+}
+
+function Tests_Auth_OpenID_trParseTests($head, $tests)
+{
+    $tests = array('fail' => $tests[0],
+                   'insane' => $tests[1],
+                   'sane' => $tests[2]);
+    $testobjs = array();
+    foreach ($tests as $expected => $testdata) {
+        $lines = $testdata['lines'];
+        foreach ($lines as $line) {
+            $desc = sprintf("%s - %s: %s", $head,
+                            $testdata['desc'], var_export($line, true));
+            $testobjs[] = new Tests_Auth_OpenID_TRParseCase(
+                $desc, $line, $expected);
+        }
+    }
+    return $testobjs;
+}
+
+function Tests_Auth_OpenID_trMatchTests($head, $tests)
+{
+    $tests = array(true => $tests[0], false => $tests[1]);
+    $testobjs = array();
+    foreach ($tests as $expected => $testdata) {
+        $lines = $testdata['lines'];
+        foreach ($lines as $line) {
+            $pat = '/^([^ ]+) +([^ ]+)$/';
+            preg_match($pat, $line, $matches);
+            list($_, $tr, $rt) = $matches;
+            $desc = sprintf("%s - %s: %s %s", $head, $testdata['desc'],
+                            var_export($tr, true), var_export($rt, true));
+            $testobjs[] = new Tests_Auth_OpenID_TRMatchCase(
+                $desc, $tr, $rt, $expected);
+        }
+    }
+    return $testobjs;
+}
+
+function Tests_Auth_OpenID_trustRootTests()
+{
+    $data = Tests_Auth_OpenID_readdata('trustroot.txt');
+    list($parsehead, $matchhead) = Tests_Auth_OpenID_parseHeadings($data, '=');
+    $pe = $parsehead['end'];
+    $parsedata = substr($data, $pe, $matchhead['start'] - $pe);
+    $parsetests = Tests_Auth_OpenID_getSections($parsedata);
+    $parsecases = Tests_Auth_OpenID_trParseTests($parsehead['heading'],
+                                                 $parsetests);
+
+    $matchdata = substr($data, $matchhead['end']);
+    $matchtests = Tests_Auth_OpenID_getSections($matchdata);
+    $matchcases = Tests_Auth_OpenID_trMatchTests($matchhead['heading'],
+                                                 $matchtests);
+
+    return array_merge($parsecases, $matchcases);
+}
+
+class Tests_Auth_OpenID_TrustRoot extends PHPUnit_TestSuite {
+    function Tests_Auth_OpenID_TrustRoot($name)
+    {
+        $this->setName($name);
+
+        foreach (Tests_Auth_OpenID_trustRootTests() as $test) {
+            $this->addTest($test);
+        }
+    }
+}
\ No newline at end of file
diff --git a/Tests/Auth/OpenID/data/trustroot.txt b/Tests/Auth/OpenID/data/trustroot.txt
new file mode 100644
index 0000000..0db7f50
--- /dev/null
+++ b/Tests/Auth/OpenID/data/trustroot.txt
@@ -0,0 +1,115 @@
+========================================
+Trust root parsing checking
+========================================
+
+----------------------------------------
+14: Does not parse
+----------------------------------------
+baz.org
+*.foo.com
+http://*.schtuff.*/
+ftp://foo.com
+ftp://*.foo.com
+http://*.foo.com:80:90/
+foo.*.com
+http://foo.*.com
+http://www.*
+http://*foo.com/
+
+ 
+ 	
+5
+
+----------------------------------------
+12: Insane
+----------------------------------------
+http://*/
+https://*/
+http://*.com
+http://*.com/
+https://*.com/
+http://*.com.au/
+http://*.co.uk/
+http://*.foo.notatld/
+https://*.foo.notatld/
+http://*.museum/
+https://*.museum/
+http://kink.fm/should/be/sane
+
+----------------------------------------
+14: Sane
+----------------------------------------
+http://*.schtuff.com/
+http://*.foo.schtuff.com/
+http://*.schtuff.com
+http://www.schtuff.com/
+http://www.schutff.com
+http://*.this.that.schtuff.com/
+http://*.foo.com/path
+http://*.foo.com/path?action=foo2
+http://x.foo.com/path?action=foo2
+http://x.foo.com/path?action=%3D
+http://localhost:8081/
+http://localhost:8082/?action=openid
+https://foo.com/
+http://goathack.livejournal.org:8020/openid/login.bml
+
+========================================
+return_to matching
+========================================
+
+----------------------------------------
+29: matches
+----------------------------------------
+http://*/                             http://cnn.com/
+http://*/                             http://livejournal.com/
+http://*/                             http://met.museum/
+http://*:8081/                        http://met.museum:8081/
+http://localhost:8081/x?action=openid http://localhost:8081/x?action=openid
+http://*.foo.com                      http://b.foo.com
+http://*.foo.com                      http://b.foo.com/
+http://*.foo.com/                     http://b.foo.com
+http://b.foo.com                      http://b.foo.com
+http://b.foo.com                      http://b.foo.com/
+http://b.foo.com/                     http://b.foo.com
+http://*.b.foo.com                    http://b.foo.com
+http://*.b.foo.com                    http://b.foo.com/
+http://*.b.foo.com/                   http://b.foo.com
+http://*.b.foo.com                    http://x.b.foo.com
+http://*.b.foo.com                    http://w.x.b.foo.com
+http://*.bar.co.uk                    http://www.bar.co.uk
+http://*.uoregon.edu                  http://x.cs.uoregon.edu
+http://x.com/abc                      http://x.com/abc
+http://x.com/abc                      http://x.com/abc/def
+http://*.x.com                        http://x.com/gallery
+http://*.x.com                        http://foo.x.com/gallery
+http://foo.x.com                      http://foo.x.com/gallery/xxx
+http://*.x.com/gallery                http://foo.x.com/gallery
+http://localhost:8082/?action=openid  http://localhost:8082/?action=openid
+http://goathack.livejournal.org:8020/ http://goathack.livejournal.org:8020/openid/login.bml
+https://foo.com                       https://foo.com
+http://Foo.com                        http://foo.com
+http://foo.com                        http://Foo.com
+
+----------------------------------------
+19: does not match
+----------------------------------------
+http://*/                             ftp://foo.com/
+http://*/                             xxx
+http://*.x.com/abc                    http://foo.x.com
+http://*.x.com/abc                    http://*.x.com
+http://*.com/                         http://*.com/
+http://x.com/abc                      http://x.com/
+http://x.com/abc                      http://x.com/a
+http://x.com/abc                      http://x.com/ab
+http://x.com/abc                      http://x.com/abcd
+http://*.cs.uoregon.edu               http://x.uoregon.edu
+http://*.foo.com                      http://bar.com
+http://*.foo.com                      http://www.bar.com
+http://*.bar.co.uk                    http://xxx.co.uk
+https://foo.com                       http://foo.com
+http://foo.com                        https://foo.com
+http://foo.com:80                     http://foo.com
+http://foo.com                        http://foo.com:80
+http://foo.com:81                     http://foo.com:80
+http://*:80                           http://foo.com:81