«
»

Chris' Brain

Testing Controllers Hiding Behind Zend_Auth

06.03.10 | 14 Comments

(Note, this example was using Zend Framework 1.10, so things might change going forwards).

As a lapsed tester, I've made the commitment to build out our Zend Framework powered application using tests going forward. The first two modules for the app *should* have been done with tests, and for that I hang my head with shame. Now that I've invested the work in creating a continuous integration environment using Hudson, there is no longer an excuse to not write tests. Especially when I can get tests run automatically every time I commit code.

Anyway, I was asked to implement a new feature for the application: a list of all transactions for a fantasy baseball league, sorted by date. What a perfect excuse to write some tests! The initial problem though was how do I simulate logging in a user so I can see this page, which was protected by authentication using Zend_Auth. So I started my scouring the internet for answers.

I found quite a few examples on how to test a controller, using the $this->dispatch('/path/to/action') method but found that I wasn't getting redirected properly to the post-login page. I was passing proper credentials in and everything. Then finally after deciding to go back to basics and read up on just how to test Zend_Auth. After some swearing a few face-palms, I realized what I had been doing wrong.

The tl;dr version: I was forgetting that the unit test itself needed to manually log in the user by speaking with Zend_Auth directly. Here's the testing code for that particular controller:

PLAIN TEXT
PHP:
  1. <?php
  2.  
  3. require_once 'Zend/Test/PHPUnit/ControllerTestCase.php';
  4. require_once 'Zend/Application.php';
  5.  
  6. // Define path to application directory
  7. if (!defined('APPLICATION_PATH')) {
  8.     define('APPLICATION_PATH', realpath(dirname(__FILE__) . '/../../../application'));
  9. }
  10.  
  11. // Define application environment
  12. if (!defined('APPLICATION_ENV')) {
  13.     define('APPLICATION_ENV', (getenv('APPLICATION_ENV') ? getenv('APPLICATION_ENV') : 'test'));
  14. }
  15.  
  16. // Ensure library/ is on include_path
  17. set_include_path(implode(PATH_SEPARATOR, array(
  18.         realpath(APPLICATION_PATH . '/../library'),
  19.             get_include_path(),
  20.         )));
  21.  
  22. class TransactionControllerTest extends Zend_Test_PHPUnit_ControllerTestCase
  23. {
  24.  
  25.     public function setUp()
  26.     {
  27.         $this->bootstrap = new Zend_Application(
  28.             'testing',
  29.             APPLICATION_PATH . '/configs/application.ini'
  30.         );
  31.         parent::setUp();
  32.     }
  33.  
  34.     public function loginUser($login, $passwd, $shortLeague)
  35.     {
  36.         $authParams = array(
  37.             'login' => $login,
  38.             'password' => $passwd,
  39.             'short_league' => $shortLeague
  40.         );
  41.         $adapter = new Xmlteam_Auth($authParams);
  42.         $auth = Zend_Auth::getInstance();
  43.         $result = $auth->authenticate($adapter);
  44.         $this->assertTrue($auth->hasIdentity());
  45.     }
  46.  
  47.     public function tearDown()
  48.     {
  49.         parent::tearDown();
  50.     }
  51.  
  52.     public function testOverallBaseballList()
  53.     {
  54.         $this->loginUser('test@test.com', '*****', 'bluejays2010');
  55.         $this->dispatch('/baseball/bluejays2010/transactions/list');
  56.         $this->assertModule('baseball', 'In baseball module');
  57.         $this->assertController('transactions', 'In the transactions controller');
  58.         $this->assertQuery('#tblTransactions', 'Transaction table exists');
  59.     }
  60. }

I'm using a custom authentication adaptor with Zend_Auth, as we need to limit access for a user to a particular league. Perhaps better to do it with Zend_Acl, and since the platform is likely to expand I will end up using that as well. But I am drifting off topic here.

The magic is in that loginUser() method. What I did not realize at the time was that running a test where I asked it to dispatch users to the login page and passed along what would've been entered in the form was not working. Perhaps it was creating an authenticated session OUTSIDE the scope of the test environment. Perhaps it is my sucky code. Either way, it wasn't working.

So, by creating a authenticated login Zend_Auth *inside* the test, I could then safely dispatch my testing code to look at pages requiring authentication. I hope this blog posts helps out others trying to write tests for controllers that are hidden behind Zend_Auth.

Tags: , ,

14 Comments


«
»