Changeset 50065 for trunk/tests/phpunit/tests/auth.php

Timestamp:

01/29/2021 12:05:20 AM (6 years ago)

Author:

TimothyBlynJacobs

Message:

App Passwords: Introduce introspection endpoint.

This introduces a new endpoint, wp/v2/users/me/application-passwords/introspect, that will return details about the App Password being used to authenticate the current request. This allows for an application to disambiguate between multiple installations of their application which would all share the same app_id.

Props xkon, peterwilsoncc, TimothyBlynJacobs.
Fixes #52275.

File:

• trunk/tests/phpunit/tests/auth.php (modified) (5 diffs)

trunk/tests/phpunit/tests/auth.php

@@ -39 +39 @@
                 wp_set_current_user( self::$user_id );
                 update_site_option( 'using_application_passwords', 1 );
+
+                unset( $_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW'], $GLOBALS['wp_rest_application_password_status'], $GLOBALS['wp_rest_application_password_uuid'] );
         }
 
@@ -45 +47 @@
 
                 // Cleanup all the global state.
-                unset( $_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW'], $GLOBALS['wp_rest_application_password_status'] );
+                unset( $_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW'], $GLOBALS['wp_rest_application_password_status'], $GLOBALS['wp_rest_application_password_uuid'] );
         }
 
@@ -443 +445 @@
 
                 // Create a new app-only password.
-                list( $user_app_password ) = WP_Application_Passwords::create_new_application_password( $user_id, array( 'name' => 'phpunit' ) );
+                list( $user_app_password, $item ) = WP_Application_Passwords::create_new_application_password( $user_id, array( 'name' => 'phpunit' ) );
 
                 // Fake a REST API request.
@@ -453 +455 @@
                 $_SERVER['PHP_AUTH_PW']   = 'http_auth_pass';
 
-                $this->assertSame(
-                        null,
+                $this->assertNull(
                         wp_validate_application_password( null ),
                         'Regular user account password should not be allowed for API authentication'
                 );
+                $this->assertNull( rest_get_authenticated_app_password() );
 
                 // Not try with an App password instead.
@@ -467 +469 @@
                         'Application passwords should be allowed for API authentication'
                 );
+                $this->assertEquals( $item['uuid'], rest_get_authenticated_app_password() );
         }