mirror of
https://github.com/elyby/accounts.git
synced 2024-10-30 23:43:00 +05:30
dd2c4bc413
Все действия, связанные с аккаунтами, теперь вызываются через url `/api/v1/accounts/<id>/<action>`. Добавлена вменяемая система разграничения прав на основе RBAC. Теперь oAuth2 токены генерируются как случайная строка в 40 символов длинной, а не UUID. Исправлен баг с неправильным временем жизни токена в ответе успешного запроса аутентификации. Теперь все unit тесты можно успешно прогнать без наличия интернета.
54 lines
2.1 KiB
PHP
54 lines
2.1 KiB
PHP
<?php
|
|
namespace tests\codeception\common\unit\rbac\rules;
|
|
|
|
use api\components\User\Component;
|
|
use api\components\User\IdentityInterface;
|
|
use common\models\Account;
|
|
use common\rbac\rules\AccountOwner;
|
|
use tests\codeception\common\unit\TestCase;
|
|
use Yii;
|
|
use yii\rbac\Item;
|
|
use const common\LATEST_RULES_VERSION;
|
|
|
|
class AccountOwnerTest extends TestCase {
|
|
|
|
public function testExecute() {
|
|
$rule = new AccountOwner();
|
|
$item = new Item();
|
|
|
|
$account = new Account();
|
|
$account->id = 1;
|
|
$account->status = Account::STATUS_ACTIVE;
|
|
$account->rules_agreement_version = LATEST_RULES_VERSION;
|
|
|
|
$identity = mock(IdentityInterface::class);
|
|
$identity->shouldReceive('getAccount')->andReturn($account);
|
|
|
|
$component = mock(Component::class . '[findIdentityByAccessToken]', [['secret' => 'secret']]);
|
|
$component->shouldDeferMissing();
|
|
$component->shouldReceive('findIdentityByAccessToken')->withArgs(['token'])->andReturn($identity);
|
|
|
|
Yii::$app->set('user', $component);
|
|
|
|
$this->assertFalse($rule->execute('token', $item, ['accountId' => 2]));
|
|
$this->assertFalse($rule->execute('token', $item, ['accountId' => '2']));
|
|
$this->assertTrue($rule->execute('token', $item, ['accountId' => 1]));
|
|
$this->assertTrue($rule->execute('token', $item, ['accountId' => '1']));
|
|
$account->rules_agreement_version = null;
|
|
$this->assertFalse($rule->execute('token', $item, ['accountId' => 1]));
|
|
$this->assertTrue($rule->execute('token', $item, ['accountId' => 1, 'optionalRules' => true]));
|
|
$account->rules_agreement_version = LATEST_RULES_VERSION;
|
|
$account->status = Account::STATUS_BANNED;
|
|
$this->assertFalse($rule->execute('token', $item, ['accountId' => 1]));
|
|
$this->assertFalse($rule->execute('token', $item, ['accountId' => 1, 'optionalRules' => true]));
|
|
}
|
|
|
|
/**
|
|
* @expectedException \yii\base\InvalidParamException
|
|
*/
|
|
public function testExecuteWithException() {
|
|
(new AccountOwner())->execute('', new Item(), []);
|
|
}
|
|
|
|
}
|