4 class LdapTest extends BrowserKitTest
9 protected $resourceId = 'resource-test';
11 public function setUp()
14 app('config')->set(['auth.method' => 'ldap', 'services.ldap.base_dn' => 'dc=ldap,dc=local', 'auth.providers.users.driver' => 'ldap']);
15 $this->mockLdap = \Mockery::mock(\BookStack\Services\Ldap::class);
16 $this->app['BookStack\Services\Ldap'] = $this->mockLdap;
17 $this->mockUser = factory(User::class)->make();
20 public function test_login()
22 $this->mockLdap->shouldReceive('connect')->once()->andReturn($this->resourceId);
23 $this->mockLdap->shouldReceive('setVersion')->once();
24 $this->mockLdap->shouldReceive('setOption')->times(4);
25 $this->mockLdap->shouldReceive('searchAndGetEntries')->times(4)
26 ->with($this->resourceId, config('services.ldap.base_dn'), \Mockery::type('string'), \Mockery::type('array'))
27 ->andReturn(['count' => 1, 0 => [
28 'uid' => [$this->mockUser->name],
29 'cn' => [$this->mockUser->name],
30 'dn' => ['dc=test' . config('services.ldap.base_dn')]
32 $this->mockLdap->shouldReceive('bind')->times(6)->andReturn(true);
34 $this->visit('/login')
36 ->type($this->mockUser->name, '#username')
37 ->type($this->mockUser->password, '#password')
39 ->seePageIs('/login')->see('Please enter an email to use for this account.');
41 $this->type($this->mockUser->email, '#email')
44 ->see($this->mockUser->name)
45 ->seeInDatabase('users', ['email' => $this->mockUser->email, 'email_confirmed' => false, 'external_auth_id' => $this->mockUser->name]);
48 public function test_login_works_when_no_uid_provided_by_ldap_server()
50 $this->mockLdap->shouldReceive('connect')->once()->andReturn($this->resourceId);
51 $this->mockLdap->shouldReceive('setVersion')->once();
52 $ldapDn = 'cn=test-user,dc=test' . config('services.ldap.base_dn');
53 $this->mockLdap->shouldReceive('setOption')->times(2);
54 $this->mockLdap->shouldReceive('searchAndGetEntries')->times(2)
55 ->with($this->resourceId, config('services.ldap.base_dn'), \Mockery::type('string'), \Mockery::type('array'))
56 ->andReturn(['count' => 1, 0 => [
57 'cn' => [$this->mockUser->name],
59 'mail' => [$this->mockUser->email]
61 $this->mockLdap->shouldReceive('bind')->times(3)->andReturn(true);
63 $this->visit('/login')
65 ->type($this->mockUser->name, '#username')
66 ->type($this->mockUser->password, '#password')
69 ->see($this->mockUser->name)
70 ->seeInDatabase('users', ['email' => $this->mockUser->email, 'email_confirmed' => false, 'external_auth_id' => $ldapDn]);
73 public function test_initial_incorrect_details()
75 $this->mockLdap->shouldReceive('connect')->once()->andReturn($this->resourceId);
76 $this->mockLdap->shouldReceive('setVersion')->once();
77 $this->mockLdap->shouldReceive('setOption')->times(2);
78 $this->mockLdap->shouldReceive('searchAndGetEntries')->times(2)
79 ->with($this->resourceId, config('services.ldap.base_dn'), \Mockery::type('string'), \Mockery::type('array'))
80 ->andReturn(['count' => 1, 0 => [
81 'uid' => [$this->mockUser->name],
82 'cn' => [$this->mockUser->name],
83 'dn' => ['dc=test' . config('services.ldap.base_dn')]
85 $this->mockLdap->shouldReceive('bind')->times(3)->andReturn(true, true, false);
87 $this->visit('/login')
89 ->type($this->mockUser->name, '#username')
90 ->type($this->mockUser->password, '#password')
92 ->seePageIs('/login')->see('These credentials do not match our records.')
93 ->dontSeeInDatabase('users', ['external_auth_id' => $this->mockUser->name]);
96 public function test_create_user_form()
98 $this->asAdmin()->visit('/settings/users/create')
100 ->type($this->mockUser->name, '#name')
101 ->type($this->mockUser->email, '#email')
103 ->see('The external auth id field is required.')
104 ->type($this->mockUser->name, '#external_auth_id')
106 ->seePageIs('/settings/users')
107 ->seeInDatabase('users', ['email' => $this->mockUser->email, 'external_auth_id' => $this->mockUser->name, 'email_confirmed' => true]);
110 public function test_user_edit_form()
112 $editUser = $this->getNormalUser();
113 $this->asAdmin()->visit('/settings/users/' . $editUser->id)
115 ->dontSee('Password')
116 ->type('test_auth_id', '#external_auth_id')
118 ->seePageIs('/settings/users')
119 ->seeInDatabase('users', ['email' => $editUser->email, 'external_auth_id' => 'test_auth_id']);
122 public function test_registration_disabled()
124 $this->visit('/register')
125 ->seePageIs('/login');
128 public function test_non_admins_cannot_change_auth_id()
130 $testUser = $this->getNormalUser();
131 $this->actingAs($testUser)->visit('/settings/users/' . $testUser->id)
132 ->dontSee('External Authentication');