public function CasAttributesSubscriberTest::testDenyRegistrationOnNoRoleMatch in CAS Attributes 8

Same name and namespace in other branches

1. 2.x tests/src/Unit/Subscriber/CasAttributesSubscriberTest.php \Drupal\Tests\cas_attributes\Unit\Subscriber\CasAttributesSubscriberTest::testDenyRegistrationOnNoRoleMatch()

Verifies the 'deny registration feature' when no roles map to user.

File

tests/src/Unit/Subscriber/CasAttributesSubscriberTest.php, line 180

Class

CasAttributesSubscriberTest

CasAttributesSubscriber unit tests.

Namespace

Drupal\Tests\cas_attributes\Unit\Subscriber

Code

public function testDenyRegistrationOnNoRoleMatch() {

  // Set up a role/attr mapping config and configure CAS Attributes to DENY
  // registration when no role/attr mapping can be established for a user.
  $roleMapping = [
    [
      'rid' => $this
        ->randomMachineName(8),
      'method' => 'exact_any',
      'attribute' => 'fruit',
      'value' => 'apple',
      'remove_without_match' => FALSE,
    ],
  ];
  $config_factory = $this
    ->getConfigFactoryStub([
    'cas_attributes.settings' => [
      'role.sync_frequency' => CasAttributesSettings::SYNC_FREQUENCY_EVERY_LOGIN,
      'role.deny_registration_no_match' => TRUE,
      'role.mappings' => $roleMapping,
    ],
  ]);

  // Give the user an attribute that does not match our role mapping.
  $propertyBag = new CasPropertyBag('test');
  $propertyBag
    ->setAttribute('fruit', [
    'orange',
  ]);

  // Now call the preRegister method and confirm that the user would be
  // denied registration.
  $preRegisterEvent = new CasPreRegisterEvent($propertyBag);
  $subscriber = new CasAttributesSubscriber($config_factory, $this->tokenService, $this->requestStack);
  $subscriber
    ->onPreRegister($preRegisterEvent);
  $this
    ->assertFalse($preRegisterEvent
    ->getAllowAutomaticRegistration());

  // Give the user an attribute that maps to one of the roles, and confirm
  // they are no longer denied.
  $propertyBag = new CasPropertyBag('test');
  $propertyBag
    ->setAttribute('fruit', [
    'apple',
  ]);
  $preRegisterEvent = new CasPreRegisterEvent($propertyBag);
  $subscriber = new CasAttributesSubscriber($config_factory, $this->tokenService, $this->requestStack);
  $subscriber
    ->onPreRegister($preRegisterEvent);
  $this
    ->assertTrue($preRegisterEvent
    ->getAllowAutomaticRegistration());

  // Update configuration so that registration will not be denied when no role
  // mapping match exists.
  $config_factory = $this
    ->getConfigFactoryStub([
    'cas_attributes.settings' => [
      'role.deny_registration_no_match' => FALSE,
      'role.role_mapping' => $roleMapping,
    ],
  ]);

  // Give a user an incorrect attribute value, and confirm they can still
  // register.
  $propertyBag = new CasPropertyBag('test');
  $propertyBag
    ->setAttribute('fruit', [
    'orange',
  ]);
  $preRegisterEvent = new CasPreRegisterEvent($propertyBag);
  $subscriber = new CasAttributesSubscriber($config_factory, $this->tokenService, $this->requestStack);
  $subscriber
    ->onPreRegister($preRegisterEvent);
  $this
    ->assertTrue($preRegisterEvent
    ->getAllowAutomaticRegistration());
}