[Security] Split the component into 3 sub-components Core, ACL, HTTP

4 files changed, 481 insertions, 0 deletions

diff --git a/Core/Tests/User/AccountCheckerTest.php b/Core/Tests/User/AccountCheckerTest.php
new file mode 100644
index 0000000..8d5e203
--- /dev/null
+++ b/Core/Tests/User/AccountCheckerTest.php
@@ -0,0 +1,108 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\Security\Core\Tests\User;
+
+use Symfony\Component\Security\Core\User\UserChecker;
+
+class UserCheckerTest extends \PHPUnit_Framework_TestCase
+{
+    public function testCheckPreAuthNotAdvancedUserInterface()
+    {
+        $checker = new UserChecker();
+
+        $this->assertNull($checker->checkPreAuth($this->getMock('Symfony\Component\Security\Core\User\UserInterface')));
+    }
+
+    public function testCheckPreAuthPass()
+    {
+        $checker = new UserChecker();
+
+        $account = $this->getMock('Symfony\Component\Security\Core\User\AdvancedUserInterface');
+        $account->expects($this->once())->method('isCredentialsNonExpired')->will($this->returnValue(true));
+
+        $this->assertNull($checker->checkPreAuth($account));
+    }
+
+    /**
+     * @expectedException \Symfony\Component\Security\Core\Exception\CredentialsExpiredException
+     */
+    public function testCheckPreAuthCredentialsExpired()
+    {
+        $checker = new UserChecker();
+
+        $account = $this->getMock('Symfony\Component\Security\Core\User\AdvancedUserInterface');
+        $account->expects($this->once())->method('isCredentialsNonExpired')->will($this->returnValue(false));
+
+        $checker->checkPreAuth($account);
+    }
+
+    public function testCheckPostAuthNotAdvancedUserInterface()
+    {
+        $checker = new UserChecker();
+
+        $this->assertNull($checker->checkPostAuth($this->getMock('Symfony\Component\Security\Core\User\UserInterface')));
+    }
+
+    public function testCheckPostAuthPass()
+    {
+        $checker = new UserChecker();
+
+        $account = $this->getMock('Symfony\Component\Security\Core\User\AdvancedUserInterface');
+        $account->expects($this->once())->method('isAccountNonLocked')->will($this->returnValue(true));
+        $account->expects($this->once())->method('isEnabled')->will($this->returnValue(true));
+        $account->expects($this->once())->method('isAccountNonExpired')->will($this->returnValue(true));
+
+        $this->assertNull($checker->checkPostAuth($account));
+    }
+
+    /**
+     * @expectedException \Symfony\Component\Security\Core\Exception\LockedException
+     */
+    public function testCheckPostAuthAccountLocked()
+    {
+        $checker = new UserChecker();
+
+        $account = $this->getMock('Symfony\Component\Security\Core\User\AdvancedUserInterface');
+        $account->expects($this->once())->method('isAccountNonLocked')->will($this->returnValue(false));
+
+        $checker->checkPostAuth($account);
+    }
+
+    /**
+     * @expectedException \Symfony\Component\Security\Core\Exception\DisabledException
+     */
+    public function testCheckPostAuthDisabled()
+    {
+        $checker = new UserChecker();
+
+        $account = $this->getMock('Symfony\Component\Security\Core\User\AdvancedUserInterface');
+        $account->expects($this->once())->method('isAccountNonLocked')->will($this->returnValue(true));
+        $account->expects($this->once())->method('isEnabled')->will($this->returnValue(false));
+
+        $checker->checkPostAuth($account);
+    }
+
+    /**
+     * @expectedException \Symfony\Component\Security\Core\Exception\AccountExpiredException
+     */
+    public function testCheckPostAuthAccountExpired()
+    {
+        $checker = new UserChecker();
+
+        $account = $this->getMock('Symfony\Component\Security\Core\User\AdvancedUserInterface');
+        $account->expects($this->once())->method('isAccountNonLocked')->will($this->returnValue(true));
+        $account->expects($this->once())->method('isEnabled')->will($this->returnValue(true));
+        $account->expects($this->once())->method('isAccountNonExpired')->will($this->returnValue(false));
+
+        $checker->checkPostAuth($account);
+    }
+}
diff --git a/Core/Tests/User/ChainUserProviderTest.php b/Core/Tests/User/ChainUserProviderTest.php
new file mode 100644
index 0000000..57873cf
--- /dev/null
+++ b/Core/Tests/User/ChainUserProviderTest.php
@@ -0,0 +1,185 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\Security\Core\Tests\User;
+
+use Symfony\Component\Security\Core\Exception\UnsupportedUserException;
+
+use Symfony\Component\Security\Core\User\ChainUserProvider;
+
+use Symfony\Component\Security\Core\Exception\UsernameNotFoundException;
+
+class ChainUserProviderTest extends \PHPUnit_Framework_TestCase
+{
+    public function testLoadUserByUsername()
+    {
+        $provider1 = $this->getProvider();
+        $provider1
+            ->expects($this->once())
+            ->method('loadUserByUsername')
+            ->with($this->equalTo('foo'))
+            ->will($this->throwException(new UsernameNotFoundException('not found')))
+        ;
+
+        $provider2 = $this->getProvider();
+        $provider2
+            ->expects($this->once())
+            ->method('loadUserByUsername')
+            ->with($this->equalTo('foo'))
+            ->will($this->returnValue($account = $this->getAccount()))
+        ;
+
+        $provider = new ChainUserProvider(array($provider1, $provider2));
+        $this->assertSame($account, $provider->loadUserByUsername('foo'));
+    }
+
+    /**
+     * @expectedException \Symfony\Component\Security\Core\Exception\UsernameNotFoundException
+     */
+    public function testLoadUserByUsernameThrowsUsernameNotFoundException()
+    {
+        $provider1 = $this->getProvider();
+        $provider1
+            ->expects($this->once())
+            ->method('loadUserByUsername')
+            ->with($this->equalTo('foo'))
+            ->will($this->throwException(new UsernameNotFoundException('not found')))
+        ;
+
+        $provider2 = $this->getProvider();
+        $provider2
+            ->expects($this->once())
+            ->method('loadUserByUsername')
+            ->with($this->equalTo('foo'))
+            ->will($this->throwException(new UsernameNotFoundException('not found')))
+        ;
+
+        $provider = new ChainUserProvider(array($provider1, $provider2));
+        $provider->loadUserByUsername('foo');
+    }
+
+    public function testRefreshUser()
+    {
+        $provider1 = $this->getProvider();
+        $provider1
+            ->expects($this->once())
+            ->method('refreshUser')
+            ->will($this->throwException(new UnsupportedUserException('unsupported')))
+        ;
+
+        $provider2 = $this->getProvider();
+        $provider2
+            ->expects($this->once())
+            ->method('refreshUser')
+            ->will($this->returnValue($account = $this->getAccount()))
+        ;
+
+        $provider = new ChainUserProvider(array($provider1, $provider2));
+        $this->assertSame($account, $provider->refreshUser($this->getAccount()));
+    }
+
+    public function testRefreshUserAgain()
+    {
+        $provider1 = $this->getProvider();
+        $provider1
+            ->expects($this->once())
+            ->method('refreshUser')
+            ->will($this->throwException(new UsernameNotFoundException('not found')))
+        ;
+
+        $provider2 = $this->getProvider();
+        $provider2
+            ->expects($this->once())
+            ->method('refreshUser')
+            ->will($this->returnValue($account = $this->getAccount()))
+        ;
+
+        $provider = new ChainUserProvider(array($provider1, $provider2));
+        $this->assertSame($account, $provider->refreshUser($this->getAccount()));
+    }
+
+    /**
+     * @expectedException \Symfony\Component\Security\Core\Exception\UnsupportedUserException
+     */
+    public function testRefreshUserThrowsUnsupportedUserException()
+    {
+        $provider1 = $this->getProvider();
+        $provider1
+            ->expects($this->once())
+            ->method('refreshUser')
+            ->will($this->throwException(new UnsupportedUserException('unsupported')))
+        ;
+
+        $provider2 = $this->getProvider();
+        $provider2
+            ->expects($this->once())
+            ->method('refreshUser')
+            ->will($this->throwException(new UnsupportedUserException('unsupported')))
+        ;
+
+        $provider = new ChainUserProvider(array($provider1, $provider2));
+        $provider->refreshUser($this->getAccount());
+    }
+
+    public function testSupportsClass()
+    {
+        $provider1 = $this->getProvider();
+        $provider1
+            ->expects($this->once())
+            ->method('supportsClass')
+            ->with($this->equalTo('foo'))
+            ->will($this->returnValue(false))
+        ;
+
+        $provider2 = $this->getProvider();
+        $provider2
+            ->expects($this->once())
+            ->method('supportsClass')
+            ->with($this->equalTo('foo'))
+            ->will($this->returnValue(true))
+        ;
+
+        $provider = new ChainUserProvider(array($provider1, $provider2));
+        $this->assertTrue($provider->supportsClass('foo'));
+    }
+
+    public function testSupportsClassWhenNotSupported()
+    {
+        $provider1 = $this->getProvider();
+        $provider1
+            ->expects($this->once())
+            ->method('supportsClass')
+            ->with($this->equalTo('foo'))
+            ->will($this->returnValue(false))
+        ;
+
+        $provider2 = $this->getProvider();
+        $provider2
+            ->expects($this->once())
+            ->method('supportsClass')
+            ->with($this->equalTo('foo'))
+            ->will($this->returnValue(false))
+        ;
+
+        $provider = new ChainUserProvider(array($provider1, $provider2));
+        $this->assertFalse($provider->supportsClass('foo'));
+    }
+
+    protected function getAccount()
+    {
+        return $this->getMock('Symfony\Component\Security\Core\User\UserInterface');
+    }
+
+    protected function getProvider()
+    {
+        return $this->getMock('Symfony\Component\Security\Core\User\UserProviderInterface');
+    }
+}
diff --git a/Core/Tests/User/InMemoryProviderTest.php b/Core/Tests/User/InMemoryProviderTest.php
new file mode 100644
index 0000000..5d6cadc
--- /dev/null
+++ b/Core/Tests/User/InMemoryProviderTest.php
@@ -0,0 +1,62 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\Security\Core\Tests\User;
+
+use Symfony\Component\Security\Core\User\InMemoryUserProvider;
+use Symfony\Component\Security\Core\User\User;
+
+class InMemoryUserProviderTest extends \PHPUnit_Framework_TestCase
+{
+    public function testConstructor()
+    {
+        $provider = new InMemoryUserProvider(array(
+            'fabien' => array(
+                'password' => 'foo',
+                'enabled'  => false,
+                'roles'    => array('ROLE_USER'),
+            ),
+        ));
+
+        $user = $provider->loadUserByUsername('fabien');
+        $this->assertEquals('foo', $user->getPassword());
+        $this->assertEquals(array('ROLE_USER'), $user->getRoles());
+        $this->assertFalse($user->isEnabled());
+    }
+
+    public function testCreateUser()
+    {
+        $provider = new InMemoryUserProvider();
+        $provider->createUser(new User('fabien', 'foo'));
+
+        $user = $provider->loadUserByUsername('fabien');
+        $this->assertEquals('foo', $user->getPassword());
+    }
+
+    /**
+     * @expectedException LogicException
+     */
+    public function testCreateUserAlreadyExist()
+    {
+        $provider = new InMemoryUserProvider();
+        $provider->createUser(new User('fabien', 'foo'));
+        $provider->createUser(new User('fabien', 'foo'));
+    }
+
+    /**
+     * @expectedException \Symfony\Component\Security\Core\Exception\UsernameNotFoundException
+     */
+    public function testLoadUserByUsernameDoesNotExist()
+    {
+        $provider = new InMemoryUserProvider();
+        $provider->loadUserByUsername('fabien');
+    }
+}
diff --git a/Core/Tests/User/UserTest.php b/Core/Tests/User/UserTest.php
new file mode 100644
index 0000000..7d4cf95
--- /dev/null
+++ b/Core/Tests/User/UserTest.php
@@ -0,0 +1,126 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\Security\Core\Tests\User;
+
+use Symfony\Component\Security\Core\User\User;
+
+class UserTest extends \PHPUnit_Framework_TestCase
+{
+    /**
+     * @covers Symfony\Component\Security\Core\User\User::__construct
+     * @expectedException InvalidArgumentException
+     */
+    public function testConstructorException()
+    {
+        new User('', 'superpass');
+    }
+
+    /**
+     * @covers Symfony\Component\Security\Core\User\User::__construct
+     * @covers Symfony\Component\Security\Core\User\User::getRoles
+     */
+    public function testGetRoles()
+    {
+        $user = new User('fabien', 'superpass');
+        $this->assertEquals(array(), $user->getRoles());
+
+        $user = new User('fabien', 'superpass', array('ROLE_ADMIN'));
+        $this->assertEquals(array('ROLE_ADMIN'), $user->getRoles());
+    }
+
+    /**
+     * @covers Symfony\Component\Security\Core\User\User::__construct
+     * @covers Symfony\Component\Security\Core\User\User::getPassword
+     */
+    public function testGetPassword()
+    {
+        $user = new User('fabien', 'superpass');
+        $this->assertEquals('superpass', $user->getPassword());
+    }
+
+    /**
+     * @covers Symfony\Component\Security\Core\User\User::__construct
+     * @covers Symfony\Component\Security\Core\User\User::getUsername
+     */
+    public function testGetUsername()
+    {
+        $user = new User('fabien', 'superpass');
+        $this->assertEquals('fabien', $user->getUsername());
+    }
+
+    /**
+     * @covers Symfony\Component\Security\Core\User\User::getSalt
+     */
+    public function testGetSalt()
+    {
+        $user = new User('fabien', 'superpass');
+        $this->assertEquals('', $user->getSalt());
+    }
+
+    /**
+     * @covers Symfony\Component\Security\Core\User\User::isAccountNonExpired
+     */
+    public function testIsAccountNonExpired()
+    {
+        $user = new User('fabien', 'superpass');
+        $this->assertTrue($user->isAccountNonExpired());
+
+        $user = new User('fabien', 'superpass', array(), true, false);
+        $this->assertFalse($user->isAccountNonExpired());
+    }
+
+    /**
+     * @covers Symfony\Component\Security\Core\User\User::isCredentialsNonExpired
+     */
+    public function testIsCredentialsNonExpired()
+    {
+        $user = new User('fabien', 'superpass');
+        $this->assertTrue($user->isCredentialsNonExpired());
+
+        $user = new User('fabien', 'superpass', array(), true, true, false);
+        $this->assertFalse($user->isCredentialsNonExpired());
+    }
+
+    /**
+     * @covers Symfony\Component\Security\Core\User\User::isAccountNonLocked
+     */
+    public function testIsAccountNonLocked()
+    {
+        $user = new User('fabien', 'superpass');
+        $this->assertTrue($user->isAccountNonLocked());
+
+        $user = new User('fabien', 'superpass', array(), true, true, true, false);
+        $this->assertFalse($user->isAccountNonLocked());
+    }
+
+    /**
+     * @covers Symfony\Component\Security\Core\User\User::isEnabled
+     */
+    public function testIsEnabled()
+    {
+        $user = new User('fabien', 'superpass');
+        $this->assertTrue($user->isEnabled());
+
+        $user = new User('fabien', 'superpass', array(), false);
+        $this->assertFalse($user->isEnabled());
+    }
+
+    /**
+     * @covers Symfony\Component\Security\Core\User\User::eraseCredentials
+     */
+    public function testEraseCredentials()
+    {
+        $user = new User('fabien', 'superpass');
+        $user->eraseCredentials();
+        $this->assertEquals('superpass', $user->getPassword());
+    }
+}