Merge pull request #1182 from ArthurHoaro/feature/session-protection-stay-login

[github/shaarli/Shaarli.git] / tests / security / LoginManagerTest.php

diff --git a/tests/security/LoginManagerTest.php b/tests/security/LoginManagerTest.php
index de8055edaede452cdeeb1c21ed42ae3b13447a8e..7b0262b32c128871841cf9d98aaf83e129ffacca 100644 (file)
--- a/tests/security/LoginManagerTest.php
+++ b/tests/security/LoginManagerTest.php
@@ -260,6 +260,20 @@ class LoginManagerTest extends TestCase
         );
     }
 
+    /**
+     * Generate a token depending on the user credentials with session protected disabled
+     */
+    public function testGenerateStaySignedInTokenSessionProtectionDisabled()
+    {
+        $this->configManager->set('security.session_protection_disabled', true);
+        $this->loginManager->generateStaySignedInToken($this->clientIpAddress);
+
+        $this->assertEquals(
+            sha1($this->passwordHash . $this->salt),
+            $this->loginManager->getStaySignedInToken()
+        );
+    }
+
     /**
      * Check user login - Shaarli has not yet been configured
      */