function CsrfAccessCheckTest::testCsrfTokenInvalid

@covers ::access

File

core/tests/Drupal/Tests/Core/Access/CsrfAccessCheckTest.php, line 70

Class

CsrfAccessCheckTest

@coversDefaultClass \Drupal\Core\Access\CsrfAccessCheck @group Access

Namespace

Code

public function testCsrfTokenInvalid() {
    $this->csrfToken
        ->expects($this->once())
        ->method('validate')
        ->with('test_query', 'test-path')
        ->will($this->returnValue(FALSE));
    $this->routeMatch
        ->expects($this->once())
        ->method('getRawParameters')
        ->will($this->returnValue([]));
    $route = new Route('/test-path', [], [
        '_csrf_token' => 'TRUE',
    ]);
    $request = Request::create('/test-path?token=test_query');
    $this->assertEquals(AccessResult::forbidden("'csrf_token' URL query argument is invalid.")->setCacheMaxAge(0), $this->accessCheck
        ->access($route, $request, $this->routeMatch));
}