When MediaWiki is not behind an intranet, it is completely safe to add the Access-Control-Allow-Origin: * header to responses and allow cross-origin sites to access the REST API. Bug: T232176 Change-Id: Ic0658039a6a46ee4f50c76f5d100450fdef7525a
119 lines
3.1 KiB
PHP
119 lines
3.1 KiB
PHP
<?php
|
|
|
|
namespace MediaWiki\Tests\Rest;
|
|
|
|
use EmptyBagOStuff;
|
|
use GuzzleHttp\Psr7\Stream;
|
|
use GuzzleHttp\Psr7\Uri;
|
|
use MediaWiki\Config\ServiceOptions;
|
|
use MediaWiki\Permissions\PermissionManager;
|
|
use MediaWiki\Rest\BasicAccess\StaticBasicAuthorizer;
|
|
use MediaWiki\Rest\EntryPoint;
|
|
use MediaWiki\Rest\Handler;
|
|
use MediaWiki\Rest\RequestData;
|
|
use MediaWiki\Rest\RequestInterface;
|
|
use MediaWiki\Rest\ResponseFactory;
|
|
use MediaWiki\Rest\Router;
|
|
use MediaWiki\Rest\Validator\Validator;
|
|
use Psr\Container\ContainerInterface;
|
|
use RequestContext;
|
|
use User;
|
|
use WebResponse;
|
|
use Wikimedia\ObjectFactory;
|
|
|
|
/**
|
|
* @covers \MediaWiki\Rest\EntryPoint
|
|
* @covers \MediaWiki\Rest\Router
|
|
*/
|
|
class EntryPointTest extends \MediaWikiIntegrationTestCase {
|
|
private static $mockHandler;
|
|
|
|
private function createRouter( RequestInterface $request ) {
|
|
global $IP;
|
|
|
|
$objectFactory = new ObjectFactory(
|
|
$this->getMockForAbstractClass( ContainerInterface::class )
|
|
);
|
|
$permissionManager = $this->createMock( PermissionManager::class );
|
|
|
|
return new Router(
|
|
[ "$IP/tests/phpunit/unit/includes/Rest/testRoutes.json" ],
|
|
[],
|
|
'http://wiki.example.com',
|
|
'/rest',
|
|
new EmptyBagOStuff(),
|
|
new ResponseFactory( [] ),
|
|
new StaticBasicAuthorizer(),
|
|
$objectFactory,
|
|
new Validator( $objectFactory, $permissionManager, $request, new User ),
|
|
$this->createHookContainer()
|
|
);
|
|
}
|
|
|
|
private function createWebResponse() {
|
|
return $this->getMockBuilder( WebResponse::class )
|
|
->setMethods( [ 'header' ] )
|
|
->getMock();
|
|
}
|
|
|
|
public static function mockHandlerHeader() {
|
|
return new class extends Handler {
|
|
public function execute() {
|
|
$response = $this->getResponseFactory()->create();
|
|
$response->setHeader( 'Foo', 'Bar' );
|
|
return $response;
|
|
}
|
|
};
|
|
}
|
|
|
|
public function testHeader() {
|
|
$webResponse = $this->createWebResponse();
|
|
$webResponse->expects( $this->any() )
|
|
->method( 'header' )
|
|
->withConsecutive(
|
|
[ 'HTTP/1.1 200 OK', true, null ],
|
|
[ 'Foo: Bar', true, null ]
|
|
);
|
|
|
|
$request = new RequestData( [ 'uri' => new Uri( '/rest/mock/EntryPoint/header' ) ] );
|
|
$entryPoint = new EntryPoint(
|
|
RequestContext::getMain(),
|
|
$request,
|
|
$webResponse,
|
|
$this->createRouter( $request ),
|
|
$this->createMock( ServiceOptions::class )
|
|
);
|
|
$entryPoint->execute();
|
|
$this->assertTrue( true );
|
|
}
|
|
|
|
public static function mockHandlerBodyRewind() {
|
|
return new class extends Handler {
|
|
public function execute() {
|
|
$response = $this->getResponseFactory()->create();
|
|
$stream = new Stream( fopen( 'php://memory', 'w+' ) );
|
|
$stream->write( 'hello' );
|
|
$response->setBody( $stream );
|
|
return $response;
|
|
}
|
|
};
|
|
}
|
|
|
|
/**
|
|
* Make sure EntryPoint rewinds a seekable body stream before reading.
|
|
*/
|
|
public function testBodyRewind() {
|
|
$request = new RequestData( [ 'uri' => new Uri( '/rest/mock/EntryPoint/bodyRewind' ) ] );
|
|
$entryPoint = new EntryPoint(
|
|
RequestContext::getMain(),
|
|
$request,
|
|
$this->createWebResponse(),
|
|
$this->createRouter( $request ),
|
|
$this->createMock( ServiceOptions::class )
|
|
);
|
|
ob_start();
|
|
$entryPoint->execute();
|
|
$this->assertSame( 'hello', ob_get_clean() );
|
|
}
|
|
|
|
}
|