1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
|
<?php
declare(strict_types=1);
namespace SimpleSAML\Test\Module\core\Auth\Process;
use PHPUnit\Framework\TestCase;
/**
* Test for the core:AttributeRealm filter.
* @deprecated Remove in 2.0
*/
class AttributeRealmTest extends TestCase
{
/**
* Helper function to run the filter with a given configuration.
*
* @param array $config The filter configuration.
* @param array $request The request state.
* @return array The state array after processing.
*/
private static function processFilter(array $config, array $request)
{
$filter = new \SimpleSAML\Module\core\Auth\Process\AttributeRealm($config, null);
$filter->process($request);
return $request;
}
/**
* Test the most basic functionality.
* @return void
*/
public function testBasic()
{
$config = [
];
$request = [
'Attributes' => [],
'UserID' => 'user2@example.org',
];
$result = self::processFilter($config, $request);
$attributes = $result['Attributes'];
$this->assertArrayHasKey('realm', $attributes);
$this->assertEquals($attributes['realm'], ['example.org']);
}
/**
* Test no userid set
* @return void
*/
public function testNoUserID()
{
$this->expectException(\Exception::class);
$config = [
];
$request = [
'Attributes' => [],
];
self::processFilter($config, $request);
}
/**
* Test with configuration.
* @return void
*/
public function testAttributeNameConfig()
{
$config = [
'attributename' => 'schacHomeOrganization',
];
$request = [
'Attributes' => [
'displayName' => 'Joe User',
'schacGender' => 9,
],
'UserID' => 'user2@example.org',
];
$result = self::processFilter($config, $request);
$attributes = $result['Attributes'];
$this->assertArrayHasKey('schacHomeOrganization', $attributes);
$this->assertArrayHasKey('displayName', $attributes);
$this->assertEquals($attributes['schacHomeOrganization'], ['example.org']);
}
/**
* When target attribute exists it will be overwritten
* @return void
*/
public function testTargetAttributeOverwritten()
{
$config = [
'attributename' => 'schacHomeOrganization',
];
$request = [
'Attributes' => [
'displayName' => 'Joe User',
'schacGender' => 9,
'schacHomeOrganization' => 'example.com',
],
'UserID' => 'user2@example.org',
];
$result = self::processFilter($config, $request);
$attributes = $result['Attributes'];
$this->assertArrayHasKey('schacHomeOrganization', $attributes);
$this->assertEquals($attributes['schacHomeOrganization'], ['example.org']);
}
/**
* When source attribute has no "@" no realm is added
* @return void
*/
public function testNoAtisNoOp()
{
$config = [];
$request = [
'Attributes' => [
'displayName' => 'Joe User',
],
'UserID' => 'user2',
];
$result = self::processFilter($config, $request);
$attributes = $result['Attributes'];
$this->assertArrayNotHasKey('realm', $attributes);
}
/**
* When source attribute has more than one "@" no realm is added
* @return void
*/
public function testMultiAtisNoOp()
{
$config = [];
$request = [
'Attributes' => [
'displayName' => 'Joe User',
],
'UserID' => 'user2@home@example.org',
];
$result = self::processFilter($config, $request);
$attributes = $result['Attributes'];
$this->assertArrayNotHasKey('realm', $attributes);
}
}
|
