public function TfaLoginTest::testTfaLogin in Two-factor Authentication (TFA) 8

Tests the tfa login process.

File

tests/src/Functional/TfaLoginTest.php, line 39

Class

TfaLoginTest

Tests for the tfa login process.

Namespace

Drupal\Tests\tfa\Functional

Code

public function testTfaLogin() {
  $assert_session = $this
    ->assertSession();

  // Check that tfa is not presented if no roles selected.
  $this
    ->drupalLogin($this->webUser);
  $assert_session
    ->statusCodeEquals(200);
  $assert_session
    ->addressEquals('user/' . $this->webUser
    ->id());

  // Enable TFA for the webUser role only.
  $this
    ->drupalLogin($this->adminUser);
  $web_user_roles = $this->webUser
    ->getRoles(TRUE);
  $edit = [
    'tfa_required_roles[' . $web_user_roles[0] . ']' => TRUE,
  ];
  $this
    ->drupalPostForm('admin/config/people/tfa', $edit, 'Save configuration');
  $assert_session
    ->statusCodeEquals(200);
  $this
    ->assertText('The configuration options have been saved.');

  // Check that tfa is presented.
  $this
    ->drupalLogout();
  $edit = [
    'name' => $this->webUser
      ->getAccountName(),
    'pass' => $this->webUser->passRaw,
  ];
  $this
    ->drupalPostForm('user/login', $edit, 'Log in');
  $assert_session
    ->statusCodeEquals(200);
  $assert_session
    ->addressMatches('/\\/tfa\\/' . $this->webUser
    ->id() . '/');

  // Ensure that if no roles are required, a user with tfa enabled still
  // gets prompted with tfa.
  // Disable TFA for all roles.
  $this
    ->drupalLogin($this->adminUser);
  $roles = user_role_names(TRUE);
  $edit = [];
  foreach ($roles as $role_id => $role_name) {
    $edit['tfa_required_roles[' . $role_id . ']'] = FALSE;
  }
  $edit['tfa_required_roles[authenticated]'] = FALSE;
  $this
    ->drupalPostForm('admin/config/people/tfa', $edit, 'Save configuration');
  $assert_session
    ->statusCodeEquals(200);
  $this
    ->assertText('The configuration options have been saved.');

  // Enable tfa for a single user.
  $this
    ->drupalLogin($this->webUser);
  $this
    ->drupalGet('user/' . $this->webUser
    ->id() . '/security/tfa');
  $assert_session
    ->statusCodeEquals(200);
  $assert_session
    ->pageTextNotContains('Currently there are no enabled plugins.');
  $this
    ->clickLink('Set up application');
  $assert_session
    ->statusCodeEquals(200);
  $assert_session
    ->pageTextContains('Enter your current password to continue.');
  $edit = [
    'current_pass' => $this->webUser->passRaw,
  ];
  $this
    ->submitForm($edit, 'Confirm');
  $assert_session
    ->statusCodeEquals(200);
  $edit = [
    'expected_field' => 'Expected field content',
  ];
  $this
    ->submitForm($edit, 'Verify and save');
  $assert_session
    ->statusCodeEquals(200);
  $assert_session
    ->pageTextContains('TFA setup complete.');
  $assert_session
    ->pageTextContains('Status: TFA enabled');
  $assert_session
    ->linkExists('Reset application');
  $assert_session
    ->pageTextContains('Number of times validation skipped: 0 of 3');

  // Check that tfa is presented.
  $this
    ->drupalLogout();
  $edit = [
    'name' => $this->webUser
      ->getAccountName(),
    'pass' => $this->webUser->passRaw,
  ];
  $this
    ->drupalPostForm('user/login', $edit, 'Log in');
  $assert_session
    ->statusCodeEquals(200);
  $assert_session
    ->addressMatches('/\\/tfa\\/' . $this->webUser
    ->id() . '/');
}