PHP Class Trianglman\Sqrl\Tests\SqrlRequestHandlerTest

Author: johnj

Inheritance: extends PHPUnit_Framework_TestCase

Protected Properties

Property	Type	Description
$config	mock	Mocked version of \Trianglman\Sqrl\SqrlConfiguration
$generator	mock	Mocked version of \Trianglman\Sqrl\SqrlGenerate
$handler	Trianglman\Sqrl\SqrlRequestHandler	The object being tested
$storage	mock	Mocked version of \Trianglman\Sqrl\SqrlStoreInterface
$validator	mock	Mocked version of \Trianglman\Sqrl\SqrlValidate

Public Methods

Method	Description
setup ( )
testHandlesIncompleteRequest ( )	Tests that the server responds with a client failure flag if the client fails to send all the information needed to make a basic request.
testHandlesRequestWhereServerValueDoesntValidate ( )	Tests that the server responds with a client failure flag if the client sends a server value that doesn't match what the server sent
testHandlesRequestWithInvalidClient ( )	Tests that the server responds with a client failure flag if the client fails to send all the information needed to make a basic request.
testHandlesRequestWithInvalidIDS ( )	Tests that the server responds with a client failure flag if the client sends an invalid IDS signature
testHandlesRequestWithInvalidPIDS ( )	Tests that the server responds with a client failure flag if the client sends an invalid pIDS signature
testHandlesRequestWithInvalidURS ( )	Tests that the server responds with a client failure flag if the client sends an invalid URS signature
testHandlesRequestWithInvalidURSDuringIDUpdate ( )	Tests that the server responds with a client failure flag if the client sends an invalid URS signature
testRespondsToIdent ( )	tests the server responding to a cmd=ident with a known idk
testRespondsToIdentDuringIdentityUpdate ( )	tests the server responding to a cmd=setkey when the user is supplying a pidk in order to update their account.
testRespondsToIdentDuringIdentityUpdateMissingNewSUK ( )
testRespondsToIdentIncompleteAccountInformation ( )	Test that the server returns a failure when the user attempts to create an account without all required information (suk and vuk)
testRespondsToIdentNoUnknownAccountAllowed ( )	Test the server will respond with a function not supported error if the user attempts to create an account when it is not allowed.
testRespondsToIdentWhenCreatingAccount ( )	tests the server responding to a cmd=ident with an unknown idk
testRespondsToLock ( )	tests the server responding to a cmd=lock
testRespondsToLockUnknownAccount ( )	tests the server responding to a cmd=lock when the account doesn't exist
testRespondsToQueryBadNutHardFailure ( )	tests the server responding to a cmd=query when the nut has expired, is unknown, or in some other way is invalid, causing a hard failure
testRespondsToQueryDuringIdentityUpdate ( )	tests the server responding to a cmd=query when the user is supplying a pidk in order to update their account.
testRespondsToQueryExpiredNutSoftFailure ( )	tests the server responding to a cmd=query when the nut has expired
testRespondsToQueryKnownIdentityKey ( )	tests the server responding to a cmd=query when the idk is known
testRespondsToQueryKnownIdentityKeyIPMismatch ( )	tests the server responding to a cmd=query when the idk is known and the IPs do not match
testRespondsToQueryNutKeyMismatch ( )	tests the server responding to a cmd=query when the nut has expired, is unknown, or in some other way is invalid, causing a hard failure
testRespondsToQueryUnknownIdentityKeyAuthenticationProceeds ( )	tests the server responding to a cmd=query with the idk is not known
testRespondsToQueryUnknownIdentityKeyHardFailure ( )	tests the server responding to a cmd=query with the idk is not known
testRespondsToQueryWhenAccountLocked ( )	tests the server responding to a cmd=query when the account has previously been locked
testRespondsToUnlockRequest ( )	tests the server responding to a cmd=ident when the account has previously been locked when the user is supplying the Identity Lock credentials
testRespondsToUnlockRequestMismathedVUK ( )

Protected Methods

Method	Description
base64UrlEncode ( $string )

Method Details

base64UrlEncode() protected method

protected base64UrlEncode ( $string )

setup() public method

public setup ( )

testHandlesIncompleteRequest() public method

Tests that the server responds with a client failure flag if the client fails to send all the information needed to make a basic request.

public testHandlesIncompleteRequest ( )

testHandlesRequestWhereServerValueDoesntValidate() public method

Tests that the server responds with a client failure flag if the client sends a server value that doesn't match what the server sent

public testHandlesRequestWhereServerValueDoesntValidate ( )

testHandlesRequestWithInvalidClient() public method

Tests that the server responds with a client failure flag if the client fails to send all the information needed to make a basic request.

public testHandlesRequestWithInvalidClient ( )

testHandlesRequestWithInvalidIDS() public method

Tests that the server responds with a client failure flag if the client sends an invalid IDS signature

public testHandlesRequestWithInvalidIDS ( )

testHandlesRequestWithInvalidPIDS() public method

Tests that the server responds with a client failure flag if the client sends an invalid pIDS signature

public testHandlesRequestWithInvalidPIDS ( )

testHandlesRequestWithInvalidURS() public method

Tests that the server responds with a client failure flag if the client sends an invalid URS signature

public testHandlesRequestWithInvalidURS ( )

testHandlesRequestWithInvalidURSDuringIDUpdate() public method

Tests that the server responds with a client failure flag if the client sends an invalid URS signature

public testHandlesRequestWithInvalidURSDuringIDUpdate ( )

testRespondsToIdent() public method

this should connect the session with the identity key, authorizing the transaction (log-in, purchase authentication, etc.)

public testRespondsToIdent ( )

testRespondsToIdentDuringIdentityUpdate() public method

This should cause the server to replace the previous idk with the newly supplied idk

public testRespondsToIdentDuringIdentityUpdate ( )

testRespondsToIdentDuringIdentityUpdateMissingNewSUK() public method

public testRespondsToIdentDuringIdentityUpdateMissingNewSUK ( )

testRespondsToIdentIncompleteAccountInformation() public method

Test that the server returns a failure when the user attempts to create an account without all required information (suk and vuk)

public testRespondsToIdentIncompleteAccountInformation ( )

testRespondsToIdentNoUnknownAccountAllowed() public method

Test the server will respond with a function not supported error if the user attempts to create an account when it is not allowed.

public testRespondsToIdentNoUnknownAccountAllowed ( )

testRespondsToIdentWhenCreatingAccount() public method

this should connect the session with the identity key, authorizing the transaction (generally a log in or account creation/association) and that the suk and vuk have been stored

public testRespondsToIdentWhenCreatingAccount ( )

testRespondsToLock() public method

this will lock the user's identity key against further authentication

public testRespondsToLock ( )

testRespondsToLockUnknownAccount() public method

tests the server responding to a cmd=lock when the account doesn't exist

public testRespondsToLockUnknownAccount ( )

testRespondsToQueryBadNutHardFailure() public method

this will end the authentication transaction

public testRespondsToQueryBadNutHardFailure ( )

testRespondsToQueryDuringIdentityUpdate() public method

This should return the user's suk value in order to do the full identity unlock process and update the records

public testRespondsToQueryDuringIdentityUpdate ( )

testRespondsToQueryExpiredNutSoftFailure() public method

this should cause the client to sign the response with a new query in order to continue authentication

public testRespondsToQueryExpiredNutSoftFailure ( )

testRespondsToQueryKnownIdentityKey() public method

this will generally be the first step of most authentication, so the server value will be the (s)qrl:// URL

public testRespondsToQueryKnownIdentityKey ( )

testRespondsToQueryKnownIdentityKeyIPMismatch() public method

this will be both a MITM check and a common case when using a separate device to authenticate so no temporary or permantent failure should be returned

public testRespondsToQueryKnownIdentityKeyIPMismatch ( )

testRespondsToQueryNutKeyMismatch() public method

this will end the authentication transaction

public testRespondsToQueryNutKeyMismatch ( )

testRespondsToQueryUnknownIdentityKeyAuthenticationProceeds() public method

this is in the instance where the server will allow the authentication to proceed generally this will be on a create account or associate account with SQRL page

public testRespondsToQueryUnknownIdentityKeyAuthenticationProceeds ( )

testRespondsToQueryUnknownIdentityKeyHardFailure() public method

this is in the instance where the server does not allow previously unknown identities to authenticate to the server

public testRespondsToQueryUnknownIdentityKeyHardFailure ( )

testRespondsToQueryWhenAccountLocked() public method

this should return the suk value previously supplied by the user in order for the client to complete the identity unlock process

public testRespondsToQueryWhenAccountLocked ( )

testRespondsToUnlockRequest() public method

this will validate both the identity and the vuk/urs process was completed then unlock the idk for future authentication

public testRespondsToUnlockRequest ( )

testRespondsToUnlockRequestMismathedVUK() public method

public testRespondsToUnlockRequestMismathedVUK ( )

Property Details

$config protected_oe property

Mocked version of \Trianglman\Sqrl\SqrlConfiguration

protected mock $config
return	mock

$generator protected_oe property

Mocked version of \Trianglman\Sqrl\SqrlGenerate

protected mock $generator
return	mock

$handler protected_oe property

The object being tested

protected SqrlRequestHandler,Trianglman\SQRL $handler
return	Trianglman\Sqrl\SqrlRequestHandler

$storage protected_oe property

Mocked version of \Trianglman\Sqrl\SqrlStoreInterface

protected mock $storage
return	mock

$validator protected_oe property

Mocked version of \Trianglman\Sqrl\SqrlValidate

protected mock $validator
return	mock