WeakPasswordHasherTest.php 1.8 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667
  1. <?php
  2. /**
  3. * CakePHP(tm) : Rapid Development Framework (http://cakephp.org)
  4. * Copyright (c) Cake Software Foundation, Inc. (http://cakefoundation.org)
  5. *
  6. * Licensed under The MIT License
  7. * For full copyright and license information, please see the LICENSE.txt
  8. * Redistributions of files must retain the above copyright notice.
  9. *
  10. * @copyright Copyright (c) Cake Software Foundation, Inc. (http://cakefoundation.org)
  11. * @link http://cakephp.org CakePHP(tm) Project
  12. * @since 3.0.0
  13. * @license http://www.opensource.org/licenses/mit-license.php MIT License
  14. */
  15. namespace Cake\Test\TestCase\Auth;
  16. use Cake\Auth\WeakPasswordHasher;
  17. use Cake\Core\Configure;
  18. use Cake\TestSuite\TestCase;
  19. /**
  20. * Test case for WeakPasswordHasher
  21. *
  22. */
  23. class WeakPasswordHasherTest extends TestCase {
  24. /**
  25. * setUp method
  26. *
  27. * @return void
  28. */
  29. public function setUp() {
  30. parent::setUp();
  31. Configure::write('Security.salt', 'YJfIxfs2guVoUubWDYhG93b0qyJfIxfs2guwvniR2G0FgaC9mi');
  32. }
  33. /**
  34. * Tests that any password not produced by WeakPasswordHasher needs
  35. * to be rehashed
  36. *
  37. * @return void
  38. */
  39. public function testNeedsRehash() {
  40. $hasher = new WeakPasswordHasher();
  41. $this->assertTrue($hasher->needsRehash(md5('foo')));
  42. $this->assertTrue($hasher->needsRehash('bar'));
  43. $this->assertFalse($hasher->needsRehash('$2y$10$juOA0XVFpvZa0KTxRxEYVuX5kIS7U1fKDRcxyYhhUQECN1oHYnBMy'));
  44. }
  45. /**
  46. * Tests hash() and check()
  47. *
  48. * @return void
  49. */
  50. public function testHashAndCheck() {
  51. $hasher = new WeakPasswordHasher();
  52. $hasher->config('hashType', 'md5');
  53. $password = $hasher->hash('foo');
  54. $this->assertTrue($hasher->check('foo', $password));
  55. $this->assertFalse($hasher->check('bar', $password));
  56. $hasher->config('hashType', 'sha1');
  57. $this->assertFalse($hasher->check('foo', $password));
  58. }
  59. }