1 files changed, 51 insertions, 5 deletions

diff --git a/build/integration/features/bootstrap/FederationContext.php b/build/integration/features/bootstrap/FederationContext.php
index 03a03ef2fd6..95dc8119ad6 100644
--- a/build/integration/features/bootstrap/FederationContext.php
+++ b/build/integration/features/bootstrap/FederationContext.php
@@ -1,4 +1,5 @@
 <?php
+
 /**
  * SPDX-FileCopyrightText: 2016-2024 Nextcloud GmbH and Nextcloud contributors
  * SPDX-FileCopyrightText: 2016 ownCloud, Inc.
@@ -7,6 +8,7 @@
 use Behat\Behat\Context\Context;
 use Behat\Behat\Context\SnippetAcceptingContext;
 use Behat\Gherkin\Node\TableNode;
+use PHPUnit\Framework\Assert;
 
 require __DIR__ . '/../../vendor/autoload.php';
 
@@ -38,7 +40,7 @@ class FederationContext implements Context, SnippetAcceptingContext {
 
 		$port = getenv('PORT_FED');
 
-		self::$phpFederatedServerPid = exec('php -S localhost:' . $port . ' -t ../../ >/dev/null & echo $!');
+		self::$phpFederatedServerPid = exec('PHP_CLI_SERVER_WORKERS=2 php -S localhost:' . $port . ' -t ../../ >/dev/null & echo $!');
 	}
 
 	/**
@@ -64,7 +66,7 @@ class FederationContext implements Context, SnippetAcceptingContext {
 	 * @param string $shareeServer "LOCAL" or "REMOTE"
 	 */
 	public function federateSharing($sharerUser, $sharerServer, $sharerPath, $shareeUser, $shareeServer) {
-		if ($shareeServer == "REMOTE") {
+		if ($shareeServer == 'REMOTE') {
 			$shareWith = "$shareeUser@" . substr($this->remoteBaseUrl, 0, -4);
 		} else {
 			$shareWith = "$shareeUser@" . substr($this->localBaseUrl, 0, -4);
@@ -85,7 +87,7 @@ class FederationContext implements Context, SnippetAcceptingContext {
 	 * @param string $shareeServer "LOCAL" or "REMOTE"
 	 */
 	public function federateGroupSharing($sharerUser, $sharerServer, $sharerPath, $shareeGroup, $shareeServer) {
-		if ($shareeServer == "REMOTE") {
+		if ($shareeServer == 'REMOTE') {
 			$shareWith = "$shareeGroup@" . substr($this->remoteBaseUrl, 0, -4);
 		} else {
 			$shareWith = "$shareeGroup@" . substr($this->localBaseUrl, 0, -4);
@@ -134,7 +136,7 @@ class FederationContext implements Context, SnippetAcceptingContext {
 	public function acceptLastPendingShare($user, $server) {
 		$previous = $this->usingServer($server);
 		$this->asAn($user);
-		$this->sendingToWith('GET', "/apps/files_sharing/api/v1/remote_shares/pending", null);
+		$this->sendingToWith('GET', '/apps/files_sharing/api/v1/remote_shares/pending', null);
 		$this->theHTTPStatusCodeShouldBe('200');
 		$this->theOCSStatusCodeShouldBe('100');
 		$share_id = simplexml_load_string($this->response->getBody())->data[0]->element[0]->id;
@@ -152,7 +154,7 @@ class FederationContext implements Context, SnippetAcceptingContext {
 	 */
 	public function deleteLastAcceptedRemoteShare($user) {
 		$this->asAn($user);
-		$this->sendingToWith('DELETE', "/apps/files_sharing/api/v1/remote_shares/" . $this->lastAcceptedRemoteShareId, null);
+		$this->sendingToWith('DELETE', '/apps/files_sharing/api/v1/remote_shares/' . $this->lastAcceptedRemoteShareId, null);
 	}
 
 	/**
@@ -168,8 +170,52 @@ class FederationContext implements Context, SnippetAcceptingContext {
 		self::$phpFederatedServerPid = '';
 	}
 
+	/**
+	 * @BeforeScenario @TrustedFederation
+	 */
+	public function theServersAreTrustingEachOther() {
+		$this->asAn('admin');
+		// Trust the remote server on the local server
+		$this->usingServer('LOCAL');
+		$this->sendRequestForJSON('POST', '/apps/federation/trusted-servers', ['url' => 'http://localhost:' . getenv('PORT')]);
+		Assert::assertTrue(($this->response->getStatusCode() === 200 || $this->response->getStatusCode() === 409));
+
+		// Trust the local server on the remote server
+		$this->usingServer('REMOTE');
+		$this->sendRequestForJSON('POST', '/apps/federation/trusted-servers', ['url' => 'http://localhost:' . getenv('PORT_FED')]);
+		// If the server is already trusted, we expect a 409
+		Assert::assertTrue(($this->response->getStatusCode() === 200 || $this->response->getStatusCode() === 409));
+	}
+
+	/**
+	 * @AfterScenario @TrustedFederation
+	 */
+	public function theServersAreNoLongerTrustingEachOther() {
+		$this->asAn('admin');
+		// Untrust the remote servers on the local server
+		$this->usingServer('LOCAL');
+		$this->sendRequestForJSON('GET', '/apps/federation/trusted-servers');
+		$this->theHTTPStatusCodeShouldBe('200');
+		$trustedServersIDs = array_map(fn ($server) => $server->id, json_decode($this->response->getBody())->ocs->data);
+		foreach ($trustedServersIDs as $id) {
+			$this->sendRequestForJSON('DELETE', '/apps/federation/trusted-servers/' . $id);
+			$this->theHTTPStatusCodeShouldBe('200');
+		}
+
+		// Untrust the local server on the remote server
+		$this->usingServer('REMOTE');
+		$this->sendRequestForJSON('GET', '/apps/federation/trusted-servers');
+		$this->theHTTPStatusCodeShouldBe('200');
+		$trustedServersIDs = array_map(fn ($server) => $server->id, json_decode($this->response->getBody())->ocs->data);
+		foreach ($trustedServersIDs as $id) {
+			$this->sendRequestForJSON('DELETE', '/apps/federation/trusted-servers/' . $id);
+			$this->theHTTPStatusCodeShouldBe('200');
+		}
+	}
+
 	protected function resetAppConfigs() {
 		$this->deleteServerConfig('files_sharing', 'incoming_server2server_group_share_enabled');
 		$this->deleteServerConfig('files_sharing', 'outgoing_server2server_group_share_enabled');
+		$this->deleteServerConfig('files_sharing', 'federated_trusted_share_auto_accept');
 	}
 }