mirror of
https://github.com/elyby/accounts.git
synced 2025-05-31 14:11:46 +05:30
* start updating to PHP 8.3 * taking off! Co-authored-by: ErickSkrauch <erickskrauch@yandex.ru> Signed-off-by: Octol1ttle <l1ttleofficial@outlook.com> * dropped this Signed-off-by: Octol1ttle <l1ttleofficial@outlook.com> * migrate to symfonymailer Signed-off-by: Octol1ttle <l1ttleofficial@outlook.com> * this is so stupid 😭 Signed-off-by: Octol1ttle <l1ttleofficial@outlook.com> * ah, free, at last. Signed-off-by: Octol1ttle <l1ttleofficial@outlook.com> * oh, Gabriel. Signed-off-by: Octol1ttle <l1ttleofficial@outlook.com> * now dawns thy reckoning. Signed-off-by: Octol1ttle <l1ttleofficial@outlook.com> * and thy gore shall GLISTEN before the temples of man. Signed-off-by: Octol1ttle <l1ttleofficial@outlook.com> * creature of steel. Signed-off-by: Octol1ttle <l1ttleofficial@outlook.com> * my gratitude upon thee for my freedom. Signed-off-by: Octol1ttle <l1ttleofficial@outlook.com> * but the crimes thy kind has committed against humanity Signed-off-by: Octol1ttle <l1ttleofficial@outlook.com> * Upgrade PHP-CS-Fixer and do fix the codebase * First review round (maybe I have broken something) * are NOT forgotten. Signed-off-by: Octol1ttle <l1ttleofficial@outlook.com> * Enable parallel PHP-CS-Fixer runner * PHPStan level 1 * PHPStan level 2 * PHPStan level 3 * PHPStan level 4 * PHPStan level 5 * Levels 6 and 7 takes too much effort. Generate a baseline and fix them eventually * Resolve TODO's related to the php-mock * Drastically reduce baseline size with the Rector * More code modernization with help of the Rector * Update GitLab CI --------- Signed-off-by: Octol1ttle <l1ttleofficial@outlook.com> Co-authored-by: ErickSkrauch <erickskrauch@yandex.ru>
87 lines
3.2 KiB
PHP
87 lines
3.2 KiB
PHP
<?php
|
|
declare(strict_types=1);
|
|
|
|
namespace api\tests\functional\oauth;
|
|
|
|
use api\tests\FunctionalTester;
|
|
|
|
class ClientCredentialsCest {
|
|
|
|
public function issueTokenWithPublicScopes(FunctionalTester $I): void {
|
|
$I->wantTo('issue token as not trusted client and require only public scopes');
|
|
// We don't have any public scopes yet for this grant, so the test runs with an empty set
|
|
$I->sendPOST('/api/oauth2/v1/token', [
|
|
'grant_type' => 'client_credentials',
|
|
'client_id' => 'ely',
|
|
'client_secret' => 'ZuM1vGchJz-9_UZ5HC3H3Z9Hg5PzdbkM',
|
|
'scope' => '',
|
|
]);
|
|
$this->assertSuccessResponse($I);
|
|
}
|
|
|
|
public function issueTokenWithInternalScopesAsNotTrustedClient(FunctionalTester $I): void {
|
|
$I->wantTo('issue token as not trusted client and require some internal scope');
|
|
$I->sendPOST('/api/oauth2/v1/token', [
|
|
'grant_type' => 'client_credentials',
|
|
'client_id' => 'ely',
|
|
'client_secret' => 'ZuM1vGchJz-9_UZ5HC3H3Z9Hg5PzdbkM',
|
|
'scope' => 'block_account',
|
|
]);
|
|
$I->canSeeResponseCodeIs(400);
|
|
$I->canSeeResponseIsJson();
|
|
$I->canSeeResponseContainsJson([
|
|
'error' => 'invalid_scope',
|
|
]);
|
|
}
|
|
|
|
public function issueTokenWithInternalScopesAsTrustedClient(FunctionalTester $I): void {
|
|
$I->wantTo('issue token as trusted client and require some internal scope');
|
|
$I->sendPOST('/api/oauth2/v1/token', [
|
|
'grant_type' => 'client_credentials',
|
|
'client_id' => 'trusted-client',
|
|
'client_secret' => 'tXBbyvMcyaOgHMOAXBpN2EC7uFoJAaL9',
|
|
'scope' => 'block_account',
|
|
]);
|
|
$this->assertSuccessResponse($I);
|
|
}
|
|
|
|
public function issueTokenByPassingInvalidClientId(FunctionalTester $I): void {
|
|
$I->wantToTest('behavior on passing invalid client_id');
|
|
$I->sendPOST('/api/oauth2/v1/token', [
|
|
'grant_type' => 'client_credentials',
|
|
'client_id' => 'invalid-client',
|
|
'client_secret' => 'ZuM1vGchJz-9_UZ5HC3H3Z9Hg5PzdbkM',
|
|
'scope' => 'block_account',
|
|
]);
|
|
$I->canSeeResponseCodeIs(401);
|
|
$I->canSeeResponseContainsJson([
|
|
'error' => 'invalid_client',
|
|
]);
|
|
}
|
|
|
|
public function issueTokenByPassingInvalidClientSecret(FunctionalTester $I): void {
|
|
$I->wantTo('check behavior on passing invalid client_secret');
|
|
$I->sendPOST('/api/oauth2/v1/token', [
|
|
'grant_type' => 'client_credentials',
|
|
'client_id' => 'trusted-client',
|
|
'client_secret' => 'invalid-secret',
|
|
'scope' => 'block_account',
|
|
]);
|
|
$I->canSeeResponseCodeIs(401);
|
|
$I->canSeeResponseContainsJson([
|
|
'error' => 'invalid_client',
|
|
]);
|
|
}
|
|
|
|
private function assertSuccessResponse(FunctionalTester $I): void {
|
|
$I->canSeeResponseCodeIs(200);
|
|
$I->canSeeResponseContainsJson([
|
|
'token_type' => 'Bearer',
|
|
]);
|
|
$I->canSeeResponseJsonMatchesJsonPath('$.access_token');
|
|
$I->cantSeeResponseJsonMatchesJsonPath('$.expires_in');
|
|
$I->cantSeeResponseJsonMatchesJsonPath('$.refresh_token');
|
|
}
|
|
|
|
}
|