WeakPasswordHasherTest.php 1.9 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970
  1. <?php
  2. /**
  3. * CakePHP(tm) : Rapid Development Framework (http://cakephp.org)
  4. * Copyright (c) Cake Software Foundation, Inc. (http://cakefoundation.org)
  5. *
  6. * Licensed under The MIT License
  7. * For full copyright and license information, please see the LICENSE.txt
  8. * Redistributions of files must retain the above copyright notice.
  9. *
  10. * @copyright Copyright (c) Cake Software Foundation, Inc. (http://cakefoundation.org)
  11. * @link http://cakephp.org CakePHP(tm) Project
  12. * @since 3.0.0
  13. * @license http://www.opensource.org/licenses/mit-license.php MIT License
  14. */
  15. namespace Cake\Test\TestCase\Auth;
  16. use Cake\Auth\WeakPasswordHasher;
  17. use Cake\Core\Configure;
  18. use Cake\TestSuite\TestCase;
  19. use Cake\Utility\Security;
  20. /**
  21. * Test case for WeakPasswordHasher
  22. */
  23. class WeakPasswordHasherTest extends TestCase
  24. {
  25. /**
  26. * setUp method
  27. *
  28. * @return void
  29. */
  30. public function setUp()
  31. {
  32. parent::setUp();
  33. Security::salt('YJfIxfs2guVoUubWDYhG93b0qyJfIxfs2guwvniR2G0FgaC9mi');
  34. }
  35. /**
  36. * Tests that any password not produced by WeakPasswordHasher needs
  37. * to be rehashed
  38. *
  39. * @return void
  40. */
  41. public function testNeedsRehash()
  42. {
  43. $hasher = new WeakPasswordHasher();
  44. $this->assertTrue($hasher->needsRehash(md5('foo')));
  45. $this->assertTrue($hasher->needsRehash('bar'));
  46. $this->assertFalse($hasher->needsRehash('$2y$10$juOA0XVFpvZa0KTxRxEYVuX5kIS7U1fKDRcxyYhhUQECN1oHYnBMy'));
  47. }
  48. /**
  49. * Tests hash() and check()
  50. *
  51. * @return void
  52. */
  53. public function testHashAndCheck()
  54. {
  55. $hasher = new WeakPasswordHasher();
  56. $hasher->config('hashType', 'md5');
  57. $password = $hasher->hash('foo');
  58. $this->assertTrue($hasher->check('foo', $password));
  59. $this->assertFalse($hasher->check('bar', $password));
  60. $hasher->config('hashType', 'sha1');
  61. $this->assertFalse($hasher->check('foo', $password));
  62. }
  63. }