mirror of
https://github.com/nextcloud/server.git
synced 2024-08-11 14:10:55 +02:00
ba4f12baa0
Class Throttler implements the bruteforce protection for security actions in Nextcloud. It is working by logging invalid login attempts to the database and slowing down all login attempts from the same subnet. The max delay is 30 seconds and the starting delay are 200 milliseconds. (after the first failed login)
98 lines
2.5 KiB
PHP
98 lines
2.5 KiB
PHP
<?php
|
|
|
|
/**
|
|
* ownCloud - App Framework
|
|
*
|
|
* @author Bernhard Posselt
|
|
* @author Morris Jobke
|
|
* @copyright 2012 Bernhard Posselt <dev@bernhard-posselt.com>
|
|
* @copyright 2013 Morris Jobke <morris.jobke@gmail.com>
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
|
|
* License as published by the Free Software Foundation; either
|
|
* version 3 of the License, or any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU AFFERO GENERAL PUBLIC LICENSE for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public
|
|
* License along with this library. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
*/
|
|
|
|
|
|
namespace Test\AppFramework\DependencyInjection;
|
|
|
|
|
|
use \OC\AppFramework\Http\Request;
|
|
|
|
/**
|
|
* @group DB
|
|
*/
|
|
class DIContainerTest extends \Test\TestCase {
|
|
|
|
private $container;
|
|
private $api;
|
|
|
|
protected function setUp(){
|
|
parent::setUp();
|
|
$this->container = $this->getMockBuilder('OC\AppFramework\DependencyInjection\DIContainer')
|
|
->setMethods(['isAdminUser'])
|
|
->setConstructorArgs(['name'])
|
|
->getMock();
|
|
$this->api = $this->getMockBuilder('OC\AppFramework\Core\API')
|
|
->setConstructorArgs(['hi'])
|
|
->getMock();
|
|
}
|
|
|
|
public function testProvidesAPI(){
|
|
$this->assertTrue(isset($this->container['API']));
|
|
}
|
|
|
|
|
|
public function testProvidesRequest(){
|
|
$this->assertTrue(isset($this->container['Request']));
|
|
}
|
|
|
|
|
|
public function testProvidesSecurityMiddleware(){
|
|
$this->assertTrue(isset($this->container['SecurityMiddleware']));
|
|
}
|
|
|
|
|
|
public function testProvidesMiddlewareDispatcher(){
|
|
$this->assertTrue(isset($this->container['MiddlewareDispatcher']));
|
|
}
|
|
|
|
|
|
public function testProvidesAppName(){
|
|
$this->assertTrue(isset($this->container['AppName']));
|
|
}
|
|
|
|
|
|
public function testAppNameIsSetCorrectly(){
|
|
$this->assertEquals('name', $this->container['AppName']);
|
|
}
|
|
|
|
public function testMiddlewareDispatcherIncludesSecurityMiddleware(){
|
|
$this->container['Request'] = new Request(
|
|
['method' => 'GET'],
|
|
$this->getMockBuilder('\OCP\Security\ISecureRandom')
|
|
->disableOriginalConstructor()
|
|
->getMock(),
|
|
$this->getMockBuilder('\OCP\IConfig')
|
|
->disableOriginalConstructor()
|
|
->getMock()
|
|
);
|
|
$security = $this->container['SecurityMiddleware'];
|
|
$dispatcher = $this->container['MiddlewareDispatcher'];
|
|
|
|
$this->assertContains($security, $dispatcher->getMiddlewares());
|
|
}
|
|
|
|
|
|
}
|