Umbraco-CMS/tests/Umbraco.Tests.UnitTests/Umbraco.Core/BackOffice/UmbracoBackOfficeIdentityTests.cs

// Copyright (c) Umbraco.
// See LICENSE for more details.

using System;
using System.Linq;
using System.Security.Claims;
using NUnit.Framework;
using Umbraco.Cms.Core.Security;
using Umbraco.Extensions;
using Constants = Umbraco.Cms.Core.Constants;

namespace Umbraco.Cms.Tests.UnitTests.Umbraco.Core.BackOffice
{
    [TestFixture]
    public class UmbracoBackOfficeIdentityTests
    {
        public const string TestIssuer = "TestIssuer";

        [Test]
        public void Create_From_Claims_Identity()
        {
            var securityStamp = Guid.NewGuid().ToString();
            var claimsIdentity = new ClaimsIdentity(new[]
            {
                // This is the id that 'identity' uses to check for the user id.
                new Claim(ClaimTypes.NameIdentifier, "1234", ClaimValueTypes.Integer32, TestIssuer, TestIssuer),

                // This is the id that 'identity' uses to check for the username.
                new Claim(ClaimTypes.Name, "testing", ClaimValueTypes.String, TestIssuer, TestIssuer),

                new Claim(ClaimTypes.GivenName, "hello world", ClaimValueTypes.String, TestIssuer, TestIssuer),
                new Claim(Constants.Security.StartContentNodeIdClaimType, "-1", ClaimValueTypes.Integer32, TestIssuer, TestIssuer),
                new Claim(Constants.Security.StartMediaNodeIdClaimType, "5543", ClaimValueTypes.Integer32, TestIssuer, TestIssuer),
                new Claim(Constants.Security.StartMediaNodeIdClaimType, "5555", ClaimValueTypes.Integer32, TestIssuer, TestIssuer),
                new Claim(Constants.Security.AllowedApplicationsClaimType, "content", ClaimValueTypes.String, TestIssuer, TestIssuer),
                new Claim(Constants.Security.AllowedApplicationsClaimType, "media", ClaimValueTypes.String, TestIssuer, TestIssuer),
                new Claim(ClaimTypes.Locality, "en-us", ClaimValueTypes.String, TestIssuer, TestIssuer),
                new Claim(ClaimsIdentity.DefaultRoleClaimType, "admin", ClaimValueTypes.String, TestIssuer, TestIssuer),
                new Claim(Constants.Security.SecurityStampClaimType, securityStamp, ClaimValueTypes.String, TestIssuer, TestIssuer),
            });

            if (!claimsIdentity.VerifyBackOfficeIdentity(out ClaimsIdentity verifiedIdentity))
            {
                Assert.Fail();
            }

            Assert.IsNull(verifiedIdentity.Actor);
            Assert.AreEqual(1234, verifiedIdentity.GetId());
            //// Assert.AreEqual(sessionId, backofficeIdentity.SessionId);
            Assert.AreEqual(securityStamp, verifiedIdentity.GetSecurityStamp());
            Assert.AreEqual("testing", verifiedIdentity.GetUsername());
            Assert.AreEqual("hello world", verifiedIdentity.GetRealName());
            Assert.AreEqual(1, verifiedIdentity.GetStartContentNodes().Length);
            Assert.IsTrue(verifiedIdentity.GetStartMediaNodes().UnsortedSequenceEqual(new[] { 5543, 5555 }));
            Assert.IsTrue(new[] { "content", "media" }.SequenceEqual(verifiedIdentity.GetAllowedApplications()));
            Assert.AreEqual("en-us", verifiedIdentity.GetCultureString());
            Assert.IsTrue(new[] { "admin" }.SequenceEqual(verifiedIdentity.GetRoles()));

            Assert.AreEqual(11, verifiedIdentity.Claims.Count());
        }

        [Test]
        public void Create_From_Claims_Identity_Missing_Required_Claim()
        {
            var claimsIdentity = new ClaimsIdentity(new[]
            {
                new Claim(ClaimTypes.NameIdentifier, "1234", ClaimValueTypes.Integer32, TestIssuer, TestIssuer),
                new Claim(ClaimTypes.Name, "testing", ClaimValueTypes.String, TestIssuer, TestIssuer),
            });

            if (claimsIdentity.VerifyBackOfficeIdentity(out _))
            {
                Assert.Fail();
            }

            Assert.Pass();
        }

        [Test]
        public void Create_From_Claims_Identity_Required_Claim_Null()
        {
            var claimsIdentity = new ClaimsIdentity(new[]
            {
                // Null or empty
                new Claim(ClaimTypes.NameIdentifier, string.Empty, ClaimValueTypes.Integer32, TestIssuer, TestIssuer),
                new Claim(ClaimTypes.Name, "testing", ClaimValueTypes.String, TestIssuer, TestIssuer),
                new Claim(ClaimTypes.GivenName, "hello world", ClaimValueTypes.String, TestIssuer, TestIssuer),
                new Claim(Constants.Security.StartContentNodeIdClaimType, "-1", ClaimValueTypes.Integer32, TestIssuer, TestIssuer),
                new Claim(Constants.Security.StartMediaNodeIdClaimType, "5543", ClaimValueTypes.Integer32, TestIssuer, TestIssuer),
                new Claim(Constants.Security.AllowedApplicationsClaimType, "content", ClaimValueTypes.String, TestIssuer, TestIssuer),
                new Claim(Constants.Security.AllowedApplicationsClaimType, "media", ClaimValueTypes.String, TestIssuer, TestIssuer),
                new Claim(ClaimTypes.Locality, "en-us", ClaimValueTypes.String, TestIssuer, TestIssuer),
                new Claim(ClaimsIdentity.DefaultRoleClaimType, "admin", ClaimValueTypes.String, TestIssuer, TestIssuer),
            });

            if (claimsIdentity.VerifyBackOfficeIdentity(out _))
            {
                Assert.Fail();
            }

            Assert.Pass();
        }

        [Test]
        public void Create_With_Claims_And_User_Data()
        {
            var securityStamp = Guid.NewGuid().ToString();

            var claimsIdentity = new ClaimsIdentity(new[]
            {
                new Claim("TestClaim1", "test", ClaimValueTypes.Integer32, TestIssuer, TestIssuer),
                new Claim("TestClaim1", "test", ClaimValueTypes.Integer32, TestIssuer, TestIssuer)
            });

            claimsIdentity.AddRequiredClaims(
                "1234",
                "testing",
                "hello world",
                new[] { 654 },
                new[] { 654 },
                "en-us",
                securityStamp,
                new[] { "content", "media" },
                new[] { "admin" });

            Assert.AreEqual(12, claimsIdentity.Claims.Count());
            Assert.IsNull(claimsIdentity.Actor);
        }
    }
}