. */ declare(strict_types=1); namespace Fisharebest\Webtrees\Http\Middleware; use Fig\Http\Message\StatusCodeInterface; use Fisharebest\Webtrees\Exceptions\HttpAccessDeniedException; use Fisharebest\Webtrees\GuestUser; use Fisharebest\Webtrees\TestCase; use Fisharebest\Webtrees\Tree; use Fisharebest\Webtrees\User; use Psr\Http\Server\RequestHandlerInterface; use function response; /** * Test the AuthEditor middleware. * * @covers \Fisharebest\Webtrees\Http\Middleware\AuthEditor */ class AuthEditorTest extends TestCase { /** * @return void */ public function testAllowed(): void { $handler = $this->createMock(RequestHandlerInterface::class); $handler->method('handle')->willReturn(response('lorem ipsum')); $user = $this->createMock(User::class); $user->method('getPreference')->with(User::PREF_IS_ADMINISTRATOR)->willReturn(''); $tree = $this->createMock(Tree::class); $tree->method('getUserPreference')->with($user, User::PREF_TREE_ROLE)->willReturn('edit'); $request = self::createRequest()->withAttribute('tree', $tree)->withAttribute('user', $user); $middleware = new AuthEditor(); $response = $middleware->process($request, $handler); $this->assertSame(StatusCodeInterface::STATUS_OK, $response->getStatusCode()); $this->assertSame('lorem ipsum', (string) $response->getBody()); } /** * @return void */ public function testNotAllowed(): void { $this->expectException(HttpAccessDeniedException::class); $this->expectExceptionMessage('You do not have permission to view this page.'); $handler = $this->createMock(RequestHandlerInterface::class); $handler->method('handle')->willReturn(response('lorem ipsum')); $user = $this->createMock(User::class); $user->method('getPreference')->with(User::PREF_IS_ADMINISTRATOR)->willReturn(''); $tree = $this->createMock(Tree::class); $tree->method('getUserPreference')->with($user, User::PREF_TREE_ROLE)->willReturn('access'); $request = self::createRequest()->withAttribute('tree', $tree)->withAttribute('user', $user); $middleware = new AuthEditor(); $middleware->process($request, $handler); } /** * @return void */ public function testNotLoggedIn(): void { $handler = $this->createMock(RequestHandlerInterface::class); $handler->method('handle')->willReturn(response('lorem ipsum')); $tree = $this->createMock(Tree::class); $request = self::createRequest()->withAttribute('tree', $tree)->withAttribute('user', new GuestUser()); $middleware = new AuthEditor(); $response = $middleware->process($request, $handler); $this->assertSame(StatusCodeInterface::STATUS_FOUND, $response->getStatusCode()); } }