1369 lines
38 KiB
PHP
1369 lines
38 KiB
PHP
<?php
|
|
/* vim: set expandtab sw=4 ts=4 sts=4: */
|
|
/**
|
|
* tests for PhpMyAdmin\Plugins\Auth\AuthenticationCookie class
|
|
*
|
|
* @package PhpMyAdmin-test
|
|
*/
|
|
declare(strict_types=1);
|
|
|
|
namespace PhpMyAdmin\Tests\Plugins\Auth;
|
|
|
|
use PhpMyAdmin\Config;
|
|
use PhpMyAdmin\ErrorHandler;
|
|
use PhpMyAdmin\Footer;
|
|
use PhpMyAdmin\Header;
|
|
use PhpMyAdmin\Plugins\Auth\AuthenticationCookie;
|
|
use PhpMyAdmin\Tests\PmaTestCase;
|
|
use ReflectionMethod;
|
|
|
|
require_once 'libraries/config.default.php';
|
|
|
|
/**
|
|
* tests for PhpMyAdmin\Plugins\Auth\AuthenticationCookie class
|
|
*
|
|
* @package PhpMyAdmin-test
|
|
*/
|
|
class AuthenticationCookieTest extends PmaTestCase
|
|
{
|
|
/**
|
|
* @var AuthenticationCookie
|
|
*/
|
|
protected $object;
|
|
|
|
/**
|
|
* Configures global environment.
|
|
*
|
|
* @return void
|
|
*/
|
|
protected function setUp()
|
|
{
|
|
$GLOBALS['PMA_Config'] = new Config();
|
|
$GLOBALS['PMA_Config']->enableBc();
|
|
$GLOBALS['server'] = 0;
|
|
$GLOBALS['text_dir'] = 'ltr';
|
|
$GLOBALS['db'] = 'db';
|
|
$GLOBALS['table'] = 'table';
|
|
$_REQUEST['pma_password'] = '';
|
|
$this->object = new AuthenticationCookie();
|
|
$GLOBALS['PMA_PHP_SELF'] = '/phpmyadmin/';
|
|
}
|
|
|
|
/**
|
|
* tearDown for test cases
|
|
*
|
|
* @return void
|
|
*/
|
|
public function tearDown()
|
|
{
|
|
parent::tearDown();
|
|
unset($this->object);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::showLoginForm
|
|
*
|
|
* @return void
|
|
* @group medium
|
|
*/
|
|
public function testAuthErrorAJAX()
|
|
{
|
|
$mockResponse = $this->mockResponse();
|
|
|
|
$mockResponse->expects($this->once())
|
|
->method('isAjax')
|
|
->with()
|
|
->will($this->returnValue(true));
|
|
|
|
$mockResponse->expects($this->once())
|
|
->method('setRequestStatus')
|
|
->with(false);
|
|
|
|
$mockResponse->expects($this->once())
|
|
->method('addJSON')
|
|
->with(
|
|
'redirect_flag',
|
|
'1'
|
|
);
|
|
|
|
$GLOBALS['conn_error'] = true;
|
|
$this->assertTrue(
|
|
$this->object->showLoginForm()
|
|
);
|
|
}
|
|
|
|
/**
|
|
* @return void
|
|
*/
|
|
private function getAuthErrorMockResponse()
|
|
{
|
|
$mockResponse = $this->mockResponse();
|
|
|
|
$mockResponse->expects($this->once())
|
|
->method('isAjax')
|
|
->with()
|
|
->will($this->returnValue(false));
|
|
|
|
// mock footer
|
|
$mockFooter = $this->getMockBuilder('PhpMyAdmin\Footer')
|
|
->disableOriginalConstructor()
|
|
->setMethods(['setMinimal'])
|
|
->getMock();
|
|
|
|
$mockFooter->expects($this->once())
|
|
->method('setMinimal')
|
|
->with();
|
|
|
|
// mock header
|
|
|
|
$mockHeader = $this->getMockBuilder('PhpMyAdmin\Header')
|
|
->disableOriginalConstructor()
|
|
->setMethods(
|
|
[
|
|
'setBodyId',
|
|
'setTitle',
|
|
'disableMenuAndConsole',
|
|
'disableWarnings'
|
|
]
|
|
)
|
|
->getMock();
|
|
|
|
$mockHeader->expects($this->once())
|
|
->method('setBodyId')
|
|
->with('loginform');
|
|
|
|
$mockHeader->expects($this->once())
|
|
->method('setTitle')
|
|
->with('phpMyAdmin');
|
|
|
|
$mockHeader->expects($this->once())
|
|
->method('disableMenuAndConsole')
|
|
->with();
|
|
|
|
$mockHeader->expects($this->once())
|
|
->method('disableWarnings')
|
|
->with();
|
|
|
|
// set mocked headers and footers
|
|
|
|
$mockResponse->expects($this->once())
|
|
->method('getFooter')
|
|
->with()
|
|
->will($this->returnValue($mockFooter));
|
|
|
|
$mockResponse->expects($this->once())
|
|
->method('getHeader')
|
|
->with()
|
|
->will($this->returnValue($mockHeader));
|
|
|
|
$GLOBALS['pmaThemeImage'] = 'test';
|
|
$GLOBALS['cfg']['Servers'] = [1, 2];
|
|
|
|
// mock error handler
|
|
|
|
$mockErrorHandler = $this->getMockBuilder('PhpMyAdmin\ErrorHandler')
|
|
->disableOriginalConstructor()
|
|
->setMethods(['hasDisplayErrors', 'dispErrors'])
|
|
->getMock();
|
|
|
|
$mockErrorHandler->expects($this->once())
|
|
->method('hasDisplayErrors')
|
|
->with()
|
|
->will($this->returnValue(true));
|
|
|
|
$mockErrorHandler->expects($this->once())
|
|
->method('dispErrors')
|
|
->with();
|
|
|
|
$GLOBALS['error_handler'] = $mockErrorHandler;
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::showLoginForm
|
|
*
|
|
* @return void
|
|
* @group medium
|
|
*/
|
|
public function testAuthError()
|
|
{
|
|
$this->getAuthErrorMockResponse();
|
|
|
|
$_REQUEST['old_usr'] = '';
|
|
$GLOBALS['cfg']['LoginCookieRecall'] = true;
|
|
$GLOBALS['cfg']['blowfish_secret'] = 'secret';
|
|
$this->object->user = 'pmauser';
|
|
$GLOBALS['pma_auth_server'] = 'localhost';
|
|
|
|
$GLOBALS['conn_error'] = true;
|
|
$GLOBALS['cfg']['Lang'] = 'en';
|
|
$GLOBALS['cfg']['AllowArbitraryServer'] = true;
|
|
$GLOBALS['cfg']['CaptchaLoginPrivateKey'] = '';
|
|
$GLOBALS['cfg']['CaptchaLoginPublicKey'] = '';
|
|
$GLOBALS['target'] = 'testTarget';
|
|
$GLOBALS['db'] = 'testDb';
|
|
$GLOBALS['table'] = 'testTable';
|
|
|
|
ob_start();
|
|
$this->object->showLoginForm();
|
|
$result = ob_get_clean();
|
|
|
|
// assertions
|
|
|
|
$this->assertContains(
|
|
' id="imLogo"',
|
|
$result
|
|
);
|
|
|
|
$this->assertContains(
|
|
'<div class="error">',
|
|
$result
|
|
);
|
|
|
|
$this->assertContains(
|
|
'<form method="post" id="login_form" action="index.php" name="login_form" ' .
|
|
'class="disableAjax login hide js-show">',
|
|
$result
|
|
);
|
|
|
|
$this->assertContains(
|
|
'<input type="text" name="pma_servername" id="input_servername" ' .
|
|
'value="localhost"',
|
|
$result
|
|
);
|
|
|
|
$this->assertContains(
|
|
'<input type="text" name="pma_username" id="input_username" ' .
|
|
'value="pmauser" size="24" class="textfield"/>',
|
|
$result
|
|
);
|
|
|
|
$this->assertContains(
|
|
'<input type="password" name="pma_password" id="input_password" ' .
|
|
'value="" size="24" class="textfield" />',
|
|
$result
|
|
);
|
|
|
|
$this->assertContains(
|
|
'<select name="server" id="select_server" ' .
|
|
'onchange="document.forms[\'login_form\'].' .
|
|
'elements[\'pma_servername\'].value = \'\'" >',
|
|
$result
|
|
);
|
|
|
|
$this->assertContains(
|
|
'<input type="hidden" name="target" value="testTarget" />',
|
|
$result
|
|
);
|
|
|
|
$this->assertContains(
|
|
'<input type="hidden" name="db" value="testDb" />',
|
|
$result
|
|
);
|
|
|
|
$this->assertContains(
|
|
'<input type="hidden" name="table" value="testTable" />',
|
|
$result
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::showLoginForm
|
|
*
|
|
* @return void
|
|
* @group medium
|
|
*/
|
|
public function testAuthCaptcha()
|
|
{
|
|
$mockResponse = $this->mockResponse();
|
|
|
|
$mockResponse->expects($this->once())
|
|
->method('isAjax')
|
|
->with()
|
|
->will($this->returnValue(false));
|
|
|
|
$mockResponse->expects($this->once())
|
|
->method('getFooter')
|
|
->with()
|
|
->will($this->returnValue(new Footer()));
|
|
|
|
$mockResponse->expects($this->once())
|
|
->method('getHeader')
|
|
->with()
|
|
->will($this->returnValue(new Header()));
|
|
|
|
$_REQUEST['old_usr'] = '';
|
|
$GLOBALS['cfg']['LoginCookieRecall'] = false;
|
|
|
|
$GLOBALS['pmaThemeImage'] = 'test';
|
|
$GLOBALS['cfg']['Lang'] = '';
|
|
$GLOBALS['cfg']['AllowArbitraryServer'] = false;
|
|
$GLOBALS['cfg']['Servers'] = [1];
|
|
$GLOBALS['cfg']['CaptchaLoginPrivateKey'] = 'testprivkey';
|
|
$GLOBALS['cfg']['CaptchaLoginPublicKey'] = 'testpubkey';
|
|
$GLOBALS['server'] = 0;
|
|
|
|
$GLOBALS['error_handler'] = new ErrorHandler();
|
|
|
|
ob_start();
|
|
$this->object->showLoginForm();
|
|
$result = ob_get_clean();
|
|
|
|
// assertions
|
|
|
|
$this->assertContains('id="imLogo"', $result);
|
|
|
|
// Check for language selection if locales are there
|
|
$loc = LOCALE_PATH . '/cs/LC_MESSAGES/phpmyadmin.mo';
|
|
if (is_readable($loc)) {
|
|
$this->assertContains(
|
|
'<select name="lang" class="autosubmit" lang="en" dir="ltr" ' .
|
|
'id="sel-lang">',
|
|
$result
|
|
);
|
|
}
|
|
|
|
$this->assertContains(
|
|
'<form method="post" id="login_form" action="index.php" name="login_form" ' .
|
|
'autocomplete="off" class="disableAjax login hide js-show">',
|
|
$result
|
|
);
|
|
|
|
$this->assertContains(
|
|
'<input type="hidden" name="server" value="0" />',
|
|
$result
|
|
);
|
|
|
|
$this->assertContains(
|
|
'<script src="https://www.google.com/recaptcha/api.js?hl=en"'
|
|
. ' async defer></script>',
|
|
$result
|
|
);
|
|
|
|
$this->assertContains(
|
|
'<input class="g-recaptcha" data-sitekey="testpubkey"'
|
|
. ' data-callback="recaptchaCallback" value="Go" type="submit" id="input_go" />',
|
|
$result
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::showLoginForm with headers
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testAuthHeader()
|
|
{
|
|
$GLOBALS['cfg']['LoginCookieDeleteAll'] = false;
|
|
$GLOBALS['cfg']['Servers'] = [1];
|
|
|
|
$this->mockResponse('Location: https://example.com/logout');
|
|
|
|
$GLOBALS['cfg']['Server']['LogoutURL'] = 'https://example.com/logout';
|
|
$GLOBALS['cfg']['Server']['auth_type'] = 'cookie';
|
|
|
|
$this->object->logOut();
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::showLoginForm with headers
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testAuthHeaderPartial()
|
|
{
|
|
$GLOBALS['cfg']['LoginCookieDeleteAll'] = false;
|
|
$GLOBALS['cfg']['Servers'] = [1, 2, 3];
|
|
$GLOBALS['cfg']['Server']['LogoutURL'] = 'https://example.com/logout';
|
|
$GLOBALS['cfg']['Server']['auth_type'] = 'cookie';
|
|
|
|
$_COOKIE['pmaAuth-2'] = '';
|
|
|
|
$this->mockResponse('Location: /phpmyadmin/index.php?server=2&lang=en');
|
|
|
|
$this->object->logOut();
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::readCredentials
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testAuthCheckCaptcha()
|
|
{
|
|
$GLOBALS['cfg']['CaptchaLoginPrivateKey'] = 'testprivkey';
|
|
$GLOBALS['cfg']['CaptchaLoginPublicKey'] = 'testpubkey';
|
|
$_POST["g-recaptcha-response"] = '';
|
|
$_REQUEST['pma_username'] = 'testPMAUser';
|
|
|
|
$this->assertFalse(
|
|
$this->object->readCredentials()
|
|
);
|
|
|
|
$this->assertEquals(
|
|
'Missing reCAPTCHA verification, maybe it has been blocked by adblock?',
|
|
$GLOBALS['conn_error']
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::readCredentials
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testLogoutDelete()
|
|
{
|
|
$this->mockResponse('Location: /phpmyadmin/index.php');
|
|
|
|
$GLOBALS['cfg']['CaptchaLoginPrivateKey'] = '';
|
|
$GLOBALS['cfg']['CaptchaLoginPublicKey'] = '';
|
|
$GLOBALS['cfg']['LoginCookieDeleteAll'] = true;
|
|
$GLOBALS['PMA_Config']->set('PmaAbsoluteUri', '');
|
|
$GLOBALS['cfg']['Servers'] = [1];
|
|
|
|
$_COOKIE['pmaAuth-0'] = 'test';
|
|
|
|
$this->object->logOut();
|
|
|
|
$this->assertArrayNotHasKey(
|
|
'pmaAuth-0',
|
|
$_COOKIE
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::readCredentials
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testLogout()
|
|
{
|
|
$this->mockResponse('Location: /phpmyadmin/index.php');
|
|
|
|
$GLOBALS['cfg']['CaptchaLoginPrivateKey'] = '';
|
|
$GLOBALS['cfg']['CaptchaLoginPublicKey'] = '';
|
|
$GLOBALS['cfg']['LoginCookieDeleteAll'] = false;
|
|
$GLOBALS['PMA_Config']->set('PmaAbsoluteUri', '');
|
|
$GLOBALS['cfg']['Servers'] = [1];
|
|
$GLOBALS['server'] = 1;
|
|
$GLOBALS['cfg']['Server'] = ['auth_type' => 'cookie'];
|
|
|
|
$_COOKIE['pmaAuth-1'] = 'test';
|
|
|
|
$this->object->logOut();
|
|
|
|
$this->assertArrayNotHasKey(
|
|
'pmaAuth-1',
|
|
$_COOKIE
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::readCredentials
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testAuthCheckArbitrary()
|
|
{
|
|
$GLOBALS['cfg']['CaptchaLoginPrivateKey'] = '';
|
|
$GLOBALS['cfg']['CaptchaLoginPublicKey'] = '';
|
|
$_REQUEST['old_usr'] = '';
|
|
$_REQUEST['pma_username'] = 'testPMAUser';
|
|
$_REQUEST['pma_servername'] = 'testPMAServer';
|
|
$_REQUEST['pma_password'] = 'testPMAPSWD';
|
|
$GLOBALS['cfg']['AllowArbitraryServer'] = true;
|
|
|
|
$this->assertTrue(
|
|
$this->object->readCredentials()
|
|
);
|
|
|
|
$this->assertEquals(
|
|
'testPMAUser',
|
|
$this->object->user
|
|
);
|
|
|
|
$this->assertEquals(
|
|
'testPMAPSWD',
|
|
$this->object->password
|
|
);
|
|
|
|
$this->assertEquals(
|
|
'testPMAServer',
|
|
$GLOBALS['pma_auth_server']
|
|
);
|
|
|
|
$this->assertArrayNotHasKey(
|
|
'pmaAuth-1',
|
|
$_COOKIE
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::readCredentials
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testAuthCheckInvalidCookie()
|
|
{
|
|
$GLOBALS['cfg']['AllowArbitraryServer'] = true;
|
|
$_REQUEST['pma_servername'] = 'testPMAServer';
|
|
$_REQUEST['pma_password'] = 'testPMAPSWD';
|
|
$_REQUEST['pma_username'] = '';
|
|
$GLOBALS['server'] = 1;
|
|
$_COOKIE['pmaUser-1'] = '';
|
|
$_COOKIE['pma_iv-1'] = base64_encode('testiv09testiv09');
|
|
|
|
$this->assertFalse(
|
|
$this->object->readCredentials()
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::readCredentials
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testAuthCheckExpires()
|
|
{
|
|
$GLOBALS['server'] = 1;
|
|
$_COOKIE['pmaServer-1'] = 'pmaServ1';
|
|
$_COOKIE['pmaUser-1'] = 'pmaUser1';
|
|
$_COOKIE['pma_iv-1'] = base64_encode('testiv09testiv09');
|
|
$_COOKIE['pmaAuth-1'] = '';
|
|
$GLOBALS['cfg']['blowfish_secret'] = 'secret';
|
|
$_SESSION['last_access_time'] = time() - 1000;
|
|
$GLOBALS['cfg']['LoginCookieValidity'] = 1440;
|
|
|
|
$this->assertFalse(
|
|
$this->object->readCredentials()
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::readCredentials (mock blowfish functions reqd)
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testAuthCheckDecryptUser()
|
|
{
|
|
$GLOBALS['server'] = 1;
|
|
$_REQUEST['old_usr'] = '';
|
|
$_REQUEST['pma_username'] = '';
|
|
$_COOKIE['pmaServer-1'] = 'pmaServ1';
|
|
$_COOKIE['pmaUser-1'] = 'pmaUser1';
|
|
$_COOKIE['pma_iv-1'] = base64_encode('testiv09testiv09');
|
|
$GLOBALS['cfg']['blowfish_secret'] = 'secret';
|
|
$_SESSION['last_access_time'] = '';
|
|
$GLOBALS['cfg']['CaptchaLoginPrivateKey'] = '';
|
|
$GLOBALS['cfg']['CaptchaLoginPublicKey'] = '';
|
|
|
|
// mock for blowfish function
|
|
$this->object = $this->getMockBuilder('PhpMyAdmin\Plugins\Auth\AuthenticationCookie')
|
|
->disableOriginalConstructor()
|
|
->setMethods(['cookieDecrypt'])
|
|
->getMock();
|
|
|
|
$this->object->expects($this->once())
|
|
->method('cookieDecrypt')
|
|
->will($this->returnValue('testBF'));
|
|
|
|
$this->assertFalse(
|
|
$this->object->readCredentials()
|
|
);
|
|
|
|
$this->assertEquals(
|
|
'testBF',
|
|
$this->object->user
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::readCredentials (mocking blowfish functions)
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testAuthCheckDecryptPassword()
|
|
{
|
|
$GLOBALS['server'] = 1;
|
|
$_REQUEST['old_usr'] = '';
|
|
$_REQUEST['pma_username'] = '';
|
|
$_COOKIE['pmaServer-1'] = 'pmaServ1';
|
|
$_COOKIE['pmaUser-1'] = 'pmaUser1';
|
|
$_COOKIE['pmaAuth-1'] = 'pmaAuth1';
|
|
$_COOKIE['pma_iv-1'] = base64_encode('testiv09testiv09');
|
|
$GLOBALS['cfg']['blowfish_secret'] = 'secret';
|
|
$GLOBALS['cfg']['CaptchaLoginPrivateKey'] = '';
|
|
$GLOBALS['cfg']['CaptchaLoginPublicKey'] = '';
|
|
$_SESSION['browser_access_time']['default'] = time() - 1000;
|
|
$GLOBALS['cfg']['LoginCookieValidity'] = 1440;
|
|
|
|
// mock for blowfish function
|
|
$this->object = $this->getMockBuilder('PhpMyAdmin\Plugins\Auth\AuthenticationCookie')
|
|
->disableOriginalConstructor()
|
|
->setMethods(['cookieDecrypt'])
|
|
->getMock();
|
|
|
|
$this->object->expects($this->at(1))
|
|
->method('cookieDecrypt')
|
|
->will($this->returnValue('{"password":""}'));
|
|
|
|
$this->assertTrue(
|
|
$this->object->readCredentials()
|
|
);
|
|
|
|
$this->assertTrue(
|
|
$GLOBALS['from_cookie']
|
|
);
|
|
|
|
$this->assertEquals(
|
|
'',
|
|
$this->object->password
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::readCredentials (mocking the object itself)
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testAuthCheckAuthFails()
|
|
{
|
|
$GLOBALS['server'] = 1;
|
|
$_REQUEST['old_usr'] = '';
|
|
$_REQUEST['pma_username'] = '';
|
|
$_COOKIE['pmaServer-1'] = 'pmaServ1';
|
|
$_COOKIE['pmaUser-1'] = 'pmaUser1';
|
|
$_COOKIE['pma_iv-1'] = base64_encode('testiv09testiv09');
|
|
$GLOBALS['cfg']['blowfish_secret'] = 'secret';
|
|
$_SESSION['last_access_time'] = 1;
|
|
$GLOBALS['cfg']['CaptchaLoginPrivateKey'] = '';
|
|
$GLOBALS['cfg']['CaptchaLoginPublicKey'] = '';
|
|
$GLOBALS['cfg']['LoginCookieValidity'] = 0;
|
|
$_SESSION['browser_access_time']['default'] = -1;
|
|
// mock for blowfish function
|
|
$this->object = $this->getMockBuilder('PhpMyAdmin\Plugins\Auth\AuthenticationCookie')
|
|
->disableOriginalConstructor()
|
|
->setMethods(['showFailure', 'cookieDecrypt'])
|
|
->getMock();
|
|
|
|
$this->object->expects($this->once())
|
|
->method('cookieDecrypt')
|
|
->will($this->returnValue('testBF'));
|
|
|
|
$this->object->expects($this->once())
|
|
->method('showFailure');
|
|
|
|
$this->assertFalse(
|
|
$this->object->readCredentials()
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::storeCredentials
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testAuthSetUser()
|
|
{
|
|
$this->object->user = 'pmaUser2';
|
|
$arr = [
|
|
'host' => 'a',
|
|
'port' => 1,
|
|
'socket' => true,
|
|
'ssl' => true,
|
|
'user' => 'pmaUser2'
|
|
];
|
|
|
|
$GLOBALS['cfg']['Server'] = $arr;
|
|
$GLOBALS['cfg']['Server']['user'] = 'pmaUser';
|
|
$GLOBALS['cfg']['Servers'][1] = $arr;
|
|
$GLOBALS['cfg']['AllowArbitraryServer'] = true;
|
|
$GLOBALS['pma_auth_server'] = 'b 2';
|
|
$this->object->password = 'testPW';
|
|
$GLOBALS['server'] = 2;
|
|
$GLOBALS['cfg']['LoginCookieStore'] = true;
|
|
$GLOBALS['from_cookie'] = true;
|
|
|
|
$this->object->storeCredentials();
|
|
|
|
$this->object->rememberCredentials();
|
|
|
|
$this->assertArrayHasKey(
|
|
'pmaUser-2',
|
|
$_COOKIE
|
|
);
|
|
|
|
$this->assertArrayHasKey(
|
|
'pmaAuth-2',
|
|
$_COOKIE
|
|
);
|
|
|
|
$arr['password'] = 'testPW';
|
|
$arr['host'] = 'b';
|
|
$arr['port'] = '2';
|
|
$this->assertEquals(
|
|
$arr,
|
|
$GLOBALS['cfg']['Server']
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::storeCredentials (check for headers redirect)
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testAuthSetUserWithHeaders()
|
|
{
|
|
$this->object->user = 'pmaUser2';
|
|
$arr = [
|
|
'host' => 'a',
|
|
'port' => 1,
|
|
'socket' => true,
|
|
'ssl' => true,
|
|
'user' => 'pmaUser2'
|
|
];
|
|
|
|
$GLOBALS['cfg']['Server'] = $arr;
|
|
$GLOBALS['cfg']['Server']['host'] = 'b';
|
|
$GLOBALS['cfg']['Server']['user'] = 'pmaUser';
|
|
$GLOBALS['cfg']['Servers'][1] = $arr;
|
|
$GLOBALS['cfg']['AllowArbitraryServer'] = true;
|
|
$GLOBALS['pma_auth_server'] = 'b 2';
|
|
$this->object->password = 'testPW';
|
|
$GLOBALS['server'] = 2;
|
|
$GLOBALS['cfg']['LoginCookieStore'] = true;
|
|
$GLOBALS['from_cookie'] = false;
|
|
|
|
$this->mockResponse(
|
|
$this->stringContains('&server=2&lang=en')
|
|
);
|
|
|
|
$this->object->storeCredentials();
|
|
$this->object->rememberCredentials();
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::showFailure
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testAuthFailsNoPass()
|
|
{
|
|
$this->object = $this->getMockBuilder('PhpMyAdmin\Plugins\Auth\AuthenticationCookie')
|
|
->disableOriginalConstructor()
|
|
->setMethods(['showLoginForm'])
|
|
->getMock();
|
|
|
|
$GLOBALS['server'] = 2;
|
|
$_COOKIE['pmaAuth-2'] = 'pass';
|
|
|
|
$this->mockResponse(
|
|
['Cache-Control: no-store, no-cache, must-revalidate'],
|
|
['Pragma: no-cache']
|
|
);
|
|
$this->object->showFailure('empty-denied');
|
|
|
|
$this->assertEquals(
|
|
$GLOBALS['conn_error'],
|
|
'Login without a password is forbidden by configuration'
|
|
. ' (see AllowNoPassword)'
|
|
);
|
|
}
|
|
|
|
/**
|
|
* @return void
|
|
*/
|
|
public function testAuthFailsDeny()
|
|
{
|
|
$this->object = $this->getMockBuilder('PhpMyAdmin\Plugins\Auth\AuthenticationCookie')
|
|
->disableOriginalConstructor()
|
|
->setMethods(['showLoginForm'])
|
|
->getMock();
|
|
|
|
$GLOBALS['server'] = 2;
|
|
$_COOKIE['pmaAuth-2'] = 'pass';
|
|
|
|
$this->mockResponse(
|
|
['Cache-Control: no-store, no-cache, must-revalidate'],
|
|
['Pragma: no-cache']
|
|
);
|
|
$this->object->showFailure('allow-denied');
|
|
|
|
$this->assertEquals(
|
|
$GLOBALS['conn_error'],
|
|
'Access denied!'
|
|
);
|
|
}
|
|
|
|
/**
|
|
* @return void
|
|
*/
|
|
public function testAuthFailsActivity()
|
|
{
|
|
$this->object = $this->getMockBuilder('PhpMyAdmin\Plugins\Auth\AuthenticationCookie')
|
|
->disableOriginalConstructor()
|
|
->setMethods(['showLoginForm'])
|
|
->getMock();
|
|
|
|
$GLOBALS['server'] = 2;
|
|
$_COOKIE['pmaAuth-2'] = 'pass';
|
|
|
|
$GLOBALS['allowDeny_forbidden'] = '';
|
|
$GLOBALS['cfg']['LoginCookieValidity'] = 10;
|
|
|
|
$this->mockResponse(
|
|
['Cache-Control: no-store, no-cache, must-revalidate'],
|
|
['Pragma: no-cache']
|
|
);
|
|
$this->object->showFailure('no-activity');
|
|
|
|
$this->assertEquals(
|
|
$GLOBALS['conn_error'],
|
|
'No activity within 10 seconds; please log in again.'
|
|
);
|
|
}
|
|
|
|
/**
|
|
* @return void
|
|
*/
|
|
public function testAuthFailsDBI()
|
|
{
|
|
$this->object = $this->getMockBuilder('PhpMyAdmin\Plugins\Auth\AuthenticationCookie')
|
|
->disableOriginalConstructor()
|
|
->setMethods(['showLoginForm'])
|
|
->getMock();
|
|
|
|
$GLOBALS['server'] = 2;
|
|
$_COOKIE['pmaAuth-2'] = 'pass';
|
|
|
|
$dbi = $this->getMockBuilder('PhpMyAdmin\DatabaseInterface')
|
|
->disableOriginalConstructor()
|
|
->getMock();
|
|
|
|
$dbi->expects($this->at(0))
|
|
->method('getError')
|
|
->will($this->returnValue(false));
|
|
|
|
$GLOBALS['dbi'] = $dbi;
|
|
$GLOBALS['errno'] = 42;
|
|
|
|
$this->mockResponse(
|
|
['Cache-Control: no-store, no-cache, must-revalidate'],
|
|
['Pragma: no-cache']
|
|
);
|
|
$this->object->showFailure('');
|
|
|
|
$this->assertEquals(
|
|
$GLOBALS['conn_error'],
|
|
'#42 Cannot log in to the MySQL server'
|
|
);
|
|
}
|
|
|
|
/**
|
|
* @return void
|
|
*/
|
|
public function testAuthFailsErrno()
|
|
{
|
|
$this->object = $this->getMockBuilder('PhpMyAdmin\Plugins\Auth\AuthenticationCookie')
|
|
->disableOriginalConstructor()
|
|
->setMethods(['showLoginForm'])
|
|
->getMock();
|
|
|
|
$dbi = $this->getMockBuilder('PhpMyAdmin\DatabaseInterface')
|
|
->disableOriginalConstructor()
|
|
->getMock();
|
|
|
|
$dbi->expects($this->at(0))
|
|
->method('getError')
|
|
->will($this->returnValue(false));
|
|
|
|
$GLOBALS['dbi'] = $dbi;
|
|
$GLOBALS['server'] = 2;
|
|
$_COOKIE['pmaAuth-2'] = 'pass';
|
|
|
|
unset($GLOBALS['errno']);
|
|
|
|
$this->mockResponse(
|
|
['Cache-Control: no-store, no-cache, must-revalidate'],
|
|
['Pragma: no-cache']
|
|
);
|
|
$this->object->showFailure('');
|
|
|
|
$this->assertEquals(
|
|
$GLOBALS['conn_error'],
|
|
'Cannot log in to the MySQL server'
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::_getEncryptionSecret
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testGetEncryptionSecretEmpty()
|
|
{
|
|
$method = new ReflectionMethod(
|
|
'PhpMyAdmin\Plugins\Auth\AuthenticationCookie',
|
|
'_getEncryptionSecret'
|
|
);
|
|
$method->setAccessible(true);
|
|
|
|
$GLOBALS['cfg']['blowfish_secret'] = '';
|
|
$_SESSION['encryption_key'] = '';
|
|
|
|
$result = $method->invoke($this->object, null);
|
|
|
|
$this->assertEquals(
|
|
$result,
|
|
$_SESSION['encryption_key']
|
|
);
|
|
|
|
$this->assertEquals(
|
|
32,
|
|
strlen($result)
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::_getEncryptionSecret
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testGetEncryptionSecretConfigured()
|
|
{
|
|
$method = new ReflectionMethod(
|
|
'PhpMyAdmin\Plugins\Auth\AuthenticationCookie',
|
|
'_getEncryptionSecret'
|
|
);
|
|
$method->setAccessible(true);
|
|
|
|
$GLOBALS['cfg']['blowfish_secret'] = 'notEmpty';
|
|
|
|
$result = $method->invoke($this->object, null);
|
|
|
|
$this->assertEquals(
|
|
'notEmpty',
|
|
$result
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::cookieEncrypt
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testCookieEncrypt()
|
|
{
|
|
$this->object->setIV('testiv09testiv09');
|
|
// works with the openssl extension active or inactive
|
|
$this->assertEquals(
|
|
'{"iv":"dGVzdGl2MDl0ZXN0aXYwOQ==","mac":"347aa45ae1ade00c980f31129ec2defef18b2bfd","payload":"YDEaxOfP9nD9q\/2pC6hjfQ=="}',
|
|
$this->object->cookieEncrypt('data123', 'sec321')
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::cookieEncrypt
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testCookieEncryptPHPSecLib()
|
|
{
|
|
$this->object->setUseOpenSSL(false);
|
|
$this->testCookieEncrypt();
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::cookieEncrypt
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testCookieEncryptOpenSSL()
|
|
{
|
|
if (! function_exists('openssl_encrypt')) {
|
|
$this->markTestSkipped('openssl not available');
|
|
}
|
|
$this->object->setUseOpenSSL(true);
|
|
$this->testCookieEncrypt();
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::cookieDecrypt
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testCookieDecrypt()
|
|
{
|
|
// works with the openssl extension active or inactive
|
|
$this->assertEquals(
|
|
'data123',
|
|
$this->object->cookieDecrypt(
|
|
'{"iv":"dGVzdGl2MDl0ZXN0aXYwOQ==","mac":"347aa45ae1ade00c980f31129ec2defef18b2bfd","payload":"YDEaxOfP9nD9q\/2pC6hjfQ=="}',
|
|
'sec321'
|
|
)
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::cookieDecrypt
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testCookieDecryptPHPSecLib()
|
|
{
|
|
$this->object->setUseOpenSSL(false);
|
|
$this->testCookieDecrypt();
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::cookieDecrypt
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testCookieDecryptOpenSSL()
|
|
{
|
|
if (! function_exists('openssl_encrypt')) {
|
|
$this->markTestSkipped('openssl not available');
|
|
}
|
|
$this->object->setUseOpenSSL(true);
|
|
$this->testCookieDecrypt();
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationConfig::cookieDecrypt
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testCookieDecryptInvalid()
|
|
{
|
|
// works with the openssl extension active or inactive
|
|
$this->assertEquals(
|
|
false,
|
|
$this->object->cookieDecrypt(
|
|
'{"iv":0,"mac":0,"payload":0}',
|
|
'sec321'
|
|
)
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for secret splitting using getAESSecret
|
|
*
|
|
* @param string $secret secret
|
|
* @param string $mac mac
|
|
* @param string $aes aes
|
|
*
|
|
* @return void
|
|
*
|
|
* @dataProvider secretsProvider
|
|
*/
|
|
public function testMACSecretSplit($secret, $mac, $aes)
|
|
{
|
|
$this->assertEquals(
|
|
$mac,
|
|
$this->object->getMACSecret($secret)
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Test for secret splitting using getMACSecret and getAESSecret
|
|
*
|
|
* @param string $secret secret
|
|
* @param string $mac mac
|
|
* @param string $aes aes
|
|
*
|
|
* @return void
|
|
*
|
|
* @dataProvider secretsProvider
|
|
*/
|
|
public function testAESSecretSplit($secret, $mac, $aes)
|
|
{
|
|
$this->assertEquals(
|
|
$aes,
|
|
$this->object->getAESSecret($secret)
|
|
);
|
|
}
|
|
|
|
/**
|
|
* @throws \ReflectionException
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testPasswordChange()
|
|
{
|
|
$newPassword = 'PMAPASSWD2';
|
|
$GLOBALS['cfg']['AllowArbitraryServer'] = true;
|
|
$GLOBALS['pma_auth_server'] = 'b 2';
|
|
$_SESSION['encryption_key'] = '';
|
|
$this->object->setIV('testiv09testiv09');
|
|
|
|
$this->object->handlePasswordChange($newPassword);
|
|
|
|
$payload = [
|
|
'password' => $newPassword,
|
|
'server' => 'b 2'
|
|
];
|
|
$method = new ReflectionMethod(
|
|
'PhpMyAdmin\Plugins\Auth\AuthenticationCookie',
|
|
'_getSessionEncryptionSecret'
|
|
);
|
|
$method->setAccessible(true);
|
|
|
|
$encryptedCookie = $this->object->cookieEncrypt(
|
|
json_encode($payload),
|
|
$method->invoke($this->object, null)
|
|
);
|
|
$this->assertEquals(
|
|
$_COOKIE['pmaAuth-' . $GLOBALS['server']],
|
|
$encryptedCookie
|
|
);
|
|
}
|
|
/**
|
|
* Data provider for secrets splitting.
|
|
*
|
|
* @return array
|
|
*/
|
|
public function secretsProvider()
|
|
{
|
|
return [
|
|
// Optimal case
|
|
[
|
|
'1234567890123456abcdefghijklmnop',
|
|
'1234567890123456',
|
|
'abcdefghijklmnop',
|
|
],
|
|
// Overlapping secret
|
|
[
|
|
'12345678901234567',
|
|
'1234567890123456',
|
|
'2345678901234567',
|
|
],
|
|
// Short secret
|
|
[
|
|
'1234567890123456',
|
|
'1234567890123451',
|
|
'2345678901234562',
|
|
],
|
|
// Really short secret
|
|
[
|
|
'12',
|
|
'1111111111111111',
|
|
'2222222222222222',
|
|
],
|
|
// Too short secret
|
|
[
|
|
'1',
|
|
'1111111111111111',
|
|
'1111111111111111',
|
|
],
|
|
];
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationCookie::authenticate
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testAuthenticate()
|
|
{
|
|
$GLOBALS['cfg']['CaptchaLoginPrivateKey'] = '';
|
|
$GLOBALS['cfg']['CaptchaLoginPublicKey'] = '';
|
|
$GLOBALS['cfg']['Server']['AllowRoot'] = false;
|
|
$GLOBALS['cfg']['Server']['AllowNoPassword'] = false;
|
|
$_REQUEST['old_usr'] = '';
|
|
$_REQUEST['pma_username'] = 'testUser';
|
|
$_REQUEST['pma_password'] = 'testPassword';
|
|
|
|
ob_start();
|
|
$this->object->authenticate();
|
|
$result = ob_get_clean();
|
|
|
|
/* Nothing should be printed */
|
|
$this->assertEquals('', $result);
|
|
|
|
/* Verify readCredentials worked */
|
|
$this->assertEquals('testUser', $this->object->user);
|
|
$this->assertEquals('testPassword', $this->object->password);
|
|
|
|
/* Verify storeCredentials worked */
|
|
$this->assertEquals('testUser', $GLOBALS['cfg']['Server']['user']);
|
|
$this->assertEquals('testPassword', $GLOBALS['cfg']['Server']['password']);
|
|
}
|
|
|
|
/**
|
|
* Test for PhpMyAdmin\Plugins\Auth\AuthenticationCookie::checkRules
|
|
*
|
|
* @param string $user user
|
|
* @param string $pass pass
|
|
* @param string $ip ip
|
|
* @param bool $root root
|
|
* @param bool $nopass nopass
|
|
* @param array $rules rules
|
|
* @param string $expected expected result
|
|
*
|
|
* @return void
|
|
*
|
|
* @dataProvider checkRulesProvider
|
|
*/
|
|
public function testCheckRules($user, $pass, $ip, $root, $nopass, $rules, $expected)
|
|
{
|
|
$this->object->user = $user;
|
|
$this->object->password = $pass;
|
|
$this->object->storeCredentials();
|
|
|
|
$_SERVER['REMOTE_ADDR'] = $ip;
|
|
|
|
$GLOBALS['cfg']['Server']['AllowRoot'] = $root;
|
|
$GLOBALS['cfg']['Server']['AllowNoPassword'] = $nopass;
|
|
$GLOBALS['cfg']['Server']['AllowDeny'] = $rules;
|
|
|
|
if (! empty($expected)) {
|
|
$this->getAuthErrorMockResponse();
|
|
}
|
|
|
|
ob_start();
|
|
$this->object->checkRules();
|
|
$result = ob_get_clean();
|
|
|
|
if (empty($expected)) {
|
|
$this->assertEquals($expected, $result);
|
|
} else {
|
|
$this->assertContains($expected, $result);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @return array
|
|
*/
|
|
public function checkRulesProvider()
|
|
{
|
|
return [
|
|
'nopass-ok' => [
|
|
'testUser',
|
|
'',
|
|
'1.2.3.4',
|
|
true,
|
|
true,
|
|
[],
|
|
'',
|
|
],
|
|
'nopass' => [
|
|
'testUser',
|
|
'',
|
|
'1.2.3.4',
|
|
true,
|
|
false,
|
|
[],
|
|
'Login without a password is forbidden',
|
|
],
|
|
'root-ok' => [
|
|
'root',
|
|
'root',
|
|
'1.2.3.4',
|
|
true,
|
|
true,
|
|
[],
|
|
'',
|
|
],
|
|
'root' => [
|
|
'root',
|
|
'root',
|
|
'1.2.3.4',
|
|
false,
|
|
true,
|
|
[],
|
|
'Access denied!',
|
|
],
|
|
'rules-deny-allow-ok' => [
|
|
'root',
|
|
'root',
|
|
'1.2.3.4',
|
|
true,
|
|
true,
|
|
[
|
|
'order' => 'deny,allow',
|
|
'rules' => [
|
|
'allow root 1.2.3.4',
|
|
'deny % from all',
|
|
],
|
|
],
|
|
'',
|
|
],
|
|
'rules-deny-allow-reject' => [
|
|
'user',
|
|
'root',
|
|
'1.2.3.4',
|
|
true,
|
|
true,
|
|
[
|
|
'order' => 'deny,allow',
|
|
'rules' => [
|
|
'allow root 1.2.3.4',
|
|
'deny % from all',
|
|
],
|
|
],
|
|
'Access denied!',
|
|
],
|
|
'rules-allow-deny-ok' => [
|
|
'root',
|
|
'root',
|
|
'1.2.3.4',
|
|
true,
|
|
true,
|
|
[
|
|
'order' => 'allow,deny',
|
|
'rules' => [
|
|
'deny user from all',
|
|
'allow root 1.2.3.4',
|
|
],
|
|
],
|
|
'',
|
|
],
|
|
'rules-allow-deny-reject' => [
|
|
'user',
|
|
'root',
|
|
'1.2.3.4',
|
|
true,
|
|
true,
|
|
[
|
|
'order' => 'allow,deny',
|
|
'rules' => [
|
|
'deny user from all',
|
|
'allow root 1.2.3.4',
|
|
],
|
|
],
|
|
'Access denied!',
|
|
],
|
|
'rules-explicit-ok' => [
|
|
'root',
|
|
'root',
|
|
'1.2.3.4',
|
|
true,
|
|
true,
|
|
[
|
|
'order' => 'explicit',
|
|
'rules' => [
|
|
'deny user from all',
|
|
'allow root 1.2.3.4',
|
|
],
|
|
],
|
|
'',
|
|
],
|
|
'rules-explicit-reject' => [
|
|
'user',
|
|
'root',
|
|
'1.2.3.4',
|
|
true,
|
|
true,
|
|
[
|
|
'order' => 'explicit',
|
|
'rules' => [
|
|
'deny user from all',
|
|
'allow root 1.2.3.4',
|
|
],
|
|
],
|
|
'Access denied!',
|
|
],
|
|
];
|
|
}
|
|
}
|
