Use Cookies service within Session and add unit test

[MAILPOET-2248]
This commit is contained in:
Rostislav Wolny
2019-08-05 15:03:19 +02:00
committed by Jack Kitterhing
parent 881d068f8b
commit 13724898d1
6 changed files with 148 additions and 21 deletions

View File

@ -2,6 +2,7 @@
namespace MailPoet\Config; namespace MailPoet\Config;
use MailPoet\Util\Cookies;
use MailPoet\Util\Security; use MailPoet\Util\Security;
class Session class Session
@ -10,30 +11,41 @@ class Session
const KEY_LENGTH = 32; const KEY_LENGTH = 32;
const COOKIE_EXPIRATION = 84600; // day const COOKIE_EXPIRATION = 84600; // day
/** @var Cookies */
private $cookies;
function __construct(Cookies $cookies) {
$this->cookies = $cookies;
}
function getId() { function getId() {
return isset($_COOKIE[self::COOKIE_NAME]) ? $_COOKIE[self::COOKIE_NAME] : null; return $this->cookies->get(self::COOKIE_NAME) ?: null;
} }
function init() { function init() {
$id = $this->getId() ?: Security::generateRandomString(self::KEY_LENGTH); if (headers_sent()) {
if (!headers_sent()) { return false;
$this->setCookie($id);
} }
$id = $this->getId() ?: Security::generateRandomString(self::KEY_LENGTH);
$this->setCookie($id);
return true;
} }
function destroy() { function destroy() {
if ($this->getId() === null) { if ($this->getId() === null) {
return; return;
} }
unset($_COOKIE[self::COOKIE_NAME]); $this->cookies->delete(self::COOKIE_NAME);
} }
private function setCookie($id) { private function setCookie($id) {
setcookie( $this->cookies->set(
self::COOKIE_NAME, self::COOKIE_NAME,
$id, $id,
time() + self::COOKIE_EXPIRATION, [
"/" 'expires' => time() + self::COOKIE_EXPIRATION,
'path' => '/',
]
); );
} }
} }

View File

@ -5,6 +5,7 @@ namespace MailPoet\Subscription;
use MailPoet\Config\Session; use MailPoet\Config\Session;
use MailPoet\Models\Subscriber; use MailPoet\Models\Subscriber;
use MailPoet\Models\SubscriberIP; use MailPoet\Models\SubscriberIP;
use MailPoet\Util\Cookies;
use MailPoet\Util\Helpers; use MailPoet\Util\Helpers;
use MailPoet\WP\Functions as WPFunctions; use MailPoet\WP\Functions as WPFunctions;
use MailPoetVendor\Gregwar\Captcha\CaptchaBuilder; use MailPoetVendor\Gregwar\Captcha\CaptchaBuilder;
@ -25,7 +26,7 @@ class Captcha {
$wp = new WPFunctions; $wp = new WPFunctions;
} }
if ($captcha_session === null) { if ($captcha_session === null) {
$captcha_session = new CaptchaSession($wp, new Session()); $captcha_session = new CaptchaSession($wp, new Session(new Cookies()));
} }
$this->wp = $wp; $this->wp = $wp;
$this->captcha_session = $captcha_session; $this->captcha_session = $captcha_session;

View File

@ -44,4 +44,8 @@ class Cookies {
} }
return $value; return $value;
} }
function delete($name) {
unset($_COOKIE[$name]);
}
} }

View File

@ -8,6 +8,8 @@ use MailPoet\API\JSON\Response as APIResponse;
use MailPoet\Config\Session; use MailPoet\Config\Session;
use MailPoet\DI\ContainerWrapper; use MailPoet\DI\ContainerWrapper;
use MailPoet\Form\Util\FieldNameObfuscator; use MailPoet\Form\Util\FieldNameObfuscator;
use MailPoet\Listing\BulkActionController;
use MailPoet\Listing\Handler;
use MailPoet\Models\CustomField; use MailPoet\Models\CustomField;
use MailPoet\Models\Form; use MailPoet\Models\Form;
use MailPoet\Models\Newsletter; use MailPoet\Models\Newsletter;
@ -19,10 +21,14 @@ use MailPoet\Models\SubscriberIP;
use MailPoet\Models\Segment; use MailPoet\Models\Segment;
use MailPoet\Models\Setting; use MailPoet\Models\Setting;
use MailPoet\Models\SubscriberSegment; use MailPoet\Models\SubscriberSegment;
use MailPoet\Segments\SubscribersListings;
use MailPoet\Settings\SettingsController; use MailPoet\Settings\SettingsController;
use MailPoet\Subscribers\RequiredCustomFieldValidator;
use MailPoet\Subscribers\Source; use MailPoet\Subscribers\Source;
use MailPoet\Subscribers\SubscriberActions;
use MailPoet\Subscription\Captcha; use MailPoet\Subscription\Captcha;
use MailPoet\Subscription\CaptchaSession; use MailPoet\Subscription\CaptchaSession;
use MailPoet\Util\Cookies;
use MailPoet\WP\Functions; use MailPoet\WP\Functions;
class SubscribersTest extends \MailPoetTest { class SubscribersTest extends \MailPoetTest {
@ -33,10 +39,29 @@ class SubscribersTest extends \MailPoetTest {
/** @var SettingsController */ /** @var SettingsController */
private $settings; private $settings;
/** @var CaptchaSession */
private $captcha_session;
function _before() { function _before() {
parent::_before(); parent::_before();
$this->cleanup(); $this->cleanup();
$this->endpoint = ContainerWrapper::getInstance()->get(Subscribers::class); $cookies_mock = $this->createMock(Cookies::class);
$cookies_mock->method('get')
->willReturn('abcd');
$session = new Session($cookies_mock);
$container = ContainerWrapper::getInstance();
$this->captcha_session = new CaptchaSession($container->get(Functions::class), $session);
$this->endpoint = new Subscribers(
$container->get(BulkActionController::class),
$container->get(SubscribersListings::class),
$container->get(SubscriberActions::class),
$container->get(RequiredCustomFieldValidator::class),
$container->get(Handler::class),
$container->get(Captcha::class),
$container->get(Functions::class),
$container->get(SettingsController::class),
$this->captcha_session
);
$obfuscator = new FieldNameObfuscator(); $obfuscator = new FieldNameObfuscator();
$this->obfuscatedEmail = $obfuscator->obfuscate('email'); $this->obfuscatedEmail = $obfuscator->obfuscate('email');
$this->obfuscatedSegments = $obfuscator->obfuscate('segments'); $this->obfuscatedSegments = $obfuscator->obfuscate('segments');
@ -80,9 +105,6 @@ class SubscribersTest extends \MailPoetTest {
'address' => 'sender@mailpoet.com', 'address' => 'sender@mailpoet.com',
'name' => 'Sender', 'name' => 'Sender',
]); ]);
// MAILPOET SESSION
$_COOKIE[Session::COOKIE_NAME] = 'abcd';
} }
function testItCanGetASubscriber() { function testItCanGetASubscriber() {
@ -523,8 +545,7 @@ class SubscribersTest extends \MailPoetTest {
$subscriber->count_confirmations = 1; $subscriber->count_confirmations = 1;
$subscriber->save(); $subscriber->save();
$captcha_value = 'ihg5w'; $captcha_value = 'ihg5w';
$captcha_session = new CaptchaSession(new Functions(), new Session()); $this->captcha_session->setCaptchaHash('ihg5w');
$captcha_session->setCaptchaHash($captcha_value);
$response = $this->endpoint->subscribe([ $response = $this->endpoint->subscribe([
$this->obfuscatedEmail => $email, $this->obfuscatedEmail => $email,
'form_id' => $this->form->id, 'form_id' => $this->form->id,

View File

@ -8,13 +8,25 @@ use MailPoet\Models\Subscriber;
use MailPoet\Models\SubscriberIP; use MailPoet\Models\SubscriberIP;
use MailPoet\Subscription\Captcha; use MailPoet\Subscription\Captcha;
use MailPoet\Subscription\CaptchaSession; use MailPoet\Subscription\CaptchaSession;
use MailPoet\Util\Cookies;
use MailPoet\WP\Functions as WPFunctions; use MailPoet\WP\Functions as WPFunctions;
use MailPoet\WP\Functions; use MailPoet\WP\Functions;
class CaptchaTest extends \MailPoetTest { class CaptchaTest extends \MailPoetTest {
/** @var Captcha */
private $captcha;
/** @var CaptchaSession */
private $captcha_session;
function _before() { function _before() {
$this->captcha = new Captcha(new WPFunctions); $cookies_mock = $this->createMock(Cookies::class);
$cookies_mock->method('get')->willReturn('abcd');
$this->captcha_session = new CaptchaSession(new Functions(), new Session($cookies_mock));
$this->captcha = new Captcha(new WPFunctions, $this->captcha_session);
$_SERVER['REMOTE_ADDR'] = '127.0.0.1'; $_SERVER['REMOTE_ADDR'] = '127.0.0.1';
$this->captcha_session->reset();
} }
function testItDoesNotRequireCaptchaForTheFirstSubscription() { function testItDoesNotRequireCaptchaForTheFirstSubscription() {
@ -42,13 +54,11 @@ class CaptchaTest extends \MailPoetTest {
expect($result)->equals(true); expect($result)->equals(true);
} }
function testItRendersImage() { function testItRendersImageAndStoresHashToSession() {
$_COOKIE[Session::COOKIE_NAME] = 'abcd'; expect($this->captcha_session->getCaptchaHash())->false();
$captcha_session = new CaptchaSession(new Functions(), new Session());
expect($captcha_session->getCaptchaHash())->false();
$image = $this->captcha->renderImage(null, null, true); $image = $this->captcha->renderImage(null, null, true);
expect($image)->notEmpty(); expect($image)->notEmpty();
expect($captcha_session->getCaptchaHash())->notEmpty(); expect($this->captcha_session->getCaptchaHash())->notEmpty();
} }
function _after() { function _after() {

View File

@ -0,0 +1,79 @@
<?php
namespace MailPoet\Config;
use MailPoet\Util\Cookies;
use PHPUnit_Framework_MockObject_MockObject as MockObject;
class SessionTest extends \MailPoetUnitTest {
/** @var Session */
private $session;
/** @var MockObject */
private $cookies_mock;
function _before() {
parent::_before();
unset($_COOKIE[Session::COOKIE_NAME]);
$this->cookies_mock = $this->createMock(Cookies::class);
$this->session = new Session($this->cookies_mock);
}
function testItInitializesNewSessionCorrectly() {
$this->cookies_mock
->expects($this->once())
->method('get')
->willReturn(null);
$this->cookies_mock
->expects($this->once())
->method('set')
->with(
$this->equalTo(Session::COOKIE_NAME),
$this->isType('string'),
$this->callback(function ($options) {
if (!isset($options['expires']) || $options['expires'] < time()) {
return false;
}
if ($options['path'] !== '/') {
return false;
}
return true;
})
);
$this->session->init();
}
function testItPrologsCurrentSessionDuringInitialization() {
$session_id = 'abcd';
$this->cookies_mock
->expects($this->once())
->method('get')
->willReturn($session_id);
$this->cookies_mock
->expects($this->once())
->method('set')
->with(
$this->equalTo(Session::COOKIE_NAME),
$this->equalTo($session_id),
$this->callback(function ($options) {
if (!isset($options['expires']) || $options['expires'] < time()) {
return false;
}
if ($options['path'] !== '/') {
return false;
}
return true;
})
);
$this->session->init();
}
function testItReturnsSessionIdCorrectly() {
$session_id = 'abcd';
$this->cookies_mock
->expects($this->once())
->method('get')
->willReturn($session_id);
expect($this->session->getid())->equals($session_id);
}
}