80 lines
2.5 KiB
PHP
80 lines
2.5 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
use App\Models\InstanceSettings;
|
||
|
|
use App\Models\OauthSetting;
|
||
|
|
use App\Models\User;
|
||
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
||
|
|
use Laravel\Socialite\Facades\Socialite;
|
||
|
|
|
||
|
|
uses(RefreshDatabase::class);
|
||
|
|
|
||
|
|
beforeEach(function () {
|
||
|
|
InstanceSettings::create([
|
||
|
|
'id' => 0,
|
||
|
|
'is_registration_enabled' => false,
|
||
|
|
]);
|
||
|
|
|
||
|
|
OauthSetting::create([
|
||
|
|
'provider' => 'google',
|
||
|
|
'client_id' => 'client-id',
|
||
|
|
'client_secret' => 'client-secret',
|
||
|
|
'redirect_uri' => 'https://coolify.example.com/auth/google/callback',
|
||
|
|
'tenant' => 'example.com',
|
||
|
|
]);
|
||
|
|
});
|
||
|
|
|
||
|
|
it('logs in an existing user when the oauth provider returns a mixed-case email', function () {
|
||
|
|
config()->set('app.maintenance.driver', 'file');
|
||
|
|
|
||
|
|
$user = User::factory()->create([
|
||
|
|
'email' => 'username@example.edu',
|
||
|
|
]);
|
||
|
|
|
||
|
|
$provider = \Mockery::mock();
|
||
|
|
$provider->shouldReceive('setConfig')->once()->andReturnSelf();
|
||
|
|
$provider->shouldReceive('with')->once()->with(['hd' => 'example.com'])->andReturnSelf();
|
||
|
|
$provider->shouldReceive('user')->once()->andReturn((object) [
|
||
|
|
'email' => 'UserName@example.edu',
|
||
|
|
'name' => 'Example User',
|
||
|
|
'id' => 'google-user-id',
|
||
|
|
]);
|
||
|
|
|
||
|
|
Socialite::shouldReceive('driver')->once()->with('google')->andReturn($provider);
|
||
|
|
|
||
|
|
$response = $this->get(route('auth.callback', 'google'));
|
||
|
|
|
||
|
|
$response->assertRedirect('/');
|
||
|
|
$this->assertAuthenticatedAs($user);
|
||
|
|
expect(User::count())->toBe(1);
|
||
|
|
});
|
||
|
|
|
||
|
|
it('rejects oauth logins when the provider does not return an email address', function (?string $providerEmail) {
|
||
|
|
config()->set('app.maintenance.driver', 'file');
|
||
|
|
InstanceSettings::firstOrCreate([
|
||
|
|
'id' => 0,
|
||
|
|
], [
|
||
|
|
'is_registration_enabled' => false,
|
||
|
|
])->update([
|
||
|
|
'is_registration_enabled' => true,
|
||
|
|
]);
|
||
|
|
|
||
|
|
$provider = \Mockery::mock();
|
||
|
|
$provider->shouldReceive('setConfig')->once()->andReturnSelf();
|
||
|
|
$provider->shouldReceive('with')->once()->with(['hd' => 'example.com'])->andReturnSelf();
|
||
|
|
$provider->shouldReceive('user')->once()->andReturn((object) [
|
||
|
|
'email' => $providerEmail,
|
||
|
|
'name' => 'Example User',
|
||
|
|
'id' => 'google-user-id',
|
||
|
|
]);
|
||
|
|
|
||
|
|
Socialite::shouldReceive('driver')->once()->with('google')->andReturn($provider);
|
||
|
|
|
||
|
|
$response = $this->from('/login')->get(route('auth.callback', 'google'));
|
||
|
|
|
||
|
|
$response->assertRedirect('/login');
|
||
|
|
expect(User::count())->toBe(0);
|
||
|
|
})->with([
|
||
|
|
'null email' => [null],
|
||
|
|
'blank email' => [' '],
|
||
|
|
]);
|