From 7a594338c550814b0485634d99e59954056f958f Mon Sep 17 00:00:00 2001
From: Tim van Dijen <tvdijen@gmail.com>
Date: Sat, 30 Dec 2023 00:54:38 +0100
Subject: [PATCH] Add securitypolicy classes

---
 src/XML/sp/KerberosToken.php                  | 16 ++++
 src/XML/sp/SecurityContextToken.php           | 16 ++++
 src/XML/sp/X509Token.php                      | 16 ++++
 tests/WSSecurity/XML/sp/KerberosTokenTest.php | 84 +++++++++++++++++++
 .../XML/sp/SecurityContextTokenTest.php       | 84 +++++++++++++++++++
 tests/WSSecurity/XML/sp/X509TokenTest.php     | 84 +++++++++++++++++++
 tests/resources/xml/sp_KerberosToken.xml      |  3 +
 .../resources/xml/sp_SecurityContextToken.xml |  3 +
 tests/resources/xml/sp_X509Token.xml          |  3 +
 9 files changed, 309 insertions(+)
 create mode 100644 src/XML/sp/KerberosToken.php
 create mode 100644 src/XML/sp/SecurityContextToken.php
 create mode 100644 src/XML/sp/X509Token.php
 create mode 100644 tests/WSSecurity/XML/sp/KerberosTokenTest.php
 create mode 100644 tests/WSSecurity/XML/sp/SecurityContextTokenTest.php
 create mode 100644 tests/WSSecurity/XML/sp/X509TokenTest.php
 create mode 100644 tests/resources/xml/sp_KerberosToken.xml
 create mode 100644 tests/resources/xml/sp_SecurityContextToken.xml
 create mode 100644 tests/resources/xml/sp_X509Token.xml

diff --git a/src/XML/sp/KerberosToken.php b/src/XML/sp/KerberosToken.php
new file mode 100644
index 00000000..bf7fb8ee
--- /dev/null
+++ b/src/XML/sp/KerberosToken.php
@@ -0,0 +1,16 @@
+<?php
+
+declare(strict_types=1);
+
+namespace SimpleSAML\WSSecurity\XML\sp;
+
+use SimpleSAML\Assert\Assert;
+
+/**
+ * An KerberosToken element
+ *
+ * @package tvdijen/ws-security
+ */
+final class KerberosToken extends AbstractTokenAssertionType
+{
+}
diff --git a/src/XML/sp/SecurityContextToken.php b/src/XML/sp/SecurityContextToken.php
new file mode 100644
index 00000000..699b63e6
--- /dev/null
+++ b/src/XML/sp/SecurityContextToken.php
@@ -0,0 +1,16 @@
+<?php
+
+declare(strict_types=1);
+
+namespace SimpleSAML\WSSecurity\XML\sp;
+
+use SimpleSAML\Assert\Assert;
+
+/**
+ * An SecurityContextToken element
+ *
+ * @package tvdijen/ws-security
+ */
+final class SecurityContextToken extends AbstractTokenAssertionType
+{
+}
diff --git a/src/XML/sp/X509Token.php b/src/XML/sp/X509Token.php
new file mode 100644
index 00000000..f798cf3f
--- /dev/null
+++ b/src/XML/sp/X509Token.php
@@ -0,0 +1,16 @@
+<?php
+
+declare(strict_types=1);
+
+namespace SimpleSAML\WSSecurity\XML\sp;
+
+use SimpleSAML\Assert\Assert;
+
+/**
+ * An X509Token element
+ *
+ * @package tvdijen/ws-security
+ */
+final class X509Token extends AbstractTokenAssertionType
+{
+}
diff --git a/tests/WSSecurity/XML/sp/KerberosTokenTest.php b/tests/WSSecurity/XML/sp/KerberosTokenTest.php
new file mode 100644
index 00000000..ccb6ef8c
--- /dev/null
+++ b/tests/WSSecurity/XML/sp/KerberosTokenTest.php
@@ -0,0 +1,84 @@
+<?php
+
+declare(strict_types=1);
+
+namespace SimpleSAML\Test\WSSecurity\XML\sp;
+
+use DOMDocument;
+use PHPUnit\Framework\TestCase;
+use SimpleSAML\Test\WSSecurity\Constants as C;
+use SimpleSAML\WSSecurity\Utils\XPath;
+use SimpleSAML\WSSecurity\XML\sp\IncludeToken;
+use SimpleSAML\WSSecurity\XML\sp\KerberosToken;
+use SimpleSAML\XML\Attribute as XMLAttribute;
+use SimpleSAML\XML\Chunk;
+use SimpleSAML\XML\DOMDocumentFactory;
+use SimpleSAML\XML\TestUtils\SchemaValidationTestTrait;
+use SimpleSAML\XML\TestUtils\SerializableElementTestTrait;
+
+use function dirname;
+
+/**
+ * Class \SimpleSAML\WSSecurity\XML\sp\KerberosTokenTest
+ *
+ * @covers \SimpleSAML\WSSecurity\XML\sp\KerberosToken
+ * @covers \SimpleSAML\WSSecurity\XML\sp\AbstractAssertionTokenType
+ * @covers \SimpleSAML\WSSecurity\XML\sp\AbstractSpElement
+ *
+ * @package tvdijen/ws-security
+ */
+final class KerberosTokenTest extends TestCase
+{
+    use SchemaValidationTestTrait;
+    use SerializableElementTestTrait;
+
+
+    /**
+     */
+    public static function setUpBeforeClass(): void
+    {
+        self::$schemaFile = dirname(__FILE__, 5) . '/resources/schemas/ws-securitypolicy-1.2.xsd';
+
+        self::$testedClass = KerberosToken::class;
+
+        self::$xmlRepresentation = DOMDocumentFactory::fromFile(
+            dirname(__FILE__, 4) . '/resources/xml/sp_KerberosToken.xml',
+        );
+    }
+
+
+    // test marshalling
+
+
+    /**
+     * Adding an empty KerberosToken element should yield an empty element.
+     */
+    public function testMarshallingEmptyElement(): void
+    {
+        $spns = C::NS_SEC_POLICY;
+        $kerberosToken = new KerberosToken();
+        $this->assertEquals(
+            "<sp:KerberosToken xmlns:sp=\"$spns\"/>",
+            strval($kerberosToken),
+        );
+        $this->assertTrue($kerberosToken->isEmptyElement());
+    }
+
+
+    /**
+     * Test that creating a KerberosToken from scratch works.
+     */
+    public function testMarshalling(): void
+    {
+        $attr = new XMLAttribute(C::NAMESPACE, 'ssp', 'attr1', 'value1');
+        $chunk = new Chunk(DOMDocumentFactory::fromString(
+            '<ssp:Chunk xmlns:ssp="urn:x-simplesamlphp:namespace">some</ssp:Chunk>'
+        )->documentElement);
+
+        $kerberosToken = new KerberosToken(IncludeToken::Always, [$chunk], [$attr]);
+        $this->assertEquals(
+            self::$xmlRepresentation->saveXML(self::$xmlRepresentation->documentElement),
+            strval($kerberosToken),
+        );
+    }
+}
diff --git a/tests/WSSecurity/XML/sp/SecurityContextTokenTest.php b/tests/WSSecurity/XML/sp/SecurityContextTokenTest.php
new file mode 100644
index 00000000..e888b408
--- /dev/null
+++ b/tests/WSSecurity/XML/sp/SecurityContextTokenTest.php
@@ -0,0 +1,84 @@
+<?php
+
+declare(strict_types=1);
+
+namespace SimpleSAML\Test\WSSecurity\XML\sp;
+
+use DOMDocument;
+use PHPUnit\Framework\TestCase;
+use SimpleSAML\Test\WSSecurity\Constants as C;
+use SimpleSAML\WSSecurity\Utils\XPath;
+use SimpleSAML\WSSecurity\XML\sp\IncludeToken;
+use SimpleSAML\WSSecurity\XML\sp\SecurityContextToken;
+use SimpleSAML\XML\Attribute as XMLAttribute;
+use SimpleSAML\XML\Chunk;
+use SimpleSAML\XML\DOMDocumentFactory;
+use SimpleSAML\XML\TestUtils\SchemaValidationTestTrait;
+use SimpleSAML\XML\TestUtils\SerializableElementTestTrait;
+
+use function dirname;
+
+/**
+ * Class \SimpleSAML\WSSecurity\XML\sp\SecurityContextTokenTest
+ *
+ * @covers \SimpleSAML\WSSecurity\XML\sp\SecurityContextToken
+ * @covers \SimpleSAML\WSSecurity\XML\sp\AbstractAssertionTokenType
+ * @covers \SimpleSAML\WSSecurity\XML\sp\AbstractSpElement
+ *
+ * @package tvdijen/ws-security
+ */
+final class SecurityContextTokenTest extends TestCase
+{
+    use SchemaValidationTestTrait;
+    use SerializableElementTestTrait;
+
+
+    /**
+     */
+    public static function setUpBeforeClass(): void
+    {
+        self::$schemaFile = dirname(__FILE__, 5) . '/resources/schemas/ws-securitypolicy-1.2.xsd';
+
+        self::$testedClass = SecurityContextToken::class;
+
+        self::$xmlRepresentation = DOMDocumentFactory::fromFile(
+            dirname(__FILE__, 4) . '/resources/xml/sp_SecurityContextToken.xml',
+        );
+    }
+
+
+    // test marshalling
+
+
+    /**
+     * Adding an empty SecurityContextToken element should yield an empty element.
+     */
+    public function testMarshallingEmptyElement(): void
+    {
+        $spns = C::NS_SEC_POLICY;
+        $securityContextToken = new SecurityContextToken();
+        $this->assertEquals(
+            "<sp:SecurityContextToken xmlns:sp=\"$spns\"/>",
+            strval($securityContextToken),
+        );
+        $this->assertTrue($securityContextToken->isEmptyElement());
+    }
+
+
+    /**
+     * Test that creating a SecurityContextToken from scratch works.
+     */
+    public function testMarshalling(): void
+    {
+        $attr = new XMLAttribute(C::NAMESPACE, 'ssp', 'attr1', 'value1');
+        $chunk = new Chunk(DOMDocumentFactory::fromString(
+            '<ssp:Chunk xmlns:ssp="urn:x-simplesamlphp:namespace">some</ssp:Chunk>'
+        )->documentElement);
+
+        $securityContextToken = new SecurityContextToken(IncludeToken::Always, [$chunk], [$attr]);
+        $this->assertEquals(
+            self::$xmlRepresentation->saveXML(self::$xmlRepresentation->documentElement),
+            strval($securityContextToken),
+        );
+    }
+}
diff --git a/tests/WSSecurity/XML/sp/X509TokenTest.php b/tests/WSSecurity/XML/sp/X509TokenTest.php
new file mode 100644
index 00000000..2b88ca0d
--- /dev/null
+++ b/tests/WSSecurity/XML/sp/X509TokenTest.php
@@ -0,0 +1,84 @@
+<?php
+
+declare(strict_types=1);
+
+namespace SimpleSAML\Test\WSSecurity\XML\sp;
+
+use DOMDocument;
+use PHPUnit\Framework\TestCase;
+use SimpleSAML\Test\WSSecurity\Constants as C;
+use SimpleSAML\WSSecurity\Utils\XPath;
+use SimpleSAML\WSSecurity\XML\sp\IncludeToken;
+use SimpleSAML\WSSecurity\XML\sp\X509Token;
+use SimpleSAML\XML\Attribute as XMLAttribute;
+use SimpleSAML\XML\Chunk;
+use SimpleSAML\XML\DOMDocumentFactory;
+use SimpleSAML\XML\TestUtils\SchemaValidationTestTrait;
+use SimpleSAML\XML\TestUtils\SerializableElementTestTrait;
+
+use function dirname;
+
+/**
+ * Class \SimpleSAML\WSSecurity\XML\sp\X509lTokenTest
+ *
+ * @covers \SimpleSAML\WSSecurity\XML\sp\X509Token
+ * @covers \SimpleSAML\WSSecurity\XML\sp\AbstractAssertionTokenType
+ * @covers \SimpleSAML\WSSecurity\XML\sp\AbstractSpElement
+ *
+ * @package tvdijen/ws-security
+ */
+final class X509TokenTest extends TestCase
+{
+    use SchemaValidationTestTrait;
+    use SerializableElementTestTrait;
+
+
+    /**
+     */
+    public static function setUpBeforeClass(): void
+    {
+        self::$schemaFile = dirname(__FILE__, 5) . '/resources/schemas/ws-securitypolicy-1.2.xsd';
+
+        self::$testedClass = X509Token::class;
+
+        self::$xmlRepresentation = DOMDocumentFactory::fromFile(
+            dirname(__FILE__, 4) . '/resources/xml/sp_X509Token.xml',
+        );
+    }
+
+
+    // test marshalling
+
+
+    /**
+     * Adding an empty X509lToken element should yield an empty element.
+     */
+    public function testMarshallingEmptyElement(): void
+    {
+        $spns = C::NS_SEC_POLICY;
+        $x509Token = new X509Token();
+        $this->assertEquals(
+            "<sp:X509Token xmlns:sp=\"$spns\"/>",
+            strval($x509Token),
+        );
+        $this->assertTrue($x509Token->isEmptyElement());
+    }
+
+
+    /**
+     * Test that creating a X509Token from scratch works.
+     */
+    public function testMarshalling(): void
+    {
+        $attr = new XMLAttribute(C::NAMESPACE, 'ssp', 'attr1', 'value1');
+        $chunk = new Chunk(DOMDocumentFactory::fromString(
+            '<ssp:Chunk xmlns:ssp="urn:x-simplesamlphp:namespace">some</ssp:Chunk>'
+        )->documentElement);
+
+        $x509Token = new X509Token(IncludeToken::Always, [$chunk], [$attr]);
+        $this->assertEquals(
+            self::$xmlRepresentation->saveXML(self::$xmlRepresentation->documentElement),
+            strval($x509Token),
+        );
+    }
+}
diff --git a/tests/resources/xml/sp_KerberosToken.xml b/tests/resources/xml/sp_KerberosToken.xml
new file mode 100644
index 00000000..2cc83de2
--- /dev/null
+++ b/tests/resources/xml/sp_KerberosToken.xml
@@ -0,0 +1,3 @@
+<sp:KerberosToken xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702" xmlns:ssp="urn:x-simplesamlphp:namespace" IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always" ssp:attr1="value1">
+  <ssp:Chunk>some</ssp:Chunk>
+</sp:KerberosToken>
diff --git a/tests/resources/xml/sp_SecurityContextToken.xml b/tests/resources/xml/sp_SecurityContextToken.xml
new file mode 100644
index 00000000..cefa9b0a
--- /dev/null
+++ b/tests/resources/xml/sp_SecurityContextToken.xml
@@ -0,0 +1,3 @@
+<sp:SecurityContextToken xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702" xmlns:ssp="urn:x-simplesamlphp:namespace" IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always" ssp:attr1="value1">
+  <ssp:Chunk>some</ssp:Chunk>
+</sp:SecurityContextToken>
diff --git a/tests/resources/xml/sp_X509Token.xml b/tests/resources/xml/sp_X509Token.xml
new file mode 100644
index 00000000..7cd7f958
--- /dev/null
+++ b/tests/resources/xml/sp_X509Token.xml
@@ -0,0 +1,3 @@
+<sp:X509Token xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702" xmlns:ssp="urn:x-simplesamlphp:namespace" IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always" ssp:attr1="value1">
+  <ssp:Chunk>some</ssp:Chunk>
+</sp:X509Token>