- Publicity: Public Only All
acs-authentication-procs.tcl
Automated tests.
- Location:
- packages/acs-authentication/tcl/test/acs-authentication-procs.tcl
- Created:
- 21 August 2003
- Author:
- Peter Marklund
- CVS Identification:
$Id: acs-authentication-procs.tcl,v 1.53.2.21 2021/10/05 16:25:20 antoniop Exp $
Procedures in this file
Detailed information
[ hide source ]Content File Source
ad_library { Automated tests. @author Peter Marklund @creation-date 21 August 2003 @cvs-id $Id: acs-authentication-procs.tcl,v 1.53.2.21 2021/10/05 16:25:20 antoniop Exp $ } ##### # # Helper procs # #### namespace eval auth::test {} ad_proc -private auth::test::get_admin_user_id {} { Return the user id of a site-wide-admin on the system } { set context_root_id [acs_magic_object security_context_root] return [db_string select_user_id { select min(user_id) from users where acs_permission.permission_p(:context_root_id, user_id, 'admin') }] } d_proc -private auth::test::get_password_vars { {-array_name:required} } { Get test vars for test case. } { upvar $array_name test_vars db_1row select_vars { select u.user_id, aa.authority_id, u.username from users u, auth_authorities aa where u.authority_id = aa.authority_id and aa.short_name = 'local' fetch first 1 rows only } -column_array test_vars } #### aa_register_case \ -cats {api} \ -procs { acs::test::user::create acs_package_root_dir acs_user::change_state acs_user::create_portrait acs_user::delete acs_user::erase_portrait acs_user::get_by_username acs_user::get_portrait_id acs_user::get_user_info auth::authenticate auth::create_user util_text_to_url package_instantiate_object cr_filename_to_mime_type package_exec_plsql } \ auth_authenticate { Test the auth::authenticate proc. } { aa_run_with_teardown \ -rollback \ -test_code { array set result [acs::test::user::create] set password $result(password) if { ![aa_equals "creation_status for successful creation" $result(creation_status) "ok"] } { aa_log "Creation result: [array get result]" } set user [acs_user::get_user_info -user_id $result(user_id)] set authority_id [dict get $user authority_id] set username [dict get $user username] set user_id [acs_user::get_by_username -authority_id $authority_id -username $username] aa_equals "Username from apis matches" $result(user_id) $user_id ## Portrait api test set old_portrait_id [acs_user::get_portrait_id -user_id $user_id] # use a bogus image from a core package as test portrait set portrait_file [acs_package_root_dir acs-templating]/www/resources/sort-neither.png set new_portrait_id [acs_user::create_portrait \ -user_id $user_id \ -description [ad_generate_random_string] \ -filename [ad_generate_random_string] \ -file $portrait_file] aa_true "A portrait was correctly created" [string is integer -strict $new_portrait_id] aa_true "Old and new portrait differ" {$new_portrait_id ne $old_portrait_id} set old_portrait_id [acs_user::get_portrait_id -user_id $user_id] aa_equals "Portrait retrieval returns the new portrait" $new_portrait_id $old_portrait_id acs_user::erase_portrait -user_id $user_id set new_portrait_id [acs_user::get_portrait_id -user_id $user_id] aa_equals "Portrait was erased correctly" $new_portrait_id 0 ### # Successful authentication array unset result array set result [auth::authenticate \ -authority_id $authority_id \ -no_cookie \ -username $username \ -password $password] aa_log "Result: [array get result]" aa_equals "auth_status for successful authentication" $result(auth_status) "ok" # Failed authentications # Incorrect password array unset auth_info array set auth_info \ [auth::authenticate \ -authority_id $authority_id \ -no_cookie \ -username $username \ -password "blabla"] aa_equals "auth_status for bad password authentication" $auth_info(auth_status) "bad_password" aa_true "auth_message for bad password authentication" {$auth_info(auth_message) ne ""} # Blank password array unset auth_info array set auth_info \ [auth::authenticate \ -authority_id $authority_id \ -no_cookie \ -username $username \ -password ""] aa_equals "auth_status for blank password authentication" $auth_info(auth_status) "bad_password" aa_true "auth_message for blank password authentication" {$auth_info(auth_message) ne ""} # Incorrect username array unset auth_info array set auth_info \ [auth::authenticate \ -authority_id $authority_id \ -no_cookie \ -username "blabla" \ -password $password] aa_equals "auth_status for bad username authentication" $auth_info(auth_status) "no_account" aa_true "auth_message for bad username authentication" {$auth_info(auth_message) ne ""} # Blank username array unset auth_info array set auth_info \ [auth::authenticate \ -authority_id $authority_id \ -no_cookie \ -username "" \ -password $password] aa_equals "auth_status for blank username authentication" $auth_info(auth_status) "auth_error" aa_true "auth_message for blank username authentication" {$auth_info(auth_message) ne ""} # Authority bogus array unset auth_info array set auth_info \ [auth::authenticate \ -no_cookie \ -authority_id -123 \ -username $username \ -password $password] aa_equals "auth_status for bad authority_id authentication" $auth_info(auth_status) "failed_to_connect" aa_true "auth_message for bad authority_id authentication" {$auth_info(auth_message) ne ""} # Closed account status set closed_states {banned rejected "needs approval" deleted} foreach closed_state $closed_states { acs_user::change_state -user_id $user_id -state $closed_state # Successful authentication array unset auth_info array set auth_info \ [auth::authenticate \ -authority_id $authority_id \ -no_cookie \ -username $username \ -password $password] aa_equals "auth_status for '$closed_state' user" $auth_info(auth_status) "ok" if {$auth_info(auth_status) eq "ok"} { # Only perform this test if auth_status is ok, otherwise account_status won't be set aa_equals "account_status for '$closed_state' user" $auth_info(account_status) "closed" } } if { $user_id ne "" } { acs_user::delete -user_id $user_id } # Error handling # TODO or too hard? } } aa_register_case -cats {api} -procs { acs_user::delete acs_user::get_by_username ad_generate_random_string auth::create_user acs::test::user::create acs_user::get util_text_to_url package_instantiate_object } auth_create_user { Test the auth::create_user proc. } { # create_user returns ok when trying to create a user # whose email already lives in the db. We should test # against that aa_run_with_teardown \ -rollback \ -test_code { # Successful creation array set user_info [acs::test::user::create] set user [acs_user::get -user_id $user_info(user_id)] set username [dict get $user username] set email [dict get $user email] set authority_id [dict get $user authority_id] aa_true "returns creation_status" [info exists user_info(creation_status)] if { [info exists user_info(creation_status)] } { aa_equals "creation_status for successful creation" $user_info(creation_status) "ok" if { $user_info(creation_status) ne "ok" } { aa_log "Element messages: '$user_info(element_messages)'" aa_log "Element messages: '$user_info(creation_message)'" } } aa_false "No creation_message for successful creation" \ {[info exists user_info(creation_message)] && $user_info(creation_message) ne ""} aa_true "returns user_id" [info exists user_info(user_id)] if { [info exists user_info(user_id)] } { aa_true "returns integer user_id ([array get user_info])" [regexp {[1-9][0-9]*} $user_info(user_id)] } # Duplicate email and username array unset user_info array set user_info [auth::create_user \ -username $username \ -email $email \ -authority_id $authority_id \ -first_names "Test3" \ -last_name "User" \ -password "changeme" \ -secret_question "no_question" \ -secret_answer "no_answer"] aa_equals "creation_status for duplicate email and username" $user_info(creation_status) "data_error" aa_true "element_messages exists" [info exists user_info(element_messages)] if { [info exists user_info(element_messages)] && $user_info(element_messages) ne "" } { array unset elm_msgs array set elm_msgs $user_info(element_messages) aa_true "element_message for username exists" \ {[info exists elm_msgs(username)] && $elm_msgs(username) ne ""} aa_true "element_message for email exists" \ {[info exists elm_msgs(email)] && $elm_msgs(email) ne ""} } set user_id [acs_user::get_by_username -authority_id $authority_id -username $username] if { $user_id ne "" } { acs_user::delete -user_id $user_id } # Missing first_names, last_name, email array unset user_info array set user_info [auth::create_user \ -authority_id $authority_id \ -username "auth_create_user2" \ -email "" \ -first_names "" \ -last_name "" \ -password "changeme" \ -secret_question "no_question" \ -secret_answer "no_answer"] aa_equals "creation_status is data_error" $user_info(creation_status) "data_error" aa_true "element_messages exists" [info exists user_info(element_messages)] if { [info exists user_info(element_messages)] && $user_info(element_messages) ne "" } { array unset elm_msgs array set elm_msgs $user_info(element_messages) if { [aa_true "element_message(email) exists" \ {[info exists elm_msgs(email)] && $elm_msgs(email) ne ""} ]} { aa_log "element_message(email) = $elm_msgs(email)" } if { [aa_true "element_message(first_names) exists" [info exists elm_msgs(first_names)] ]} { aa_log "element_message(first_names) = $elm_msgs(first_names)" } if { [aa_true "element_message(last_name) exists" [info exists elm_msgs(last_name)] ]} { aa_log "element_message(last_name) = $elm_msgs(last_name)" } } set user_id [acs_user::get_by_username -authority_id $authority_id -username auth_create_user2] if { $user_id ne "" } { acs_user::delete -user_id $user_id } # Malformed email array unset user_info array set user_info [auth::create_user \ -authority_id $authority_id \ -username [ad_generate_random_string] \ -email "not an email" \ -first_names "[ad_generate_random_string]<[ad_generate_random_string]" \ -last_name "[ad_generate_random_string]<[ad_generate_random_string]" \ -password [ad_generate_random_string] \ -secret_question [ad_generate_random_string] \ -secret_answer [ad_generate_random_string]] aa_equals "creation_status is data_error" $user_info(creation_status) "data_error" aa_true "element_messages exists" [info exists user_info(element_messages)] if { [info exists user_info(element_messages)] && $user_info(element_messages) ne "" } { array unset elm_msgs array set elm_msgs $user_info(element_messages) if { [aa_true "element_message(email) exists" [info exists elm_msgs(email)]] } { aa_log "element_message(email) = $elm_msgs(email)" } if { [aa_true "element_message(first_names) exists" [info exists elm_msgs(first_names)]] } { aa_log "element_message(first_names) = $elm_msgs(first_names)" } if { [aa_true "element_message(last_name) exists" [info exists elm_msgs(last_name)]] } { aa_log "element_message(last_name) = $elm_msgs(last_name)" } } } } aa_register_case -cats {db api smoke} -procs { acs_user::flush_cache acs_user::get_element auth::set_email_verified } auth_confirm_email { Test the auth::set_email_verified proc. } { set user_id [ad_conn user_id] aa_run_with_teardown \ -rollback \ -test_code { db_dml update { update users set email_verified_p = 'f' where user_id = :user_id } acs_user::flush_cache -user_id $user_id aa_equals "email should be not verified" [acs_user::get_element -user_id $user_id -element email_verified_p] "f" auth::set_email_verified -user_id $user_id aa_equals "email should be verified" [acs_user::get_element -user_id $user_id -element email_verified_p] "t" acs_user::flush_cache -user_id $user_id } } aa_register_case \ -cats {api smoke production_safe} \ -error_level {warning} \ -procs { auth::get_registration_elements util_text_to_url } \ auth_get_registration_elements { Test the auth::get_registration_elements proc } { array set element_array [auth::get_registration_elements] aa_log "Elements array: '[array get element_array]'" aa_true "there is more than one required element" {[llength $element_array(required)] > 0} aa_true "there is more than one optional element" {[llength $element_array(optional)] > 0} } aa_register_case \ -cats {api smoke production_safe} \ -error_level {warning} \ -procs { auth::get_registration_form_elements } \ auth_get_registration_form_elements { Test the auth::get_registration_form_elements proc } { set form_elements [auth::get_registration_form_elements] aa_true "Form elements are not empty: $form_elements" {$form_elements ne ""} } ########### # # Password API # ########### aa_register_case \ -cats {api smoke production_safe} \ -procs { auth::password::get_change_url auth::test::get_password_vars } \ auth_password_get_change_url { Test the auth::password::get_change_url proc. } { # Test whether auth::password::get_change_url returns the correct URL to redirect when "change_pwd_url" is set. auth::test::get_password_vars -array_name test_vars if { [info exists test_vars(user_id)] } { set change_pwd_url [auth::password::get_change_url -user_id $test_vars(user_id)] aa_true "Check that auth::password::get_change_url returns correct redirect URL when change_pwd_url is not null" \ [regexp {password-update} $change_pwd_url] } } aa_register_case \ -cats {api smoke production_safe} \ -error_level {warning} \ -procs { auth::password::can_change_p auth::test::get_password_vars auth::password::can_reset_p auth::password::can_retrieve_p } \ auth_password_can_change_reset_retrieve_p { Test auth::password::can_change_p, auth::password::can_reset_p and auth::password::can_retrieve_p. } { auth::test::get_password_vars -array_name test_vars aa_equals "auth::password::can_change_p should return 1 when CanChangePassword is true for the local driver " \ [auth::password::can_change_p -user_id $test_vars(user_id)] \ "1" aa_equals "auth::password::can_reset_p should return 1 for the local driver " \ [auth::password::can_reset_p -authority_id $test_vars(authority_id)] \ "1" aa_equals "auth::password::can_retrieve_p return 1 for the local driver " \ [auth::password::can_retrieve_p -authority_id $test_vars(authority_id)] \ "1" } aa_register_case \ -cats {api} \ -procs { aa_stub acs::test::user::create acs_user::delete ad_acs_kernel_id ad_check_password ad_parameter_cache auth::create_user auth::password::change parameter::get parameter::set_value util_text_to_url } \ auth_password_change { Test the auth::password::change proc. } { aa_stub acs_mail_lite::send { set ::ns_sendmail_to $to_addr } aa_run_with_teardown \ -rollback \ -test_code { array set user_info [acs::test::user::create] set email $user_info(email) set password $user_info(password) set user_id $user_info(user_id) set ::ns_sendmail_to {ns_sendmail_UNCALLED} parameter::set_value -parameter EmailAccountOwnerOnPasswordChangeP -package_id [ad_acs_kernel_id] -value 1 aa_true "Send email" [parameter::get -parameter EmailAccountOwnerOnPasswordChangeP -package_id [ad_acs_kernel_id] -default 1] # password_status "ok" set old_password $password set new_password "changedyou" array set auth_info [auth::password::change \ -user_id $user_id \ -old_password $old_password \ -new_password $new_password] aa_equals "Should return 'ok'" \ $auth_info(password_status) \ "ok" # Check that user gets email about changed password aa_equals "Email sent to user" [string tolower $::ns_sendmail_to] [string tolower $email] set ::ns_sendmail_to {} # check that the new password is actually set correctly set password_correct_p [ad_check_password $user_id $new_password] aa_equals "check that the new password is actually set correctly" \ $password_correct_p \ "1" ad_parameter_cache -delete [ad_acs_kernel_id] EmailAccountOwnerOnPasswordChangeP if { $user_id ne "" } { acs_user::delete -user_id $user_id } } } aa_register_case \ -cats {api smoke} \ -procs { auth::password::recover_password auth::test::get_password_vars aa_stub util_text_to_url ad_sign } \ auth_password_recover { Test the auth::password::recover_password proc. } { auth::test::get_password_vars -array_name test_vars # Stub get_forgotten_url to avoid the redirect aa_stub auth::password::get_forgotten_url { return "" } # We don't want email to go out aa_stub auth::password::email_password { return } aa_run_with_teardown \ -rollback \ -test_code { array set password_result [auth::password::recover_password \ -authority_id $test_vars(authority_id) \ -username $test_vars(username)] aa_equals "status ok" $password_result(password_status) "ok" aa_true "nonempty message" {$password_result(password_message) ne ""} } } aa_register_case \ -cats {api smoke production_safe} \ -procs { auth::password::get_forgotten_url auth::test::get_password_vars util_text_to_url } \ auth_password_get_forgotten_url { Test the auth::password::get_forgotten_url proc. } { auth::test::get_password_vars -array_name test_vars # With user info set url [auth::password::get_forgotten_url -authority_id $test_vars(authority_id) -username $test_vars(username)] aa_true "there is a local recover-password page with user info ($url)" [regexp {recover-password} $url] set url [auth::password::get_forgotten_url -authority_id $test_vars(authority_id) -username $test_vars(username) -remote_only] aa_equals "cannot get remote url with missing forgotten_pwd_url" $url "" # Without user info set url [auth::password::get_forgotten_url -authority_id "" -username "" -remote_only] aa_equals "cannot get remote url without user info" $url "" set url [auth::password::get_forgotten_url -authority_id "" -username ""] aa_true "there is a local recover-password page without user info" [regexp {recover-password} $url] } aa_register_case \ -cats {api smoke production_safe} \ -procs { auth::password::retrieve auth::test::get_password_vars util_text_to_url } \ auth_password_retrieve { Test the auth::password::retrieve proc. } { auth::test::get_password_vars -array_name test_vars array set result [auth::password::retrieve \ -authority_id $test_vars(authority_id) \ -username $test_vars(username)] aa_equals "retrieve pwd from local auth" $result(password_status) "ok" aa_true "must have message on failure" {$result(password_message) ne ""} } aa_register_case \ -cats {api} \ -procs { aa_stub acs::test::user::create acs_user::delete acs_user::get acs_user::get_by_username auth::authentication::authenticate auth::authority::local auth::create_user auth::password::reset util_text_to_url } \ auth_password_reset { Test the auth::password::reset proc. } { # We don't want email to go out aa_stub auth::password::email_password { return } aa_run_with_teardown \ -rollback \ -test_code { array set create_result [acs::test::user::create] array set test_user [acs_user::get -user_id $create_result(user_id)] set test_user(email) $create_result(email) set test_user(password) $create_result(password) aa_equals "status should be ok for creating user" $create_result(creation_status) "ok" if { $create_result(creation_status) ne "ok" } { aa_log "Create-result: '[array get create_result]'" } array set reset_result [auth::password::reset \ -authority_id $test_user(authority_id) \ -username $test_user(username)] aa_equals "status should be ok for resetting password" $reset_result(password_status) "ok" aa_true "Result contains new password" [info exists reset_result(password)] if { [info exists reset_result(password)] } { array set auth_result [auth::authentication::authenticate \ -username $test_user(username) \ -authority_id $test_user(authority_id) \ -password $reset_result(password)] aa_equals "can authenticate with new password" $auth_result(auth_status) "ok" array unset auth_result array set auth_result [auth::authentication::authenticate \ -username $test_user(username) \ -authority_id $test_user(authority_id) \ -password $test_user(password)] aa_false "cannot authenticate with old password" [string equal $auth_result(auth_status) "ok"] } set user_id [acs_user::get_by_username \ -authority_id $test_user(authority_id) \ -username $test_user(username)] if { $user_id ne "" } { acs_user::delete -user_id $user_id } } } ########### # # Authority Management API # ########### aa_register_case -cats { api db } -procs { auth::authority::create auth::authority::delete auth::authority::edit auth::authority::get auth::authority::get_authority_options auth::authority::get_id auth::authority::get_short_names db_list_of_lists } auth_authority_api { Test authorty creation, edition, deletion and some retrieval api. } { aa_run_with_teardown -rollback -test_code { # Add authority and test that it was added correctly. array set columns { pretty_name "Test authority" help_contact_text "Blah blah" enabled_p "t" sort_order "1000" auth_impl_id "" pwd_impl_id "" forgotten_pwd_url "" change_pwd_url "" register_impl_id "" register_url "" get_doc_impl_id "" process_doc_impl_id "" batch_sync_enabled_p "f" } set columns(short_name) [ad_generate_random_string] set authority_id [auth::authority::create -array columns] set expected_authority_id [auth::authority::get_id -short_name $columns(short_name)] aa_equals "(auth::authority::get_id): Value returned is as expected" $expected_authority_id $authority_id set proc_value [lsort [auth::authority::get_short_names]] set db_value [lsort [db_list select_authority_short_names { select short_name from auth_authorities }]] aa_equals "(auth::authority::get_short_names): Value returned is as expected" $proc_value $db_value set proc_value [lsort [auth::authority::get_authority_options]] set db_value [lsort [db_list_of_lists select_authorities { select pretty_name, authority_id from auth_authorities where enabled_p = 't' and auth_impl_id is not null order by sort_order }]] aa_equals "(auth::authority::get_authority_options): Value returned is as expected" $proc_value $db_value set authority_added_p [db_string authority_added_p { select count(*) from auth_authorities where authority_id = :authority_id } -default "0"] aa_true "was the authority added?" $authority_added_p aa_log "authority_id = '$authority_id'" # Edit authority and test that it has actually changed. array set columns { pretty_name "Test authority2" help_contact_text "Blah blah2" enabled_p "f" sort_order "1001" forgotten_pwd_url "foobar.com" change_pwd_url "foobar.com" register_url "foobar.com" } set columns(short_name) [ad_generate_random_string] auth::authority::edit \ -authority_id $authority_id \ -array columns set proc_value [lsort [auth::authority::get_short_names]] set db_value [lsort [db_list select_authority_short_names { select short_name from auth_authorities }]] aa_equals "(auth::authority::get_short_names): Value returned is as expected" $proc_value $db_value set proc_value [lsort [auth::authority::get_authority_options]] set db_value [lsort [db_list_of_lists select_authorities { select pretty_name, authority_id from auth_authorities where enabled_p = 't' and auth_impl_id is not null order by sort_order }]] aa_equals "(auth::authority::get_authority_options): Value returned is as expected" $proc_value $db_value auth::authority::get \ -authority_id $authority_id \ -array edit_result foreach column [array names columns] { aa_equals "edited column $column" $edit_result($column) $columns($column) } # Delete authority and test that it was actually added. auth::authority::delete -authority_id $authority_id set proc_value [lsort [auth::authority::get_short_names]] set db_value [lsort [db_list select_authority_short_names { select short_name from auth_authorities }]] aa_equals "(auth::authority::get_short_names): Value returned is as expected" $proc_value $db_value set proc_value [lsort [auth::authority::get_authority_options]] set db_value [lsort [db_list_of_lists select_authorities { select pretty_name, authority_id from auth_authorities where enabled_p = 't' and auth_impl_id is not null order by sort_order }]] aa_equals "(auth::authority::get_authority_options): Value returned is as expected" $proc_value $db_value set authority_exists_p [db_string authority_added_p { select count(*) from auth_authorities where authority_id = :authority_id } -default "0"] aa_false "was the authority deleted?" $authority_exists_p } } aa_register_case \ -cats {api} \ -procs { acs_sc::impl::get_id ad_generate_random_string auth::authority::get auth::authority::local auth::driver::get_parameter_values auth::driver::get_parameters auth::driver::set_parameter_value util_text_to_url } \ auth_driver_get_parameter_values { Test the auth::driver::set_parameter_values proc. } { aa_run_with_teardown \ -rollback \ -test_code { auth::authority::get -authority_id [auth::authority::local] -array authority set sync_retrieve_impl_id [acs_sc::impl::get_id -owner acs-authentication -name HTTPGet] array set parameters_array [auth::driver::get_parameters -impl_id $sync_retrieve_impl_id] set parameters [array names parameters_array] aa_true "List of parameters is not empty" {[llength $parameters] != 0} array set values [list] # Set the values foreach parameter $parameters { set value($parameter) [ad_generate_random_string] # Set a parameter value auth::driver::set_parameter_value \ -authority_id $authority(authority_id) \ -impl_id $sync_retrieve_impl_id \ -parameter $parameter \ -value $value($parameter) } # Get and verify values array set retrieved_value [auth::driver::get_parameter_values \ -authority_id $authority(authority_id) \ -impl_id $sync_retrieve_impl_id] foreach parameter $parameters { if { [aa_true "Parameter $parameter exists" [info exists retrieved_value($parameter)]] } { aa_equals "Parameter value retrieved is the one we set" $retrieved_value($parameter) $value($parameter) } array unset retrieved_value $parameter } aa_true "Only the right parameters were retrieved" {[array size retrieved_value] == 0} } } aa_register_case \ -cats {api} \ -procs { aa_stub ad_acs_kernel_id ad_generate_random_string ad_parameter_cache auth::UseEmailForLoginP auth::authenticate auth::authority::get_id auth::authority::local auth::create_user auth::get_registration_elements parameter::set_value util_text_to_url auth::create_local_account } \ auth_use_email_for_login_p { Test auth::UseEmailForLoginP } { aa_stub auth::get_register_authority { return [auth::authority::get_id -short_name "acs_testing"] } aa_run_with_teardown \ -rollback \ -test_code { # Test various values to see that it doesn't break parameter::set_value -parameter UseEmailForLoginP -package_id [ad_acs_kernel_id] -value 0 aa_false "Param UseEmailForLoginP 0 -> false" [auth::UseEmailForLoginP] array set elms [auth::get_registration_elements] aa_false "Registration elements do contain username" {"username" ni [concat $elms(required) $elms(optional)]} parameter::set_value -parameter UseEmailForLoginP -package_id [ad_acs_kernel_id] -value {} aa_true "Param UseEmailForLoginP {} -> true" [auth::UseEmailForLoginP] # "foo" is an invalid value, it can't be true parameter::set_value -parameter UseEmailForLoginP -package_id [ad_acs_kernel_id] -value {foo} aa_false "Param UseEmailForLoginP foo -> false" [auth::UseEmailForLoginP] # Test login/registration parameter::set_value -parameter UseEmailForLoginP -package_id [ad_acs_kernel_id] -value 1 aa_true "Param UseEmailForLoginP 1 -> true" [auth::UseEmailForLoginP] # GetElements array set elms [auth::get_registration_elements] aa_true "Registration elements do NOT contain username" {"username" ni [concat $elms(required) $elms(optional)]} set authority_id [auth::authority::get_id -short_name "acs_testing"] # Create a user with no username set email [string tolower "[ad_generate_random_string]@foobar.com"] set password [ad_generate_random_string] ad_try { array set result [auth::create_user \ -authority_id $authority_id \ -email $email \ -password $password \ -first_names [ad_generate_random_string] \ -last_name [ad_generate_random_string] \ -secret_question [ad_generate_random_string] \ -secret_answer [ad_generate_random_string] \ -screen_name [ad_generate_random_string]] } on ok {r} { aa_true "auth::create_user with no username succeeded" 1 } on error {errorMsg} { aa_false "auth::create_user with no username failed: '$errorMsg'" 1 set result(creation_status) "NOT OK" } aa_equals "Registration OK" $result(creation_status) "ok" # Authenticate as that user array unset result array set result [auth::authenticate \ -authority_id $authority_id \ -email $email \ -password $password \ -no_cookie] aa_equals "Authentication OK" $result(auth_status) "ok" } -teardown_code { ad_parameter_cache -delete [ad_acs_kernel_id] UseEmailForLoginP } } aa_register_case \ -cats {api} \ -procs { aa_stub acs::test::user::create acs_user::get_user_info ad_acs_kernel_id ad_generate_random_string ad_parameter_cache auth::create_user auth::password::change parameter::set_value util_text_to_url } \ auth_email_on_password_change { Test acs-kernel.EmailAccountOwnerOnPasswordChangeP parameter } { aa_stub acs_mail_lite::send { set ::ns_sendmail_to $to_addr } aa_run_with_teardown \ -rollback \ -test_code { parameter::set_value -parameter EmailAccountOwnerOnPasswordChangeP -package_id [ad_acs_kernel_id] -value 1 set ::ns_sendmail_to {} array set result [acs::test::user::create] set user [acs_user::get_user_info -user_id $result(user_id)] set authority_id [dict get $user authority_id] set username [dict get $user username] set email $result(email) set password $result(password) aa_equals "Create user OK" $result(creation_status) "ok" set user_id $result(user_id) aa_equals "Authority from api is correct" [db_string sel { select authority_id from users where user_id = :user_id }] $authority_id # Change password array unset result set new_password [ad_generate_random_string] array set result [auth::password::change \ -user_id $user_id \ -old_password $password \ -new_password $new_password] if { ![aa_equals "Password change OK" $result(password_status) "ok"] } { aa_log "Message was: $result(password_message)" } # Check that we get email aa_equals "Email sent to user" [string tolower $::ns_sendmail_to] [string tolower $email] set ::ns_sendmail_to {ns_sendmail_UNCALLED} # Set parameter to false parameter::set_value -parameter EmailAccountOwnerOnPasswordChangeP -package_id [ad_acs_kernel_id] -value 0 # Change password array unset result set new_new_password [ad_generate_random_string] array set result [auth::password::change \ -user_id $user_id \ -old_password $new_password \ -new_password $new_new_password] aa_equals "Password change OK" $result(password_status) "ok" # Check that we do not get an email aa_equals "Email NOT sent to user" $::ns_sendmail_to {ns_sendmail_UNCALLED} ad_parameter_cache -delete [ad_acs_kernel_id] EmailAccountOwnerOnPasswordChangeP } } aa_register_case \ -cats {api} \ -procs { auth::authority::edit auth::authority::get auth::authority::get_element auth::authority::get_id } \ auth_authority_edit { Test authority edit } { aa_log "Retrieving test authority" set authority_id [auth::authority::get_id -short_name "acs_testing"] set random_string [ad_generate_random_string] set random_object [db_string get_object { select max(object_id) from acs_objects }] set random_boolean [expr {int(rand() * 10) % 2}] set random_int [expr {int(rand() * pow(10, 7))}] set valid_values [list \ short_name $random_string \ pretty_name $random_string \ help_contact_text $random_string \ help_contact_text_format "text/enhanced" \ enabled_p $random_boolean \ sort_order $random_int \ auth_impl_id $random_object \ pwd_impl_id $random_object \ forgotten_pwd_url $random_string \ change_pwd_url $random_string \ register_impl_id $random_object \ register_url $random_string \ user_info_impl_id $random_object \ get_doc_impl_id $random_object \ process_doc_impl_id $random_object \ batch_sync_enabled_p $random_boolean] set broken_values $valid_values lappend broken_values [ad_generate_random_string] "" set illegal_values $valid_values lappend illegal_values authority_id [db_string gen_id { select coalesce(max(authority_id), 0) + 1 from auth_authorities }] aa_run_with_teardown \ -rollback \ -test_code { array set values $broken_values aa_true "Trying to update non-existing columns returns an error" \ [catch {auth::authority::edit -authority_id $authority_id -array values}] array unset values array set values $illegal_values aa_true "Trying to update illegal columns columns returns an error" \ [catch {auth::authority::edit -authority_id $authority_id -array values}] array unset values array set values $valid_values aa_false "Update valid columns and values is fine" \ [catch {auth::authority::edit -authority_id $authority_id -array values}] array unset values auth::authority::get -authority_id $authority_id -array updated_values foreach {key value} $valid_values { # Check if value is what we set in the update. We need # to normalize booleans. aa_true "(get): Value '$key' was updated to '$value'" \ {[info exists updated_values($key)] && ($updated_values($key) eq $value || ([string is boolean -strict $updated_values($key)] && [string is boolean -strict $value] && [string is true -strict $updated_values($key)] == [string is true -strict $value])) } set updated_value [auth::authority::get_element \ -authority_id $authority_id \ -element $key] aa_true "(get_element): Value '$key' was updated to '$value'" \ {$updated_value eq $value || ([string is boolean -strict $updated_value] && [string is boolean -strict $value] && [string is true -strict $updated_value] == [string is true -strict $value]) } } } } # Local variables: # mode: tcl # tcl-indent-level: 4 # indent-tabs-mode: nil # End:
