Lines 17-26
Link Here
|
17 |
|
17 |
|
18 |
use Modern::Perl; |
18 |
use Modern::Perl; |
19 |
|
19 |
|
20 |
use Test::More tests => 2; |
20 |
use Test::More tests => 3; |
21 |
|
21 |
|
22 |
use Template::Context; |
22 |
use Template::Context; |
23 |
use Template::Stash; |
23 |
use Template::Stash; |
|
|
24 |
use Test::MockModule; |
25 |
use Test::NoWarnings; |
24 |
|
26 |
|
25 |
use C4::Auth; |
27 |
use C4::Auth; |
26 |
use Koha::Cache::Memory::Lite; |
28 |
use Koha::Cache::Memory::Lite; |
Lines 29-50
use Koha::Template::Plugin::Koha;
Link Here
|
29 |
|
31 |
|
30 |
my $schema = Koha::Database->new->schema; |
32 |
my $schema = Koha::Database->new->schema; |
31 |
|
33 |
|
|
|
34 |
my $session_id = 42; |
35 |
my $cgi = Test::MockModule->new('CGI'); |
36 |
my $cgi_session = Test::MockModule->new('CGI::Session'); |
37 |
$cgi_session->mock( 'load', sub { return bless { id => $session_id }, 'CGI::Session' } ); |
38 |
$cgi_session->mock( 'new', sub { return bless { id => $session_id }, 'CGI::Session' } ); |
39 |
$cgi_session->mock( 'param', sub { return $session_id } ); |
40 |
|
32 |
subtest 'GenerateCSRF() tests' => sub { |
41 |
subtest 'GenerateCSRF() tests' => sub { |
33 |
|
42 |
|
34 |
plan tests => 1; |
43 |
plan tests => 1; |
35 |
|
44 |
|
36 |
$schema->storage->txn_begin; |
45 |
$schema->storage->txn_begin; |
37 |
|
46 |
|
38 |
my $session = C4::Auth::get_session(''); |
47 |
my $stash = Template::Stash->new( { sessionID => $session_id } ); |
39 |
|
|
|
40 |
my $stash = Template::Stash->new( { sessionID => $session->id } ); |
41 |
my $context = Template::Context->new( { STASH => $stash } ); |
48 |
my $context = Template::Context->new( { STASH => $stash } ); |
42 |
|
49 |
|
43 |
my $plugin = Koha::Template::Plugin::Koha->new($context); |
50 |
my $plugin = Koha::Template::Plugin::Koha->new($context); |
44 |
|
51 |
|
45 |
my $token = $plugin->GenerateCSRF(); |
52 |
my $token = $plugin->GenerateCSRF(); |
46 |
|
53 |
|
47 |
ok( Koha::Token->new->check_csrf( { session_id => $session->id, token => $token } ) ); |
54 |
ok( Koha::Token->new->check_csrf( { session_id => $session_id, token => $token } ) ); |
48 |
|
55 |
|
49 |
$schema->storage->txn_rollback; |
56 |
$schema->storage->txn_rollback; |
50 |
}; |
57 |
}; |
Lines 54-62
subtest 'GenerateCSRF - New CSRF token generated every time we need one' => sub
Link Here
|
54 |
|
61 |
|
55 |
$schema->storage->txn_begin; |
62 |
$schema->storage->txn_begin; |
56 |
|
63 |
|
57 |
my $session = C4::Auth::get_session(''); |
64 |
my $stash = Template::Stash->new( { sessionID => $session_id } ); |
58 |
|
|
|
59 |
my $stash = Template::Stash->new( { sessionID => $session->id } ); |
60 |
my $context = Template::Context->new( { STASH => $stash } ); |
65 |
my $context = Template::Context->new( { STASH => $stash } ); |
61 |
|
66 |
|
62 |
my $plugin = Koha::Template::Plugin::Koha->new($context); |
67 |
my $plugin = Koha::Template::Plugin::Koha->new($context); |
63 |
- |
|
|