handle user roles by organization

2018-10-11 04:16:43 +02:00
parent 9a8e05e341
commit 84cd11f9c9
29 changed files with 1341 additions and 124 deletions
--- a/backend/app/plugins/wiaas/tests/unit-tests/test-wiaas-authentication.php
+++ b/backend/app/plugins/wiaas/tests/unit-tests/test-wiaas-authentication.php
@@ -0,0 +1,388 @@
+<?php
+
+
+class Wiaas_Authentication_Test extends Wiaas_Unit_Test_Case {
+    var $user_id, $organization_id, $request_uri;
+
+    public function setUp() {
+        parent::setUp();
+
+        // set admin as current user
+        wp_set_current_user(1);
+
+        // create testing user
+        $this->user_id = wp_create_user('test', 'test', 'test@mail.com');
+
+        // create organization
+        $this->organization_id = wp_insert_term(
+            'test_organization',
+            Wiaas_User_Organization::TAXONOMY_NAME
+        )['term_id'];
+
+        update_user_meta($this->user_id, '_wiaas_organization_id', $this->organization_id);
+
+
+        # assign user to organization
+        wp_set_terms_for_user(
+            $this->user_id,
+            Wiaas_User_Organization::TAXONOMY_NAME,
+            [$this->organization_id]);
+
+        wp_set_current_user($this->user_id);
+
+        $this->request_uri = $_SERVER['REQUEST_URI'];
+    }
+
+    function tearDown() {
+        parent::tearDown();
+
+        wp_set_current_user(1);
+
+        wp_delete_user($this->user_id);
+
+        wp_delete_term(
+            $this->organization_id,
+            Wiaas_User_Organization::TAXONOMY_NAME);
+
+        delete_user_meta($this->user_id, '_wiaas_organization_id');
+        delete_user_meta($this->user_id, '_wiaas_current_user_admin_role');
+
+        $_SERVER['REQUEST_URI'] = $this->request_uri;
+    }
+
+    /**
+     * @covers Wiaas_Authentication::authenticate_current_user()
+     * @group authentication
+     */
+    function test_user_authentication_fail_when_no_selected_role() {
+
+        $this->assertFalse(
+            Wiaas_Authentication::authenticate_current_user($this->user_id)
+        );
+
+        $this->assertTrue(
+            is_wp_error(
+                Wiaas_Authentication::authenticate_user_on_login(wp_get_current_user())
+            )
+        );
+
+    }
+
+    /**
+     * @covers Wiaas_Authentication::authenticate_current_user()
+     * @group authentication
+     */
+    function test_user_authentication_forwards_error() {
+        // add roles to organization
+        $organization_roles = array( 'supplier', 'customer' );
+        update_term_meta($this->organization_id, '_wiaas_organization_roles', $organization_roles);
+
+        update_user_meta($this->user_id, '_wiaas_current_user_admin_role', 'supplier');
+
+        $this->assertFalse(
+            Wiaas_Authentication::authenticate_current_user(false)
+        );
+    }
+
+    /**
+     * @covers Wiaas_Authentication::authenticate_current_user()
+     * @group authentication
+     */
+    function test_current_user_authentication_fail_when_organization_has_no_roles() {
+
+        $roles = array('administrator', 'supplier', 'customer', 'commercial_lead');
+
+        foreach ($roles as $role) {
+            update_user_meta($this->user_id, '_wiaas_current_user_admin_role', $role);
+
+            $this->assertFalse(
+                Wiaas_Authentication::authenticate_current_user($this->user_id)
+            );
+        }
+    }
+
+    /**
+     * @covers Wiaas_Authentication::authenticate_current_user()
+     * @group authentication
+     */
+    function test_current_user_authentication_fail_when_organization_has_different_roles() {
+        // add roles to organization
+        $organization_roles = array( 'supplier', 'customer' );
+        update_term_meta($this->organization_id, '_wiaas_organization_roles', $organization_roles);
+
+        $user_roles = array('administrator', 'commercial_lead');
+
+        foreach ($user_roles as $user_role) {
+            update_user_meta($this->user_id, '_wiaas_current_user_admin_role', $user_role);
+
+            $this->assertFalse(
+                Wiaas_Authentication::authenticate_current_user($this->user_id)
+            );
+        }
+    }
+
+    /**
+     * @covers Wiaas_Authentication::authenticate_current_user()
+     * @group authentication
+     */
+    function test_current_user_authentication_valid_when_organization_has_requested_role() {
+        // add roles to organization
+        $organization_roles = array( 'administrator', 'commercial_lead' );
+        update_term_meta($this->organization_id, '_wiaas_organization_roles', $organization_roles);
+
+        $user_roles = $organization_roles;
+
+        foreach ($user_roles as $user_role) {
+            update_user_meta($this->user_id, '_wiaas_current_user_admin_role', $user_role);
+
+           $this->assertEquals(
+               $this->user_id,
+               Wiaas_Authentication::authenticate_current_user($this->user_id)
+           );
+        }
+    }
+
+    /**
+     * @covers Wiaas_Authentication::authenticate_current_user()
+     * @group authentication
+     */
+    function test_current_user_authentication_invalid_when_organization_has_no_customer_role() {
+        // add roles to organization
+        $organization_roles = array( 'administrator', 'commercial_lead' );
+        update_term_meta($this->organization_id, '_wiaas_organization_roles', $organization_roles);
+
+        $user_roles = $organization_roles;
+
+        $_SERVER['REQUEST_URI'] = get_home_url('') . '/' . rest_get_url_prefix();
+
+        foreach ($user_roles as $user_role) {
+            update_user_meta($this->user_id, '_wiaas_current_user_admin_role', $user_role);
+
+            $this->assertFalse(
+                Wiaas_Authentication::authenticate_current_user($this->user_id)
+            );
+        }
+    }
+
+    /**
+     * @covers Wiaas_Authentication::authenticate_current_user()
+     * @group authentication
+     */
+    function test_current_user_authentication_valid_when_organization_has_customer_role() {
+        // add roles to organization
+        $organization_roles = array( 'administrator', 'commercial_lead', 'customer' );
+        update_term_meta($this->organization_id, '_wiaas_organization_roles', $organization_roles);
+
+        $user_roles = $organization_roles;
+
+        $_SERVER['REQUEST_URI'] = get_home_url('') . '/' . rest_get_url_prefix();
+
+        foreach ($user_roles as $user_role) {
+            update_user_meta($this->user_id, '_wiaas_current_user_admin_role', $user_role);
+
+            $this->assertEquals(
+                $this->user_id,
+                Wiaas_Authentication::authenticate_current_user($this->user_id)
+            );
+        }
+    }
+
+    /**
+     * @covers Wiaas_Authentication::authenticate_user_on_login()
+     * @group authentication
+     */
+    function test_login_authentication_fails_if_no_role_posted() {
+
+        $user = wp_get_current_user();
+
+        $error = Wiaas_Authentication::authenticate_user_on_login($user);
+
+        $this->assertTrue(is_wp_error($error));
+
+        $this->assertEquals('You must selected role to login!', $error->get_error_message());
+    }
+
+    /**
+     * @covers Wiaas_Authentication::authenticate_user_on_login()
+     * @group authentication
+     */
+    function test_login_authentication_does_nothing_if_rest_request() {
+
+        $_SERVER['REQUEST_URI'] = get_home_url('') . '/' . rest_get_url_prefix();
+
+        $user = wp_get_current_user();
+
+        $response_user = Wiaas_Authentication::authenticate_user_on_login($user);
+
+        $this->assertEquals(
+            $user->ID,
+            $response_user->ID
+        );
+    }
+
+    /**
+     * @covers Wiaas_Authentication::authenticate_user_on_login()
+     * @group authentication
+     */
+    function test_login_authentication_fails_if_customer_role_requested() {
+
+        $user = wp_get_current_user();
+
+        $_POST['role'] = 'customer';
+
+        $error = Wiaas_Authentication::authenticate_user_on_login($user);
+
+        $this->assertTrue(is_wp_error($error));
+
+        $this->assertEquals('No access!', $error->get_error_message());
+    }
+
+
+    /**
+     * @covers Wiaas_Authentication::authenticate_user_on_login()
+     * @group authentication
+     */
+    function test_login_authentication_fails_when_user_has_no_organization() {
+
+        $_POST['role'] = 'supplier';
+
+        delete_user_meta($this->user_id, '_wiaas_organization_id');
+
+        $error = Wiaas_Authentication::authenticate_user_on_login(wp_get_current_user());
+
+        $this->assertTrue(is_wp_error($error));
+
+        $this->assertEquals('Account not completed!', $error->get_error_message());
+    }
+
+    /**
+     * @covers Wiaas_Authentication::authenticate_user_on_login()
+     * @group authentication
+     */
+    function test_login_authentication_fails_when_organization_has_no_roles() {
+
+        $_POST['role'] = 'supplier';
+
+        $error = Wiaas_Authentication::authenticate_user_on_login(wp_get_current_user());
+
+        $this->assertTrue(is_wp_error($error));
+
+        $this->assertEquals('Your account is not authorized for requested role.  Please contact us for help.', $error->get_error_message());
+    }
+
+    /**
+     * @covers Wiaas_Authentication::authenticate_user_on_login()
+     * @group authentication
+     */
+    function test_login_authentication_fails_when_organization_has_different_roles() {
+        // add roles to organization
+        $organization_roles = array( 'supplier', 'customer' );
+        update_term_meta($this->organization_id, '_wiaas_organization_roles', $organization_roles);
+
+        $_POST['role'] = 'commercial_lead';
+
+        $error = Wiaas_Authentication::authenticate_user_on_login(wp_get_current_user());
+
+        $this->assertTrue(is_wp_error($error));
+
+        $this->assertEquals('Your account is not authorized for requested role.  Please contact us for help.', $error->get_error_message());
+    }
+
+    /**
+     * @covers Wiaas_Authentication::authenticate_user_on_login()
+     * @group authentication
+     */
+    function test_login_authentication_valid_when_organization_has_requested_role() {
+        // add roles to organization
+        $organization_roles = array( 'administrator', 'commercial_lead' );
+        update_term_meta($this->organization_id, '_wiaas_organization_roles', $organization_roles);
+
+        $user_roles = $organization_roles;
+
+        foreach ($user_roles as $user_role) {
+            $_POST['role'] = $user_role;
+
+            $response_user = Wiaas_Authentication::authenticate_user_on_login(wp_get_current_user());
+
+            $this->assertEquals(
+                $this->user_id,
+                $response_user->ID
+            );
+        }
+    }
+
+    /**
+     * @covers Wiaas_Authentication::maybe_filter_user_roles()
+     * @group authentication
+     */
+    function test_user_has_customer_role_on_rest_request() {
+        $_SERVER['REQUEST_URI'] = get_home_url('') . '/' . rest_get_url_prefix();
+
+        global $wpdb;
+
+        $user_roles = Wiaas_Authentication::maybe_filter_user_roles(
+            null, $this->user_id,
+            $wpdb->get_blog_prefix() . 'capabilities'
+        );
+
+        $this->assertNotNull($user_roles);
+        $this->assertCount(1, $user_roles);
+
+        $user_roles = $user_roles[0];
+
+        $this->assertNotNull($user_roles);
+        $this->assertCount(1, $user_roles);
+        $this->assertArrayHasKey('customer', $user_roles);
+        $this->assertTrue($user_roles['customer']);
+
+    }
+
+    /**
+     * @covers Wiaas_Authentication::maybe_filter_user_roles()
+     * @group authentication
+     */
+    function test_user_has_no_role_if_not_selected() {
+
+        global $wpdb;
+
+        $user_roles = Wiaas_Authentication::maybe_filter_user_roles(
+            null, $this->user_id,
+            $wpdb->get_blog_prefix() . 'capabilities'
+        );
+
+        $this->assertNotNull($user_roles);
+        $this->assertCount(1, $user_roles);
+
+        $user_roles = $user_roles[0];
+
+        $this->assertNotNull($user_roles);
+        $this->assertCount(1, $user_roles);
+        $this->assertEmpty(array_keys($user_roles)[0]);
+    }
+
+    /**
+     * @covers Wiaas_Authentication::maybe_filter_user_roles()
+     * @group authentication
+     */
+    function test_user_has_selected_role() {
+
+        global $wpdb;
+
+        update_user_meta($this->user_id, '_wiaas_current_user_admin_role', 'supplier');
+
+        $user_roles = Wiaas_Authentication::maybe_filter_user_roles(
+            null, $this->user_id,
+            $wpdb->get_blog_prefix() . 'capabilities'
+        );
+
+        $this->assertNotNull($user_roles);
+        $this->assertCount(1, $user_roles);
+
+        $user_roles = $user_roles[0];
+
+        $this->assertNotNull($user_roles);
+        $this->assertCount(1, $user_roles);
+        $this->assertArrayHasKey('supplier', $user_roles);
+        $this->assertTrue($user_roles['supplier']);
+    }
+}
--- a/backend/app/plugins/wiaas/tests/unit-tests/test-wiaas-order.php
+++ b/backend/app/plugins/wiaas/tests/unit-tests/test-wiaas-order.php
@@ -28,6 +28,8 @@ class Wiaas_Order_Test extends Wiaas_Unit_Test_Case {
 			Wiaas_User_Organization::TAXONOMY_NAME
 		)['term_id'];

+        update_user_meta($this->customer_id, '_wiaas_organization_id', $this->customer_organization_id);
+
 		# add customer to organization
 		wp_set_terms_for_user(
 			$this->customer_id,
@@ -198,28 +200,4 @@ class Wiaas_Order_Test extends Wiaas_Unit_Test_Case {
 		$this->assertArrayHasKey('email', $transformed_order_response['commercial_lead']);
 		$this->assertArrayHasKey('phone', $transformed_order_response['commercial_lead']);
 	}
-
-	/**
-	 * @covers Wiaas_Order::transform_rest_order()
-	 */
-	function test_order_rest_response_has_empty_documents_when_package_has_no_documents() {
-		$order_response = array(
-			'customer_id' => $this->customer_id,
-			'status' => 'processing',
-			'line_items' => array()
-		);
-		$request = array( 'id' => $this->order_id);
-
-		$order_rest_response = new WP_REST_Response($order_response);
-
-		$order_rest_response = Wiaas_Order::transform_rest_order(
-			$order_rest_response,
-			wc_get_order($this->order_id),
-			$request);
-
-		$transformed_order_response = $order_rest_response->get_data();
-
-		$this->assertNotNull($transformed_order_response['documents']);
-		$this->assertTrue(is_array($transformed_order_response['documents']));
-	}
 }
--- a/backend/app/plugins/wiaas/tests/unit-tests/test-wiaas-user-organization.php
+++ b/backend/app/plugins/wiaas/tests/unit-tests/test-wiaas-user-organization.php
@@ -28,6 +28,8 @@ class Wiaas_User_Organization_Test extends Wiaas_Unit_Test_Case {
 			Wiaas_User_Organization::TAXONOMY_NAME
 		)['term_id'];

+        update_user_meta($this->user_id, '_wiaas_organization_id', $this->user_organization_id);
+
 		# create department
 		$this->user_department_id = wp_insert_term(
 			$this->user_department_name,
@@ -63,11 +65,10 @@ class Wiaas_User_Organization_Test extends Wiaas_Unit_Test_Case {
 	 * @covers Wiaas_User_Organization::get_user_organization()
 	 */
 	function test_retrieve_user_organization() {
-		$organization = Wiaas_User_Organization::get_user_organization($this->user_id);
+		$organization_id = Wiaas_User_Organization::get_user_organization_id($this->user_id);

-		$this->assertNotNull($organization);
-		$this->assertEquals($organization->term_id, $this->user_organization_id);
-		$this->assertEquals($organization->name, $this->user_organization_name);
+		$this->assertNotNull($organization_id);
+		$this->assertEquals($organization_id, $this->user_organization_id);
 	}

 	/**