Zabbix

<?php

/*

** Copyright (C) 2001-2025 Zabbix SIA

**

** This program is free software: you can redistribute it and/or modify it under the terms of

** the GNU Affero General Public License as published by the Free Software Foundation, version 3.

**

** This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;

** without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

** See the GNU Affero General Public License for more details.

**

** You should have received a copy of the GNU Affero General Public License along with this program.

** If not, see <https://www.gnu.org/licenses/>.

**/

​

​

require_once dirname(__FILE__).'/../../include/CWebTest.php';

require_once dirname(__FILE__).'/../behaviors/CMessageBehavior.php';

​

/**

 * @backup config

 */

class testUsersAuthentication extends CWebTest {

​

    /**

     * Attach MessageBehavior to the test.

     *

     * @return array

     */

    public function getBehaviors() {

        return ['class' => CMessageBehavior::class];

    }

​

    /**

     * Check saving default authentication page.

     */

    public function testUsersAuthentication_Layout() {

        $this->page->login()->open('zabbix.php?action=authentication.edit');

        $this->page->assertTitle('Configuration of authentication');

        $this->page->assertHeader('Authentication');

        $form = $this->query('id:authentication-form')->asForm()->one();

​

        // Check switcher options and default values.

        $auth_radio = $form->getField('Default authentication')->asSegmentedRadio();

        $this->assertEquals(['Internal', 'LDAP'], $auth_radio->getLabels()->asText());

​

        $form->checkValue(['Deprovisioned users group' => '']);

        $form->query('button:Select')->waitUntilClickable()->one()->click();

        $dialog = COverlayDialogElement::find()->waitUntilReady()->one();

        $this->assertEquals('User groups', $dialog->getTitle());

        $footer = $dialog->getFooter();

        $this->assertEquals(1, $footer->query('xpath:.//button')->all()->count());

        $this->assertTrue($footer->query('button:Cancel')->one()->isClickable());

​

        $this->assertEquals(['Disabled'], $dialog->query('class:list-table')->asTable()->waitUntilVisible()->one()

                ->getRows()->asText()

        );

        $dialog->close();

​

        // Check that 'Password policy' header presents.

        $this->assertTrue($form->query('xpath:.//h4[text()="Password policy"]')->exists());

​

        $this->assertEquals(2, $form->getField('Minimum password length')->getAttribute('maxlength'));

​

        // Check default texts in hint-boxes.

        $hintboxes = [

                'Deprovisioned users group' => 'Only disabled group can be set for deprovisioned users.',

                'Password must contain' => "Password requirements:".

                        "\nmust contain at least one lowercase and one uppercase Latin letter (A-Z, a-z)".

                        "\nmust contain at least one digit (0-9)".

                        "\nmust contain at least one special character ( !\"#$%&'()*+,-./:;<=>?@[\]^_`{|}~)",

                'Avoid easy-to-guess passwords' => "Password requirements:".

                        "\nmust not contain user's name, surname or username".

                        "\nmust not be one of common or context-specific passwords"

        ];

​

        foreach ($hintboxes as $field => $text) {

            // Summon the hint-box, assert text and close.

            $form->getLabel($field)->query('xpath:./button[@data-hintbox]')->one()->waitUntilClickable()->click();

            $hint = $this->query('xpath://div[@class="overlay-dialogue wordbreak"]')->asOverlayDialog()->waitUntilPresent()->one();

            $this->assertEquals($text, $hint->getText());

            $hint->close();

        }

​

        // Assert default values in form.

        $default_values = [

            'Default authentication' => 'Internal',

            'Deprovisioned users group' => '',

            'Minimum password length' => 8,

            'id:passwd_check_rules_case' => false,

            'id:passwd_check_rules_digits' => false,