NameIdValidatorTest.php

/tests/LightSaml/Tests/Validator/Model/NameId/NameIdValidatorTest.php

https://github.com/lightSAML/lightSAML · PHP · 438 lines · 316 code · 122 blank · 0 comment · 0 complexity · 57a85886adfe64102503a0f86fa2828b MD5 · raw file

<?php

namespace LightSaml\Tests\Validator\Model\NameId;

use LightSaml\Model\Assertion\NameID;
use LightSaml\SamlConstants;
use LightSaml\Tests\BaseTestCase;
use LightSaml\Validator\Model\NameId\NameIdValidator;

class NameIdValidatorTest extends BaseTestCase
{
    public function test_ok_if_no_format()
    {
        $nameId = new NameID();

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_invalid_format()
    {
        $this->expectExceptionMessage("NameID element has Format attribute 'invalid format' which is not a wellformed absolute uri");
        $this->expectException(\LightSaml\Error\LightSamlValidationException::class);
        $nameId = new NameID();
        $nameId->setFormat('invalid format');

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_valid_email_format()
    {
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_EMAIL)
            ->setValue('email@domain.com');

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_invalid_email_format()
    {
        $this->expectExceptionMessage("Value of NameID is not a valid email address according to the IETF RFC 2822 specification");
        $this->expectException(\LightSaml\Error\LightSamlValidationException::class);
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_EMAIL)
            ->setValue('not_an_email');

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_empty_email_format()
    {
        $this->expectExceptionMessage("NameID with Email Format attribute MUST contain a Value that contains more than whitespace characters");
        $this->expectException(\LightSaml\Error\LightSamlValidationException::class);
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_EMAIL);

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_valid_x509_subject_format()
    {
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_X509_SUBJECT_NAME)
            ->setValue('CN=mt.evo.team,O=BOS,C=RS');

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_empty_x509_subject_format()
    {
        $this->expectExceptionMessage("NameID with X509SubjectName Format attribute MUST contain a Value that contains more than whitespace characters");
        $this->expectException(\LightSaml\Error\LightSamlValidationException::class);
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_X509_SUBJECT_NAME);

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_valid_windows_format_with_domain()
    {
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_WINDOWS)
            ->setValue('DomainName\UserName');

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_valid_windows_format_with_out_domain()
    {
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_WINDOWS)
            ->setValue('UserName');

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_empty_windows_format()
    {
        $this->expectExceptionMessage("NameID with Windows Format attribute MUST contain a Value that contains more than whitespace characters");
        $this->expectException(\LightSaml\Error\LightSamlValidationException::class);
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_WINDOWS);

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_valid_kerberos_format_full()
    {
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_KERBEROS)
            ->setValue('name/instance@REALM');

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_valid_kerberos_format_short()
    {
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_KERBEROS)
            ->setValue('name@REALM');

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_invalid_kerberos_format()
    {
        $this->expectExceptionMessage("NameID with Kerberos Format attribute MUST contain a Value that contains a '@'");
        $this->expectException(\LightSaml\Error\LightSamlValidationException::class);
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_KERBEROS)
            ->setValue('name');

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_invalid_kerberos_format_short()
    {
        $this->expectExceptionMessage("NameID with Kerberos Format attribute MUST contain a Value with at least 3 characters");
        $this->expectException(\LightSaml\Error\LightSamlValidationException::class);
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_KERBEROS)
            ->setValue('a@');

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_invalid_kerberos_format_empty()
    {
        $this->expectExceptionMessage("NameID with Kerberos Format attribute MUST contain a Value that contains more than whitespace characters");
        $this->expectException(\LightSaml\Error\LightSamlValidationException::class);
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_KERBEROS);

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_valid_entity_format()
    {
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_ENTITY)
            ->setValue('some:entity');

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_invalid_entity_format_empty()
    {
        $this->expectExceptionMessage("NameID with Entity Format attribute MUST contain a Value that contains more than whitespace characters");
        $this->expectException(\LightSaml\Error\LightSamlValidationException::class);
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_ENTITY);

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_invalid_entity_format_long()
    {
        $this->expectExceptionMessage("NameID with Entity Format attribute MUST have a Value that contains no more than 1024 characters");
        $this->expectException(\LightSaml\Error\LightSamlValidationException::class);
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_ENTITY)
            ->setValue(str_pad('long_string', 1030, 'x'));

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_invalid_entity_format_with_name_qualifier()
    {
        $this->expectExceptionMessage("NameID with Entity Format attribute MUST NOT set the NameQualifier attribute");
        $this->expectException(\LightSaml\Error\LightSamlValidationException::class);
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_ENTITY)
            ->setValue('some:entity')
            ->setNameQualifier('name:qualifier');

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_invalid_entity_format_with_sp_name_qualifier()
    {
        $this->expectExceptionMessage("NameID with Entity Format attribute MUST NOT set the SPNameQualifier attribute");
        $this->expectException(\LightSaml\Error\LightSamlValidationException::class);
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_ENTITY)
            ->setValue('some:entity')
            ->setSPNameQualifier('sp:name:qualifier');

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_invalid_entity_format_with_sp_provided_id()
    {
        $this->expectExceptionMessage("NameID with Entity Format attribute MUST NOT set the SPProvidedID attribute");
        $this->expectException(\LightSaml\Error\LightSamlValidationException::class);
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_ENTITY)
            ->setValue('some:entity')
            ->setSPProvidedID('sp:provided:id');

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_valid_persistent_format()
    {
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_PERSISTENT)
            ->setValue('12345678');

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_valid_persistent_format_with_other_attributes()
    {
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_PERSISTENT)
            ->setValue('12345678')
            ->setSPProvidedID('sp:provided:id')
            ->setSPNameQualifier('sp:name:qualifier')
            ->setNameQualifier('name:qualifier')
        ;

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_invalid_persistent_format_empty()
    {
        $this->expectExceptionMessage("NameID with Persistent Format attribute MUST contain a Value that contains more than whitespace characters");
        $this->expectException(\LightSaml\Error\LightSamlValidationException::class);
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_PERSISTENT);

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_invalid_persistent_format_long()
    {
        $this->expectExceptionMessage("NameID with Persistent Format attribute MUST have a Value that contains no more than 256 characters");
        $this->expectException(\LightSaml\Error\LightSamlValidationException::class);
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_PERSISTENT)
            ->setValue(str_pad('a', 260, 'x'));

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_valid_transient_format()
    {
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_TRANSIENT)
            ->setValue('1234567890123456');

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_valid_transient_format_with_other_attributes()
    {
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_TRANSIENT)
            ->setValue('1234567890123456')
            ->setSPProvidedID('sp:provided:id')
            ->setSPNameQualifier('sp:name:qualifier')
            ->setNameQualifier('name:qualifier')
        ;

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_invalid_transient_format_empty()
    {
        $this->expectExceptionMessage("NameID with Transient Format attribute MUST contain a Value that contains more than whitespace characters");
        $this->expectException(\LightSaml\Error\LightSamlValidationException::class);
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_TRANSIENT);

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_invalid_transient_format_long()
    {
        $this->expectExceptionMessage("NameID with Transient Format attribute MUST have a Value that contains no more than 256 characters");
        $this->expectException(\LightSaml\Error\LightSamlValidationException::class);
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_TRANSIENT)
            ->setValue(str_pad('a', 260, 'x'));

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }

    public function test_invalid_transient_format_short()
    {
        $this->expectExceptionMessage("NameID '123456789012345' with Transient Format attribute MUST have a Value with at least 16 characters (the equivalent of 128 bits)");
        $this->expectException(\LightSaml\Error\LightSamlValidationException::class);
        $nameId = new NameID();
        $nameId->setFormat(SamlConstants::NAME_ID_FORMAT_TRANSIENT)
            ->setValue('123456789012345');

        $validator = new NameIdValidator();

        $validator->validateNameId($nameId);

        $this->assertTrue(true);
    }
}