4 class LdapTest extends BrowserKitTest
9 protected $resourceId = 'resource-test';
11 public function setUp()
14 if (!defined('LDAP_OPT_REFERRALS')) define('LDAP_OPT_REFERRALS', 1);
15 app('config')->set(['auth.method' => 'ldap', 'services.ldap.base_dn' => 'dc=ldap,dc=local', 'auth.providers.users.driver' => 'ldap']);
16 $this->mockLdap = \Mockery::mock(\BookStack\Services\Ldap::class);
17 $this->app['BookStack\Services\Ldap'] = $this->mockLdap;
18 $this->mockUser = factory(User::class)->make();
21 public function test_login()
23 $this->mockLdap->shouldReceive('connect')->once()->andReturn($this->resourceId);
24 $this->mockLdap->shouldReceive('setVersion')->once();
25 $this->mockLdap->shouldReceive('setOption')->times(4);
26 $this->mockLdap->shouldReceive('searchAndGetEntries')->times(4)
27 ->with($this->resourceId, config('services.ldap.base_dn'), \Mockery::type('string'), \Mockery::type('array'))
28 ->andReturn(['count' => 1, 0 => [
29 'uid' => [$this->mockUser->name],
30 'cn' => [$this->mockUser->name],
31 'dn' => ['dc=test' . config('services.ldap.base_dn')]
33 $this->mockLdap->shouldReceive('bind')->times(6)->andReturn(true);
35 $this->visit('/login')
37 ->type($this->mockUser->name, '#username')
38 ->type($this->mockUser->password, '#password')
40 ->seePageIs('/login')->see('Please enter an email to use for this account.');
42 $this->type($this->mockUser->email, '#email')
45 ->see($this->mockUser->name)
46 ->seeInDatabase('users', ['email' => $this->mockUser->email, 'email_confirmed' => false, 'external_auth_id' => $this->mockUser->name]);
49 public function test_login_works_when_no_uid_provided_by_ldap_server()
51 $this->mockLdap->shouldReceive('connect')->once()->andReturn($this->resourceId);
52 $this->mockLdap->shouldReceive('setVersion')->once();
53 $ldapDn = 'cn=test-user,dc=test' . config('services.ldap.base_dn');
54 $this->mockLdap->shouldReceive('setOption')->times(2);
55 $this->mockLdap->shouldReceive('searchAndGetEntries')->times(2)
56 ->with($this->resourceId, config('services.ldap.base_dn'), \Mockery::type('string'), \Mockery::type('array'))
57 ->andReturn(['count' => 1, 0 => [
58 'cn' => [$this->mockUser->name],
60 'mail' => [$this->mockUser->email]
62 $this->mockLdap->shouldReceive('bind')->times(3)->andReturn(true);
64 $this->visit('/login')
66 ->type($this->mockUser->name, '#username')
67 ->type($this->mockUser->password, '#password')
70 ->see($this->mockUser->name)
71 ->seeInDatabase('users', ['email' => $this->mockUser->email, 'email_confirmed' => false, 'external_auth_id' => $ldapDn]);
74 public function test_initial_incorrect_details()
76 $this->mockLdap->shouldReceive('connect')->once()->andReturn($this->resourceId);
77 $this->mockLdap->shouldReceive('setVersion')->once();
78 $this->mockLdap->shouldReceive('setOption')->times(2);
79 $this->mockLdap->shouldReceive('searchAndGetEntries')->times(2)
80 ->with($this->resourceId, config('services.ldap.base_dn'), \Mockery::type('string'), \Mockery::type('array'))
81 ->andReturn(['count' => 1, 0 => [
82 'uid' => [$this->mockUser->name],
83 'cn' => [$this->mockUser->name],
84 'dn' => ['dc=test' . config('services.ldap.base_dn')]
86 $this->mockLdap->shouldReceive('bind')->times(3)->andReturn(true, true, false);
88 $this->visit('/login')
90 ->type($this->mockUser->name, '#username')
91 ->type($this->mockUser->password, '#password')
93 ->seePageIs('/login')->see('These credentials do not match our records.')
94 ->dontSeeInDatabase('users', ['external_auth_id' => $this->mockUser->name]);
97 public function test_create_user_form()
99 $this->asAdmin()->visit('/settings/users/create')
100 ->dontSee('Password')
101 ->type($this->mockUser->name, '#name')
102 ->type($this->mockUser->email, '#email')
104 ->see('The external auth id field is required.')
105 ->type($this->mockUser->name, '#external_auth_id')
107 ->seePageIs('/settings/users')
108 ->seeInDatabase('users', ['email' => $this->mockUser->email, 'external_auth_id' => $this->mockUser->name, 'email_confirmed' => true]);
111 public function test_user_edit_form()
113 $editUser = $this->getNormalUser();
114 $this->asAdmin()->visit('/settings/users/' . $editUser->id)
116 ->dontSee('Password')
117 ->type('test_auth_id', '#external_auth_id')
119 ->seePageIs('/settings/users')
120 ->seeInDatabase('users', ['email' => $editUser->email, 'external_auth_id' => 'test_auth_id']);
123 public function test_registration_disabled()
125 $this->visit('/register')
126 ->seePageIs('/login');
129 public function test_non_admins_cannot_change_auth_id()
131 $testUser = $this->getNormalUser();
132 $this->actingAs($testUser)->visit('/settings/users/' . $testUser->id)
133 ->dontSee('External Authentication');