mirror of
https://github.com/Vateron-Media/XC_VM.git
synced 2026-11-01 03:03:23 +01:00
babasado
7392fbafca
Expose User-Agent allowlists and an explicit STB reset for managed customer devices. Enforce restriction permissions and ownership, serialize resets with binding checks, invalidate portal caches, and preserve User-Agent policy on reset. Fix the CI style violation and keep new translations in en.ini only. Record pre-push validation and translation workflow guidance.
78 lines
3.5 KiB
PHP
78 lines
3.5 KiB
PHP
<?php
|
|
|
|
use PHPUnit\Framework\TestCase;
|
|
use XcVm\Domain\User\ResellerAPI;
|
|
|
|
/**
|
|
* ResellerAPI::processData() — the whitelist every reseller save goes through.
|
|
*
|
|
* Two fields a reseller could use against other people's subscriptions are
|
|
* decided here: `trial` (a trial is issued with a new subscription, never on an
|
|
* edit, where the per-period trial quota — counted by created_at — does not
|
|
* see it) and `pair_id` (pairing copies the paired line's subscription onto
|
|
* this one, so only a line the reseller manages may be named).
|
|
*/
|
|
final class ResellerAPIProcessDataTest extends TestCase {
|
|
|
|
protected function tearDown(): void {
|
|
unset($GLOBALS['rUserInfo'], $GLOBALS['rPermissions']);
|
|
}
|
|
|
|
public function testDropsKeysOutsideTheWhitelist(): void {
|
|
$rData = ResellerAPI::processData('line', ['username' => 'u', 'member_group_id' => 1, 'exp_date' => 1]);
|
|
$this->assertSame(['username' => 'u'], $rData);
|
|
}
|
|
|
|
public function testTrialOnlyWhenCreating(): void {
|
|
foreach (['line', 'mag', 'enigma'] as $rType) {
|
|
$this->assertSame('1', ResellerAPI::processData($rType, ['trial' => '1'])['trial'] ?? null, $rType . ' create');
|
|
$this->assertArrayNotHasKey('trial', ResellerAPI::processData($rType, ['edit' => '7', 'trial' => '1']), $rType . ' edit');
|
|
}
|
|
}
|
|
|
|
public function testPairIdNeedsALineTheResellerManages(): void {
|
|
// No reseller context loaded: Authorization::check() answers false.
|
|
foreach (['line', 'mag', 'enigma'] as $rType) {
|
|
$this->assertArrayNotHasKey('pair_id', ResellerAPI::processData($rType, ['pair_id' => '42']), $rType);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* A line's restrictions (allowed addresses and user agents, the blocked
|
|
* user agents' bypass, the ISP lock) are a reseller's to set only with
|
|
* allow_restrictions. The save skipped its restrictions block without it,
|
|
* but a new line had already been filled from what was posted.
|
|
*/
|
|
public function testRestrictionsNeedThePermission(): void {
|
|
$rPosted = ['username' => 'u', 'allowed_ips' => ['203.0.113.9'], 'allowed_ua' => ['x'], 'bypass_ua' => '1', 'is_isplock' => '1', 'isp_clear' => ''];
|
|
$rBefore = ResellerAPI::$rPermissions;
|
|
try {
|
|
ResellerAPI::$rPermissions = ['allow_restrictions' => 0];
|
|
foreach (['line', 'mag', 'enigma'] as $rType) {
|
|
$rKept = array_keys(ResellerAPI::processData($rType, $rPosted));
|
|
$this->assertSame([], array_values(array_intersect($rKept, ['allowed_ips', 'allowed_ua', 'bypass_ua', 'is_isplock', 'isp_clear'])), $rType);
|
|
}
|
|
ResellerAPI::$rPermissions = ['allow_restrictions' => 1];
|
|
$this->assertSame($rPosted, ResellerAPI::processData('line', $rPosted), 'with the permission: as posted');
|
|
} finally {
|
|
ResellerAPI::$rPermissions = $rBefore;
|
|
}
|
|
}
|
|
|
|
public function testMagUserAgentFieldsRequireRestrictionPermissionAndNeverAcceptObservedHeader(): void {
|
|
$rBefore = ResellerAPI::$rPermissions;
|
|
$rPosted = ['ua_policy_present' => '1', 'lock_user_agent' => '1', 'allowed_user_agents' => ['Player'], 'last_user_agent' => 'FORGED'];
|
|
try {
|
|
ResellerAPI::$rPermissions = ['allow_restrictions' => 0];
|
|
$this->assertSame([], ResellerAPI::processData('mag', $rPosted));
|
|
ResellerAPI::$rPermissions = ['allow_restrictions' => 1];
|
|
unset($rPosted['last_user_agent']);
|
|
$this->assertSame($rPosted, ResellerAPI::processData('mag', $rPosted + ['last_user_agent' => 'FORGED']));
|
|
} finally { ResellerAPI::$rPermissions = $rBefore; }
|
|
}
|
|
|
|
public function testResellerCannotChangeItsOwnBouquetAllowance(): void {
|
|
$this->assertSame([], ResellerAPI::processData('user', ['allowed_bouquets' => [1, 2], 'bouquet_limit_enabled' => '0']));
|
|
}
|
|
}
|