Changeset 50065 for trunk/tests/phpunit/tests/rest-api/rest-application-passwords-controller.php

Timestamp:

01/29/2021 12:05:20 AM (4 years ago)

Author:

TimothyBlynJacobs

Message:

App Passwords: Introduce introspection endpoint.

This introduces a new endpoint, wp/v2/users/me/application-passwords/introspect, that will return details about the App Password being used to authenticate the current request. This allows for an application to disambiguate between multiple installations of their application which would all share the same app_id.

Props xkon, peterwilsoncc, TimothyBlynJacobs.
Fixes #52275.

File:

• trunk/tests/phpunit/tests/rest-api/rest-application-passwords-controller.php (modified) (2 diffs)

trunk/tests/phpunit/tests/rest-api/rest-application-passwords-controller.php

@@ -68 +68 @@
 
         add_filter( 'wp_is_application_passwords_available', '__return_true' );
+    }
+
+    public function tearDown() {
+        parent::tearDown();
+        unset( $_SERVER['PHP_AUTH_USER'], $_SERVER['PHP_AUTH_PW'], $GLOBALS['wp_rest_application_password_status'], $GLOBALS['wp_rest_application_password_uuid'] );
     }
 
@@ -878 +883 @@
         $this->assertCount( 7, $properties );
     }
+
+    /**
+     * @ticket 52275
+     */
+    public function test_introspect_item() {
+        $password = $this->setup_app_password_authenticated_request();
+        $response = rest_do_request( '/wp/v2/users/me/application-passwords/introspect' );
+        $this->assertNotWPError( $response->as_error() );
+
+        $this->assertEquals( $password['uuid'], $response->get_data()['uuid'] );
+    }
+
+    /**
+     * @ticket 52275
+     */
+    public function test_introspect_item_specific_user() {
+        $password = $this->setup_app_password_authenticated_request();
+        $response = rest_do_request( '/wp/v2/users/' . self::$admin . '/application-passwords/introspect' );
+
+        $this->assertEquals( $password['uuid'], $response->get_data()['uuid'] );
+    }
+
+    /**
+     * @ticket 52275
+     */
+    public function test_introspect_item_logged_out() {
+        $response = rest_do_request( '/wp/v2/users/me/application-passwords/introspect' );
+        $this->assertErrorResponse( 'rest_not_logged_in', $response, 401 );
+    }
+
+    /**
+     * @ticket 52275
+     */
+    public function test_introspect_item_wrong_user() {
+        $this->setup_app_password_authenticated_request();
+        $response = rest_do_request( '/wp/v2/users/' . self::$subscriber_id . '/application-passwords/introspect' );
+        $this->assertErrorResponse( 'rest_cannot_introspect_app_password_for_non_authenticated_user', $response, 403 );
+    }
+
+    /**
+     * @ticket 52275
+     */
+    public function test_introspect_item_no_app_password_used() {
+        wp_set_current_user( self::$admin );
+        $response = rest_do_request( '/wp/v2/users/me/application-passwords/introspect' );
+        $this->assertErrorResponse( 'rest_no_authenticated_app_password', $response, 404 );
+    }
+
+    /**
+     * @ticket 52275
+     */
+    public function test_introspect_item_password_invalid() {
+        $this->setup_app_password_authenticated_request();
+        add_action(
+            'application_password_did_authenticate',
+            function() {
+                $GLOBALS['wp_rest_application_password_uuid'] = 'invalid_uuid';
+            }
+        );
+
+        $response = rest_do_request( '/wp/v2/users/me/application-passwords/introspect' );
+        $this->assertErrorResponse( 'rest_application_password_not_found', $response, 500 );
+    }
+
+    /**
+     * Sets up a REST API request to be authenticated using an App Password.
+     *
+     * @since 5.7.0
+     *
+     * @return array The created App Password.
+     */
+    private function setup_app_password_authenticated_request() {
+        list( $password, $item ) = WP_Application_Passwords::create_new_application_password( self::$admin, array( 'name' => 'Test' ) );
+
+        $_SERVER['PHP_AUTH_USER'] = get_userdata( self::$admin )->user_login;
+        $_SERVER['PHP_AUTH_PW']   = $password;
+
+        $GLOBALS['current_user'] = null;
+
+        add_filter( 'application_password_is_api_request', '__return_true' );
+
+        return $item;
+    }
 }