1 files changed, 54 insertions, 30 deletions

diff --git a/build/integration/features/bootstrap/FederationContext.php b/build/integration/features/bootstrap/FederationContext.php
index 423708adc10..95dc8119ad6 100644
--- a/build/integration/features/bootstrap/FederationContext.php
+++ b/build/integration/features/bootstrap/FederationContext.php
@@ -1,34 +1,14 @@
 <?php
+
 /**
- * @copyright Copyright (c) 2016 Sergio Bertolin <sbertolin@solidgear.es>
- *
- * @author Bjoern Schiessle <bjoern@schiessle.org>
- * @author Christoph Wurst <christoph@winzerhof-wurst.at>
- * @author Daniel Calviño Sánchez <danxuliu@gmail.com>
- * @author Joas Schilling <coding@schilljs.com>
- * @author Robin Appelman <robin@icewind.nl>
- * @author Sergio Bertolin <sbertolin@solidgear.es>
- * @author Sergio Bertolín <sbertolin@solidgear.es>
- *
- * @license GNU AGPL version 3 or any later version
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program. If not, see <http://www.gnu.org/licenses/>.
- *
+ * SPDX-FileCopyrightText: 2016-2024 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-FileCopyrightText: 2016 ownCloud, Inc.
+ * SPDX-License-Identifier: AGPL-3.0-or-later
  */
 use Behat\Behat\Context\Context;
 use Behat\Behat\Context\SnippetAcceptingContext;
 use Behat\Gherkin\Node\TableNode;
+use PHPUnit\Framework\Assert;
 
 require __DIR__ . '/../../vendor/autoload.php';
 
@@ -60,7 +40,7 @@ class FederationContext implements Context, SnippetAcceptingContext {
 
 		$port = getenv('PORT_FED');
 
-		self::$phpFederatedServerPid = exec('php -S localhost:' . $port . ' -t ../../ >/dev/null & echo $!');
+		self::$phpFederatedServerPid = exec('PHP_CLI_SERVER_WORKERS=2 php -S localhost:' . $port . ' -t ../../ >/dev/null & echo $!');
 	}
 
 	/**
@@ -86,7 +66,7 @@ class FederationContext implements Context, SnippetAcceptingContext {
 	 * @param string $shareeServer "LOCAL" or "REMOTE"
 	 */
 	public function federateSharing($sharerUser, $sharerServer, $sharerPath, $shareeUser, $shareeServer) {
-		if ($shareeServer == "REMOTE") {
+		if ($shareeServer == 'REMOTE') {
 			$shareWith = "$shareeUser@" . substr($this->remoteBaseUrl, 0, -4);
 		} else {
 			$shareWith = "$shareeUser@" . substr($this->localBaseUrl, 0, -4);
@@ -107,7 +87,7 @@ class FederationContext implements Context, SnippetAcceptingContext {
 	 * @param string $shareeServer "LOCAL" or "REMOTE"
 	 */
 	public function federateGroupSharing($sharerUser, $sharerServer, $sharerPath, $shareeGroup, $shareeServer) {
-		if ($shareeServer == "REMOTE") {
+		if ($shareeServer == 'REMOTE') {
 			$shareWith = "$shareeGroup@" . substr($this->remoteBaseUrl, 0, -4);
 		} else {
 			$shareWith = "$shareeGroup@" . substr($this->localBaseUrl, 0, -4);
@@ -156,7 +136,7 @@ class FederationContext implements Context, SnippetAcceptingContext {
 	public function acceptLastPendingShare($user, $server) {
 		$previous = $this->usingServer($server);
 		$this->asAn($user);
-		$this->sendingToWith('GET', "/apps/files_sharing/api/v1/remote_shares/pending", null);
+		$this->sendingToWith('GET', '/apps/files_sharing/api/v1/remote_shares/pending', null);
 		$this->theHTTPStatusCodeShouldBe('200');
 		$this->theOCSStatusCodeShouldBe('100');
 		$share_id = simplexml_load_string($this->response->getBody())->data[0]->element[0]->id;
@@ -174,7 +154,7 @@ class FederationContext implements Context, SnippetAcceptingContext {
 	 */
 	public function deleteLastAcceptedRemoteShare($user) {
 		$this->asAn($user);
-		$this->sendingToWith('DELETE', "/apps/files_sharing/api/v1/remote_shares/" . $this->lastAcceptedRemoteShareId, null);
+		$this->sendingToWith('DELETE', '/apps/files_sharing/api/v1/remote_shares/' . $this->lastAcceptedRemoteShareId, null);
 	}
 
 	/**
@@ -190,8 +170,52 @@ class FederationContext implements Context, SnippetAcceptingContext {
 		self::$phpFederatedServerPid = '';
 	}
 
+	/**
+	 * @BeforeScenario @TrustedFederation
+	 */
+	public function theServersAreTrustingEachOther() {
+		$this->asAn('admin');
+		// Trust the remote server on the local server
+		$this->usingServer('LOCAL');
+		$this->sendRequestForJSON('POST', '/apps/federation/trusted-servers', ['url' => 'http://localhost:' . getenv('PORT')]);
+		Assert::assertTrue(($this->response->getStatusCode() === 200 || $this->response->getStatusCode() === 409));
+
+		// Trust the local server on the remote server
+		$this->usingServer('REMOTE');
+		$this->sendRequestForJSON('POST', '/apps/federation/trusted-servers', ['url' => 'http://localhost:' . getenv('PORT_FED')]);
+		// If the server is already trusted, we expect a 409
+		Assert::assertTrue(($this->response->getStatusCode() === 200 || $this->response->getStatusCode() === 409));
+	}
+
+	/**
+	 * @AfterScenario @TrustedFederation
+	 */
+	public function theServersAreNoLongerTrustingEachOther() {
+		$this->asAn('admin');
+		// Untrust the remote servers on the local server
+		$this->usingServer('LOCAL');
+		$this->sendRequestForJSON('GET', '/apps/federation/trusted-servers');
+		$this->theHTTPStatusCodeShouldBe('200');
+		$trustedServersIDs = array_map(fn ($server) => $server->id, json_decode($this->response->getBody())->ocs->data);
+		foreach ($trustedServersIDs as $id) {
+			$this->sendRequestForJSON('DELETE', '/apps/federation/trusted-servers/' . $id);
+			$this->theHTTPStatusCodeShouldBe('200');
+		}
+
+		// Untrust the local server on the remote server
+		$this->usingServer('REMOTE');
+		$this->sendRequestForJSON('GET', '/apps/federation/trusted-servers');
+		$this->theHTTPStatusCodeShouldBe('200');
+		$trustedServersIDs = array_map(fn ($server) => $server->id, json_decode($this->response->getBody())->ocs->data);
+		foreach ($trustedServersIDs as $id) {
+			$this->sendRequestForJSON('DELETE', '/apps/federation/trusted-servers/' . $id);
+			$this->theHTTPStatusCodeShouldBe('200');
+		}
+	}
+
 	protected function resetAppConfigs() {
 		$this->deleteServerConfig('files_sharing', 'incoming_server2server_group_share_enabled');
 		$this->deleteServerConfig('files_sharing', 'outgoing_server2server_group_share_enabled');
+		$this->deleteServerConfig('files_sharing', 'federated_trusted_share_auto_accept');
 	}
 }