XRay/tests/TokenTest.php

<?php
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;

class TokenTest extends PHPUnit\Framework\TestCase
{

    private $http;

    public function setUp(): void
    {
        $this->client = new Token();
        $this->client->http = new p3k\HTTP\Test(dirname(__FILE__).'/data/');
    }

    private function token($params)
    {
        $request = new Request($params);
        $response = new Response();
        return $this->client->token($request, $response);
    }

    public function testMissingURL()
    {
        $response = $this->token([]);

        $body = $response->getContent();
        $this->assertEquals(400, $response->getStatusCode());
        $data = json_decode($body);
        $this->assertObjectHasAttribute('error', $data);
        $this->assertEquals('invalid_request', $data->error);
    }

    public function testInvalidURL()
    {
        $url = 'ftp://example.com/foo';
        $response = $this->token(['source' => $url, 'code' => '1234']);

        $body = $response->getContent();
        $this->assertEquals(400, $response->getStatusCode());
        $data = json_decode($body);
        $this->assertObjectHasAttribute('error', $data);
        $this->assertEquals('invalid_url', $data->error);
    }

    public function testMissingCode()
    {
        $response = $this->token(['source' => 'http://example.com/']);

        $body = $response->getContent();
        $this->assertEquals(400, $response->getStatusCode());
        $data = json_decode($body);
        $this->assertObjectHasAttribute('error', $data);
        $this->assertEquals('invalid_request', $data->error);
    }

    public function testNoLinkHeaders()
    {
        $url = 'http://private.example.com/no-link-headers';
        $response = $this->token(['source' => $url, 'code' => '1234']);

        $body = $response->getContent();
        $this->assertEquals(200, $response->getStatusCode());
        $data = json_decode($body);
        $this->assertObjectHasAttribute('error', $data);
        $this->assertEquals('no_token_endpoint', $data->error);
    }

    public function testNoTokenEndpointOneLinkHeader()
    {
        $url = 'http://private.example.com/no-token-endpoint-one-link-header';
        $response = $this->token(['source' => $url, 'code' => '1234']);

        $body = $response->getContent();
        $this->assertEquals(200, $response->getStatusCode());
        $data = json_decode($body);

        $this->assertObjectHasAttribute('error', $data);
        $this->assertEquals('no_token_endpoint', $data->error);
    }

    public function testNoTokenEndpointTwoLinkHeaders()
    {
        $url = 'http://private.example.com/no-token-endpoint-two-link-headers';
        $response = $this->token(['source' => $url, 'code' => '1234']);

        $body = $response->getContent();
        $this->assertEquals(200, $response->getStatusCode());
        $data = json_decode($body);

        $this->assertObjectHasAttribute('error', $data);
        $this->assertEquals('no_token_endpoint', $data->error);
    }

    public function testTokenEndpointInOAuth2Rel()
    {
        $url = 'http://private.example.com/oauth2-token-endpoint';
        $response = $this->token(['source' => $url, 'code' => '1234']);

        $body = $response->getContent();
        $this->assertEquals(200, $response->getStatusCode());
        $data = json_decode($body);

        $this->assertObjectNotHasAttribute('error', $data);
        $this->assertEquals('1234', $data->access_token);
    }

    public function testTokenEndpointInIndieAuthRel()
    {
        $url = 'http://private.example.com/token-endpoint';
        $response = $this->token(['source' => $url, 'code' => '1234']);

        $body = $response->getContent();
        $this->assertEquals(200, $response->getStatusCode());
        $data = json_decode($body);

        $this->assertObjectNotHasAttribute('error', $data);
        $this->assertEquals('1234', $data->access_token);
    }

    public function testTokenEndpointWithMultipleRelLinks()
    {
        $url = 'http://private.example.com/multiple-rels';
        $response = $this->token(['source' => $url, 'code' => '1234']);

        $body = $response->getContent();
        $this->assertEquals(200, $response->getStatusCode());
        $data = json_decode($body);

        $this->assertObjectNotHasAttribute('error', $data);
        $this->assertEquals('1234', $data->access_token);
    }

    public function testBadTokenEndpointResponse()
    {
        $url = 'http://private.example.com/token-endpoint-bad-response';
        $response = $this->token(['source' => $url, 'code' => '1234']);

        $body = $response->getContent();
        $this->assertEquals(200, $response->getStatusCode());
        $data = json_decode($body);

        $this->assertObjectHasAttribute('error', $data);
        $this->assertEquals('this-string-passed-through-from-token-endpoint', $data->error);
    }

    public function testTokenEndpointTimeout()
    {
        $url = 'http://private.example.com/token-endpoint-timeout';
        $response = $this->token(['source' => $url, 'code' => '1234']);

        $body = $response->getContent();
        $this->assertEquals(200, $response->getStatusCode());
        $data = json_decode($body);

        $this->assertObjectHasAttribute('error', $data);
        $this->assertEquals('timeout', $data->error);
    }

    public function testTokenEndpointReturnsNotJSON()
    {
        $url = 'http://private.example.com/token-endpoint-notjson';
        $response = $this->token(['source' => $url, 'code' => '1234']);

        $body = $response->getContent();
        $this->assertEquals(200, $response->getStatusCode());
        $this->assertEquals('text/plain', $response->headers->get('content-type'));
        $this->assertEquals('Invalid request', $body);
    }

}