View source
<?php
namespace Drupal\Tests\system\Functional\Session;
use Drupal\Core\Database\Database;
use Drupal\Tests\BrowserTestBase;
class SessionTest extends BrowserTestBase {
protected static $modules = [
'session_test',
];
protected $defaultTheme = 'stark';
protected $dumpHeaders = TRUE;
public function testSessionSaveRegenerate() {
$session_handler = $this->container
->get('session_handler.write_safe');
$this
->assertTrue($session_handler
->isSessionWritable(), 'session_handler->isSessionWritable() initially returns TRUE.');
$session_handler
->setSessionWritable(FALSE);
$this
->assertFalse($session_handler
->isSessionWritable(), '$session_handler->isSessionWritable() returns FALSE after disabling.');
$session_handler
->setSessionWritable(TRUE);
$this
->assertTrue($session_handler
->isSessionWritable(), '$session_handler->isSessionWritable() returns TRUE after enabling.');
$user = $this
->drupalCreateUser();
$this
->sessionReset();
$this
->drupalGet('session-test/set-message');
$this
->assertSessionCookie(TRUE);
$this
->assertSession()
->responseHeaderMatches('Set-Cookie', '/HttpOnly/i');
$user->name = 'session_test_user';
$user
->save();
$this
->drupalGet('session-test/id');
$matches = [];
preg_match('/\\s*session_id:(.*)\\n/', $this
->getSession()
->getPage()
->getContent(), $matches);
$this
->assertTrue(!empty($matches[1]), 'Found session ID before logging in.');
$original_session = $matches[1];
$edit = [
'name' => $user
->getAccountName(),
'pass' => $user->passRaw,
];
$this
->drupalGet('user/login');
$this
->submitForm($edit, 'Log in');
$this
->drupalGet('user');
$this
->assertSession()
->pageTextContains($user
->getAccountName());
$this
->drupalGet('session-test/id');
$matches = [];
preg_match('/\\s*session_id:(.*)\\n/', $this
->getSession()
->getPage()
->getContent(), $matches);
$this
->assertTrue(!empty($matches[1]), 'Found session ID after logging in.');
$this
->assertNotSame($original_session, $matches[1], 'Session ID changed after login.');
}
public function testDataPersistence() {
$user = $this
->drupalCreateUser([]);
$this
->sessionReset($user
->id());
$this
->drupalLogin($user);
$value_1 = $this
->randomMachineName();
$this
->drupalGet('session-test/set/' . $value_1);
$this
->assertSession()
->pageTextContains($value_1);
$this
->drupalGet('session-test/get');
$this
->assertSession()
->pageTextContains($value_1);
$value_2 = $this
->randomMachineName();
$this
->drupalGet('session-test/no-set/' . $value_2);
$session = $this
->getSession();
$this
->assertSession()
->pageTextContains($value_2);
$this
->drupalGet('session-test/get');
$this
->assertSession()
->pageTextContains($value_1);
$session_cookie_name = $this
->getSessionName();
$session_cookie_value = $session
->getCookie($session_cookie_name);
$session
->restart();
$this
->initFrontPage();
$session
->setCookie($session_cookie_name, $session_cookie_value);
$this
->drupalGet('session-test/get');
$this
->assertSession()
->pageTextContains($value_1);
$this->mink
->setDefaultSessionName('default');
$this
->drupalLogout();
$this
->sessionReset();
$this
->drupalGet('session-test/get');
$this
->assertSession()
->pageTextNotContains($value_1);
$value_3 = $this
->randomMachineName();
$this
->drupalGet('session-test/set/' . $value_3);
$this
->assertSession()
->pageTextContains($value_3);
$this
->drupalGet('session-test/get');
$this
->assertSession()
->pageTextContains($value_3);
$value_4 = $this
->randomMachineName();
$this
->drupalGet('session-test/no-set/' . $value_4);
$this
->assertSession()
->pageTextContains($value_4);
$this
->drupalGet('session-test/get');
$this
->assertSession()
->pageTextContains($value_3);
$this
->drupalLogin($user);
$this
->sessionReset($user
->id());
$this
->drupalGet('session-test/get');
$this
->assertSession()
->pageTextNotContains($value_1);
$user2 = $this
->drupalCreateUser([]);
$this
->sessionReset($user2
->id());
$this
->drupalLogin($user2);
}
public function testSessionPersistenceOnLogin() {
$user = $this
->drupalCreateUser();
$this
->drupalLogin($user);
$this
->drupalGet('session-test/get-from-session-object');
$this
->assertSession()
->pageTextContains('foobar');
}
public function testEmptyAnonymousSession() {
$this->container
->get('module_installer')
->uninstall([
'dynamic_page_cache',
]);
$this->container
->get('module_installer')
->uninstall([
'page_cache',
]);
$this
->drupalGet('');
$this
->assertSessionCookie(FALSE);
$this
->assertSessionEmpty(TRUE);
$this->container
->get('module_installer')
->install([
'page_cache',
]);
$config = $this
->config('system.performance');
$config
->set('cache.page.max_age', 300);
$config
->save();
$this
->drupalGet('');
$this
->assertSessionCookie(FALSE);
$this
->assertSession()
->responseHeaderEquals('X-Drupal-Cache', 'MISS');
$this
->drupalGet('session-test/set-message');
$this
->assertSessionCookie(TRUE);
$this
->assertNotNull($this
->getSession()
->getResponseHeader('Set-Cookie'));
$this
->drupalGet('');
$this
->assertSessionCookie(FALSE);
$this
->assertSessionEmpty(FALSE);
$this
->assertSession()
->responseHeaderDoesNotExist('X-Drupal-Cache');
$this
->assertSession()
->pageTextContains('This is a dummy message.');
$this
->assertSession()
->responseHeaderMatches('Set-Cookie', '/SESS\\w+=deleted/');
$this
->drupalGet('');
$this
->assertSessionCookie(FALSE);
$this
->assertSession()
->pageTextNotContains('This is a dummy message.');
$this
->assertSession()
->responseHeaderEquals('X-Drupal-Cache', 'HIT');
$this
->assertSession()
->responseHeaderDoesNotExist('Set-Cookie');
$this
->drupalGet('session-test/set-message-but-do-not-save');
$this
->assertSessionCookie(FALSE);
$this
->assertSessionEmpty(TRUE);
$this
->drupalGet('');
$this
->assertSessionCookie(FALSE);
$this
->assertSession()
->pageTextNotContains('This is a dummy message.');
}
public function testSessionWrite() {
$user = $this
->drupalCreateUser([]);
$this
->drupalLogin($user);
$connection = Database::getConnection();
$query = $connection
->select('users_field_data', 'u');
$query
->innerJoin('sessions', 's', '[u].[uid] = [s].[uid]');
$query
->fields('u', [
'access',
])
->fields('s', [
'timestamp',
])
->condition('u.uid', $user
->id());
$times1 = $query
->execute()
->fetchObject();
sleep(1);
$this
->drupalGet('session-test/set/foo');
$times2 = $query
->execute()
->fetchObject();
$this
->assertEquals($times1->access, $times2->access, 'Users table was not updated.');
$this
->assertNotEquals($times1->timestamp, $times2->timestamp, 'Sessions table was updated.');
sleep(1);
$this
->drupalGet('session-test/set/foo');
$times3 = $query
->execute()
->fetchObject();
$this
->assertEquals($times1->access, $times3->access, 'Users table was not updated.');
$this
->assertEquals($times2->timestamp, $times3->timestamp, 'Sessions table was not updated.');
sleep(1);
$this
->drupalGet('');
$times4 = $query
->execute()
->fetchObject();
$this
->assertEquals($times3->access, $times4->access, 'Users table was not updated.');
$this
->assertEquals($times3->timestamp, $times4->timestamp, 'Sessions table was not updated.');
$settings['settings']['session_write_interval'] = (object) [
'value' => 0,
'required' => TRUE,
];
$this
->writeSettings($settings);
$this
->drupalGet('');
$times5 = $query
->execute()
->fetchObject();
$this
->assertNotEquals($times4->access, $times5->access, 'Users table was updated.');
$this
->assertNotEquals($times4->timestamp, $times5->timestamp, 'Sessions table was updated.');
}
public function testEmptySessionID() {
$user = $this
->drupalCreateUser([]);
$this
->drupalLogin($user);
$this
->drupalGet('session-test/is-logged-in');
$this
->assertSession()
->statusCodeEquals(200);
Database::getConnection()
->update('sessions')
->fields([
'sid' => '',
])
->condition('uid', $user
->id())
->execute();
$this->mink
->resetSessions();
$this
->drupalGet('session-test/id-from-cookie');
$this
->assertSession()
->responseContains("session_id:\n");
$this
->drupalGet('session-test/is-logged-in');
$this
->assertSession()
->statusCodeEquals(403);
}
public function testSessionBag() {
$this
->drupalGet('/session-test/has-bag-flag');
$this
->assertSessionCookie(FALSE);
$this
->assertSessionEmpty(TRUE);
$this
->assertSession()
->statusCodeEquals(200);
$this
->drupalGet('/session-test/set-bag-flag');
$this
->assertSessionCookie(TRUE);
$this
->assertSessionEmpty(TRUE);
$this
->assertSession()
->statusCodeEquals(200);
$this
->drupalGet('/session-test/has-bag-flag');
$this
->assertSessionCookie(TRUE);
$this
->assertSessionEmpty(FALSE);
$this
->assertSession()
->statusCodeEquals(200);
$this
->drupalGet('/session-test/clear-bag-flag');
$this
->assertSessionCookie(FALSE);
$this
->assertSessionEmpty(FALSE);
$this
->assertSession()
->statusCodeEquals(200);
$this
->drupalGet('/session-test/has-bag-flag');
$this
->assertSessionCookie(FALSE);
$this
->assertSessionEmpty(TRUE);
$this
->assertSession()
->statusCodeEquals(200);
}
public function sessionReset() {
$this->mink
->resetSessions();
$this->loggedInUser = FALSE;
$this
->drupalGet('session-test/get');
$this
->assertSession()
->statusCodeEquals(200);
}
public function assertSessionCookie($sent) {
if ($sent) {
$this
->assertNotEmpty($this
->getSessionCookies()
->count(), 'Session cookie was sent.');
}
else {
$this
->assertEmpty($this
->getSessionCookies()
->count(), 'Session cookie was not sent.');
}
}
public function assertSessionEmpty($empty) {
if ($empty) {
$this
->assertSession()
->responseHeaderEquals('X-Session-Empty', '1');
}
else {
$this
->assertSession()
->responseHeaderEquals('X-Session-Empty', '0');
}
}
}