ltsecurityinc安防产品在线商城代码

dev/tests/integration/testsuite/Magento/EncryptionKey/Block/Adminhtml/Crypt/Key/EditTest.php

@@ -0,0 +1,26 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+namespace Magento\EncryptionKey\Block\Adminhtml\Crypt\Key;
+
+class EditTest extends \PHPUnit\Framework\TestCase
+{
+    /**
+     * Test edit block
+     */
+    public function testEditBlock()
+    {
+        /**
+         * @var \Magento\EncryptionKey\Block\Adminhtml\Crypt\Key\Edit
+         */
+        $block = \Magento\TestFramework\Helper\Bootstrap::getObjectManager()->get(
+            \Magento\Framework\View\LayoutInterface::class
+        )->createBlock(
+            \Magento\EncryptionKey\Block\Adminhtml\Crypt\Key\Edit::class
+        );
+
+        $this->assertEquals('Encryption Key', $block->getHeaderText());
+    }
+}

dev/tests/integration/testsuite/Magento/EncryptionKey/Block/Adminhtml/Crypt/Key/FormTest.php

@@ -0,0 +1,54 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+namespace Magento\EncryptionKey\Block\Adminhtml\Crypt\Key;
+
+/**
+ * Test class for \Magento\EncryptionKey\Block\Adminhtml\Crypt\Key\Form
+ * @magentoAppArea adminhtml
+ */
+class FormTest extends \PHPUnit\Framework\TestCase
+{
+    /**
+     * @magentoAppIsolation enabled
+     */
+    public function testPrepareForm()
+    {
+        /** @var $objectManager \Magento\TestFramework\ObjectManager */
+        $objectManager = \Magento\TestFramework\Helper\Bootstrap::getObjectManager();
+
+        $objectManager->get(\Magento\Framework\View\DesignInterface::class)
+            ->setArea(\Magento\Backend\App\Area\FrontNameResolver::AREA_CODE)
+            ->setDefaultDesignTheme();
+
+        $block = $objectManager->get(\Magento\Framework\View\LayoutInterface::class)
+            ->createBlock(\Magento\EncryptionKey\Block\Adminhtml\Crypt\Key\Form::class);
+
+        $prepareFormMethod = new \ReflectionMethod(
+            \Magento\EncryptionKey\Block\Adminhtml\Crypt\Key\Form::class,
+            '_prepareForm'
+        );
+        $prepareFormMethod->setAccessible(true);
+        $prepareFormMethod->invoke($block);
+
+        $form = $block->getForm();
+
+        $this->assertEquals('edit_form', $form->getId());
+        $this->assertEquals('post', $form->getMethod());
+
+        foreach (['enc_key_note', 'generate_random', 'crypt_key', 'main_fieldset'] as $id) {
+            $element = $form->getElement($id);
+            $this->assertNotNull($element);
+        }
+
+        $generateRandomField = $form->getElement('generate_random');
+        $this->assertEquals('select', $generateRandomField->getType());
+        $this->assertEquals([ 0 => 'No', 1 => 'Yes'], $generateRandomField->getOptions());
+
+        $cryptKeyField = $form->getElement('crypt_key');
+        $this->assertEquals('text', $cryptKeyField->getType());
+        $this->assertEquals('crypt_key', $cryptKeyField->getName());
+    }
+}

dev/tests/integration/testsuite/Magento/EncryptionKey/Controller/Adminhtml/Crypt/Key/IndexTest.php

@@ -0,0 +1,20 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+namespace Magento\EncryptionKey\Controller\Adminhtml\Crypt\Key;
+
+class IndexTest extends \Magento\TestFramework\TestCase\AbstractBackendController
+{
+    /**
+     * Test index action
+     */
+    public function testIndexAction()
+    {
+        $this->dispatch('backend/admin/crypt_key/index');
+
+        $body = $this->getResponse()->getBody();
+        $this->assertStringContainsString('<h1 class="page-title">Encryption Key</h1>', $body);
+    }
+}

dev/tests/integration/testsuite/Magento/EncryptionKey/Controller/Adminhtml/Crypt/Key/SaveTest.php

@@ -0,0 +1,105 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+
+namespace Magento\EncryptionKey\Controller\Adminhtml\Crypt\Key;
+
+class SaveTest extends \Magento\TestFramework\TestCase\AbstractBackendController
+{
+    /**
+     * Test save action with empty encryption key
+     */
+    public function testSaveActionWithEmptyKey()
+    {
+        // data set with no random encryption key and no provided encryption key
+        $ifGenerateRandom = '0';
+        $encryptionKey = '';
+
+        $request = $this->getRequest();
+        $request
+            ->setPostValue('generate_random', $ifGenerateRandom)
+            ->setPostValue('crypt_key', $encryptionKey);
+        $this->dispatch('backend/admin/crypt_key/save');
+        $this->assertSessionMessages(
+            $this->containsEqual('Please enter an encryption key.'),
+            \Magento\Framework\Message\MessageInterface::TYPE_ERROR
+        );
+    }
+
+    /**
+     * Test save action with provided encryption key
+     *
+     * @magentoDbIsolation enabled
+     */
+    public function testSaveActionWithProvidedKey()
+    {
+        $this->markTestSkipped('Test is blocked by MAGETWO-33612.');
+
+        // data set with provided encryption key
+        $ifGenerateRandom = '0';
+        $encryptionKey = 'foo_encryption_key';
+
+        $request = $this->getRequest();
+        $request
+            ->setPostValue('generate_random', $ifGenerateRandom)
+            ->setPostValue('crypt_key', $encryptionKey);
+        $this->dispatch('backend/admin/crypt_key/save');
+
+        $this->assertRedirect();
+        $this->assertSessionMessages(
+            $this->containsEqual('The encryption key has been changed.'),
+            \Magento\Framework\Message\MessageInterface::TYPE_SUCCESS
+        );
+    }
+
+    /**
+     * Test save action with invalid encryption key
+     */
+    public function testSaveActionWithInvalidKey()
+    {
+        // data set with provided encryption key
+        $ifGenerateRandom = '0';
+        $encryptionKey = 'invalid key';
+
+        $params = [
+            'generate_random' => $ifGenerateRandom,
+            'crypt_key' => $encryptionKey,
+        ];
+        $this->getRequest()->setPostValue($params);
+        $this->dispatch('backend/admin/crypt_key/save');
+
+        $this->assertRedirect();
+        $this->assertSessionMessages(
+            $this->containsEqual('Encryption key must be 32 character string without any white space.'),
+            \Magento\Framework\Message\MessageInterface::TYPE_ERROR
+        );
+    }
+
+    /**
+     * Test save action with randomly generated key
+     *
+     * @magentoDbIsolation enabled
+     */
+    public function testSaveActionWithRandomKey()
+    {
+        $this->markTestSkipped('Test is blocked by MAGETWO-33612.');
+
+        // data set with random encryption key
+        $ifGenerateRandom = '1';
+        $encryptionKey = '';
+
+        $request = $this->getRequest();
+        $request
+            ->setPostValue('generate_random', $ifGenerateRandom)
+            ->setPostValue('crypt_key', $encryptionKey);
+        $this->dispatch('backend/admin/crypt_key/save');
+
+        $this->assertRedirect();
+        $this->assertSessionMessages(
+            $this->containsEqual('The encryption key has been changed.'),
+            \Magento\Framework\Message\MessageInterface::TYPE_SUCCESS
+        );
+    }
+}

dev/tests/integration/testsuite/Magento/EncryptionKey/Model/ResourceModel/Key/ChangeTest.php

@@ -0,0 +1,103 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+
+declare(strict_types=1);
+
+namespace Magento\EncryptionKey\Model\ResourceModel\Key;
+
+class ChangeTest extends \PHPUnit\Framework\TestCase
+{
+    /**
+     * @var \Magento\Framework\ObjectManagerInterface
+     */
+    protected $objectManager;
+
+    protected function setup(): void
+    {
+        $this->objectManager = \Magento\TestFramework\Helper\Bootstrap::getObjectManager();
+    }
+
+    /**
+     */
+    public function testChangeEncryptionKeyConfigNotWritable()
+    {
+        $this->expectException(\Exception::class);
+        $this->expectExceptionMessage('Deployment configuration file is not writable');
+
+        $writerMock = $this->createMock(\Magento\Framework\App\DeploymentConfig\Writer::class);
+        $writerMock->expects($this->once())->method('checkIfWritable')->willReturn(false);
+
+        /** @var \Magento\EncryptionKey\Model\ResourceModel\Key\Change $keyChangeModel */
+        $keyChangeModel = $this->objectManager->create(
+            \Magento\EncryptionKey\Model\ResourceModel\Key\Change::class,
+            ['writer' => $writerMock]
+        );
+        $keyChangeModel->changeEncryptionKey();
+    }
+
+    /**
+     * @magentoDbIsolation enabled
+     * @magentoDataFixture Magento/EncryptionKey/_files/payment_info.php
+     */
+    public function testChangeEncryptionKey()
+    {
+        $testPath = 'test/config';
+        $testValue = 'test';
+
+        $writerMock = $this->createMock(\Magento\Framework\App\DeploymentConfig\Writer::class);
+        $writerMock->expects($this->once())->method('checkIfWritable')->willReturn(true);
+
+        $structureMock = $this->createMock(\Magento\Config\Model\Config\Structure::class);
+        $structureMock->expects($this->once())
+            ->method('getFieldPathsByAttribute')
+            ->willReturn([$testPath]);
+
+        /** @var \Magento\EncryptionKey\Model\ResourceModel\Key\Change $keyChangeModel */
+        $keyChangeModel = $this->objectManager->create(
+            \Magento\EncryptionKey\Model\ResourceModel\Key\Change::class,
+            ['structure' => $structureMock, 'writer' => $writerMock]
+        );
+
+        $configModel = $this->objectManager->create(
+            \Magento\Config\Model\ResourceModel\Config::class
+        );
+        $configModel->saveConfig($testPath, 'test', 'default', 0);
+        $this->assertNotNull($keyChangeModel->changeEncryptionKey());
+
+        $connection = $keyChangeModel->getConnection();
+        // Verify that the config value has been encrypted
+        $values1 = $connection->fetchPairs(
+            $connection->select()->from(
+                $keyChangeModel->getTable('core_config_data'),
+                ['config_id', 'value']
+            )->where(
+                'path IN (?)',
+                [$testPath]
+            )->where(
+                'value NOT LIKE ?',
+                ''
+            )
+        );
+        $this->assertNotContains($testValue, $values1);
+        $this->assertMatchesRegularExpression('|([0-9]+:)([0-9]+:)([a-zA-Z0-9+/]+=*)|', current($values1));
+
+        // Verify that the credit card number has been encrypted
+        $values2 = $connection->fetchPairs(
+            $connection->select()->from(
+                $keyChangeModel->getTable('sales_order_payment'),
+                ['entity_id', 'cc_number_enc']
+            )
+        );
+        $this->assertNotContains('1111111111', $values2);
+        $this->assertMatchesRegularExpression('|([0-9]+:)([0-9]+:)([a-zA-Z0-9+/]+=*)|', current($values2));
+
+        /** clean up */
+        $select = $connection->select()->from($configModel->getMainTable())->where('path=?', $testPath);
+        $this->assertNotEmpty($connection->fetchRow($select));
+        $configModel->deleteConfig($testPath, 'default', 0);
+        $this->assertEmpty($connection->fetchRow($select));
+    }
+}

dev/tests/integration/testsuite/Magento/EncryptionKey/Setup/Patch/Data/SodiumChachaPatchTest.php

@@ -0,0 +1,101 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+
+declare(strict_types=1);
+
+namespace Magento\EncryptionKey\Setup\Patch\Data;
+
+use Magento\Framework\ObjectManagerInterface;
+use Magento\Framework\App\DeploymentConfig;
+use Magento\Framework\Encryption\Encryptor;
+
+class SodiumChachaPatchTest extends \PHPUnit\Framework\TestCase
+{
+    const PATH_KEY = 'crypt/key';
+
+    /**
+     * @var ObjectManagerInterface
+     */
+    private $objectManager;
+
+    /**
+     * @var DeploymentConfig
+     */
+    private $deployConfig;
+
+    protected function setUp(): void
+    {
+        $this->objectManager = \Magento\TestFramework\Helper\Bootstrap::getObjectManager();
+        $this->deployConfig = $this->objectManager->get(DeploymentConfig::class);
+    }
+
+    public function testChangeEncryptionKey()
+    {
+        $testPath = 'test/config';
+        $testValue = 'test';
+
+        $structureMock = $this->createMock(\Magento\Config\Model\Config\Structure\Proxy::class);
+        $structureMock->expects($this->once())
+            ->method('getFieldPathsByAttribute')
+            ->willReturn([$testPath]);
+        $structureMock->expects($this->once())
+            ->method('getFieldPaths')
+            ->willReturn([]);
+
+        /** @var \Magento\Config\Model\ResourceModel\Config $configModel */
+        $configModel = $this->objectManager->create(\Magento\Config\Model\ResourceModel\Config::class);
+        $configModel->saveConfig($testPath, $this->legacyEncrypt($testValue), 'default', 0);
+
+        /** @var \Magento\EncryptionKey\Setup\Patch\Data\SodiumChachaPatch $patch */
+        $patch = $this->objectManager->create(
+            \Magento\EncryptionKey\Setup\Patch\Data\SodiumChachaPatch::class,
+            [
+                'structure' => $structureMock,
+            ]
+        );
+        $patch->apply();
+
+        $connection = $configModel->getConnection();
+        $values = $connection->fetchPairs(
+            $connection->select()->from(
+                $configModel->getMainTable(),
+                ['config_id', 'value']
+            )->where(
+                'path IN (?)',
+                [$testPath]
+            )->where(
+                'value NOT LIKE ?',
+                ''
+            )
+        );
+
+        /** @var \Magento\Framework\Encryption\EncryptorInterface $encyptor */
+        $encyptor = $this->objectManager->get(\Magento\Framework\Encryption\EncryptorInterface::class);
+
+        $rawConfigValue = array_pop($values);
+
+        $this->assertNotEquals($testValue, $rawConfigValue);
+        $this->assertStringStartsWith('0:' . Encryptor::CIPHER_LATEST . ':', $rawConfigValue);
+        $this->assertEquals($testValue, $encyptor->decrypt($rawConfigValue));
+    }
+
+    private function legacyEncrypt(string $data): string
+    {
+        // @codingStandardsIgnoreStart
+        $handle = @mcrypt_module_open(MCRYPT_RIJNDAEL_256, '', MCRYPT_MODE_CBC, '');
+        $initVectorSize = @mcrypt_enc_get_iv_size($handle);
+        $initVector = str_repeat("\0", $initVectorSize);
+        @mcrypt_generic_init($handle, $this->deployConfig->get(static::PATH_KEY), $initVector);
+
+        $encrpted = @mcrypt_generic($handle, $data);
+
+        @mcrypt_generic_deinit($handle);
+        @mcrypt_module_close($handle);
+        // @codingStandardsIgnoreEnd
+
+        return '0:' . Encryptor::CIPHER_RIJNDAEL_256 . ':' . base64_encode($encrpted);
+    }
+}

dev/tests/integration/testsuite/Magento/EncryptionKey/_files/payment_info.php

@@ -0,0 +1,20 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+
+$objectManager = \Magento\TestFramework\Helper\Bootstrap::getObjectManager();
+
+/** @var \Magento\Sales\Model\Order\Payment $paymentInfo */
+$paymentInfo = $objectManager->create(\Magento\Sales\Model\Order\Payment::class);
+$paymentInfo->setMethod('Cc')->setData('cc_number_enc', '1111111111');
+
+/** @var \Magento\Sales\Model\Order $order */
+$order = $objectManager->create(\Magento\Sales\Model\Order::class);
+$order->setIncrementId(
+    '100000001'
+)->setPayment(
+    $paymentInfo
+);
+$order->save();