You are here

UserValidationTest.php in Drupal 8

Same filename and directory in other branches
  1. 9 core/modules/user/tests/src/Kernel/UserValidationTest.php

File

core/modules/user/tests/src/Kernel/UserValidationTest.php
View source
<?php

namespace Drupal\Tests\user\Kernel;

use Drupal\Core\Entity\EntityInterface;
use Drupal\Core\Language\Language;
use Drupal\Core\Render\Element\Email;
use Drupal\KernelTests\KernelTestBase;
use Drupal\user\Entity\Role;
use Drupal\user\Entity\User;
use Drupal\user\UserInterface;

/**
 * Verify that user validity checks behave as designed.
 *
 * @group user
 */
class UserValidationTest extends KernelTestBase {

  /**
   * Modules to enable.
   *
   * @var array
   */
  public static $modules = [
    'field',
    'user',
    'system',
  ];

  /**
   * {@inheritdoc}
   */
  protected function setUp() {
    parent::setUp();
    $this
      ->installEntitySchema('user');
    $this
      ->installSchema('system', [
      'sequences',
    ]);

    // Make sure that the default roles exist.
    $this
      ->installConfig([
      'user',
    ]);
  }

  /**
   * Tests user name validation.
   */
  public function testUsernames() {
    $test_cases = [
      // '<username>' => ['<description>', 'assert<testName>'].
      'foo' => [
        'Valid username',
        'assertNull',
      ],
      'FOO' => [
        'Valid username',
        'assertNull',
      ],
      'Foo O\'Bar' => [
        'Valid username',
        'assertNull',
      ],
      'foo@bar' => [
        'Valid username',
        'assertNull',
      ],
      'foo@example.com' => [
        'Valid username',
        'assertNull',
      ],
      // invalid domains are allowed in usernames.
      'foo@-example.com' => [
        'Valid username',
        'assertNull',
      ],
      'þòøÇߪř€' => [
        'Valid username',
        'assertNull',
      ],
      // '+' symbol is allowed.
      'foo+bar' => [
        'Valid username',
        'assertNull',
      ],
      // runes.
      'ᚠᛇᚻ᛫ᛒᛦᚦ' => [
        'Valid UTF8 username',
        'assertNull',
      ],
      ' foo' => [
        'Invalid username that starts with a space',
        'assertNotNull',
      ],
      'foo ' => [
        'Invalid username that ends with a space',
        'assertNotNull',
      ],
      'foo  bar' => [
        'Invalid username that contains 2 spaces \'&nbsp;&nbsp;\'',
        'assertNotNull',
      ],
      '' => [
        'Invalid empty username',
        'assertNotNull',
      ],
      'foo/' => [
        'Invalid username containing invalid chars',
        'assertNotNull',
      ],
      // NULL.
      'foo' . chr(0) . 'bar' => [
        'Invalid username containing chr(0)',
        'assertNotNull',
      ],
      // CR.
      'foo' . chr(13) . 'bar' => [
        'Invalid username containing chr(13)',
        'assertNotNull',
      ],
      str_repeat('x', UserInterface::USERNAME_MAX_LENGTH + 1) => [
        'Invalid excessively long username',
        'assertNotNull',
      ],
    ];
    foreach ($test_cases as $name => $test_case) {
      list($description, $test) = $test_case;
      $result = user_validate_name($name);
      $this
        ->{$test}($result, $description . ' (' . $name . ')');
    }
  }

  /**
   * Runs entity validation checks.
   */
  public function testValidation() {
    $user = User::create([
      'name' => 'test',
      'mail' => 'test@example.com',
    ]);
    $violations = $user
      ->validate();
    $this
      ->assertCount(0, $violations, 'No violations when validating a default user.');

    // Only test one example invalid name here, the rest is already covered in
    // the testUsernames() method in this class.
    $name = $this
      ->randomMachineName(61);
    $user
      ->set('name', $name);
    $violations = $user
      ->validate();
    $this
      ->assertCount(1, $violations, 'Violation found when name is too long.');
    $this
      ->assertEqual($violations[0]
      ->getPropertyPath(), 'name');
    $this
      ->assertEqual($violations[0]
      ->getMessage(), t('The username %name is too long: it must be %max characters or less.', [
      '%name' => $name,
      '%max' => 60,
    ]));

    // Create a second test user to provoke a name collision.
    $user2 = User::create([
      'name' => 'existing',
      'mail' => 'existing@example.com',
    ]);
    $user2
      ->save();
    $user
      ->set('name', 'existing');
    $violations = $user
      ->validate();
    $this
      ->assertCount(1, $violations, 'Violation found on name collision.');
    $this
      ->assertEqual($violations[0]
      ->getPropertyPath(), 'name');
    $this
      ->assertEqual($violations[0]
      ->getMessage(), t('The username %name is already taken.', [
      '%name' => 'existing',
    ]));

    // Make the name valid.
    $user
      ->set('name', $this
      ->randomMachineName());
    $user
      ->set('mail', 'invalid');
    $violations = $user
      ->validate();
    $this
      ->assertCount(1, $violations, 'Violation found when email is invalid');
    $this
      ->assertEqual($violations[0]
      ->getPropertyPath(), 'mail.0.value');
    $this
      ->assertEqual($violations[0]
      ->getMessage(), t('This value is not a valid email address.'));
    $mail = $this
      ->randomMachineName(Email::EMAIL_MAX_LENGTH - 11) . '@example.com';
    $user
      ->set('mail', $mail);
    $violations = $user
      ->validate();

    // @todo There are two violations because EmailItem::getConstraints()
    //   overlaps with the implicit constraint of the 'email' property type used
    //   in EmailItem::propertyDefinitions(). Resolve this in
    //   https://www.drupal.org/node/2023465.
    $this
      ->assertCount(2, $violations, 'Violations found when email is too long');
    $this
      ->assertEqual($violations[0]
      ->getPropertyPath(), 'mail.0.value');
    $this
      ->assertEqual($violations[0]
      ->getMessage(), t('%name: the email address can not be longer than @max characters.', [
      '%name' => $user
        ->get('mail')
        ->getFieldDefinition()
        ->getLabel(),
      '@max' => Email::EMAIL_MAX_LENGTH,
    ]));
    $this
      ->assertEqual($violations[1]
      ->getPropertyPath(), 'mail.0.value');
    $this
      ->assertEqual($violations[1]
      ->getMessage(), t('This value is not a valid email address.'));

    // Provoke an email collision with an existing user.
    $user
      ->set('mail', 'existing@example.com');
    $violations = $user
      ->validate();
    $this
      ->assertCount(1, $violations, 'Violation found when email already exists.');
    $this
      ->assertEqual($violations[0]
      ->getPropertyPath(), 'mail');
    $this
      ->assertEqual($violations[0]
      ->getMessage(), t('The email address %mail is already taken.', [
      '%mail' => 'existing@example.com',
    ]));
    $user
      ->set('mail', NULL);
    $violations = $user
      ->validate();
    $this
      ->assertCount(1, $violations, 'Email addresses may not be removed');
    $this
      ->assertEqual($violations[0]
      ->getPropertyPath(), 'mail');
    $this
      ->assertEqual($violations[0]
      ->getMessage(), t('@name field is required.', [
      '@name' => $user
        ->getFieldDefinition('mail')
        ->getLabel(),
    ]));
    $user
      ->set('mail', 'someone@example.com');
    $user
      ->set('timezone', $this
      ->randomString(33));
    $this
      ->assertLengthViolation($user, 'timezone', 32, 2, 1);
    $user
      ->set('timezone', 'invalid zone');
    $this
      ->assertAllowedValuesViolation($user, 'timezone');
    $user
      ->set('timezone', NULL);
    $user
      ->set('init', 'invalid');
    $violations = $user
      ->validate();
    $this
      ->assertCount(1, $violations, 'Violation found when init email is invalid');
    $user
      ->set('init', NULL);
    $user
      ->set('langcode', 'invalid');
    $this
      ->assertAllowedValuesViolation($user, 'langcode');
    $user
      ->set('langcode', NULL);

    // Only configurable langcodes are allowed for preferred languages.
    $user
      ->set('preferred_langcode', Language::LANGCODE_NOT_SPECIFIED);
    $this
      ->assertAllowedValuesViolation($user, 'preferred_langcode');
    $user
      ->set('preferred_langcode', NULL);
    $user
      ->set('preferred_admin_langcode', Language::LANGCODE_NOT_SPECIFIED);
    $this
      ->assertAllowedValuesViolation($user, 'preferred_admin_langcode');
    $user
      ->set('preferred_admin_langcode', NULL);
    Role::create([
      'id' => 'role1',
    ])
      ->save();
    Role::create([
      'id' => 'role2',
    ])
      ->save();

    // Test cardinality of user roles.
    $user = User::create([
      'name' => 'role_test',
      'mail' => 'test@example.com',
      'roles' => [
        'role1',
        'role2',
      ],
    ]);
    $violations = $user
      ->validate();
    $this
      ->assertCount(0, $violations);
    $user->roles[1]->target_id = 'unknown_role';
    $violations = $user
      ->validate();
    $this
      ->assertCount(1, $violations);
    $this
      ->assertEqual($violations[0]
      ->getPropertyPath(), 'roles.1.target_id');
    $this
      ->assertEqual($violations[0]
      ->getMessage(), t('The referenced entity (%entity_type: %name) does not exist.', [
      '%entity_type' => 'user_role',
      '%name' => 'unknown_role',
    ]));
  }

  /**
   * Verifies that a length violation exists for the given field.
   *
   * @param \Drupal\Core\Entity\EntityInterface $entity
   *   The entity object to validate.
   * @param string $field_name
   *   The field that violates the maximum length.
   * @param int $length
   *   Number of characters that was exceeded.
   * @param int $count
   *   (optional) The number of expected violations. Defaults to 1.
   * @param int $expected_index
   *   (optional) The index at which to expect the violation. Defaults to 0.
   */
  protected function assertLengthViolation(EntityInterface $entity, $field_name, $length, $count = 1, $expected_index = 0) {
    $violations = $entity
      ->validate();
    $this
      ->assertEqual(count($violations), $count, "Violation found when {$field_name} is too long.");
    $this
      ->assertEqual($violations[$expected_index]
      ->getPropertyPath(), "{$field_name}.0.value");
    $field_label = $entity
      ->get($field_name)
      ->getFieldDefinition()
      ->getLabel();
    $this
      ->assertEqual($violations[$expected_index]
      ->getMessage(), t('%name: may not be longer than @max characters.', [
      '%name' => $field_label,
      '@max' => $length,
    ]));
  }

  /**
   * Verifies that a AllowedValues violation exists for the given field.
   *
   * @param \Drupal\Core\Entity\EntityInterface $entity
   *   The entity object to validate.
   * @param string $field_name
   *   The name of the field to verify.
   */
  protected function assertAllowedValuesViolation(EntityInterface $entity, $field_name) {
    $violations = $entity
      ->validate();
    $this
      ->assertCount(1, $violations, "Allowed values violation for {$field_name} found.");
    $this
      ->assertEqual($violations[0]
      ->getPropertyPath(), $field_name === 'langcode' ? "{$field_name}.0" : "{$field_name}.0.value");
    $this
      ->assertEqual($violations[0]
      ->getMessage(), t('The value you selected is not a valid choice.'));
  }

}

Classes

Namesort descending Description
UserValidationTest Verify that user validity checks behave as designed.