24 lines
798 B
PHP
24 lines
798 B
PHP
|
<?php
|
||
|
|
|
||
|
|
namespace MintyPHP\Tests\Architecture;
|
||
|
|
|
||
|
|
use PHPUnit\Framework\TestCase;
|
||
|
|
|
||
|
|
class AuthRegisterSecurityContractTest extends TestCase
|
||
|
|
{
|
||
|
|
use ProjectFileAssertionSupport;
|
||
|
|
|
||
|
|
public function testRegisterPageVerifiesCsrfBeforeHandlingPostPayload(): void
|
||
|
|
{
|
||
|
|
$content = $this->readProjectFile('pages/auth/register().php');
|
||
|
|
|
||
|
|
$this->assertStringContainsString("if (\$request->isMethod('POST')) {", $content);
|
||
|
|
$this->assertStringContainsString("if (!Session::checkCsrfToken()) {", $content);
|
||
|
|
$this->assertStringContainsString("t('Form expired, please try again')", $content);
|
||
|
|
$this->assertMatchesRegularExpression(
|
||
|
|
'/if \(\$request->isMethod\(\'POST\'\)\) \{\s*if \(!Session::checkCsrfToken\(\)\) \{/s',
|
||
|
|
$content
|
||
|
|
);
|
||
|
|
}
|
||
|
|
}
|