Lines 27-33
use C4::Context;
Link Here
|
27 |
use Koha::Token; |
27 |
use Koha::Token; |
28 |
|
28 |
|
29 |
C4::Context->_new_userenv('DUMMY SESSION'); |
29 |
C4::Context->_new_userenv('DUMMY SESSION'); |
30 |
C4::Context->set_userenv(0,42,0,'firstname','surname', 'CPL', 'Library 1', 0, ', '); |
30 |
C4::Context->set_userenv(0,42,0,'firstname','surname', 'CPL', 'Library 1', 0, ''); |
31 |
|
31 |
|
32 |
my $tokenizer = Koha::Token->new; |
32 |
my $tokenizer = Koha::Token->new; |
33 |
is( length( $tokenizer->generate ), 1, "Generate without parameters" ); |
33 |
is( length( $tokenizer->generate ), 1, "Generate without parameters" ); |
Lines 67-74
subtest 'Same id (cookie CGISESSID) with an other logged in user' => sub {
Link Here
|
67 |
$result = $tokenizer->check_csrf({ |
67 |
$result = $tokenizer->check_csrf({ |
68 |
session_id => $id, token => $csrftoken, |
68 |
session_id => $id, token => $csrftoken, |
69 |
}); |
69 |
}); |
70 |
is( $result, 1, "CSRF token verified" ); |
70 |
C4::Context->set_userenv(0,43,0,'firstname','surname', 'CPL', 'Library 1', 0, ''); |
71 |
C4::Context->set_userenv(0,43,0,'firstname','surname', 'CPL', 'Library 1', 0, ', '); |
|
|
72 |
$result = $tokenizer->check_csrf({ |
71 |
$result = $tokenizer->check_csrf({ |
73 |
session_id => $id, token => $csrftoken, |
72 |
session_id => $id, token => $csrftoken, |
74 |
}); |
73 |
}); |
Lines 77-83
subtest 'Same id (cookie CGISESSID) with an other logged in user' => sub {
Link Here
|
77 |
|
76 |
|
78 |
subtest 'Same logged in user with another session (cookie CGISESSID)' => sub { |
77 |
subtest 'Same logged in user with another session (cookie CGISESSID)' => sub { |
79 |
plan tests => 2; |
78 |
plan tests => 2; |
80 |
C4::Context->set_userenv(0,42,0,'firstname','surname', 'CPL', 'Library 1', 0, ', '); |
79 |
C4::Context->set_userenv(0,42,0,'firstname','surname', 'CPL', 'Library 1', 0, ''); |
81 |
$csrftoken = $tokenizer->generate_csrf({ session_id => $id }); |
80 |
$csrftoken = $tokenizer->generate_csrf({ session_id => $id }); |
82 |
$result = $tokenizer->check_csrf({ |
81 |
$result = $tokenizer->check_csrf({ |
83 |
session_id => $id, token => $csrftoken, |
82 |
session_id => $id, token => $csrftoken, |
84 |
- |
|
|