74 lines
2.5 KiB
PHP
74 lines
2.5 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace KTXT\Integration\Service;
|
|
|
|
use KTXC\Db\DataStore;
|
|
use KTXC\Models\Tenant\DomainCollection;
|
|
use KTXC\Models\Tenant\TenantConfiguration;
|
|
use KTXC\Models\Tenant\TenantObject;
|
|
use KTXC\Service\FirewallSettingsService;
|
|
use KTXC\Service\TenantService;
|
|
use KTXC\Stores\TenantStore;
|
|
use KTXF\Event\EventDispatcherInterface;
|
|
use PHPUnit\Framework\Attributes\TestDox;
|
|
use PHPUnit\Framework\TestCase;
|
|
|
|
final class FirewallSettingsServiceTest extends TestCase
|
|
{
|
|
private DataStore $dataStore;
|
|
private bool $databaseAvailable = false;
|
|
|
|
protected function setUp(): void
|
|
{
|
|
$system = require dirname(__DIR__, 4).'/config/system.php';
|
|
$database = $system['database'];
|
|
$database['database'] = sprintf('ktrix_firewall_settings_test_%d', getmypid());
|
|
$this->dataStore = new DataStore($database);
|
|
|
|
try {
|
|
$this->dataStore->getDatabase()->drop();
|
|
$this->databaseAvailable = true;
|
|
} catch (\MongoDB\Driver\Exception\Exception $error) {
|
|
self::markTestSkipped('MongoDB is unavailable: '.$error->getMessage());
|
|
}
|
|
}
|
|
|
|
protected function tearDown(): void
|
|
{
|
|
if ($this->databaseAvailable) {
|
|
$this->dataStore->getDatabase()->drop();
|
|
}
|
|
}
|
|
|
|
#[TestDox('Firewall settings updates persist without replacing unrelated tenant configuration')]
|
|
public function testPersistence(): void
|
|
{
|
|
$tenants = new TenantService(new TenantStore($this->dataStore));
|
|
$tenants->deposit((new TenantObject())
|
|
->setIdentifier('tenant-a')
|
|
->setEnabled(true)
|
|
->setLabel('Tenant A')
|
|
->setDomains(new DomainCollection(['tenant-a.example.test']))
|
|
->setConfiguration((new TenantConfiguration())->jsonDeserialize([
|
|
'security' => ['code' => 'keep-me'],
|
|
])));
|
|
$settings = new FirewallSettingsService(
|
|
$tenants,
|
|
$this->createStub(EventDispatcherInterface::class)
|
|
);
|
|
|
|
$settings->update(
|
|
'tenant-a', false, 8, 600, 7200, 'Tighten authentication controls', 'admin-a'
|
|
);
|
|
$stored = $tenants->fetchById('tenant-a')->getConfiguration();
|
|
|
|
self::assertFalse($stored->firewall()->enabled());
|
|
self::assertSame(8, $stored->firewall()->maxAuthFailures());
|
|
self::assertSame(600, $stored->firewall()->authFailureWindow());
|
|
self::assertSame(7200, $stored->firewall()->autoBlockDuration());
|
|
self::assertSame('keep-me', $stored->security()->code());
|
|
}
|
|
}
|