AuthtokenAccessTest.php — Event Tickets with Ticket Scanner 2.9.3

event-tickets-with-ticket-scanner / tests / AuthtokenAccessTest.php

event-tickets-with-ticket-scanner / tests Last commit date

AuthtokenAccessTest.php

154 lines

1	<?php
2	/**
3	* Tests for Authtoken methods: checkAccessForAuthtoken,
4	* isProductAllowedByAuthToken, getAuthtokenByCode, getAuthtokens.
5	*/
6
7	class AuthtokenAccessTest extends WP_UnitTestCase {
8
9	private $main;
10
11	public function set_up(): void {
12	parent::set_up();
13	$this->main = sasoEventtickets::Instance();
14	}
15
16	private function createActiveAuthtoken(): array {
17	$code = 'AUTH' . strtoupper(uniqid());
18	$metaObj = $this->main->getCore()->getMetaObjectAuthtoken();
19	$metaJson = $this->main->getCore()->json_encode_with_error_handling($metaObj);
20
21	$id = $this->main->getDB()->insert('authtokens', [
22	'code' => $code,
23	'name' => 'Test Token ' . uniqid(),
24	'aktiv' => 1,
25	'meta' => $metaJson,
26	]);
27
28	return ['id' => $id, 'code' => $code];
29	}
30
31	// ── checkAccessForAuthtoken ───────────────────────────────────
32
33	public function test_checkAccessForAuthtoken_true_for_valid(): void {
34	$token = $this->createActiveAuthtoken();
35	$result = $this->main->getAuthtokenHandler()->checkAccessForAuthtoken($token['code']);
36	$this->assertTrue($result);
37	}
38
39	public function test_checkAccessForAuthtoken_false_for_invalid(): void {
40	$result = $this->main->getAuthtokenHandler()->checkAccessForAuthtoken('NONEXISTENT_' . uniqid());
41	$this->assertFalse($result);
42	}
43
44	public function test_checkAccessForAuthtoken_false_for_empty(): void {
45	$result = $this->main->getAuthtokenHandler()->checkAccessForAuthtoken('');
46	$this->assertFalse($result);
47	}
48
49	public function test_checkAccessForAuthtoken_false_for_inactive(): void {
50	$code = 'INACT' . strtoupper(uniqid());
51	$metaObj = $this->main->getCore()->getMetaObjectAuthtoken();
52	$metaJson = $this->main->getCore()->json_encode_with_error_handling($metaObj);
53
54	$this->main->getDB()->insert('authtokens', [
55	'code' => $code,
56	'name' => 'Inactive Token',
57	'aktiv' => 0,
58	'meta' => $metaJson,
59	]);
60
61	$result = $this->main->getAuthtokenHandler()->checkAccessForAuthtoken($code);
62	$this->assertFalse($result);
63	}
64
65	// ── getAuthtokenByCode ───────────────────────────────────────
66
67	public function test_getAuthtokenByCode_returns_array(): void {
68	$token = $this->createActiveAuthtoken();
69	$result = $this->main->getAuthtokenHandler()->getAuthtokenByCode($token['code']);
70	$this->assertIsArray($result);
71	$this->assertEquals($token['code'], $result['code']);
72	}
73
74	public function test_getAuthtokenByCode_throws_for_empty(): void {
75	$this->expectException(Exception::class);
76	$this->main->getAuthtokenHandler()->getAuthtokenByCode('');
77	}
78
79	public function test_getAuthtokenByCode_throws_for_nonexistent(): void {
80	$this->expectException(Exception::class);
81	$this->main->getAuthtokenHandler()->getAuthtokenByCode('NOTFOUND_' . uniqid());
82	}
83
84	// ── getAuthtokens ────────────────────────────────────────────
85
86	public function test_getAuthtokens_returns_array(): void {
87	$result = $this->main->getAuthtokenHandler()->getAuthtokens();
88	$this->assertIsArray($result);
89	}
90
91	public function test_getAuthtokens_contains_created_token(): void {
92	$token = $this->createActiveAuthtoken();
93	$tokens = $this->main->getAuthtokenHandler()->getAuthtokens();
94
95	$found = false;
96	foreach ($tokens as $t) {
97	if ($t['code'] === $token['code']) {
98	$found = true;
99	break;
100	}
101	}
102	$this->assertTrue($found, "Created authtoken not found in getAuthtokens()");
103	}
104
105	// ── isProductAllowedByAuthToken ──────────────────────────────
106
107	public function test_isProductAllowedByAuthToken_true_no_restriction(): void {
108	$token = $this->createActiveAuthtoken();
109	// No bound_to_products set → all products allowed
110	$result = $this->main->getAuthtokenHandler()->isProductAllowedByAuthToken($token['code'], [42]);
111	$this->assertTrue($result);
112	}
113
114	public function test_isProductAllowedByAuthToken_true_empty_products(): void {
115	$token = $this->createActiveAuthtoken();
116	$result = $this->main->getAuthtokenHandler()->isProductAllowedByAuthToken($token['code'], []);
117	$this->assertTrue($result);
118	}
119
120	public function test_isProductAllowedByAuthToken_true_for_allowed_product(): void {
121	$code = 'PROD' . strtoupper(uniqid());
122	$metaObj = $this->main->getCore()->getMetaObjectAuthtoken();
123	$metaObj['ticketscanner']['bound_to_products'] = '42,100,200';
124	$metaJson = $this->main->getCore()->json_encode_with_error_handling($metaObj);
125
126	$this->main->getDB()->insert('authtokens', [
127	'code' => $code,
128	'name' => 'Restricted Token',
129	'aktiv' => 1,
130	'meta' => $metaJson,
131	]);
132
133	$result = $this->main->getAuthtokenHandler()->isProductAllowedByAuthToken($code, [42]);
134	$this->assertTrue($result);
135	}
136
137	public function test_isProductAllowedByAuthToken_false_for_disallowed_product(): void {
138	$code = 'DENY' . strtoupper(uniqid());
139	$metaObj = $this->main->getCore()->getMetaObjectAuthtoken();
140	$metaObj['ticketscanner']['bound_to_products'] = '42,100';
141	$metaJson = $this->main->getCore()->json_encode_with_error_handling($metaObj);
142
143	$this->main->getDB()->insert('authtokens', [
144	'code' => $code,
145	'name' => 'Restricted Token',
146	'aktiv' => 1,
147	'meta' => $metaJson,
148	]);
149
150	$result = $this->main->getAuthtokenHandler()->isProductAllowedByAuthToken($code, [999]);
151	$this->assertFalse($result);
152	}
153	}
154