<?php
declare(strict_types=1);

/**
 * CakePHP(tm) : Rapid Development Framework (https://cakephp.org)
 * Copyright (c) Cake Software Foundation, Inc. (https://cakefoundation.org)
 *
 * Licensed under The MIT License
 * For full copyright and license information, please see the LICENSE.txt
 * Redistributions of files must retain the above copyright notice.
 *
 * @copyright Copyright (c) Cake Software Foundation, Inc. (https://cakefoundation.org)
 * @link https://cakephp.org CakePHP(tm) Project
 * @license https://www.opensource.org/licenses/mit-license.php MIT License
 */
namespace Authentication\Test\TestCase\PasswordHasher;

use Authentication\PasswordHasher\LegacyPasswordHasher;
use Cake\TestSuite\TestCase;
use Cake\Utility\Security;

/**
 * Test case for LegacyPasswordHasher
 */
class LegacyPasswordHasherTest extends TestCase
{
    /**
     * setUp method
     *
     * @return void
     */
    public function setUp(): void
    {
        parent::setUp();

        Security::setSalt('YJfIxfs2guVoUubWDYhG93b0qyJfIxfs2guwvniR2G0FgaC9mi');
    }

    /**
     * Tests that any password not produced by LegacyPasswordHasher needs
     * to be rehashed
     *
     * @return void
     */
    public function testNeedsRehash()
    {
        $hasher = new LegacyPasswordHasher();
        $this->assertTrue($hasher->needsRehash(md5('foo')));
        $this->assertTrue($hasher->needsRehash('bar'));
        $hashCost = '10';
        if (PHP_VERSION_ID >= 80400) {
            $hashCost = '12';
        }
        $this->assertFalse($hasher->needsRehash('$2y$' . $hashCost . '$juOA0XVFpvZa0KTxRxEYVuX5kIS7U1fKDRcxyYhhUQECN1oHYnBMy'));
    }

    /**
     * Tests hash() and check()
     *
     * @return void
     */
    public function testHashAndCheck()
    {
        $hasher = new LegacyPasswordHasher();
        $hasher->setConfig('hashType', 'md5');
        $password = $hasher->hash('foo');
        $this->assertTrue($hasher->check('foo', $password));
        $this->assertFalse($hasher->check('bar', $password));

        $hasher->setConfig('hashType', 'sha1');
        $this->assertFalse($hasher->check('foo', $password));

        // salt check
        $hasher->setConfig('hashType', 'sha256');
        $saltedPassword = $hasher->hash('saltcheck');
        $this->assertTrue($hasher->check('saltcheck', $saltedPassword));
        $hasher->setConfig('salt', false);
        $this->assertFalse($hasher->check('saltcheck', $saltedPassword));

        $unsaltedPassword = $hasher->hash('saltcheck');
        $this->assertTrue($hasher->check('saltcheck', $unsaltedPassword));
        $hasher->setConfig('salt', true);
        $this->assertFalse($hasher->check('saltcheck', $unsaltedPassword));
    }
}
