- @foreach(config('auth.oauth.providers') as $provider)
+ @foreach(config('auth.sso.providers') as $provider)
@if(config('services.'.$provider.'.enabled') === true)
-
+
@lang('auth.sso.'.$provider)
@endif
diff --git a/routes/web.php b/routes/web.php
index b6b5e5ff..2529a8a2 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -71,8 +71,8 @@
Route::post('auth/register', [RegistrationController::class, 'register'])
->name('auth.register');
-Route::get('/auth/oauth/{provider}/redirect', [SocialiteController::class, 'redirect'])->name('auth.oauth.redirect');
-Route::any('/auth/oauth/{provider}/callback', [SocialiteController::class, 'callback'])->name('auth.oauth.callback');
+Route::get('/auth/sso/{provider}/redirect', [SocialiteController::class, 'redirect'])->name('auth.sso.redirect');
+Route::any('/auth/sso/{provider}/callback', [SocialiteController::class, 'callback'])->name('auth.sso.callback');
Route::group(['middleware' => 'auth:sanctum'], function () {
Route::get('links/feed', [FeedController::class, 'links'])->name('links.feed');
diff --git a/tests/Bootstrap.php b/tests/Bootstrap.php
deleted file mode 100644
index 5fa7829c..00000000
--- a/tests/Bootstrap.php
+++ /dev/null
@@ -1,42 +0,0 @@
-createApplication()->make(Kernel::class);
-
- $commands = [
- 'config:cache',
- 'event:cache',
- ];
-
- foreach ($commands as $command) {
- $console->call($command);
- }
- }
-
- public function executeAfterLastTest(): void
- {
- array_map('unlink', glob('bootstrap/cache/*.phpunit.php'));
- }
-}
diff --git a/tests/Controller/SocialiteControllerTest.php b/tests/Controller/SocialiteControllerTest.php
new file mode 100644
index 00000000..d1c8b83b
--- /dev/null
+++ b/tests/Controller/SocialiteControllerTest.php
@@ -0,0 +1,162 @@
+app->register(SocialiteServiceProvider::class);
+ Socialite::shouldReceive('driver->redirect')->once()->andReturn(redirect()->to('https://sso-provider.com/auth'));
+
+ // SSO disabled
+ config()->set('auth.sso.enabled', false);
+ $this->get('auth/sso/auth0/redirect')->assertStatus(403)->assertSee('Login unauthorized');
+
+ // SSO enabled but wrong provider
+ config()->set('auth.sso.enabled', true);
+ $this->get('auth/sso/hello/redirect')->assertStatus(403)->assertSee('Login unauthorized');
+
+ // SSO enabled but disabled provider
+ $this->get('auth/sso/auth0/redirect')->assertStatus(403)->assertSee('The selected SSO provider is not available.');
+
+ // SSO and corresponding driver enabled
+ config()->set('services.auth0.enabled', true);
+ $this->get('auth/sso/auth0/redirect')->assertRedirect('https://sso-provider.com/auth');
+ }
+
+ public function testRegularSsoLogin(): void
+ {
+ $ssoUser = new User();
+ $ssoUser->setToken('XF3hkrEeyYkLnTf1fKX');
+ $ssoUser->map([
+ 'id' => 'sso-user-sub-123',
+ 'email' => 'sso-user@linkace.org',
+ 'name' => 'SSO User',
+ 'nickname' => 'SSOUser',
+ 'given_name' => 'SSO',
+ 'family_name' => 'User',
+ ]);
+
+ $this->app->register(SocialiteServiceProvider::class);
+ Socialite::shouldReceive('driver->user')->once()->andReturn($ssoUser);
+
+ config()->set('auth.sso.enabled', true);
+ config()->set('services.auth0.enabled', true);
+
+ $this->get('auth/sso/auth0/callback')->assertRedirect('dashboard');
+
+ $this->assertDatabaseHas('users', [
+ 'name' => 'SSOUser',
+ 'email' => 'sso-user@linkace.org',
+ 'sso_id' => 'sso-user-sub-123',
+ 'sso_token' => 'XF3hkrEeyYkLnTf1fKX',
+ ]);
+ }
+
+ public function testLoginWithExistingSsoUser(): void
+ {
+ $ssoUser = new User();
+ $ssoUser->setToken('XF3hkrEeyYkLnTf1fKX');
+ $ssoUser->map([
+ 'id' => 'sso-user-sub-123',
+ 'email' => 'sso-user@linkace.org',
+ 'name' => 'SSO User',
+ 'nickname' => 'SSOUser',
+ 'given_name' => 'SSO',
+ 'family_name' => 'User',
+ ]);
+
+ \App\Models\User::factory()->create([
+ 'name' => 'MrPurpleHat',
+ 'email' => 'sso-user@linkace.org',
+ 'sso_id' => 'sso-user-sub-123',
+ ]);
+
+ $this->app->register(SocialiteServiceProvider::class);
+ Socialite::shouldReceive('driver->user')->once()->andReturn($ssoUser);
+
+ config()->set('auth.sso.enabled', true);
+ config()->set('services.auth0.enabled', true);
+
+ $this->get('auth/sso/auth0/callback')->assertRedirect('dashboard');
+
+ $this->assertDatabaseHas('users', [
+ 'name' => 'SSOUser',
+ 'email' => 'sso-user@linkace.org',
+ 'sso_id' => 'sso-user-sub-123',
+ 'sso_token' => 'XF3hkrEeyYkLnTf1fKX',
+ ]);
+ }
+
+ public function testLoginWithExistingSsoUserWrongProvider(): void
+ {
+ $ssoUser = new User();
+ $ssoUser->setToken('XF3hkrEeyYkLnTf1fKX');
+ $ssoUser->map([
+ 'id' => 'sso-user-sub-123',
+ 'email' => 'sso-user@linkace.org',
+ 'name' => 'SSO User',
+ 'nickname' => 'SSOUser',
+ 'given_name' => 'SSO',
+ 'family_name' => 'User',
+ ]);
+
+ \App\Models\User::factory()->create([
+ 'name' => 'MrPurpleHat',
+ 'email' => 'sso-user@linkace.org',
+ 'sso_id' => 'oidc123456',
+ 'sso_provider' => 'oidc',
+ ]);
+
+ $this->app->register(SocialiteServiceProvider::class);
+ Socialite::shouldReceive('driver->user')->once()->andReturn($ssoUser);
+
+ config()->set('auth.sso.enabled', true);
+ config()->set('services.auth0.enabled', true);
+
+ $this->get('auth/sso/auth0/callback')->assertStatus(403)->assertSee('Unable to login with Auth0. Please use OIDC to login');
+ }
+
+ public function testLoginWithExistingEmail(): void
+ {
+ $ssoUser = new User();
+ $ssoUser->setToken('XF3hkrEeyYkLnTf1fKX');
+ $ssoUser->map([
+ 'id' => 'sso-user-sub-123',
+ 'email' => 'sso-user@linkace.org',
+ 'name' => 'SSO User',
+ 'nickname' => 'SSOUser',
+ 'given_name' => 'SSO',
+ 'family_name' => 'User',
+ ]);
+
+ \App\Models\User::factory()->create([
+ 'name' => 'MrPurpleHat',
+ 'email' => 'sso-user@linkace.org',
+ ]);
+
+ $this->app->register(SocialiteServiceProvider::class);
+ Socialite::shouldReceive('driver->user')->once()->andReturn($ssoUser);
+
+ config()->set('auth.sso.enabled', true);
+ config()->set('services.auth0.enabled', true);
+
+ $this->get('auth/sso/auth0/callback')->assertRedirect('dashboard');
+
+ $this->assertDatabaseHas('users', [
+ 'name' => 'SSOUser',
+ 'email' => 'sso-user@linkace.org',
+ 'sso_id' => 'sso-user-sub-123',
+ 'sso_token' => 'XF3hkrEeyYkLnTf1fKX',
+ ]);
+ }
+}
diff --git a/tests/CreatesApplication.php b/tests/CreatesApplication.php
index e4c5d32b..cc683011 100644
--- a/tests/CreatesApplication.php
+++ b/tests/CreatesApplication.php
@@ -3,17 +3,16 @@
namespace Tests;
use Illuminate\Contracts\Console\Kernel;
+use Illuminate\Foundation\Application;
trait CreatesApplication
{
/**
* Creates the application.
- *
- * @return \Illuminate\Foundation\Application
*/
- public function createApplication(): \Illuminate\Foundation\Application
+ public function createApplication(): Application
{
- $app = require __DIR__ . '/../bootstrap/app.php';
+ $app = require __DIR__.'/../bootstrap/app.php';
$app->make(Kernel::class)->bootstrap();