View source
<?php
namespace Drupal\Tests\system\Functional\Session;
use Drupal\Component\Render\FormattableMarkup;
use Drupal\Core\Database\Database;
use Drupal\Tests\BrowserTestBase;
class SessionTest extends BrowserTestBase {
public static $modules = [
'session_test',
];
protected $defaultTheme = 'stark';
protected $dumpHeaders = TRUE;
public function testSessionSaveRegenerate() {
$session_handler = $this->container
->get('session_handler.write_safe');
$this
->assertTrue($session_handler
->isSessionWritable(), 'session_handler->isSessionWritable() initially returns TRUE.');
$session_handler
->setSessionWritable(FALSE);
$this
->assertFalse($session_handler
->isSessionWritable(), '$session_handler->isSessionWritable() returns FALSE after disabling.');
$session_handler
->setSessionWritable(TRUE);
$this
->assertTrue($session_handler
->isSessionWritable(), '$session_handler->isSessionWritable() returns TRUE after enabling.');
$user = $this
->drupalCreateUser();
$this
->sessionReset();
$this
->drupalGet('session-test/set-message');
$this
->assertSessionCookie(TRUE);
$this
->assertRegExp('/HttpOnly/i', $this
->drupalGetHeader('Set-Cookie', TRUE), 'Session cookie is set as HttpOnly.');
$user->name = 'session_test_user';
$user
->save();
$this
->drupalGet('session-test/id');
$matches = [];
preg_match('/\\s*session_id:(.*)\\n/', $this
->getSession()
->getPage()
->getContent(), $matches);
$this
->assertTrue(!empty($matches[1]), 'Found session ID before logging in.');
$original_session = $matches[1];
$edit = [
'name' => $user
->getAccountName(),
'pass' => $user->passRaw,
];
$this
->drupalPostForm('user/login', $edit, t('Log in'));
$this
->drupalGet('user');
$pass = $this
->assertText($user
->getAccountName(), new FormattableMarkup('Found name: %name', [
'%name' => $user
->getAccountName(),
]), 'User login');
$this->_logged_in = $pass;
$this
->drupalGet('session-test/id');
$matches = [];
preg_match('/\\s*session_id:(.*)\\n/', $this
->getSession()
->getPage()
->getContent(), $matches);
$this
->assertTrue(!empty($matches[1]), 'Found session ID after logging in.');
$this
->assertTrue($matches[1] != $original_session, 'Session ID changed after login.');
}
public function testDataPersistence() {
$user = $this
->drupalCreateUser([]);
$this
->sessionReset($user
->id());
$this
->drupalLogin($user);
$value_1 = $this
->randomMachineName();
$this
->drupalGet('session-test/set/' . $value_1);
$this
->assertText($value_1, 'The session value was stored.', 'Session');
$this
->drupalGet('session-test/get');
$this
->assertText($value_1, 'Session correctly returned the stored data for an authenticated user.', 'Session');
$value_2 = $this
->randomMachineName();
$this
->drupalGet('session-test/no-set/' . $value_2);
$session = $this
->getSession();
$this
->assertText($value_2, 'The session value was correctly passed to session-test/no-set.', 'Session');
$this
->drupalGet('session-test/get');
$this
->assertText($value_1, 'Session data is not saved for drupal_save_session(FALSE).', 'Session');
$session_cookie_name = $this
->getSessionName();
$session_cookie_value = $session
->getCookie($session_cookie_name);
$session
->restart();
$this
->initFrontPage();
$session
->setCookie($session_cookie_name, $session_cookie_value);
$this
->drupalGet('session-test/get');
$this
->assertText($value_1, 'Session data persists through browser close.', 'Session');
$this->mink
->setDefaultSessionName('default');
$this
->drupalLogout();
$this
->sessionReset();
$this
->drupalGet('session-test/get');
$this
->assertNoText($value_1, "After logout, previous user's session data is not available.", 'Session');
$value_3 = $this
->randomMachineName();
$this
->drupalGet('session-test/set/' . $value_3);
$this
->assertText($value_3, 'Session data stored for anonymous user.', 'Session');
$this
->drupalGet('session-test/get');
$this
->assertText($value_3, 'Session correctly returned the stored data for an anonymous user.', 'Session');
$value_4 = $this
->randomMachineName();
$this
->drupalGet('session-test/no-set/' . $value_4);
$this
->assertText($value_4, 'The session value was correctly passed to session-test/no-set.', 'Session');
$this
->drupalGet('session-test/get');
$this
->assertText($value_3, 'Session data is not saved for drupal_save_session(FALSE).', 'Session');
$this
->drupalLogin($user);
$this
->sessionReset($user
->id());
$this
->drupalGet('session-test/get');
$this
->assertNoText($value_1, 'Session has persisted for an authenticated user after logging out and then back in.', 'Session');
$user2 = $this
->drupalCreateUser([]);
$this
->sessionReset($user2
->id());
$this
->drupalLogin($user2);
}
public function testSessionPersistenceOnLogin() {
$user = $this
->drupalCreateUser();
$this
->drupalLogin($user);
$this
->drupalGet('session-test/get-from-session-object');
$this
->assertText('foobar', 'Session data is saved in Session() object.', 'Session');
}
public function testEmptyAnonymousSession() {
$this->container
->get('module_installer')
->uninstall([
'dynamic_page_cache',
]);
$this->container
->get('module_installer')
->uninstall([
'page_cache',
]);
$this
->drupalGet('');
$this
->assertSessionCookie(FALSE);
$this
->assertSessionEmpty(TRUE);
$this->container
->get('module_installer')
->install([
'page_cache',
]);
$config = $this
->config('system.performance');
$config
->set('cache.page.max_age', 300);
$config
->save();
$this
->drupalGet('');
$this
->assertSessionCookie(FALSE);
$this
->assertEqual($this
->drupalGetHeader('X-Drupal-Cache'), 'MISS', 'Page was not cached.');
$this
->drupalGet('session-test/set-message');
$this
->assertSessionCookie(TRUE);
$this
->assertNotEmpty($this
->drupalGetHeader('Set-Cookie'), 'New session was started.');
$this
->drupalGet('');
$this
->assertSessionCookie(FALSE);
$this
->assertSessionEmpty(FALSE);
$this
->assertNull($this
->drupalGetHeader('X-Drupal-Cache'), 'Caching was bypassed.');
$this
->assertText(t('This is a dummy message.'), 'Message was displayed.');
$this
->assertRegExp('/SESS\\w+=deleted/', $this
->drupalGetHeader('Set-Cookie'), 'Session cookie was deleted.');
$this
->drupalGet('');
$this
->assertSessionCookie(FALSE);
$this
->assertNoText(t('This is a dummy message.'), 'Message was not cached.');
$this
->assertEqual($this
->drupalGetHeader('X-Drupal-Cache'), 'HIT', 'Page was cached.');
$this
->assertNull($this
->drupalGetHeader('Set-Cookie'), 'New session was not started.');
$this
->drupalGet('session-test/set-message-but-do-not-save');
$this
->assertSessionCookie(FALSE);
$this
->assertSessionEmpty(TRUE);
$this
->drupalGet('');
$this
->assertSessionCookie(FALSE);
$this
->assertNoText(t('This is a dummy message.'), 'The message was not saved.');
}
public function testSessionWrite() {
$user = $this
->drupalCreateUser([]);
$this
->drupalLogin($user);
$connection = Database::getConnection();
$query = $connection
->select('users_field_data', 'u');
$query
->innerJoin('sessions', 's', 'u.uid = s.uid');
$query
->fields('u', [
'access',
])
->fields('s', [
'timestamp',
])
->condition('u.uid', $user
->id());
$times1 = $query
->execute()
->fetchObject();
sleep(1);
$this
->drupalGet('session-test/set/foo');
$times2 = $query
->execute()
->fetchObject();
$this
->assertEqual($times2->access, $times1->access, 'Users table was not updated.');
$this
->assertNotEqual($times2->timestamp, $times1->timestamp, 'Sessions table was updated.');
sleep(1);
$this
->drupalGet('session-test/set/foo');
$times3 = $query
->execute()
->fetchObject();
$this
->assertEqual($times3->access, $times1->access, 'Users table was not updated.');
$this
->assertEqual($times3->timestamp, $times2->timestamp, 'Sessions table was not updated.');
sleep(1);
$this
->drupalGet('');
$times4 = $query
->execute()
->fetchObject();
$this
->assertEqual($times4->access, $times3->access, 'Users table was not updated.');
$this
->assertEqual($times4->timestamp, $times3->timestamp, 'Sessions table was not updated.');
$settings['settings']['session_write_interval'] = (object) [
'value' => 0,
'required' => TRUE,
];
$this
->writeSettings($settings);
$this
->drupalGet('');
$times5 = $query
->execute()
->fetchObject();
$this
->assertNotEqual($times5->access, $times4->access, 'Users table was updated.');
$this
->assertNotEqual($times5->timestamp, $times4->timestamp, 'Sessions table was updated.');
}
public function testEmptySessionID() {
$user = $this
->drupalCreateUser([]);
$this
->drupalLogin($user);
$this
->drupalGet('session-test/is-logged-in');
$this
->assertSession()
->statusCodeEquals(200);
Database::getConnection()
->update('sessions')
->fields([
'sid' => '',
])
->condition('uid', $user
->id())
->execute();
$this->mink
->resetSessions();
$this
->drupalGet('session-test/id-from-cookie');
$this
->assertRaw("session_id:\n", 'Session ID is blank as sent from cookie header.');
$this
->drupalGet('session-test/is-logged-in');
$this
->assertSession()
->statusCodeEquals(403);
}
public function testSessionBag() {
$this
->drupalGet('/session-test/has-bag-flag');
$this
->assertSessionCookie(FALSE);
$this
->assertSessionEmpty(TRUE);
$this
->assertSession()
->statusCodeEquals(200);
$this
->drupalGet('/session-test/set-bag-flag');
$this
->assertSessionCookie(TRUE);
$this
->assertSessionEmpty(TRUE);
$this
->assertSession()
->statusCodeEquals(200);
$this
->drupalGet('/session-test/has-bag-flag');
$this
->assertSessionCookie(TRUE);
$this
->assertSessionEmpty(FALSE);
$this
->assertSession()
->statusCodeEquals(200);
$this
->drupalGet('/session-test/clear-bag-flag');
$this
->assertSessionCookie(FALSE);
$this
->assertSessionEmpty(FALSE);
$this
->assertSession()
->statusCodeEquals(200);
$this
->drupalGet('/session-test/has-bag-flag');
$this
->assertSessionCookie(FALSE);
$this
->assertSessionEmpty(TRUE);
$this
->assertSession()
->statusCodeEquals(200);
}
public function sessionReset() {
$this->mink
->resetSessions();
$this->loggedInUser = FALSE;
$this
->drupalGet('session-test/get');
$this
->assertSession()
->statusCodeEquals(200);
}
public function assertSessionCookie($sent) {
if ($sent) {
$this
->assertNotEmpty($this
->getSessionCookies()
->count(), 'Session cookie was sent.');
}
else {
$this
->assertEmpty($this
->getSessionCookies()
->count(), 'Session cookie was not sent.');
}
}
public function assertSessionEmpty($empty) {
if ($empty) {
$this
->assertIdentical($this
->drupalGetHeader('X-Session-Empty'), '1', 'Session was empty.');
}
else {
$this
->assertIdentical($this
->drupalGetHeader('X-Session-Empty'), '0', 'Session was not empty.');
}
}
}