Files
Phraseanet/tests/Alchemy/Tests/Phrasea/Controller/Prod/QueryTest.php
Aina Sitraka b6a5f90fd3 PHRAS-3857 Check CSRF token on Prod and Admin forms (#4361)
* csrf token form

* add csrf token

* add csrf

* add csrf

* add csrf

* test

* test

* test

* add form token in report

* csrf token upload

* lazaret csrf form

* upload test

* lazaret test

* add csrf token

* fix test

* fix set cover publication

---------

Co-authored-by: jygaulier <gaulier@alchemy.fr>
2023-10-03 16:28:33 +02:00

66 lines
2.3 KiB
PHP

<?php
namespace Alchemy\Tests\Phrasea\Controller\Prod;
use Alchemy\Phrasea\SearchEngine\SearchEngineOptions;
/**
* @group functional
* @group legacy
* @group authenticated
* @group web
*/
class QueryTest extends \PhraseanetAuthenticatedWebTestCase
{
public function testQuery()
{
$route = '/prod/query/';
$userManipulator = $this->getMockBuilder('Alchemy\Phrasea\Model\Manipulator\UserManipulator')
->setConstructorArgs([
self::$DI['app']['model.user-manager'],
self::$DI['app']['auth.password-encoder'],
self::$DI['app']['geonames.connector'],
self::$DI['app']['repo.users'],
self::$DI['app']['random.low'],
self::$DI['app']['dispatcher'],
])
->setMethods(['logQuery'])
->getMock();
self::$DI['app']['manipulator.user'] = $userManipulator;
$randomValue = $this->setSessionFormToken('searchForm');
$userManipulator->expects($this->once())->method('logQuery');
$client = $this->getClient();
$client->request('POST', $route, ['searchForm_token' => $randomValue]);
$response = $client->getResponse();
$this->assertEquals('application/json', $response->headers->get('Content-type'));
$data = json_decode($response->getContent(), true);
$this->assertInternalType('array', $data);
}
public function testQueryAnswerTrain()
{
$app = $this->mockElasticsearchResult(self::$DI['record_2']);
$this->authenticate($app);
$options = new SearchEngineOptions(self::$DI['app']['repo.collection-references']);
$searchableBasesIds = $app->getAclForUser($app->getAuthenticatedUser())->getSearchableBasesIds();
$options->onBasesIds($searchableBasesIds);
$serializedOptions = $options->serialize();
$response = $this->request('POST', '/prod/query/answer-train/', [
'options_serial' => $serializedOptions,
'pos' => 0,
'query' => ''
]);
$this->assertTrue($response->isOk());
$datas = (array) json_decode($response->getContent());
$this->assertArrayHasKey('current', $datas);
unset($response, $datas);
}
}