osu-web / tests / Controllers / Passport / AuthorizationControllerTest.php

<?php

// Copyright (c) ppy Pty Ltd <[e-mail]>. Licensed under the GNU Affero General Public License v3.0.
// See the LICENCE file in the repository root for full licence text.

namespace Tests\Controllers\Passport;

use App\Http\Controllers\Passport\AuthorizationController;
use App\Models\OAuth\Client;
use Illuminate\Contracts\Auth\StatefulGuard;
use Laravel\Passport\Contracts\AuthorizationViewResponse;
use League\OAuth2\Server\AuthorizationServer;
use Mockery;
use Nyholm\Psr7\Factory\Psr17Factory;
use Tests\TestCase;

class AuthorizationControllerTest extends TestCase
{
    private $controller;

    public function testAuthorizeNormalizes()
    {
        $client = Client::factory()->create();

        $request = (new Psr17Factory())
            ->createServerRequest('GET', $GLOBALS['cfg']['app']['url'].'/oauth/authorize')
            ->withQueryParams(['client_id' => $client->getKey(), 'scope' => 'one two three']);

        $actual = $this->invokeMethod($this->controller, 'normalizeRequestScopes', [$request])->getQueryParams()['scope'];

        $this->assertSame($actual, 'identify one three two');
    }

    public function testNormalizeEmptyScopes()
    {
        $scopes = [];
        $actual = $this->invokeMethod($this->controller, 'normalizeScopes', [$scopes]);

        $this->assertSame($actual, ['identify']);
    }

    public function testNormalizeIdentifyScope()
    {
        $scopes = ['identify'];
        $actual = $this->invokeMethod($this->controller, 'normalizeScopes', [$scopes]);

        $this->assertSame($actual, ['identify']);
    }

    public function testNormalizeMultipleScopes()
    {
        $scopes = ['read', 'identify'];
        $actual = $this->invokeMethod($this->controller, 'normalizeScopes', [$scopes]);

        $this->assertSame($actual, ['identify', 'read']);
    }

    public function testNormalizeIdentifyNotRequested()
    {
        $scopes = ['read'];
        $actual = $this->invokeMethod($this->controller, 'normalizeScopes', [$scopes]);

        $this->assertSame($actual, ['identify', 'read']);
    }

    protected function setUp(): void
    {
        parent::setUp();

        $this->controller = new AuthorizationController(
            Mockery::mock(AuthorizationServer::class),
            Mockery::mock(StatefulGuard::class),
            Mockery::mock(AuthorizationViewResponse::class),
        );
    }

    protected function tearDown(): void
    {
        parent::tearDown();

        Mockery::close();
    }
}