<?php
/**
* Copyright © Magento, Inc. All rights reserved.
* See COPYING.txt for license details.
*/
declare(strict_types=1);

namespace Magento\Framework\HTTP\Test\Unit;

use Magento\Framework\App\Request\Http;
use Magento\Framework\HTTP\Authentication;
use Magento\Framework\TestFramework\Unit\Helper\ObjectManager;
use PHPUnit\Framework\TestCase;

class AuthenticationTest extends TestCase
{
/**
* @param array $server
* @param string $expectedLogin
* @param string $expectedPass
* @dataProvider getCredentialsDataProvider
*/
public function testGetCredentials($server, $expectedLogin, $expectedPass)
{
$request = $this->createMock(Http::class);
$request->expects($this->once())->method('getServerValue')->willReturn($server);
$response = $this->createMock(\Magento\Framework\App\Response\Http::class);
$authentication = new Authentication($request, $response);
$this->assertSame([$expectedLogin, $expectedPass], $authentication->getCredentials());
}

/**
* @return array
*/
public function getCredentialsDataProvider()
{
$login = 'login';
$password = 'password';
$header = 'Basic bG9naW46cGFzc3dvcmQ=';

$anotherLogin = 'another_login';
$anotherPassword = 'another_password';
$anotherHeader = 'Basic YW5vdGhlcl9sb2dpbjphbm90aGVyX3Bhc3N3b3Jk';

return [
[[], '', ''],
[['REDIRECT_HTTP_AUTHORIZATION' => $header], $login, $password],
[['HTTP_AUTHORIZATION' => $header], $login, $password],
[['Authorization' => $header], $login, $password],
[
[
'REDIRECT_HTTP_AUTHORIZATION' => $header,
'PHP_AUTH_USER' => $anotherLogin,
'PHP_AUTH_PW' => $anotherPassword,
],
$anotherLogin,
$anotherPassword
],
[
[
'REDIRECT_HTTP_AUTHORIZATION' => $header,
'PHP_AUTH_USER' => $anotherLogin,
'PHP_AUTH_PW' => $anotherPassword,
],
$anotherLogin,
$anotherPassword
],
[
['REDIRECT_HTTP_AUTHORIZATION' => $header, 'HTTP_AUTHORIZATION' => $anotherHeader],
$anotherLogin,
$anotherPassword
]
];
}

public function testSetAuthenticationFailed()
{
$objectManager = new ObjectManager($this);

$request = $objectManager->getObject(Http::class);
$response = $objectManager->getObject(\Magento\Framework\App\Response\Http::class);

$authentication = $objectManager->getObject(
Authentication::class,
[
'httpRequest' => $request,
'httpResponse' => $response
]
);
$realm = uniqid();
$authentication->setAuthenticationFailed($realm);
$headers = $response->getHeaders();

$this->assertTrue($headers->has('WWW-Authenticate'));
$header = $headers->get('WWW-Authenticate');
$this->assertEquals('Basic realm="' . $realm . '"', $header->current()->getFieldValue());
$this->assertStringContainsString('401', $response->getBody());
}
}