function DownloadTest::doPrivateFileTransferTest

Tests the private file transfer system.

File

core/modules/file/tests/src/Functional/DownloadTest.php, line 82

Class

DownloadTest

Tests for download/file transfer functions.

Namespace

Code

protected function doPrivateFileTransferTest() {
    // Set file downloads to private so handler functions get called.
    // Create a file.
    $contents = $this->randomMachineName(8);
    $file = $this->createFile($contents . '.txt', $contents, 'private');
    // Created private files without usage are by default not accessible
    // for a user different from the owner, but createFile always uses uid 1
    // as the owner of the files. Therefore make it permanent to allow access
    // if a module allows it.
    $file->setPermanent();
    $file->save();
    $url = $this->fileUrlGenerator
        ->generateAbsoluteString($file->getFileUri());
    // Set file_test access header to allow the download.
    file_test_reset();
    file_test_set_return('download', [
        'x-foo' => 'Bar',
    ]);
    $this->drupalGet($url);
    // Verify that header is set by file_test module on private download.
    $this->assertSession()
        ->responseHeaderEquals('x-foo', 'Bar');
    // Verify that page cache is disabled on private file download.
    $this->assertSession()
        ->responseHeaderDoesNotExist('x-drupal-cache');
    $this->assertSession()
        ->statusCodeEquals(200);
    // Ensure hook_file_download is fired correctly.
    $this->assertEquals($file->getFileUri(), \Drupal::state()->get('file_test.results')['download'][0][0]);
    // Test that the file transferred correctly.
    $this->assertSame($contents, $this->getSession()
        ->getPage()
        ->getContent(), 'Contents of the file are correct.');
    $http_client = $this->getHttpClient();
    // Try non-existent file.
    file_test_reset();
    $not_found_url = $this->fileUrlGenerator
        ->generateAbsoluteString('private://' . $this->randomMachineName() . '.txt');
    $response = $http_client->head($not_found_url, [
        'http_errors' => FALSE,
    ]);
    $this->assertSame(404, $response->getStatusCode(), 'Correctly returned 404 response for a non-existent file.');
    // Assert that hook_file_download is not called.
    $this->assertEquals([], \Drupal::state()->get('file_test.results')['download']);
    // Having tried a non-existent file, try the original file again to ensure
    // it's returned instead of a 404 response.
    // Set file_test access header to allow the download.
    file_test_reset();
    file_test_set_return('download', [
        'x-foo' => 'Bar',
    ]);
    $this->drupalGet($url);
    // Verify that header is set by file_test module on private download.
    $this->assertSession()
        ->responseHeaderEquals('x-foo', 'Bar');
    // Verify that page cache is disabled on private file download.
    $this->assertSession()
        ->responseHeaderDoesNotExist('x-drupal-cache');
    $this->assertSession()
        ->statusCodeEquals(200);
    // Test that the file transferred correctly.
    $this->assertSame($contents, $this->getSession()
        ->getPage()
        ->getContent(), 'Contents of the file are correct.');
    // Deny access to all downloads via a -1 header.
    file_test_set_return('download', -1);
    $response = $http_client->head($url, [
        'http_errors' => FALSE,
    ]);
    $this->assertSame(403, $response->getStatusCode(), 'Correctly denied access to a file when file_test sets the header to -1.');
    // Try requesting the private file URL without a file specified.
    file_test_reset();
    $this->drupalGet('/system/files');
    $this->assertSession()
        ->statusCodeEquals(404);
    // Assert that hook_file_download is not called.
    $this->assertEquals([], \Drupal::state()->get('file_test.results')['download']);
}