UserLoginTest.php

<?php

use PHPUnit\Framework\MockObject\MockObject;
use PHPUnit\Framework\TestCase;
require_once('UserLogin.php');
require_once('CuAdmin.php');
require_once('User.php');

require_once('cu_credentials.i');
require_once('hcuEnv.i');

/**
 * Class UserLoginTest.
 *
 * @covers \UserLogin
 */
class UserLoginTest extends TestCase {
    /**
     * @var UserLogin $userLogin An instance of "UserLogin" to test.
     */

    private $creditUnion = 'CRUISECU';
    private $userName = 'Methuselah';
    private $password = 'password';

    private $userData;
    private $userLoad;
    private $cuAdminData;
    private $cuAdminLoad;
    private $cuAdminRepo;
    private $userRepo;

    /**
     * {@inheritdoc}
     */
    protected function setUp() {
      parent::setUp();

        $this->cuAdminData = [
          'cu'          => $this->creditUnion,
          'fhdays'      => 0,
          'flagset'     => 1536,
          'flagset2'        => 11,
          'flagset3'        => 16,
          'grace'           => 4,
          'lastupdate'    => 'Fri May 23 04:32 PM 2008',
          'livewait'        => 0,
          'min_chlng_qst'   => 3,
          'pname'           => 'We are Testy',
          'trmemomaxlen'    => 20,
        ];

        $this->userData = [
          "confidence"      => 'HIGH',
          'cuuser_group_id' => 31,
          'email'               => 'homer@homecu.net',
          'failedremain'        => 10,
          'flog'                => '2013/09/16 12:34:56',
          'fchange'         => 'N',
          'fremain'         => 3,
          'llog'                => '2016/07/08 11:29:56',
          'mfaquest'            => '{"answers":{"54":"Boise","64":"Boise","65":"Boise"},"challenge":0}',
          'msg_tx'          => 2,
          'passwd'          => '$2y$10$QfUKW3O8wmyK9E.2A5DhveiSDasbBUOY6rhM53H2Fe0bkWRY83En.', // password
          'pchange'         => '2019-06-11T12:34:56.123456Z',
          'primary_account' => 'admin',
          'savecqid'            => 0,
          'user_id'         => 19,
          'user_name'           => 'Methuselah',
          'userflags'           => 15,
          'freset'          => 0
      ];

        // Setup reflection to reload the CuAdmin data
        $classCuAdmin = new ReflectionClass(CuAdmin::class);
        $this->cuAdminLoad = $classCuAdmin->getMethod('Load');
        $this->cuAdminLoad->setAccessible(true);
        // Setup reflection to reload the User data
        $classUser = new ReflectionClass(User::class);
        $this->userLoad = $classUser->getMethod('Load');
        $this->userLoad->setAccessible(true);

    }

    /**
     * @covers \UserLogin::__construct
     */
    public function testConstruct() {
      $this->cuAdminRepo = $this
        ->getMockBuilder(CuAdminRepo::class)
        ->setMethods(['Read'])
        ->getMock();
      $this->cuAdminRepo
        ->expects(static::any())
        ->method('Read')
        ->with($this->creditUnion)
        ->willReturn($this->cuAdminData);
      $this->userRepo = $this
        ->getMockBuilder(UserRepo::class)
        ->setMethods(['Read'])
        ->getMock();
      $this->userRepo
        ->expects(static::any())
        ->method('Read')
        ->with($this->userName)
        ->willReturn($this->userData);

      $user = new User($this->userName, $this->creditUnion, $this->userRepo);
      $cuAdmin = new CuAdmin($this->creditUnion, $this->cuAdminRepo);

      $login = new UserLogin($user, $cuAdmin);
      static::assertInstanceOf('UserLogin', $login);

    }

    /**
     * @covers \UserLogin::IsAccountLocked
     */
    public function testIsAccountLocked() {

      $this->cuAdminRepo = $this
        ->getMockBuilder(CuAdminRepo::class)
        ->setMethods(['Read'])
        ->getMock();
      $this->userRepo = $this
        ->getMockBuilder(UserRepo::class)
        ->setMethods(['Read'])
        ->getMock();
      $this->cuAdminRepo
        ->expects(static::any())
        ->method('Read')
        ->with($this->creditUnion)
        ->will(static::returnCallback(function(){return $this->cuAdminData;}));
      $this->userRepo
        ->expects(static::any())
        ->method('Read')
        ->with($this->userName)
        ->will(static::returnCallback(function(){ return $this->userData;}));

      $cuAdmin = new CuAdmin($this->creditUnion, $this->cuAdminRepo);
      $user = new User($this->userName, $this->creditUnion, $this->userRepo);

      $login = new UserLogin($user, $cuAdmin);
      $login->ValidateUser($this->password);

      // Everything is fine, not locked
      static::assertFalse($login->IsAccountLocked());

      // No more retries failures
      $this->userData['failedremain'] = 0;
      $this->userLoad->invoke($user);
      static::assertTrue($login->IsAccountLocked());

      // Password exired
      $this->userData['fchange'] = 'Y';
      $this->userData['fremain'] = 0;
      $this->userLoad->invoke($user);
      static::assertTrue($login->IsAccountLocked());

      // Challenge questions with force reset
      $this->cuAdminData['flagset3'] = CuAdmin::CU3_MFA_AUTHCODE;
      $this->data['userflags'] = User::MEM_FORCE_RESET;
      $this->data['fremain'] = 0;
      $this->cuAdminLoad->invoke($cuAdmin);
      $this->userLoad->invoke($user);
      static::assertTrue($login->IsAccountLocked());

      // Challenge questions with changed min_chlg_qst
      $this->cuAdminData['flagset3'] = CuAdmin::CU3_MFA_AUTHCODE;
      $this->cuAdminData['min_chlng_qst'] = 10;
      $this->cuAdminLoad->invoke($cuAdmin);
      $this->userData['fremain'] = 0;
      $this->userLoad->invoke($user);
      static::assertTrue($login->IsAccountLocked());

      // Alias needs changing
      $this->cuAdminData['flagset2'] = CuAdmin::CU2_ALIAS_REQ;
      $this->cuAdminLoad->invoke($cuAdmin);
      $this->userData['user_name'] = '12345';
      $this->userData['fremain'] = 0;
      $this->userLoad->invoke($user);
      static::assertTrue($login->IsAccountLocked());

    }

    /**
     * @covers \UserLogin::IsValidDeviceCookie
     */
    public function testIsValidDeviceCookie() {

      $this->cuAdminRepo = $this
        ->getMockBuilder(CuAdminRepo::class)
        ->setMethods(['Read'])
        ->getMock();
      $this->userRepo = $this
        ->getMockBuilder(UserRepo::class)
        ->setMethods(['Read'])
        ->getMock();
      $this->cuAdminRepo
        ->expects(static::any())
        ->method('Read')
        ->with($this->creditUnion)
        ->will(static::returnCallback(function(){return $this->cuAdminData;}));
      $this->userRepo
        ->expects(static::any())
        ->method('Read')
        ->with($this->userName)
        ->will(static::returnCallback(function(){ return $this->userData;}));

      $user = new User($this->userName, $this->creditUnion, $this->userRepo);
      $cuAdmin = new CuAdmin($this->creditUnion, $this->cuAdminRepo);
      $login = new UserLogin($user, $cuAdmin);
      static::assertFalse($login->IsValidDeviceCookie($this->creditUnion));
    }

    /**
     * @covers \UserLogin::ValidateUser
     */
    public function testValidateUser() {

      $this->cuAdminRepo = $this
        ->getMockBuilder(CuAdminRepo::class)
        ->setMethods(['Read'])
        ->getMock();
      $this->userRepo = $this
        ->getMockBuilder(UserRepo::class)
        ->setMethods(['Read'])
        ->getMock();
      $this->userRepo
        ->expects(static::any())
        ->method('Read')
        ->with($this->userName)
        ->willReturn($this->userData);
      $this->cuAdminRepo
        ->expects(static::any())
        ->method('Read')
        ->with($this->creditUnion)
        ->willReturn($this->cuAdminData);

      $user = new User($this->userName, $this->creditUnion, $this->userRepo);
      $cuAdmin = new CuAdmin($this->creditUnion, $this->cuAdminRepo);
      $login = new UserLogin($user, $cuAdmin);
      static::assertTrue($login->ValidateUser($this->password));
      static::assertFalse($login->ValidateUser('notpassword'));

    }

    /**
     * @covers \UserLogin::IsMFAMode
     */
    public function testIsMFAMode() {

      $this->cuAdminRepo = $this
        ->getMockBuilder(CuAdminRepo::class)
        ->setMethods(['Read'])
        ->getMock();
      $this->userRepo = $this
        ->getMockBuilder(UserRepo::class)
        ->setMethods(['Read'])
        ->getMock();
      $this->cuAdminRepo
        ->expects(static::any())
        ->method('Read')
        ->with($this->creditUnion)
        ->will(static::returnCallback(function(){return $this->cuAdminData;}));
      $this->userRepo
        ->expects(static::any())
        ->method('Read')
        ->with($this->userName)
        ->will(static::returnCallback(function(){ return $this->userData;}));

      $user = new User($this->userName, $this->creditUnion, $this->userRepo);
      $cuAdmin = new CuAdmin($this->creditUnion, $this->cuAdminRepo);
      $login = new UserLogin($user, $cuAdmin);
      static::assertTrue($login->IsMFAMode());

      //change setting to not use MFA auth code
      $this->cuAdminData['flagset3'] = 131079;
      $this->cuAdminLoad->invoke($cuAdmin);
      $this->userLoad->invoke($user);
      static::assertFalse($login->IsMFAMode());
    }
}