public void OnAuthorization_RedirectsToOAuthDialog_ForMissingPermissions()
{
FacebookClient client = MockHelpers.CreateFacebookClient();
IFacebookPermissionService permissionService = MockHelpers.CreatePermissionService(
new[] { "" }
);
FacebookConfiguration config = MockHelpers.CreateConfiguration(
client,
permissionService
);
FacebookAuthorizeFilter authorizeFilter = new FacebookAuthorizeFilter(config);
AuthorizationContext context = new AuthorizationContext(
MockHelpers.CreateControllerContext(
new NameValueCollection {
{ "signed_request", "exampleSignedRequest" }
}
),
MockHelpers.CreateActionDescriptor(
new[] { new FacebookAuthorizeAttribute("email", "user_likes") }
)
);
authorizeFilter.OnAuthorization(context);
ContentResult result = Assert.IsType <ShowPromptResult>(context.Result);
Assert.Equal("text/html", result.ContentType);
Assert.Equal(
"<script>window.top.location = 'https://www.facebook.com/dialog/oauth?redirect_uri=example.com';</script>",
result.Content
);
}
public void OnAuthorization_RedirectsToAuthorizationRedirectPath_OnlyWhenUserDeniedGrantingPermissions(string requestUrl, string expectedRedirectUrl)
{
FacebookClient client = MockHelpers.CreateFacebookClient();
IFacebookPermissionService permissionService = MockHelpers.CreatePermissionService(new[] { "" });
FacebookConfiguration config = MockHelpers.CreateConfiguration(client, permissionService);
config.AuthorizationRedirectPath = "~/home/permissions";
FacebookAuthorizeFilter authorizeFilter = new FacebookAuthorizeFilter(config);
AuthorizationContext context = new AuthorizationContext(
MockHelpers.CreateControllerContext(new NameValueCollection
{
{ "signed_request", "exampleSignedRequest" }
},
null,
new Uri(requestUrl)),
MockHelpers.CreateActionDescriptor(new[] { new FacebookAuthorizeAttribute("email") }));
authorizeFilter.OnAuthorization(context);
ContentResult result = Assert.IsAssignableFrom <JavaScriptRedirectResult>(context.Result);
Assert.Equal("text/html", result.ContentType);
Assert.Equal(
String.Format("<script>window.top.location = '{0}';</script>", expectedRedirectUrl),
result.Content);
}
private AuthorizationContext BuildSignedAuthorizationContext(
string requestUrl,
string permission,
HttpCookieCollection requestCookies = null
)
{
var permissions = permission == null ? new string[0] : new string[] { permission };
var requestUri = new Uri(requestUrl);
var context = new AuthorizationContext(
MockHelpers.CreateControllerContext(
new NameValueCollection {
{ "signed_request", "exampleSignedRequest" }
},
HttpUtility.ParseQueryString(requestUri.Query),
requestUri,
requestCookies
),
MockHelpers.CreateActionDescriptor(
new[] { new FacebookAuthorizeAttribute(permissions) }
)
);
return(context);
}
public void OnAuthorization_RedirectsToOAuthDialog_WhenSignedRequestIsNull()
{
FacebookConfiguration config = MockHelpers.CreateConfiguration();
FacebookAuthorizeFilter authorizeFilter = new FacebookAuthorizeFilter(config);
AuthorizationContext context = new AuthorizationContext(
MockHelpers.CreateControllerContext(),
MockHelpers.CreateActionDescriptor(new[] { new FacebookAuthorizeAttribute("email") }));
authorizeFilter.OnAuthorization(context);
ContentResult result = Assert.IsType <JavaScriptRedirectResult>(context.Result);
Assert.Equal("text/html", result.ContentType);
Assert.Equal(
"<script>window.top.location = 'https://www.facebook.com/dialog/oauth?redirect_uri=https%3A%2F%2Fapps.facebook.com%2FDefaultAppId%2F\\u0026client_id=DefaultAppId';</script>",
result.Content);
}
