306 lines
8.2 KiB
PHP
306 lines
8.2 KiB
PHP
<?php
|
|
/**
|
|
* CakePHP(tm) Tests <http://book.cakephp.org/2.0/en/development/testing.html>
|
|
* Copyright (c) Cake Software Foundation, Inc. (http://cakefoundation.org)
|
|
*
|
|
* Licensed under The MIT License
|
|
* For full copyright and license information, please see the LICENSE.txt
|
|
* Redistributions of files must retain the above copyright notice
|
|
*
|
|
* @copyright Copyright (c) Cake Software Foundation, Inc. (http://cakefoundation.org)
|
|
* @link http://book.cakephp.org/2.0/en/development/testing.html CakePHP(tm) Tests
|
|
* @since CakePHP(tm) v 1.2.0.5432
|
|
* @license http://www.opensource.org/licenses/mit-license.php MIT License
|
|
*/
|
|
|
|
App::uses('Security', 'Utility');
|
|
|
|
/**
|
|
* SecurityTest class
|
|
*
|
|
* @package Cake.Test.Case.Utility
|
|
*/
|
|
class SecurityTest extends CakeTestCase {
|
|
|
|
/**
|
|
* sut property
|
|
*
|
|
* @var mixed null
|
|
*/
|
|
public $sut = null;
|
|
|
|
/**
|
|
* testInactiveMins method
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testInactiveMins() {
|
|
Configure::write('Security.level', 'high');
|
|
$this->assertEquals(10, Security::inactiveMins());
|
|
|
|
Configure::write('Security.level', 'medium');
|
|
$this->assertEquals(100, Security::inactiveMins());
|
|
|
|
Configure::write('Security.level', 'low');
|
|
$this->assertEquals(300, Security::inactiveMins());
|
|
}
|
|
|
|
/**
|
|
* testGenerateAuthkey method
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testGenerateAuthkey() {
|
|
$this->assertEquals(strlen(Security::generateAuthKey()), 40);
|
|
}
|
|
|
|
/**
|
|
* testValidateAuthKey method
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testValidateAuthKey() {
|
|
$authKey = Security::generateAuthKey();
|
|
$this->assertTrue(Security::validateAuthKey($authKey));
|
|
}
|
|
|
|
/**
|
|
* testHashInvalidSalt method
|
|
*
|
|
* @expectedException PHPUnit_Framework_Error
|
|
* @return void
|
|
*/
|
|
public function testHashInvalidSalt() {
|
|
Security::hash('someKey', 'blowfish', true);
|
|
}
|
|
|
|
/**
|
|
* testHashAnotherInvalidSalt
|
|
*
|
|
* @expectedException PHPUnit_Framework_Error
|
|
* @return void
|
|
*/
|
|
public function testHashAnotherInvalidSalt() {
|
|
Security::hash('someKey', 'blowfish', '$1$lksdjoijfaoijs');
|
|
}
|
|
|
|
/**
|
|
* testHashYetAnotherInvalidSalt
|
|
*
|
|
* @expectedException PHPUnit_Framework_Error
|
|
* @return void
|
|
*/
|
|
public function testHashYetAnotherInvalidSalt() {
|
|
Security::hash('someKey', 'blowfish', '$2a$10$123');
|
|
}
|
|
|
|
/**
|
|
* testHashInvalidCost method
|
|
*
|
|
* @expectedException PHPUnit_Framework_Error
|
|
* @return void
|
|
*/
|
|
public function testHashInvalidCost() {
|
|
Security::setCost(1000);
|
|
}
|
|
/**
|
|
* testHash method
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testHash() {
|
|
$_hashType = Security::$hashType;
|
|
|
|
$key = 'someKey';
|
|
$hash = 'someHash';
|
|
|
|
$this->assertSame(strlen(Security::hash($key, null, false)), 40);
|
|
$this->assertSame(strlen(Security::hash($key, 'sha1', false)), 40);
|
|
$this->assertSame(strlen(Security::hash($key, null, true)), 40);
|
|
$this->assertSame(strlen(Security::hash($key, 'sha1', true)), 40);
|
|
|
|
$result = Security::hash($key, null, $hash);
|
|
$this->assertSame($result, 'e38fcb877dccb6a94729a81523851c931a46efb1');
|
|
|
|
$result = Security::hash($key, 'sha1', $hash);
|
|
$this->assertSame($result, 'e38fcb877dccb6a94729a81523851c931a46efb1');
|
|
|
|
$hashType = 'sha1';
|
|
Security::setHash($hashType);
|
|
$this->assertSame(Security::$hashType, $hashType);
|
|
$this->assertSame(strlen(Security::hash($key, null, true)), 40);
|
|
$this->assertSame(strlen(Security::hash($key, null, false)), 40);
|
|
|
|
$this->assertSame(strlen(Security::hash($key, 'md5', false)), 32);
|
|
$this->assertSame(strlen(Security::hash($key, 'md5', true)), 32);
|
|
|
|
$hashType = 'md5';
|
|
Security::setHash($hashType);
|
|
$this->assertSame(Security::$hashType, $hashType);
|
|
$this->assertSame(strlen(Security::hash($key, null, false)), 32);
|
|
$this->assertSame(strlen(Security::hash($key, null, true)), 32);
|
|
|
|
if (!function_exists('hash') && !function_exists('mhash')) {
|
|
$this->assertSame(strlen(Security::hash($key, 'sha256', false)), 32);
|
|
$this->assertSame(strlen(Security::hash($key, 'sha256', true)), 32);
|
|
} else {
|
|
$this->assertSame(strlen(Security::hash($key, 'sha256', false)), 64);
|
|
$this->assertSame(strlen(Security::hash($key, 'sha256', true)), 64);
|
|
}
|
|
|
|
Security::setHash($_hashType);
|
|
}
|
|
|
|
/**
|
|
* Test that hash() works with blowfish.
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testHashBlowfish() {
|
|
Security::setCost(10);
|
|
$test = Security::hash('password', 'blowfish');
|
|
$this->skipIf(strpos($test, '$2a$') === false, 'Blowfish hashes are incorrect.');
|
|
|
|
$_hashType = Security::$hashType;
|
|
|
|
$key = 'someKey';
|
|
$hashType = 'blowfish';
|
|
Security::setHash($hashType);
|
|
|
|
$this->assertSame(Security::$hashType, $hashType);
|
|
$this->assertSame(strlen(Security::hash($key, null, false)), 60);
|
|
|
|
$password = $submittedPassword = $key;
|
|
$storedPassword = Security::hash($password);
|
|
|
|
$hashedPassword = Security::hash($submittedPassword, null, $storedPassword);
|
|
$this->assertSame($storedPassword, $hashedPassword);
|
|
|
|
$submittedPassword = 'someOtherKey';
|
|
$hashedPassword = Security::hash($submittedPassword, null, $storedPassword);
|
|
$this->assertNotSame($storedPassword, $hashedPassword);
|
|
|
|
$expected = sha1('customsaltsomevalue');
|
|
$result = Security::hash('somevalue', 'sha1', 'customsalt');
|
|
$this->assertSame($expected, $result);
|
|
|
|
$oldSalt = Configure::read('Security.salt');
|
|
Configure::write('Security.salt', 'customsalt');
|
|
|
|
$expected = sha1('customsaltsomevalue');
|
|
$result = Security::hash('somevalue', 'sha1', true);
|
|
$this->assertSame($expected, $result);
|
|
|
|
Configure::write('Security.salt', $oldSalt);
|
|
Security::setHash($_hashType);
|
|
}
|
|
|
|
/**
|
|
* testCipher method
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testCipher() {
|
|
$length = 10;
|
|
$txt = '';
|
|
for ($i = 0; $i < $length; $i++) {
|
|
$txt .= mt_rand(0, 255);
|
|
}
|
|
$key = 'my_key';
|
|
$result = Security::cipher($txt, $key);
|
|
$this->assertEquals($txt, Security::cipher($result, $key));
|
|
|
|
$txt = '';
|
|
$key = 'my_key';
|
|
$result = Security::cipher($txt, $key);
|
|
$this->assertEquals($txt, Security::cipher($result, $key));
|
|
|
|
$txt = 123456;
|
|
$key = 'my_key';
|
|
$result = Security::cipher($txt, $key);
|
|
$this->assertEquals($txt, Security::cipher($result, $key));
|
|
|
|
$txt = '123456';
|
|
$key = 'my_key';
|
|
$result = Security::cipher($txt, $key);
|
|
$this->assertEquals($txt, Security::cipher($result, $key));
|
|
}
|
|
|
|
/**
|
|
* testCipherEmptyKey method
|
|
*
|
|
* @expectedException PHPUnit_Framework_Error
|
|
* @return void
|
|
*/
|
|
public function testCipherEmptyKey() {
|
|
$txt = 'some_text';
|
|
$key = '';
|
|
Security::cipher($txt, $key);
|
|
}
|
|
|
|
/**
|
|
* testRijndael method
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testRijndael() {
|
|
$this->skipIf(!function_exists('mcrypt_encrypt'));
|
|
$txt = 'The quick brown fox jumped over the lazy dog.';
|
|
$key = 'DYhG93b0qyJfIxfs2guVoUubWwvniR2G0FgaC9mi';
|
|
|
|
$result = Security::rijndael($txt, $key, 'encrypt');
|
|
$this->assertEquals($txt, Security::rijndael($result, $key, 'decrypt'));
|
|
|
|
$result = Security::rijndael($key, $txt, 'encrypt');
|
|
$this->assertEquals($key, Security::rijndael($result, $txt, 'decrypt'));
|
|
|
|
$result = Security::rijndael('', $key, 'encrypt');
|
|
$this->assertEquals('', Security::rijndael($result, $key, 'decrypt'));
|
|
|
|
$key = 'this is my key of over 32 chars, yes it is';
|
|
$result = Security::rijndael($txt, $key, 'encrypt');
|
|
$this->assertEquals($txt, Security::rijndael($result, $key, 'decrypt'));
|
|
}
|
|
|
|
/**
|
|
* Test that rijndael() can still decrypt values with a fixed iv.
|
|
*
|
|
* @return void
|
|
*/
|
|
public function testRijndaelBackwardCompatibility() {
|
|
$this->skipIf(!function_exists('mcrypt_encrypt'));
|
|
|
|
$txt = 'The quick brown fox jumped over the lazy dog.';
|
|
$key = 'DYhG93b0qyJfIxfs2guVoUubWwvniR2G0FgaC9mi';
|
|
|
|
// Encrypted before random iv
|
|
$value = base64_decode('1WPjnq96LMzLGwNgmudHF+cAIqVUN5DaUZEpf5tm1EzSgt5iYY9o3d66iRI/fKJLTlTVGsa8HzW0jDNitmVXoQ==');
|
|
$this->assertEquals($txt, Security::rijndael($value, $key, 'decrypt'));
|
|
}
|
|
|
|
/**
|
|
* testRijndaelInvalidOperation method
|
|
*
|
|
* @expectedException PHPUnit_Framework_Error
|
|
* @return void
|
|
*/
|
|
public function testRijndaelInvalidOperation() {
|
|
$txt = 'The quick brown fox jumped over the lazy dog.';
|
|
$key = 'DYhG93b0qyJfIxfs2guVoUubWwvniR2G0FgaC9mi';
|
|
Security::rijndael($txt, $key, 'foo');
|
|
}
|
|
|
|
/**
|
|
* testRijndaelInvalidKey method
|
|
*
|
|
* @expectedException PHPUnit_Framework_Error
|
|
* @return void
|
|
*/
|
|
public function testRijndaelInvalidKey() {
|
|
$txt = 'The quick brown fox jumped over the lazy dog.';
|
|
$key = 'too small';
|
|
Security::rijndael($txt, $key, 'encrypt');
|
|
}
|
|
|
|
}
|