Same name and namespace in other branches

1. 9 core/modules/user/tests/src/Functional/UserLoginHttpTest.php \Drupal\Tests\user\Functional\UserLoginHttpTest::doTestGlobalLoginFloodControl()
2. 10 core/modules/user/tests/src/Functional/UserLoginHttpTest.php \Drupal\Tests\user\Functional\UserLoginHttpTest::doTestGlobalLoginFloodControl()

Tests the global login flood control for a given serialization format.

Parameters

string $format: The encoded format.

See also

\Drupal\basic_auth\Authentication\Provider\BasicAuthTest::testGlobalLoginFloodControl

\Drupal\Tests\user\Functional\UserLoginTest::testGlobalLoginFloodControl

1 call to UserLoginHttpTest::doTestGlobalLoginFloodControl()

UserLoginHttpTest::testPasswordReset in core/modules/user/tests/src/Functional/UserLoginHttpTest.php

Tests user password reset.

File

core/modules/user/tests/src/Functional/UserLoginHttpTest.php, line 298

Class

UserLoginHttpTest

Tests login and password reset via direct HTTP.

Namespace

Drupal\Tests\user\Functional

Code

public function doTestGlobalLoginFloodControl(string $format) : void {
  $database = \Drupal::database();
  $this->config('user.flood')
    ->set('ip_limit', 2)
    ->set('user_limit', 4000)
    ->save();
  $user = $this->drupalCreateUser([]);
  $incorrect_user = clone $user;
  $incorrect_user->passRaw .= 'incorrect';
  // Try 2 failed logins.
  for ($i = 0; $i < 2; $i++) {
    $response = $this->loginRequest($incorrect_user->getAccountName(), $incorrect_user->passRaw, $format);
    $this->assertEquals('400', $response->getStatusCode());
  }
  // IP limit has reached to its limit. Even valid user credentials will fail.
  $response = $this->loginRequest($user->getAccountName(), $user->passRaw, $format);
  $this->assertHttpResponseWithMessage($response, 403, 'Access is blocked because of IP based flood prevention.', $format);
  $last_log = $database->select('watchdog', 'w')
    ->fields('w', [
    'message',
  ])
    ->condition('type', 'user')
    ->orderBy('wid', 'DESC')
    ->range(0, 1)
    ->execute()
    ->fetchField();
  $this->assertEquals('Flood control blocked login attempt from %ip', $last_log, 'A watchdog message was logged for the login attempt blocked by flood control per IP.');
}

---