Sabre\HTTP\Auth\DigestTest Class Reference

Inheritance diagram for Sabre\HTTP\Auth\DigestTest:

Collaboration diagram for Sabre\HTTP\Auth\DigestTest:

Public Member Functions
	setUp ()
	testDigest ()
	testInvalidDigest ()
	testInvalidDigest2 ()
	testDigestAuthInt ()
	testDigestAuthBoth ()

Data Fields
const	REALM = 'SabreDAV unittest'

Private Member Functions
	getServerTokens ($qop=Digest::QOP_AUTH)

Private Attributes
	$response
	$request
	$auth

Detailed Description

Definition at line 8 of file DigestTest.php.

Member Function Documentation

getServerTokens()

Sabre\HTTP\Auth\DigestTest::getServerTokens (   $qop = Digest::QOP_AUTH )

private

Definition at line 165 of file DigestTest.php.

References $test, Sabre\HTTP\Auth\Digest\QOP_AUTH, Sabre\HTTP\Auth\Digest\QOP_AUTHINT, and Sabre\HTTP\Auth\DigestTest\setUp().

Referenced by Sabre\HTTP\Auth\DigestTest\testDigest(), Sabre\HTTP\Auth\DigestTest\testDigestAuthBoth(), Sabre\HTTP\Auth\DigestTest\testDigestAuthInt(), and Sabre\HTTP\Auth\DigestTest\testInvalidDigest().

                                                            {

        $this->auth->requireLogin();

        switch ($qop) {
            case Digest::QOP_AUTH    : $qopstr = 'auth'; break;
            case Digest::QOP_AUTHINT : $qopstr = 'auth-int'; break;
            default                  : $qopstr = 'auth,auth-int'; break;
        }

        $test = preg_match('/Digest realm="' . self::REALM . '",qop="' . $qopstr . '",nonce="([0-9a-f]*)",opaque="([0-9a-f]*)"/',
            $this->response->getHeader('WWW-Authenticate'), $matches);

        $this->assertTrue($test == true, 'The WWW-Authenticate response didn\'t match our pattern. We received: ' . $this->response->getHeader('WWW-Authenticate'));

        $nonce = $matches[1];
        $opaque = $matches[2];

        // Reset our environment
        $this->setUp();
        $this->auth->setQOP($qop);

        return [$nonce,$opaque];

    }

Here is the call graph for this function:

Here is the caller graph for this function:

setUp()

Sabre\HTTP\Auth\DigestTest::setUp

(

)

Definition at line 29 of file DigestTest.php.

Referenced by Sabre\HTTP\Auth\DigestTest\getServerTokens().

                     {

        $this->response = new Response();
        $this->request = new Request();
        $this->auth = new Digest(self::REALM, $this->request, $this->response);


    }

Here is the caller graph for this function:

testDigest()

Sabre\HTTP\Auth\DigestTest::testDigest

(

)

Definition at line 38 of file DigestTest.php.

References $password, and Sabre\HTTP\Auth\DigestTest\getServerTokens().

                          {

        list($nonce, $opaque) = $this->getServerTokens();

        $username = 'admin';
        $password = 12345;
        $nc = '00002';
        $cnonce = uniqid();

        $digestHash = md5(
            md5($username . ':' . self::REALM . ':' . $password) . ':' .
            $nonce . ':' .
            $nc . ':' .
            $cnonce . ':' .
            'auth:' .
            md5('GET' . ':' . '/')
        );

        $this->request->setMethod('GET');
        $this->request->setHeader('Authorization', 'Digest username="' . $username . '", realm="' . self::REALM . '", nonce="' . $nonce . '", uri="/", response="' . $digestHash . '", opaque="' . $opaque . '", qop=auth,nc=' . $nc . ',cnonce="' . $cnonce . '"');

        $this->auth->init();

        $this->assertEquals($username, $this->auth->getUsername());
        $this->assertEquals(self::REALM, $this->auth->getRealm());
        $this->assertTrue($this->auth->validateA1(md5($username . ':' . self::REALM . ':' . $password)), 'Authentication is deemed invalid through validateA1');
        $this->assertTrue($this->auth->validatePassword($password), 'Authentication is deemed invalid through validatePassword');

    }

Here is the call graph for this function:

testDigestAuthBoth()

Sabre\HTTP\Auth\DigestTest::testDigestAuthBoth

(

)

Definition at line 135 of file DigestTest.php.

References $password, Sabre\HTTP\Auth\DigestTest\getServerTokens(), Sabre\HTTP\Auth\Digest\QOP_AUTH, and Sabre\HTTP\Auth\Digest\QOP_AUTHINT.

                                  {

        $this->auth->setQOP(Digest::QOP_AUTHINT | Digest::QOP_AUTH);
        list($nonce, $opaque) = $this->getServerTokens(Digest::QOP_AUTHINT | Digest::QOP_AUTH);

        $username = 'admin';
        $password = 12345;
        $nc = '00003';
        $cnonce = uniqid();

        $digestHash = md5(
            md5($username . ':' . self::REALM . ':' . $password) . ':' .
            $nonce . ':' .
            $nc . ':' .
            $cnonce . ':' .
            'auth-int:' .
            md5('POST' . ':' . '/' . ':' . md5('body'))
        );

        $this->request->setMethod('POST');
        $this->request->setHeader('Authorization', 'Digest username="' . $username . '", realm="' . self::REALM . '", nonce="' . $nonce . '", uri="/", response="' . $digestHash . '", opaque="' . $opaque . '", qop=auth-int,nc=' . $nc . ',cnonce="' . $cnonce . '"');
        $this->request->setBody('body');

        $this->auth->init();

        $this->assertTrue($this->auth->validateA1(md5($username . ':' . self::REALM . ':' . $password)), 'Authentication is deemed invalid through validateA1');

    }

Here is the call graph for this function:

testDigestAuthInt()

Sabre\HTTP\Auth\DigestTest::testDigestAuthInt

(

)

Definition at line 106 of file DigestTest.php.

References $password, Sabre\HTTP\Auth\DigestTest\getServerTokens(), and Sabre\HTTP\Auth\Digest\QOP_AUTHINT.

                                 {

        $this->auth->setQOP(Digest::QOP_AUTHINT);
        list($nonce, $opaque) = $this->getServerTokens(Digest::QOP_AUTHINT);

        $username = 'admin';
        $password = 12345;
        $nc = '00003';
        $cnonce = uniqid();

        $digestHash = md5(
            md5($username . ':' . self::REALM . ':' . $password) . ':' .
            $nonce . ':' .
            $nc . ':' .
            $cnonce . ':' .
            'auth-int:' .
            md5('POST' . ':' . '/' . ':' . md5('body'))
        );

        $this->request->setMethod('POST');
        $this->request->setHeader('Authorization', 'Digest username="' . $username . '", realm="' . self::REALM . '", nonce="' . $nonce . '", uri="/", response="' . $digestHash . '", opaque="' . $opaque . '", qop=auth-int,nc=' . $nc . ',cnonce="' . $cnonce . '"');
        $this->request->setBody('body');

        $this->auth->init();

        $this->assertTrue($this->auth->validateA1(md5($username . ':' . self::REALM . ':' . $password)), 'Authentication is deemed invalid through validateA1');

    }

Here is the call graph for this function:

testInvalidDigest()

Sabre\HTTP\Auth\DigestTest::testInvalidDigest

(

)

Definition at line 68 of file DigestTest.php.

References $password, and Sabre\HTTP\Auth\DigestTest\getServerTokens().

                                 {

        list($nonce, $opaque) = $this->getServerTokens();

        $username = 'admin';
        $password = 12345;
        $nc = '00002';
        $cnonce = uniqid();

        $digestHash = md5(
            md5($username . ':' . self::REALM . ':' . $password) . ':' .
            $nonce . ':' .
            $nc . ':' .
            $cnonce . ':' .
            'auth:' .
            md5('GET' . ':' . '/')
        );

        $this->request->setMethod('GET');
        $this->request->setHeader('Authorization', 'Digest username="' . $username . '", realm="' . self::REALM . '", nonce="' . $nonce . '", uri="/", response="' . $digestHash . '", opaque="' . $opaque . '", qop=auth,nc=' . $nc . ',cnonce="' . $cnonce . '"');

        $this->auth->init();

        $this->assertFalse($this->auth->validateA1(md5($username . ':' . self::REALM . ':' . ($password . 'randomness'))), 'Authentication is deemed invalid through validateA1');

    }

Here is the call graph for this function:

testInvalidDigest2()

Sabre\HTTP\Auth\DigestTest::testInvalidDigest2

(

)

Definition at line 95 of file DigestTest.php.

                                  {

        $this->request->setMethod('GET');
        $this->request->setHeader('Authorization', 'basic blablabla');

        $this->auth->init();
        $this->assertFalse($this->auth->validateA1(md5('user:realm:password')));

    }

Field Documentation

$auth

Sabre\HTTP\Auth\DigestTest::$auth

private

Definition at line 25 of file DigestTest.php.

$request

Sabre\HTTP\Auth\DigestTest::$request

private

Definition at line 20 of file DigestTest.php.

$response

Sabre\HTTP\Auth\DigestTest::$response

private

Definition at line 13 of file DigestTest.php.

REALM

const Sabre\HTTP\Auth\DigestTest::REALM = 'SabreDAV unittest'

Definition at line 27 of file DigestTest.php.

---

The documentation for this class was generated from the following file:

• libs/composer/vendor/sabre/http/tests/HTTP/Auth/DigestTest.php