From dbae2f33741ffab02f87878d1279d892214c0c9b Mon Sep 17 00:00:00 2001 From: Justin Winter Date: Mon, 4 Dec 2017 15:22:48 -0500 Subject: [PATCH] New Test --- .../tests/src/Functional/RestRegisterUserTest.php | 244 +++++++++++++++++++++ 1 file changed, 244 insertions(+) create mode 100644 core/modules/user/tests/src/Functional/RestRegisterUserTest.php diff --git a/core/modules/user/tests/src/Functional/RestRegisterUserTest.php b/core/modules/user/tests/src/Functional/RestRegisterUserTest.php new file mode 100644 index 0000000000..a1436949c4 --- /dev/null +++ b/core/modules/user/tests/src/Functional/RestRegisterUserTest.php @@ -0,0 +1,244 @@ +provisionResource([static::$format], $auth); + + Role::load(RoleInterface::ANONYMOUS_ID) + ->grantPermission('restful post user_registration') + ->save(); + + Role::load(RoleInterface::AUTHENTICATED_ID) + ->grantPermission('restful post user_registration') + ->save(); + } + + + /** + * Tests that only anonymous users can register users. + */ + public function testRegisterUser() { + + $user_settings = $this->config('user.settings'); + + // Test out different setting User Registration and Email Verification. + // Allow visitors to register with no email verification. + $user_settings->set('register', USER_REGISTER_VISITORS); + $user_settings->set('verify_mail', 0); + $user_settings->save(); + $user = $this->registerUser('Palmer.Eldritch'); + $this->assertFalse($user->isBlocked()); + $this->assertFalse(empty($user->getPassword())); + $email_count = count($this->drupalGetMails()); + $this->assertEqual(0, $email_count); + + // Attempt to register without sending a password. + $response = $this->registerRequest('Rick.Deckard', FALSE); + $this->assertResourceErrorResponse(422, "No password provided.", $response); + + // TODO: FAILING ?? +// +// // Attempt to register with a password when e-mail verification is on. +// $response = $this->registerRequest('Estraven', TRUE); +// $this->assertResourceErrorResponse(422,'A Password cannot be specified. It will be generated on login.', $response); + + + //TODO: FAILING - likely because I'm including the AssertMailTrait above to try and get the assertMailString function + + // Allow visitors to register with email verification. +// $user_settings->set('register', USER_REGISTER_VISITORS); +// $user_settings->set('verify_mail', 1); +// $user_settings->save(); +// $user = $this->registerUser('Jason.Taverner', FALSE); +// $this->assertTrue(empty($user->getPassword())); +// $this->assertTrue($user->isBlocked()); +// $this->assertMailString('body', 'You may now log in by clicking this link', 1); +// +// +// // Allow visitors to register with Admin approval and no email verification. +// $user_settings->set('register', USER_REGISTER_VISITORS_ADMINISTRATIVE_APPROVAL); +// $user_settings->set('verify_mail', 0); +// $user_settings->save(); +// $user = $this->registerUser('Argaven'); +// $this->assertFalse(empty($user->getPassword())); +// $this->assertTrue($user->isBlocked()); +// $this->assertMailString('body', 'Your application for an account is', 2); +// $this->assertMailString('body', 'Argaven has applied for an account', 2); +// +// // Allow visitors to register with Admin approval and e-mail verification. +// $user_settings->set('register', USER_REGISTER_VISITORS_ADMINISTRATIVE_APPROVAL); +// $user_settings->set('verify_mail', 1); +// $user_settings->save(); +// $user = $this->registerUser('Bob.Arctor', FALSE); +// $this->assertTrue(empty($user->getPassword())); +// $this->assertTrue($user->isBlocked()); +// $this->assertMailString('body', 'Your application for an account is', 2); +// $this->assertMailString('body', 'Bob.Arctor has applied for an account', 2); + + // Verify that an authenticated user cannot register a new user, despite + // being granted permission to do so because only anonymous users can + // register themselves, authenticated users with the necessary permissions + // can POST a new user to the "user" REST resource. + + $this->initAuthentication(); + $response = $this->registerRequest($this->account->name->value); + $this->assertResourceErrorResponse(403, "Only anonymous users can register a user.", $response); + } + + + /** + * @param $name + * @param bool $include_password + * + * @return array + */ + protected function createRequestBody($name, $include_password = TRUE){ + global $base_url; + $request_body = [ + '_links' => ['type' => ["href" => $base_url . "/rest/type/user/user"]], + 'langcode' => [['value' => 'en']], + 'name' => [['value' => $name]], + 'mail' => [['value' => $name . '@example.com']] + ]; + + if ($include_password) { + $request_body['pass']['value'] = 'SuperSecretPassword'; + } + + return $request_body; + } + + protected function createRequestOptions($request_body){ + $request_options = $this->getAuthenticationRequestOptions('POST'); + $request_options[RequestOptions::BODY] = $this->serializer->encode($request_body, static::$format); + $request_options[RequestOptions::HEADERS]['Content-Type'] = static::$mimeType; + + return $request_options; + } + + /** + * Registers a user via REST resource. + * + * @param $name + * User name. + * + * @param bool $include_password + * + * @return bool|\Drupal\user\Entity\User + */ + protected function registerUser($name, $include_password = TRUE) { + // Verify that an anonymous user can register. + $response = $this->registerRequest($name, $include_password); + + $this->assertResourceResponse(200, FALSE, $response); + $user = user_load_by_name($name); + $this->assertFalse(empty($user), 'User was create as expected'); + return $user; + } + + /** + * Make a REST user registration request. + * + * @param $name + * @param bool $include_password + * + * @return \Psr\Http\Message\ResponseInterface the returned request + */ + protected function registerRequest($name, $include_password = TRUE) { + + $user_register_url = Url::fromRoute('user.register') + ->setRouteParameter('_format', static::$format); + $request_body = $this->createRequestBody($name, $include_password); + $request_options = $this->createRequestOptions($request_body); + return $this->request('POST', $user_register_url, $request_options); + } + + + /** + * {@inheritdoc} + */ + protected function setUpAuthorization($method) { + switch ($method) { + case 'GET': + $this->grantPermissionsToTestedRole(['restful get user_registration']); + break; + + default: + throw new \UnexpectedValueException(); + } + } + + /** + * {@inheritdoc} + */ + protected function assertNormalizationEdgeCases($method, Url $url, array $request_options) {} + + /** + * {@inheritdoc} + */ + protected function getExpectedUnauthorizedAccessMessage($method) {} + + /** + * {@inheritdoc} + */ + protected function getExpectedBcUnauthorizedAccessMessage($method) {} + + /** + * {@inheritdoc} + */ + protected function getExpectedUnauthorizedAccessCacheability() {} +} -- 2.13.6 (Apple Git-96)