SetCookieTest.php 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360
  1. <?php
  2. /**
  3. * Zend Framework
  4. *
  5. * LICENSE
  6. *
  7. * This source file is subject to the new BSD license that is bundled
  8. * with this package in the file LICENSE.txt.
  9. * It is also available through the world-wide-web at this URL:
  10. * http://framework.zend.com/license/new-bsd
  11. * If you did not receive a copy of the license and are unable to
  12. * obtain it through the world-wide-web, please send an email
  13. * to license@zend.com so we can send you a copy immediately.
  14. *
  15. * @category Zend
  16. * @package Zend_Http_Header
  17. * @subpackage UnitTests
  18. * @copyright Copyright (c) 2005-2011 Zend Technologies USA Inc. (http://www.zend.com)
  19. * @license http://framework.zend.com/license/new-bsd New BSD License
  20. * @version $Id$
  21. */
  22. /**
  23. * @see Zend_Http_Header_SetCookie
  24. */
  25. require_once 'Zend/Http/Header/SetCookie.php';
  26. /**
  27. * @see Zend_Controller_Response_HttpTestCase
  28. */
  29. require_once 'Zend/Controller/Response/HttpTestCase.php';
  30. /**
  31. * Zend_Http_Cookie unit tests
  32. *
  33. * @category Zend
  34. * @package Zend_Http_Cookie
  35. * @subpackage UnitTests
  36. * @copyright Copyright (c) 2005-2011 Zend Technologies USA Inc. (http://www.zend.com)
  37. * @license http://framework.zend.com/license/new-bsd New BSD License
  38. * @group Zend_Http
  39. * @group Zend_Http_Header
  40. * @group ZF-4520
  41. */
  42. class Zend_Http_Header_SetCookieTest extends PHPUnit_Framework_TestCase
  43. {
  44. /**
  45. * @group ZF2-254
  46. */
  47. public function testSetCookieConstructor()
  48. {
  49. $setCookieHeader = new Zend_Http_Header_SetCookie(
  50. 'myname', 'myvalue', 'Wed, 13-Jan-2021 22:23:01 GMT',
  51. '/accounts', 'docs.foo.com', true, true, 99, 9
  52. );
  53. $this->assertEquals('myname', $setCookieHeader->getName());
  54. $this->assertEquals('myvalue', $setCookieHeader->getValue());
  55. $this->assertEquals('Wed, 13-Jan-2021 22:23:01 GMT', $setCookieHeader->getExpires());
  56. $this->assertEquals('/accounts', $setCookieHeader->getPath());
  57. $this->assertEquals('docs.foo.com', $setCookieHeader->getDomain());
  58. $this->assertTrue($setCookieHeader->isSecure());
  59. $this->assertTrue($setCookieHeader->isHttpOnly());
  60. $this->assertEquals(99, $setCookieHeader->getMaxAge());
  61. $this->assertEquals(9, $setCookieHeader->getVersion());
  62. }
  63. public function testSetCookieFromStringCreatesValidSetCookieHeader()
  64. {
  65. $setCookieHeader = Zend_Http_Header_SetCookie::fromString('Set-Cookie: xxx');
  66. $this->assertTrue($setCookieHeader instanceof Zend_Http_Header_SetCookie);
  67. }
  68. public function testSetCookieFromStringCanCreateSingleHeader()
  69. {
  70. $setCookieHeader = Zend_Http_Header_SetCookie::fromString('Set-Cookie: myname=myvalue');
  71. $this->assertTrue($setCookieHeader instanceof Zend_Http_Header_SetCookie);
  72. $this->assertEquals('myname', $setCookieHeader->getName());
  73. $this->assertEquals('myvalue', $setCookieHeader->getValue());
  74. $setCookieHeader = Zend_Http_Header_SetCookie::fromString(
  75. 'set-cookie: myname=myvalue; Domain=docs.foo.com; Path=/accounts;'
  76. . 'Expires=Wed, 13-Jan-2021 22:23:01 GMT; Secure; HttpOnly'
  77. );
  78. $this->assertTrue($setCookieHeader instanceof Zend_Http_Header_SetCookie);
  79. $this->assertEquals('myname', $setCookieHeader->getName());
  80. $this->assertEquals('myvalue', $setCookieHeader->getValue());
  81. $this->assertEquals('docs.foo.com', $setCookieHeader->getDomain());
  82. $this->assertEquals('/accounts', $setCookieHeader->getPath());
  83. $this->assertEquals('Wed, 13-Jan-2021 22:23:01 GMT', $setCookieHeader->getExpires());
  84. $this->assertTrue($setCookieHeader->isSecure());
  85. $this->assertTrue($setCookieHeader->isHttponly());
  86. }
  87. public function testSetCookieFromStringCanCreateMultipleHeaders()
  88. {
  89. $setCookieHeaders = Zend_Http_Header_SetCookie::fromString(
  90. 'Set-Cookie: myname=myvalue, '
  91. . 'someothername=someothervalue; Domain=docs.foo.com; Path=/accounts;'
  92. . 'Expires=Wed, 13-Jan-2021 22:23:01 GMT; Secure; HttpOnly'
  93. );
  94. $this->assertTrue(is_array($setCookieHeaders));
  95. $setCookieHeader = $setCookieHeaders[0];
  96. $this->assertTrue($setCookieHeader instanceof Zend_Http_Header_SetCookie);
  97. $this->assertEquals('myname', $setCookieHeader->getName());
  98. $this->assertEquals('myvalue', $setCookieHeader->getValue());
  99. $setCookieHeader = $setCookieHeaders[1];
  100. $this->assertTrue($setCookieHeader instanceof Zend_Http_Header_SetCookie);
  101. $this->assertEquals('someothername', $setCookieHeader->getName());
  102. $this->assertEquals('someothervalue', $setCookieHeader->getValue());
  103. $this->assertEquals('Wed, 13-Jan-2021 22:23:01 GMT', $setCookieHeader->getExpires());
  104. $this->assertEquals('docs.foo.com', $setCookieHeader->getDomain());
  105. $this->assertEquals('/accounts', $setCookieHeader->getPath());
  106. $this->assertTrue($setCookieHeader->isSecure());
  107. $this->assertTrue($setCookieHeader->isHttponly());
  108. }
  109. public function testSetCookieGetFieldNameReturnsHeaderName()
  110. {
  111. $setCookieHeader = new Zend_Http_Header_SetCookie();
  112. $this->assertEquals('Set-Cookie', $setCookieHeader->getFieldName());
  113. }
  114. public function testSetCookieGetFieldValueReturnsProperValue()
  115. {
  116. $setCookieHeader = new Zend_Http_Header_SetCookie();
  117. $setCookieHeader->setName('myname');
  118. $setCookieHeader->setValue('myvalue');
  119. $setCookieHeader->setExpires('Wed, 13-Jan-2021 22:23:01 GMT');
  120. $setCookieHeader->setDomain('docs.foo.com');
  121. $setCookieHeader->setPath('/accounts');
  122. $setCookieHeader->setSecure(true);
  123. $setCookieHeader->setHttponly(true);
  124. $target = 'myname=myvalue; Expires=Wed, 13-Jan-2021 22:23:01 GMT;'
  125. . ' Domain=docs.foo.com; Path=/accounts;'
  126. . ' Secure; HttpOnly';
  127. $this->assertEquals($target, $setCookieHeader->getFieldValue());
  128. }
  129. public function testSetCookieToStringReturnsHeaderFormattedString()
  130. {
  131. $setCookieHeader = new Zend_Http_Header_SetCookie();
  132. $setCookieHeader->setName('myname');
  133. $setCookieHeader->setValue('myvalue');
  134. $setCookieHeader->setExpires('Wed, 13-Jan-2021 22:23:01 GMT');
  135. $setCookieHeader->setDomain('docs.foo.com');
  136. $setCookieHeader->setPath('/accounts');
  137. $setCookieHeader->setSecure(true);
  138. $setCookieHeader->setHttponly(true);
  139. $target = 'Set-Cookie: myname=myvalue; Expires=Wed, 13-Jan-2021 22:23:01 GMT;'
  140. . ' Domain=docs.foo.com; Path=/accounts;'
  141. . ' Secure; HttpOnly';
  142. $this->assertEquals($target, $setCookieHeader->toString());
  143. }
  144. public function testSetCookieCanAppendOtherHeadersInWhenCreatingString()
  145. {
  146. $setCookieHeader = new Zend_Http_Header_SetCookie();
  147. $setCookieHeader->setName('myname');
  148. $setCookieHeader->setValue('myvalue');
  149. $setCookieHeader->setExpires('Wed, 13-Jan-2021 22:23:01 GMT');
  150. $setCookieHeader->setDomain('docs.foo.com');
  151. $setCookieHeader->setPath('/accounts');
  152. $setCookieHeader->setSecure(true);
  153. $setCookieHeader->setHttponly(true);
  154. $appendCookie = new Zend_Http_Header_SetCookie('othername', 'othervalue');
  155. $headerLine = $setCookieHeader->toStringMultipleHeaders(array($appendCookie));
  156. $target = 'Set-Cookie: myname=myvalue; Expires=Wed, 13-Jan-2021 22:23:01 GMT;'
  157. . ' Domain=docs.foo.com; Path=/accounts;'
  158. . ' Secure; HttpOnly, othername=othervalue';
  159. $this->assertEquals($target, $headerLine);
  160. }
  161. /** Implmentation specific tests here */
  162. /**
  163. * ZF2-169
  164. *
  165. * @see http://framework.zend.com/issues/browse/ZF2-169
  166. */
  167. public function testZF2_169()
  168. {
  169. $cookie = 'Set-Cookie: leo_auth_token="example"; Version=1; Max-Age=1799; Expires=Mon, 20-Feb-2012 02:49:57 GMT; Path=/';
  170. $setCookieHeader = Zend_Http_Header_SetCookie::fromString($cookie);
  171. $this->assertEquals($cookie, $setCookieHeader->toString());
  172. }
  173. public function testGetFieldName()
  174. {
  175. $c = new Zend_Http_Header_SetCookie();
  176. $this->assertEquals('Set-Cookie', $c->getFieldName());
  177. }
  178. /**
  179. * @dataProvider validCookieWithInfoProvider
  180. */
  181. public function testGetFieldValue($cStr, $info, $expected)
  182. {
  183. $cookie = Zend_Http_Header_SetCookie::fromString($cStr);
  184. if (! $cookie instanceof Zend_Http_Header_SetCookie) {
  185. $this->fail("Failed creating a cookie object from '$cStr'");
  186. }
  187. $this->assertEquals($expected, $cookie->getFieldValue());
  188. $this->assertEquals($cookie->getFieldName() . ': ' . $expected, (string)$cookie);
  189. }
  190. /**
  191. * @dataProvider validCookieWithInfoProvider
  192. */
  193. public function testToString($cStr, $info, $expected)
  194. {
  195. $cookie = Zend_Http_Header_SetCookie::fromString($cStr);
  196. if (! $cookie instanceof Zend_Http_Header_SetCookie) {
  197. $this->fail("Failed creating a cookie object from '$cStr'");
  198. }
  199. $this->assertEquals($cookie->getFieldName() . ': ' . $expected, $cookie->toString());
  200. }
  201. /**
  202. * @dataProvider validCookieWithInfoProvider
  203. */
  204. public function testAddingAsRawHeaderToResponseObject($cStr, $info, $expected)
  205. {
  206. $response = new Zend_Controller_Response_HttpTestCase();
  207. $cookie = Zend_Http_Header_SetCookie::fromString($cStr);
  208. $response->setRawHeader($cookie);
  209. $this->assertContains((string)$cookie, $response->sendHeaders());
  210. }
  211. /**
  212. * Provide valid cookie strings with information about them
  213. *
  214. * @return array
  215. */
  216. public static function validCookieWithInfoProvider()
  217. {
  218. $now = time();
  219. $yesterday = $now - (3600 * 24);
  220. return array(
  221. array(
  222. 'Set-Cookie: justacookie=foo; domain=example.com',
  223. array(
  224. 'name' => 'justacookie',
  225. 'value' => 'foo',
  226. 'domain' => 'example.com',
  227. 'path' => '/',
  228. 'expires' => null,
  229. 'secure' => false,
  230. 'httponly'=> false
  231. ),
  232. 'justacookie=foo; Domain=example.com'
  233. ),
  234. array(
  235. 'Set-Cookie: expires=tomorrow; secure; path=/Space Out/; expires=Tue, 21-Nov-2006 08:33:44 GMT; domain=.example.com',
  236. array(
  237. 'name' => 'expires',
  238. 'value' => 'tomorrow',
  239. 'domain' => '.example.com',
  240. 'path' => '/Space Out/',
  241. 'expires' => strtotime('Tue, 21-Nov-2006 08:33:44 GMT'),
  242. 'secure' => true,
  243. 'httponly'=> false
  244. ),
  245. 'expires=tomorrow; Expires=Tue, 21-Nov-2006 08:33:44 GMT; Domain=.example.com; Path=/Space Out/; Secure'
  246. ),
  247. array(
  248. 'Set-Cookie: domain=unittests; expires=' . gmdate('D, d-M-Y H:i:s', $now) . ' GMT; domain=example.com; path=/some%20value/',
  249. array(
  250. 'name' => 'domain',
  251. 'value' => 'unittests',
  252. 'domain' => 'example.com',
  253. 'path' => '/some%20value/',
  254. 'expires' => $now,
  255. 'secure' => false,
  256. 'httponly'=> false
  257. ),
  258. 'domain=unittests; Expires=' . gmdate('D, d-M-Y H:i:s', $now) . ' GMT; Domain=example.com; Path=/some%20value/'
  259. ),
  260. array(
  261. 'Set-Cookie: path=indexAction; path=/; domain=.foo.com; expires=' . gmdate('D, d-M-Y H:i:s', $yesterday) . ' GMT',
  262. array(
  263. 'name' => 'path',
  264. 'value' => 'indexAction',
  265. 'domain' => '.foo.com',
  266. 'path' => '/',
  267. 'expires' => $yesterday,
  268. 'secure' => false,
  269. 'httponly'=> false
  270. ),
  271. 'path=indexAction; Expires=' . gmdate('D, d-M-Y H:i:s', $yesterday) . ' GMT; Domain=.foo.com; Path=/'
  272. ),
  273. array(
  274. 'Set-Cookie: secure=sha1; secure; SECURE; domain=some.really.deep.domain.com',
  275. array(
  276. 'name' => 'secure',
  277. 'value' => 'sha1',
  278. 'domain' => 'some.really.deep.domain.com',
  279. 'path' => '/',
  280. 'expires' => null,
  281. 'secure' => true,
  282. 'httponly'=> false
  283. ),
  284. 'secure=sha1; Domain=some.really.deep.domain.com; Secure'
  285. ),
  286. array(
  287. 'Set-Cookie: justacookie=foo; domain=example.com; httpOnly',
  288. array(
  289. 'name' => 'justacookie',
  290. 'value' => 'foo',
  291. 'domain' => 'example.com',
  292. 'path' => '/',
  293. 'expires' => null,
  294. 'secure' => false,
  295. 'httponly'=> true
  296. ),
  297. 'justacookie=foo; Domain=example.com; HttpOnly'
  298. ),
  299. array(
  300. 'Set-Cookie: PHPSESSID=123456789+abcd%2Cef; secure; domain=.localdomain; path=/foo/baz; expires=Tue, 21-Nov-2006 08:33:44 GMT;',
  301. array(
  302. 'name' => 'PHPSESSID',
  303. 'value' => '123456789+abcd%2Cef',
  304. 'domain' => '.localdomain',
  305. 'path' => '/foo/baz',
  306. 'expires' => 'Tue, 21-Nov-2006 08:33:44 GMT',
  307. 'secure' => true,
  308. 'httponly'=> false
  309. ),
  310. 'PHPSESSID=123456789%2Babcd%252Cef; Expires=Tue, 21-Nov-2006 08:33:44 GMT; Domain=.localdomain; Path=/foo/baz; Secure'
  311. ),
  312. array(
  313. 'Set-Cookie: myname=myvalue; Domain=docs.foo.com; Path=/accounts; Expires=Wed, 13-Jan-2021 22:23:01 GMT; Secure; HttpOnly',
  314. array(
  315. 'name' => 'myname',
  316. 'value' => 'myvalue',
  317. 'domain' => 'docs.foo.com',
  318. 'path' => '/accounts',
  319. 'expires' => 'Wed, 13-Jan-2021 22:23:01 GMT',
  320. 'secure' => true,
  321. 'httponly'=> true
  322. ),
  323. 'myname=myvalue; Expires=Wed, 13-Jan-2021 22:23:01 GMT; Domain=docs.foo.com; Path=/accounts; Secure; HttpOnly'
  324. ),
  325. );
  326. }
  327. }