mirror of
https://github.com/silverstripe/silverstripe-framework
synced 2024-10-22 14:05:37 +02:00
0b1f297873
Conflicts: .travis.yml README.md admin/code/LeftAndMain.php admin/css/screen.css admin/scss/screen.scss api/RestfulService.php conf/ConfigureFromEnv.php control/injector/ServiceConfigurationLocator.php control/injector/SilverStripeServiceConfigurationLocator.php core/ClassInfo.php core/Object.php css/AssetUploadField.css css/ComplexTableField_popup.css dev/CSSContentParser.php dev/DevelopmentAdmin.php docs/en/changelogs/index.md docs/en/misc/contributing/code.md docs/en/reference/execution-pipeline.md filesystem/GD.php filesystem/ImagickBackend.php filesystem/Upload.php forms/Form.php forms/FormField.php forms/HtmlEditorConfig.php forms/gridfield/GridFieldDetailForm.php forms/gridfield/GridFieldSortableHeader.php lang/en.yml model/Aggregate.php model/DataList.php model/DataObject.php model/DataQuery.php model/Image.php model/MySQLDatabase.php model/SQLQuery.php model/fieldtypes/HTMLText.php model/fieldtypes/Text.php scss/AssetUploadField.scss search/filters/SearchFilter.php security/Authenticator.php security/LoginForm.php security/Member.php security/MemberAuthenticator.php security/MemberLoginForm.php security/Security.php tests/behat/features/bootstrap/SilverStripe/Framework/Test/Behaviour/CmsFormsContext.php tests/control/HTTPTest.php tests/control/RequestHandlingTest.php tests/filesystem/UploadTest.php tests/forms/FormTest.php tests/forms/NumericFieldTest.php tests/model/DataListTest.php tests/model/DataObjectTest.php tests/model/TextTest.php tests/security/MemberAuthenticatorTest.php tests/security/SecurityDefaultAdminTest.php tests/view/SSViewerCacheBlockTest.php tests/view/SSViewerTest.php
168 lines
4.9 KiB
PHP
168 lines
4.9 KiB
PHP
<?php
|
|
/**
|
|
* @package framework
|
|
* @subpackage tests
|
|
*/
|
|
class MemberAuthenticatorTest extends SapphireTest {
|
|
|
|
protected $usesDatabase = true;
|
|
|
|
protected $defaultUsername = null;
|
|
protected $defaultPassword = null;
|
|
|
|
public function setUp() {
|
|
parent::setUp();
|
|
|
|
$this->defaultUsername = Security::default_admin_username();
|
|
$this->defaultPassword = Security::default_admin_password();
|
|
Security::clear_default_admin();
|
|
Security::setDefaultAdmin('admin', 'password');
|
|
}
|
|
|
|
public function tearDown() {
|
|
Security::setDefaultAdmin($this->defaultUsername, $this->defaultPassword);
|
|
parent::tearDown();
|
|
}
|
|
|
|
public function testLegacyPasswordHashMigrationUponLogin() {
|
|
$member = new Member();
|
|
|
|
$field=Member::config()->unique_identifier_field;
|
|
|
|
$member->$field = 'test1@test.com';
|
|
$member->PasswordEncryption = "sha1";
|
|
$member->Password = "mypassword";
|
|
$member->write();
|
|
|
|
$data = array(
|
|
'Email' => $member->$field,
|
|
'Password' => 'mypassword'
|
|
);
|
|
MemberAuthenticator::authenticate($data);
|
|
|
|
$member = DataObject::get_by_id('Member', $member->ID);
|
|
$this->assertEquals($member->PasswordEncryption, "sha1_v2.4");
|
|
$result = $member->checkPassword('mypassword');
|
|
$this->assertTrue($result->valid());
|
|
}
|
|
|
|
public function testNoLegacyPasswordHashMigrationOnIncompatibleAlgorithm() {
|
|
Config::inst()->update('PasswordEncryptor', 'encryptors',
|
|
array('crc32'=>array('PasswordEncryptor_PHPHash'=>'crc32')));
|
|
$field=Member::config()->unique_identifier_field;
|
|
|
|
$member = new Member();
|
|
$member->$field = 'test2@test.com';
|
|
$member->PasswordEncryption = "crc32";
|
|
$member->Password = "mypassword";
|
|
$member->write();
|
|
|
|
$data = array(
|
|
'Email' => $member->$field,
|
|
'Password' => 'mypassword'
|
|
);
|
|
MemberAuthenticator::authenticate($data);
|
|
|
|
$member = DataObject::get_by_id('Member', $member->ID);
|
|
$this->assertEquals($member->PasswordEncryption, "crc32");
|
|
$result = $member->checkPassword('mypassword');
|
|
$this->assertTrue($result->valid());
|
|
}
|
|
|
|
public function testCustomIdentifierField(){
|
|
|
|
$origField = Member::config()->unique_identifier_field;
|
|
Member::config()->unique_identifier_field = 'Username';
|
|
|
|
$label=singleton('Member')->fieldLabel(Member::config()->unique_identifier_field);
|
|
|
|
$this->assertEquals($label, 'Username');
|
|
|
|
Member::config()->unique_identifier_field = $origField;
|
|
}
|
|
|
|
public function testGenerateLoginForm() {
|
|
$controller = new Security();
|
|
|
|
// Create basic login form
|
|
$frontendForm = MemberAuthenticator::get_login_form($controller);
|
|
$this->assertTrue($frontendForm instanceof MemberLoginForm);
|
|
|
|
// Supports cms login form
|
|
$this->assertTrue(MemberAuthenticator::supports_cms());
|
|
$cmsForm = MemberAuthenticator::get_cms_login_form($controller);
|
|
$this->assertTrue($cmsForm instanceof CMSMemberLoginForm);
|
|
}
|
|
|
|
/**
|
|
* Test that a member can be authenticated via their temp id
|
|
*/
|
|
public function testAuthenticateByTempID() {
|
|
$member = new Member();
|
|
$member->Email = 'test1@test.com';
|
|
$member->PasswordEncryption = "sha1";
|
|
$member->Password = "mypassword";
|
|
$member->write();
|
|
|
|
// Make form
|
|
$controller = new Security();
|
|
$form = new Form($controller, 'Form', new FieldList(), new FieldList());
|
|
|
|
// If the user has never logged in, then the tempid should be empty
|
|
$tempID = $member->TempIDHash;
|
|
$this->assertEmpty($tempID);
|
|
|
|
// If the user logs in then they have a temp id
|
|
$member->logIn(true);
|
|
$tempID = $member->TempIDHash;
|
|
$this->assertNotEmpty($tempID);
|
|
|
|
// Test correct login
|
|
$result = MemberAuthenticator::authenticate(array(
|
|
'tempid' => $tempID,
|
|
'Password' => 'mypassword'
|
|
), $form);
|
|
$this->assertNotEmpty($result);
|
|
$this->assertEquals($result->ID, $member->ID);
|
|
$this->assertEmpty($form->Message());
|
|
|
|
// Test incorrect login
|
|
$form->clearMessage();
|
|
$result = MemberAuthenticator::authenticate(array(
|
|
'tempid' => $tempID,
|
|
'Password' => 'notmypassword'
|
|
), $form);
|
|
$this->assertEmpty($result);
|
|
$this->assertEquals('The provided details don't seem to be correct. Please try again.', $form->Message());
|
|
$this->assertEquals('bad', $form->MessageType());
|
|
}
|
|
|
|
/**
|
|
* Test that the default admin can be authenticated
|
|
*/
|
|
public function testDefaultAdmin() {
|
|
// Make form
|
|
$controller = new Security();
|
|
$form = new Form($controller, 'Form', new FieldList(), new FieldList());
|
|
|
|
// Test correct login
|
|
$result = MemberAuthenticator::authenticate(array(
|
|
'Email' => 'admin',
|
|
'Password' => 'password'
|
|
), $form);
|
|
$this->assertNotEmpty($result);
|
|
$this->assertEquals($result->Email, Security::default_admin_username());
|
|
$this->assertEmpty($form->Message());
|
|
|
|
// Test incorrect login
|
|
$form->clearMessage();
|
|
$result = MemberAuthenticator::authenticate(array(
|
|
'Email' => 'admin',
|
|
'Password' => 'notmypassword'
|
|
), $form);
|
|
$this->assertEmpty($result);
|
|
$this->assertEquals('The provided details don't seem to be correct. Please try again.', $form->Message());
|
|
$this->assertEquals('bad', $form->MessageType());
|
|
}
|
|
}
|