Zabbix

<?php

/*

** Copyright (C) 2001-2025 Zabbix SIA

**

** This program is free software: you can redistribute it and/or modify it under the terms of

** the GNU Affero General Public License as published by the Free Software Foundation, version 3.

**

** This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;

** without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

** See the GNU Affero General Public License for more details.

**

** You should have received a copy of the GNU Affero General Public License along with this program.

** If not, see <https://www.gnu.org/licenses/>.

**/

​

​

require_once dirname(__FILE__).'/../common/testFormAuthentication.php';

​

/**

 * @backup config

 */

class testUsersAuthenticationSaml extends testFormAuthentication {

​

    protected function onBeforeTestSuite() {

        if (!defined('PHPUNIT_SAML_TESTS_ENABLED') || !PHPUNIT_SAML_TESTS_ENABLED) {

            self::markTestSuiteSkipped();

        }

    }

​

    public function testUsersAuthenticationSaml_Layout() {

        $saml_form = $this->openFormAndCheckBasics('SAML');

​

        // Check SAML form default values.

        $saml_fields = [

            'Enable JIT provisioning' => ['value' => false, 'visible' => true],

            'IdP entity ID' => ['value' => '', 'visible' => true, 'maxlength' => 1024],

            'SSO service URL' => ['value' => '', 'visible' => true, 'maxlength' => 2048],

            'SLO service URL' => ['value' => '', 'visible' => true, 'maxlength' => 2048],

            'Username attribute' => ['value' => '', 'visible' => true, 'maxlength' => 128],

            'SP entity ID' => ['value' => '', 'visible' => true, 'maxlength' => 1024],

            'SP name ID format' => ['value' => '', 'visible' => true, 'maxlength' => 2048,

                    'placeholder' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient'

            ],

            'id:sign_messages' => ['value' => false, 'visible' => true],

            'id:sign_assertions' => ['value' => false, 'visible' => true],

            'id:sign_authn_requests' => ['value' => false, 'visible' => true],

            'id:sign_logout_requests' => ['value' => false, 'visible' => true],

            'id:sign_logout_responses' => ['value' => false, 'visible' => true],

            'id:encrypt_nameid' => ['value' => false, 'visible' => true],

            'id:encrypt_assertions' => ['value' => false, 'visible' => true],

            'Case-sensitive login' => ['value' => false, 'visible' => true],

            'Configure JIT provisioning' => ['value' => false, 'visible' => true],

            'Group name attribute' => ['value' => '', 'visible' => false, 'maxlength' => 255],

            'User name attribute' => ['value' => '', 'visible' => false, 'maxlength' => 255],

            'User last name attribute' => ['value' => '', 'visible' => false, 'maxlength' => 255],

            'User group mapping' => ['visible' => false],

            'Media type mapping' => ['visible' => false],

            'Enable SCIM provisioning' => ['value' => false, 'visible' => false]

        ];

​

        foreach ($saml_fields as $field => $attributes) {

            $this->assertEquals($attributes['visible'], $saml_form->getField($field)->isVisible());

            $this->assertFalse($saml_form->getField($field)->isEnabled());

​

            if (array_key_exists('value', $attributes)) {

                $this->assertEquals($attributes['value'], $saml_form->getField($field)->getValue());

            }

​

            if (array_key_exists('maxlength', $attributes)) {

                $this->assertEquals($attributes['maxlength'], $saml_form->getField($field)->getAttribute('maxlength'));

            }

​

            if (array_key_exists('placeholder', $attributes)) {

                $this->assertEquals($attributes['placeholder'], $saml_form->getField($field)->getAttribute('placeholder'));

            }

        }

​

        // Check visible mandatory fields.

        $this->assertEquals(['IdP entity ID', 'SSO service URL', 'Username attribute', 'SP entity ID'],

                $saml_form->getRequiredLabels()

        );

​

        // Check invisible mandatory field.

        foreach (['Group name attribute', 'User group mapping'] as $manadatory_field) {

            $saml_form->isRequired($manadatory_field);

        }

​

        // Enable SAML and check that fields become enabled.

        $saml_form->fill(['Enable SAML authentication' => true]);

​

        foreach (array_keys($saml_fields) as $label) {