cakephp/tests/TestCase/Routing/Middleware/AssetMiddlewareTest.php

<?php
/**
 * CakePHP(tm) : Rapid Development Framework (https://cakephp.org)
 * Copyright (c) Cake Software Foundation, Inc. (https://cakefoundation.org)
 *
 * Licensed under The MIT License
 * For full copyright and license information, please see the LICENSE.txt
 * Redistributions of files must retain the above copyright notice.
 *
 * @copyright     Copyright (c) Cake Software Foundation, Inc. (https://cakefoundation.org)
 * @link          https://cakephp.org CakePHP(tm) Project
 * @since         3.3.0
 * @license       https://opensource.org/licenses/mit-license.php MIT License
 */
namespace Cake\Test\TestCase\Routing\Middleware;

use Cake\Core\Plugin;
use Cake\Http\ServerRequestFactory;
use Cake\Routing\Middleware\AssetMiddleware;
use Cake\TestSuite\TestCase;
use Zend\Diactoros\Response;

/**
 * Test for AssetMiddleware
 */
class AssetMiddlewareTest extends TestCase
{
    /**
     * setup
     *
     * @return void
     */
    public function setUp()
    {
        parent::setUp();
        Plugin::load('TestPlugin');
        Plugin::load('Company/TestPluginThree');
    }

    /**
     * test that the if modified since header generates 304 responses
     *
     * @return void
     */
    public function testCheckIfModifiedHeader()
    {
        $modified = filemtime(TEST_APP . 'Plugin/TestPlugin/webroot/root.js');
        $request = ServerRequestFactory::fromGlobals([
            'REQUEST_URI' => '/test_plugin/root.js',
            'HTTP_IF_MODIFIED_SINCE' => date('D, j M Y G:i:s \G\M\T', $modified)
        ]);
        $response = new Response();
        $next = function ($req, $res) {
            return $res;
        };
        $middleware = new AssetMiddleware();
        $res = $middleware($request, $response, $next);

        $body = $res->getBody()->getContents();
        $this->assertEquals('', $body);
        $this->assertEquals(304, $res->getStatusCode());
        $this->assertNotEmpty($res->getHeaderLine('Last-Modified'));
    }

    /**
     * test missing plugin assets.
     *
     * @return void
     */
    public function testMissingPluginAsset()
    {
        $request = ServerRequestFactory::fromGlobals(['REQUEST_URI' => '/test_plugin/not_found.js']);
        $response = new Response();
        $next = function ($req, $res) {
            return $res;
        };

        $middleware = new AssetMiddleware();
        $res = $middleware($request, $response, $next);

        $body = $res->getBody()->getContents();
        $this->assertEquals('', $body);
    }

    /**
     * Data provider for assets.
     *
     * @return array
     */
    public function assetProvider()
    {
        return [
            // In plugin root.
            [
                '/test_plugin/root.js',
                TEST_APP . 'Plugin/TestPlugin/webroot/root.js'
            ],
            // Subdirectory
            [
                '/test_plugin/js/alert.js',
                TEST_APP . 'Plugin/TestPlugin/webroot/js/alert.js'
            ],
            // In path that matches the plugin name
            [
                '/test_plugin/js/test_plugin/test.js',
                TEST_APP . 'Plugin/TestPlugin/webroot/js/test_plugin/test.js'
            ],
            // In vendored plugin
            [
                '/company/test_plugin_three/css/company.css',
                TEST_APP . 'Plugin/Company/TestPluginThree/webroot/css/company.css'
            ],
        ];
    }

    /**
     * Test assets in a plugin.
     *
     * @dataProvider assetProvider
     */
    public function testPluginAsset($url, $expectedFile)
    {
        $request = ServerRequestFactory::fromGlobals(['REQUEST_URI' => $url]);
        $response = new Response();
        $next = function ($req, $res) {
            return $res;
        };

        $middleware = new AssetMiddleware();
        $res = $middleware($request, $response, $next);

        $body = $res->getBody()->getContents();
        $this->assertStringEqualsFile($expectedFile, $body);
    }

    /**
     * Test headers with plugin assets
     *
     * @return void
     */
    public function testPluginAssetHeaders()
    {
        $request = ServerRequestFactory::fromGlobals(['REQUEST_URI' => '/test_plugin/root.js']);
        $response = new Response();
        $next = function ($req, $res) {
            return $res;
        };

        $modified = filemtime(TEST_APP . 'Plugin/TestPlugin/webroot/root.js');
        $expires = strtotime('+4 hours');
        $time = time();

        $middleware = new AssetMiddleware(['cacheTime' => '+4 hours']);
        $res = $middleware($request, $response, $next);

        $this->assertEquals(
            'application/javascript',
            $res->getHeaderLine('Content-Type')
        );
        $this->assertEquals(
            gmdate('D, j M Y G:i:s ', $time) . 'GMT',
            $res->getHeaderLine('Date')
        );
        $this->assertEquals(
            'public,max-age=' . ($expires - $time),
            $res->getHeaderLine('Cache-Control')
        );
        $this->assertEquals(
            gmdate('D, j M Y G:i:s ', $modified) . 'GMT',
            $res->getHeaderLine('Last-Modified')
        );
        $this->assertEquals(
            gmdate('D, j M Y G:i:s ', $expires) . 'GMT',
            $res->getHeaderLine('Expires')
        );
    }

    /**
     * Test that content-types can be injected
     *
     * @return void
     */
    public function testCustomFileTypes()
    {
        $request = ServerRequestFactory::fromGlobals(['REQUEST_URI' => '/test_plugin/root.js']);
        $response = new Response();
        $next = function ($req, $res) {
            return $res;
        };

        $middleware = new AssetMiddleware(['types' => ['js' => 'custom/stuff']]);
        $res = $middleware($request, $response, $next);

        $this->assertEquals(
            'custom/stuff',
            $res->getHeaderLine('Content-Type')
        );
    }

    /**
     * Test that // results in a 404
     *
     * @return void
     */
    public function test404OnDoubleSlash()
    {
        $request = ServerRequestFactory::fromGlobals(['REQUEST_URI' => '//index.php']);
        $response = new Response();
        $next = function ($req, $res) {
            return $res;
        };

        $middleware = new AssetMiddleware();
        $res = $middleware($request, $response, $next);
        $this->assertEmpty($res->getBody()->getContents());
    }

    /**
     * Test that .. results in a 404
     *
     * @return void
     */
    public function test404OnDoubleDot()
    {
        $request = ServerRequestFactory::fromGlobals(['REQUEST_URI' => '/test_plugin/../webroot/root.js']);
        $response = new Response();
        $next = function ($req, $res) {
            return $res;
        };

        $middleware = new AssetMiddleware();
        $res = $middleware($request, $response, $next);
        $this->assertEmpty($res->getBody()->getContents());
    }

    /**
     * Test that hidden filenames result in a 404
     *
     * @return void
     */
    public function test404OnHiddenFile()
    {
        $request = ServerRequestFactory::fromGlobals(['REQUEST_URI' => '/test_plugin/.hiddenfile']);
        $response = new Response();
        $next = function ($req, $res) {
            return $res;
        };

        $middleware = new AssetMiddleware();
        $res = $middleware($request, $response, $next);
        $this->assertEmpty($res->getBody()->getContents());
    }

    /**
     * Test that hidden filenames result in a 404
     *
     * @return void
     */
    public function test404OnHiddenFolder()
    {
        $request = ServerRequestFactory::fromGlobals(['REQUEST_URI' => '/test_plugin/.hiddenfolder/some.js']);
        $response = new Response();
        $next = function ($req, $res) {
            return $res;
        };

        $middleware = new AssetMiddleware();
        $res = $middleware($request, $response, $next);
        $this->assertEmpty($res->getBody()->getContents());
    }
}