Jeppe Bundgaard
b291e959e0
- Integrate WebAuthn library for passkey authentication workflows, including assertion verification and improved error handling. - Add support for reCAPTCHA token validation across multiple endpoints for enhanced security. - Extend OpenAPI schema to document new fields and restructured payloads. - Add unit tests for WebAuthn flows, permission initialization, and route validation to ensure robustness and accuracy.
96 lines
4.3 KiB
PHP
96 lines
4.3 KiB
PHP
<?php
|
|
// Lightweight bootstrap for CLI execution without full index.php
|
|
if (!defined('WD')) {
|
|
define('WD', dirname(__DIR__, 2));
|
|
}
|
|
// Minimal requires for Subusers permission classes
|
|
require_once WD . '/modules/subusers/interfaces/subusers_permission_node_i.php';
|
|
require_once WD . '/modules/subusers/interfaces/subusers_permission_nodes_i.php';
|
|
require_once WD . '/modules/subusers/interfaces/subusers_user_grant_i.php';
|
|
require_once WD . '/modules/subusers/helpers/subusers_permission_node_key.php';
|
|
require_once WD . '/modules/subusers/helpers/subusers_permission_type.php';
|
|
require_once WD . '/modules/subusers/traits/subusers_permission_node_t.php';
|
|
require_once WD . '/modules/subusers/classes/subusers_permission_node.php';
|
|
require_once WD . '/modules/subusers/traits/subusers_permission_nodes_t.php';
|
|
require_once WD . '/modules/subusers/classes/subusers_permission_nodes.php';
|
|
require_once WD . '/modules/subusers/traits/subuser_user_grant_t.php';
|
|
require_once WD . '/modules/subusers/traits/subusers_user_permissions_t.php';
|
|
require_once WD . '/modules/subusers/permissions/subusers_permission_nodes_bookings.php';
|
|
require_once WD . '/modules/subusers/permissions/subusers_permission_nodes_orders.php';
|
|
require_once WD . '/modules/subusers/permissions/subusers_permission_nodes_selfserve.php';
|
|
require_once WD . '/modules/subusers/permissions/subusers_permission_nodes_subusers.php';
|
|
require_once WD . '/modules/subusers/permissions/subusers_permission_nodes_vehicles.php';
|
|
require_once WD . '/modules/subusers/classes/subuser_user_grant.php';
|
|
|
|
use modules\subusers\classes\subuser_user_grant as base_grant;
|
|
use modules\subusers\helpers\subusers_permission_node_key;
|
|
|
|
function ok($message): void { echo "\n\033[32m✔ $message\033[0m\n"; }
|
|
function fail($message): void { echo "\n\033[31m✖ $message\033[0m\n"; }
|
|
|
|
// Test double overriding DB-backed loadGrants() to avoid database dependency in CLI tests
|
|
class SelfserveTestSubuserGrant extends base_grant {
|
|
private array $injectedPermissions;
|
|
|
|
public function __construct(int $subuser_id, int $customer_number, array $injectedPermissions)
|
|
{
|
|
$this->injectedPermissions = $injectedPermissions;
|
|
parent::__construct($subuser_id, $customer_number);
|
|
}
|
|
|
|
// Override to inject permissions instead of querying DB
|
|
public function loadGrants(): void
|
|
{
|
|
// Manually enable nodes on each permission container without hitting the database
|
|
$reflection = new \ReflectionClass($this);
|
|
$properties = $reflection->getProperties();
|
|
foreach ($properties as $property) {
|
|
$type = $property->getType();
|
|
if ($type && is_a($type->getName(), \modules\subusers\classes\subusers_permission_nodes::class, true)) {
|
|
if (method_exists($property, 'isInitialized') && !$property->isInitialized($this)) {
|
|
continue;
|
|
}
|
|
$container = $property->getValue($this);
|
|
if ($container instanceof \modules\subusers\classes\subusers_permission_nodes) {
|
|
foreach ($this->injectedPermissions as $perm) {
|
|
$key = is_string($perm) ? $perm : $perm->name;
|
|
$node = $container->getNodeByKey($key);
|
|
if ($node) {
|
|
$node->value = true;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// Scenario: subuser has only SELFSERVE_ADD granted => ADD = true; LIST/EDIT/DELETE = false
|
|
$grant = new SelfserveTestSubuserGrant(123, 456, [subusers_permission_node_key::SELFSERVE_ADD]);
|
|
|
|
if ($grant->hasNode(subusers_permission_node_key::SELFSERVE_ADD)) {
|
|
ok('SELFSERVE_ADD is granted as expected');
|
|
} else {
|
|
fail('SELFSERVE_ADD should be granted but was not');
|
|
}
|
|
|
|
if (!$grant->hasNode(subusers_permission_node_key::SELFSERVE_LIST)) {
|
|
ok('SELFSERVE_LIST is not granted as expected');
|
|
} else {
|
|
fail('SELFSERVE_LIST should not be granted');
|
|
}
|
|
|
|
if (!$grant->hasNode(subusers_permission_node_key::SELFSERVE_EDIT)) {
|
|
ok('SELFSERVE_EDIT is not granted as expected');
|
|
} else {
|
|
fail('SELFSERVE_EDIT should not be granted');
|
|
}
|
|
|
|
if (!$grant->hasNode(subusers_permission_node_key::SELFSERVE_DELETE)) {
|
|
ok('SELFSERVE_DELETE is not granted as expected');
|
|
} else {
|
|
fail('SELFSERVE_DELETE should not be granted');
|
|
}
|
|
|
|
echo "\nSelfservePermissionInitTest completed.\n";
|