PHP Class Neos\Flow\Tests\Unit\Security\ContextTest

Inheritance: extends Neos\Flow\Tests\UnitTestCase
Show file Open project: neos/flow-development-collection

Protected Properties

Property Type Description
$mockActionRequest Neos\Flow\Mvc\ActionRequest
$mockAuthenticationManager Neos\Flow\Security\Authentication\AuthenticationManagerInterface
$securityContext Neos\Flow\Security\Context

Public Methods

Method Description
authenticationStrategies ( ) : array Data provider for authentication strategy settings
authenticationStrategyIsSetCorrectlyFromConfiguration ( $settings, $expectedAuthenticationStrategy )
authorizationChecksAreEnabledByDefault ( )
csrfProtectionStrategies ( ) : array Data provider for CSRF protection strategy settings
csrfProtectionStrategyIsSetCorrectlyFromConfiguration ( $settings, $expectedCsrfProtectionStrategy )
currentRequestIsSetInTheSecurityContext ( )
getAccountByAuthenticationProviderNameReturnsNullIfNoAccountFound ( )
getAccountByAuthenticationProviderNameReturnsTheAuthenticatedAccountWithGivenProviderName ( )
getAccountReturnsTheAccountAttachedToTheFirstAuthenticatedToken ( )
getContextHashInitializesSecurityContext ( )
getContextHashReturnsAHashOverAllAuthenticatedRoles ( )
getContextHashReturnsStaticStringIfAuthorizationChecksAreDisabled ( )
getContextHashReturnsStaticStringIfSecurityContextCantBeInitialized ( )
getCsrfProtectionTokenReturnsANewTokenIfNoneIsPresentInTheContext ( )
getCsrfProtectionTokenReturnsANewTokenIfTheCsrfStrategyIsOnePerUri ( )
getRolesReturnsTheAnonymousRoleIfNoTokenIsAuthenticated ( )
getRolesReturnsTheAuthenticatedUserRoleIfATokenIsAuthenticated ( )
getRolesReturnsTheCorrectRoles ( )
getRolesReturnsTheEverybodyRoleEvenIfNoTokenIsAuthenticated ( )
getRolesTakesInheritanceOfRolesIntoAccount ( )
hasRoleReturnsFalseForAnonymousRoleIfAuthenticated ( )
hasRoleReturnsTrueForAnonymousRoleIfNotAuthenticated ( )
hasRoleReturnsTrueForEverybodyRole ( )
hasRoleWorks ( )
hasRoleWorksWithRecursiveRoles ( )
initializeCallsUpdateCredentialsOnAllActiveTokens ( )
initializeSeparatesActiveAndInactiveTokens ( )
initializeUpdatesAndSeparatesActiveAndInactiveTokensCorrectly ( )
injectAuthenticationManagerSetsAReferenceToTheSecurityContextInTheAuthenticationManager ( )
invalidAuthenticationStrategyFromConfigurationThrowsException ( )
invalidCsrfProtectionStrategyFromConfigurationThrowsException ( )
isCsrfProtectionTokenValidChecksIfTheGivenTokenIsExistingInTheContext ( )
isCsrfProtectionTokenValidChecksIfTheGivenTokenIsExistingInTheContextAndUnsetsItIfTheCsrfStrategyIsOnePerUri ( )
securityContextCallsTheAuthenticationManagerToSetItsTokens ( )
securityContextIsNotInitializedAgainIfItHasBeenInitializedAlready ( ) initialize() might be called multiple times during one request. This might override roles and other data acquired from tokens / accounts, which have been initialized in a previous initialize() call. Therefore - and in order to save some processor cycles - initialization should only by executed once for a Context instance.
securityContextIsSetToInitialized ( )
separateActiveAndInactiveTokensDataProvider ( ) : array
separateActiveAndInactiveTokensTests ( array $patterns, boolean $expectedActive )
setUp ( ) Sets up this test case
tokenFromAnAuthenticationManagerIsReplacedIfThereIsOneOfTheSameTypeInTheSession ( )
withoutAuthorizationChecksDisabledAuthorizationChecks ( )
withoutAuthorizationChecksReactivatesAuthorizationCheckCorrectlyWhenCalledNested ( )
withoutAuthorizationChecksReactivatesAuthorizationChecksAfterClosureInvocation ( )
withoutAuthorizationChecksReactivatesAuthorizationChecksAfterClosureInvocationIfClosureThrowsException ( )

Method Details

authenticationStrategies() public method

Data provider for authentication strategy settings
public authenticationStrategies ( ) : array
return array

authenticationStrategyIsSetCorrectlyFromConfiguration() public method

public authenticationStrategyIsSetCorrectlyFromConfiguration ( $settings, $expectedAuthenticationStrategy )

authorizationChecksAreEnabledByDefault() public method

public authorizationChecksAreEnabledByDefault ( )

csrfProtectionStrategies() public method

Data provider for CSRF protection strategy settings
public csrfProtectionStrategies ( ) : array
return array

csrfProtectionStrategyIsSetCorrectlyFromConfiguration() public method

public csrfProtectionStrategyIsSetCorrectlyFromConfiguration ( $settings, $expectedCsrfProtectionStrategy )

currentRequestIsSetInTheSecurityContext() public method

public currentRequestIsSetInTheSecurityContext ( )

getAccountByAuthenticationProviderNameReturnsNullIfNoAccountFound() public method

public getAccountByAuthenticationProviderNameReturnsNullIfNoAccountFound ( )

getAccountByAuthenticationProviderNameReturnsTheAuthenticatedAccountWithGivenProviderName() public method

public getAccountByAuthenticationProviderNameReturnsTheAuthenticatedAccountWithGivenProviderName ( )

getAccountReturnsTheAccountAttachedToTheFirstAuthenticatedToken() public method

public getAccountReturnsTheAccountAttachedToTheFirstAuthenticatedToken ( )

getContextHashInitializesSecurityContext() public method

public getContextHashInitializesSecurityContext ( )

getContextHashReturnsAHashOverAllAuthenticatedRoles() public method

public getContextHashReturnsAHashOverAllAuthenticatedRoles ( )

getContextHashReturnsStaticStringIfAuthorizationChecksAreDisabled() public method

public getContextHashReturnsStaticStringIfAuthorizationChecksAreDisabled ( )

getContextHashReturnsStaticStringIfSecurityContextCantBeInitialized() public method

public getContextHashReturnsStaticStringIfSecurityContextCantBeInitialized ( )

getCsrfProtectionTokenReturnsANewTokenIfNoneIsPresentInTheContext() public method

public getCsrfProtectionTokenReturnsANewTokenIfNoneIsPresentInTheContext ( )

getCsrfProtectionTokenReturnsANewTokenIfTheCsrfStrategyIsOnePerUri() public method

public getCsrfProtectionTokenReturnsANewTokenIfTheCsrfStrategyIsOnePerUri ( )

getRolesReturnsTheAnonymousRoleIfNoTokenIsAuthenticated() public method

public getRolesReturnsTheAnonymousRoleIfNoTokenIsAuthenticated ( )

getRolesReturnsTheAuthenticatedUserRoleIfATokenIsAuthenticated() public method

public getRolesReturnsTheAuthenticatedUserRoleIfATokenIsAuthenticated ( )

getRolesReturnsTheCorrectRoles() public method

public getRolesReturnsTheCorrectRoles ( )

getRolesReturnsTheEverybodyRoleEvenIfNoTokenIsAuthenticated() public method

public getRolesReturnsTheEverybodyRoleEvenIfNoTokenIsAuthenticated ( )

getRolesTakesInheritanceOfRolesIntoAccount() public method

public getRolesTakesInheritanceOfRolesIntoAccount ( )

hasRoleReturnsFalseForAnonymousRoleIfAuthenticated() public method

public hasRoleReturnsFalseForAnonymousRoleIfAuthenticated ( )

hasRoleReturnsTrueForAnonymousRoleIfNotAuthenticated() public method

public hasRoleReturnsTrueForAnonymousRoleIfNotAuthenticated ( )

hasRoleReturnsTrueForEverybodyRole() public method

public hasRoleReturnsTrueForEverybodyRole ( )

hasRoleWorks() public method

public hasRoleWorks ( )

hasRoleWorksWithRecursiveRoles() public method

public hasRoleWorksWithRecursiveRoles ( )

initializeCallsUpdateCredentialsOnAllActiveTokens() public method

public initializeCallsUpdateCredentialsOnAllActiveTokens ( )

initializeSeparatesActiveAndInactiveTokens() public method

public initializeSeparatesActiveAndInactiveTokens ( )

initializeUpdatesAndSeparatesActiveAndInactiveTokensCorrectly() public method

public initializeUpdatesAndSeparatesActiveAndInactiveTokensCorrectly ( )

injectAuthenticationManagerSetsAReferenceToTheSecurityContextInTheAuthenticationManager() public method

public injectAuthenticationManagerSetsAReferenceToTheSecurityContextInTheAuthenticationManager ( )

invalidAuthenticationStrategyFromConfigurationThrowsException() public method

public invalidAuthenticationStrategyFromConfigurationThrowsException ( )

invalidCsrfProtectionStrategyFromConfigurationThrowsException() public method

public invalidCsrfProtectionStrategyFromConfigurationThrowsException ( )

isCsrfProtectionTokenValidChecksIfTheGivenTokenIsExistingInTheContext() public method

public isCsrfProtectionTokenValidChecksIfTheGivenTokenIsExistingInTheContext ( )

isCsrfProtectionTokenValidChecksIfTheGivenTokenIsExistingInTheContextAndUnsetsItIfTheCsrfStrategyIsOnePerUri() public method

public isCsrfProtectionTokenValidChecksIfTheGivenTokenIsExistingInTheContextAndUnsetsItIfTheCsrfStrategyIsOnePerUri ( )

securityContextCallsTheAuthenticationManagerToSetItsTokens() public method

public securityContextCallsTheAuthenticationManagerToSetItsTokens ( )

securityContextIsNotInitializedAgainIfItHasBeenInitializedAlready() public method

initialize() might be called multiple times during one request. This might override roles and other data acquired from tokens / accounts, which have been initialized in a previous initialize() call. Therefore - and in order to save some processor cycles - initialization should only by executed once for a Context instance.
public securityContextIsNotInitializedAgainIfItHasBeenInitializedAlready ( )

securityContextIsSetToInitialized() public method

public securityContextIsSetToInitialized ( )

separateActiveAndInactiveTokensDataProvider() public method

public separateActiveAndInactiveTokensDataProvider ( ) : array
return array

separateActiveAndInactiveTokensTests() public method

public separateActiveAndInactiveTokensTests ( array $patterns, boolean $expectedActive )
$patterns array
$expectedActive boolean

setUp() public method

Sets up this test case
public setUp ( )

tokenFromAnAuthenticationManagerIsReplacedIfThereIsOneOfTheSameTypeInTheSession() public method

public tokenFromAnAuthenticationManagerIsReplacedIfThereIsOneOfTheSameTypeInTheSession ( )

withoutAuthorizationChecksDisabledAuthorizationChecks() public method

public withoutAuthorizationChecksDisabledAuthorizationChecks ( )

withoutAuthorizationChecksReactivatesAuthorizationCheckCorrectlyWhenCalledNested() public method

public withoutAuthorizationChecksReactivatesAuthorizationCheckCorrectlyWhenCalledNested ( )

withoutAuthorizationChecksReactivatesAuthorizationChecksAfterClosureInvocation() public method

public withoutAuthorizationChecksReactivatesAuthorizationChecksAfterClosureInvocation ( )

withoutAuthorizationChecksReactivatesAuthorizationChecksAfterClosureInvocationIfClosureThrowsException() public method

public withoutAuthorizationChecksReactivatesAuthorizationChecksAfterClosureInvocationIfClosureThrowsException ( )

Property Details

$mockActionRequest protected property

protected ActionRequest,Neos\Flow\Mvc $mockActionRequest
return Neos\Flow\Mvc\ActionRequest

$mockAuthenticationManager protected property

protected AuthenticationManagerInterface,Neos\Flow\Security\Authentication $mockAuthenticationManager
return Neos\Flow\Security\Authentication\AuthenticationManagerInterface

$securityContext protected property

protected Context,Neos\Flow\Security $securityContext
return Neos\Flow\Security\Context