Welcome To Our Shell

Mister Spy & Souheyl Bypass Shell

<?php

declare(strict_types=1);

namespace Drupal\Tests\redirect\Unit;

use Drupal\redirect\RedirectChecker;
use Drupal\Tests\UnitTestCase;
use Symfony\Component\HttpFoundation\InputBag;
use Symfony\Component\Routing\Route;

/**
 * Tests the redirect logic.
 *
 * @group redirect
 */
class RedirectCheckerTest extends UnitTestCase {

  /**
   * Tests the can redirect check.
   */
  public function testCanRedirect() {

    $config = ['redirect.settings' => ['ignore_admin_path' => FALSE, 'access_check' => TRUE]];

    $state = $this->createMock('Drupal\Core\State\StateInterface');
    $state->expects($this->any())
      ->method('get')
      ->with('system.maintenance_mode')
      ->will($this->returnValue(FALSE));
    $access = $this->createMock('Drupal\Core\Access\AccessManager');
    $account = $this->createMock('Drupal\Core\Session\AccountInterface');
    $route_provider = $this->createMock('Drupal\Core\Routing\RouteProviderInterface');

    $route = new Route('/example');
    $route_provider->expects($this->any())
      ->method('getRouteByName')
      ->willReturn($route);

    $access->expects($this->any())
      ->method('checkNamedRoute')
      ->willReturnMap([
        ['denied_route', [], $account, FALSE, FALSE],
        ['allowed_route', [], $account, FALSE, TRUE],
      ]);

    $checker = new RedirectChecker($this->getConfigFactoryStub($config), $state, $access, $account, $route_provider);

    // All fine - we can redirect.
    $request = $this->getRequestStub('index.php', 'GET');
    $this->assertTrue($checker->canRedirect($request), 'Can redirect');

    // The script name is not index.php.
    $request = $this->getRequestStub('statistics.php', 'GET');
    $this->assertFalse($checker->canRedirect($request), 'Cannot redirect script name not index.php');

    // The request method is not GET.
    $request = $this->getRequestStub('index.php', 'POST');
    $this->assertFalse($checker->canRedirect($request), 'Cannot redirect other than GET method');

    // Route access check, deny access.
    $request = $this->getRequestStub('index.php', 'GET');
    $this->assertFalse($checker->canRedirect($request, 'denied_route'), 'Can not redirect');

    // Route access check, allow access.
    $request = $this->getRequestStub('index.php', 'GET');
    $this->assertTrue($checker->canRedirect($request, 'allowed_route'), 'Can redirect');

    // Check destination parameter.
    $request = $this->getRequestStub('index.php', 'GET', [], ['destination' => 'paradise']);
    $this->assertFalse($checker->canRedirect($request), 'Cannot redirect');

    // Maintenance mode is on.
    $state = $this->createMock('Drupal\Core\State\StateInterface');
    $state->expects($this->any())
      ->method('get')
      ->with('system.maintenance_mode')
      ->will($this->returnValue(TRUE));

    $checker = new RedirectChecker($this->getConfigFactoryStub($config), $state, $access, $account, $route_provider);

    $request = $this->getRequestStub('index.php', 'GET');
    $this->assertFalse($checker->canRedirect($request), 'Cannot redirect if maintenance mode is on');

    // Maintenance mode is on, but user has access to view site in maintenance mode.
    $accountWithMaintenanceModeAccess = $this->createMock('Drupal\Core\Session\AccountInterface');
    $accountWithMaintenanceModeAccess->expects($this->any())
      ->method('hasPermission')
      ->with('access site in maintenance mode')
      ->will($this->returnValue(TRUE));

    $checker = new RedirectChecker($this->getConfigFactoryStub($config), $state, $access, $accountWithMaintenanceModeAccess, $route_provider);

    $request = $this->getRequestStub('index.php', 'GET');
    $this->assertTrue($checker->canRedirect($request), 'Redirect should have worked, user has maintenance mode access.');

    // We are at a admin path.
    $state = $this->createMock('Drupal\Core\State\StateInterface');
    $state->expects($this->any())
      ->method('get')
      ->with('system.maintenance_mode')
      ->will($this->returnValue(FALSE));

    // $checker = new RedirectChecker($this->getConfigFactoryStub($config), $state);
    //
    // $route = $this->getMockBuilder('Symfony\Component\Routing\Route')->disableOriginalConstructor()->getMock();
    // $route->expects($this->any())
    // ->method('getOption')
    // ->with('_admin_route')
    // ->will($this->returnValue('system.admin_config_search'));
    //
    // $request = $this->getRequestStub('index.php', 'GET', array(RouteObjectInterface::ROUTE_OBJECT => $route));
    // $this->assertFalse($checker->canRedirect($request), 'Cannot redirect if we are requesting a admin path');
    //
    // // We are at admin path with ignore_admin_path set to TRUE.
    // $config['redirect.settings']['ignore_admin_path'] = TRUE;
    // $checker = new RedirectChecker($this->getConfigFactoryStub($config), $state);
    //
    // $request = $this->getRequestStub('index.php', 'GET',
    // array(RouteObjectInterface::ROUTE_OBJECT => $route));
    // $this->assertTrue($checker->canRedirect($request), 'Can redirect a admin with ignore_admin_path set to TRUE');
  }

  /**
   * Gets request mock object.
   *
   * @param string $script_name
   *   The result of the getScriptName() method.
   * @param string $method
   *   The request method.
   * @param array $attributes
   *   Attributes to be passed into request->attributes.
   * @param array $query
   *   Query paramter to be passed into request->query.
   *
   * @return \PHPUnit\Framework\MockObject\MockObject
   *   Mocked request object.
   */
  protected function getRequestStub($script_name, $method, array $attributes = [], array $query = []) {
    $request = $this->createMock('Symfony\Component\HttpFoundation\Request');
    $request->expects($this->any())
      ->method('getScriptName')
      ->will($this->returnValue($script_name));
    $request->expects($this->any())
      ->method('isMethod')
      ->with($this->anything())
      ->will($this->returnValue($method == 'GET'));
    $request->query = new InputBag($query);
    $request->attributes = new InputBag($attributes);

    return $request;
  }

}