tests/phpunit/includes/api/ApiBlockTest.php

   1 <?php
   2
   3 /**
   4  * @group API
   5  * @group Database
   6  * @group medium
   7  */
   8 class ApiBlockTest extends ApiTestCase {
   9         protected function setUp() {
  10                 parent::setUp();
  11                 $this->doLogin();
  12         }
  13
  14         function getTokens() {
  15                 return $this->getTokenList( self::$users['sysop'] );
  16         }
  17
  18         function addDBData() {
  19                 $user = User::newFromName( 'UTApiBlockee' );
  20
  21                 if ( $user->getId() == 0 ) {
  22                         $user->addToDatabase();
  23                         $user->setPassword( 'UTApiBlockeePassword' );
  24
  25                         $user->saveSettings();
  26                 }
  27         }
  28
  29         /**
  30          * This test has probably always been broken and use an invalid token
  31          * Bug tracking brokenness is https://bugzilla.wikimedia.org/35646
  32          *
  33          * Root cause is https://gerrit.wikimedia.org/r/3434
  34          * Which made the Block/Unblock API to actually verify the token
  35          * previously always considered valid (bug 34212).
  36          */
  37         function testMakeNormalBlock() {
  38                 $data = $this->getTokens();
  39
  40                 $user = User::newFromName( 'UTApiBlockee' );
  41
  42                 if ( !$user->getId() ) {
  43                         $this->markTestIncomplete( "The user UTApiBlockee does not exist" );
  44                 }
  45
  46                 if ( !isset( $data[0]['query']['pages'] ) ) {
  47                         $this->markTestIncomplete( "No block token found" );
  48                 }
  49
  50                 $keys = array_keys( $data[0]['query']['pages'] );
  51                 $key = array_pop( $keys );
  52                 $pageinfo = $data[0]['query']['pages'][$key];
  53
  54                 $this->doApiRequest( array(
  55                         'action' => 'block',
  56                         'user' => 'UTApiBlockee',
  57                         'reason' => 'Some reason',
  58                         'token' => $pageinfo['blocktoken'] ), null, false, self::$users['sysop']->user );
  59
  60                 $block = Block::newFromTarget( 'UTApiBlockee' );
  61
  62                 $this->assertTrue( !is_null( $block ), 'Block is valid' );
  63
  64                 $this->assertEquals( 'UTApiBlockee', (string)$block->getTarget() );
  65                 $this->assertEquals( 'Some reason', $block->mReason );
  66                 $this->assertEquals( 'infinity', $block->mExpiry );
  67         }
  68
  69         /**
  70          * @dataProvider provideBlockUnblockAction
  71          */
  72         function testGetTokenUsingABlockingAction( $action ) {
  73                 $data = $this->doApiRequest(
  74                         array(
  75                                 'action' => $action,
  76                                 'user' => 'UTApiBlockee',
  77                                 'gettoken' => '' ),
  78                         null,
  79                         false,
  80                         self::$users['sysop']->user
  81                 );
  82                 $this->assertEquals( 34, strlen( $data[0][$action]["{$action}token"] ) );
  83         }
  84
  85         /**
  86          * Attempting to block without a token should give a UsageException with
  87          * error message:
  88          *   "The token parameter must be set"
  89          *
  90          * @dataProvider provideBlockUnblockAction
  91          * @expectedException UsageException
  92          */
  93         function testBlockingActionWithNoToken( $action ) {
  94                 $this->doApiRequest(
  95                         array(
  96                                 'action' => $action,
  97                                 'user' => 'UTApiBlockee',
  98                                 'reason' => 'Some reason',
  99                         ),
 100                         null,
 101                         false,
 102                         self::$users['sysop']->user
 103                 );
 104         }
 105
 106         /**
 107          * Just provide the 'block' and 'unblock' action to test both API calls
 108          */
 109         public static function provideBlockUnblockAction() {
 110                 return array(
 111                         array( 'block' ),
 112                         array( 'unblock' ),
 113                 );
 114         }
 115 }