test(AppFramework): split out exempt cases - PasswordConfirmationMiddleware

Signed-off-by: Josh <josh.t.richards@gmail.com>

Author: joshtrichards

tests/lib/AppFramework/Middleware/Security/PasswordConfirmationMiddlewareTest.php

@@ -93,7 +93,7 @@ public function testDifferentAnnotation(): void {
 		$this->middleware->beforeController($this->controller, __FUNCTION__);
 	}
 
-	#[\PHPUnit\Framework\Attributes\DataProvider('dataProvider')]
+	#[\PHPUnit\Framework\Attributes\DataProvider('dataProviderNonExemptBackend')]
 	public function testAnnotation($backend, $lastConfirm, $currentTime, $exception): void {
 		$this->reflector->reflect($this->controller, __FUNCTION__);
 
@@ -126,7 +126,7 @@ public function testAnnotation($backend, $lastConfirm, $currentTime, $exception)
 		$this->assertSame($exception, $thrown);
 	}
 
-	#[\PHPUnit\Framework\Attributes\DataProvider('dataProvider')]
+	#[\PHPUnit\Framework\Attributes\DataProvider('dataProviderNonExemptBackend')]
 	public function testAttribute($backend, $lastConfirm, $currentTime, $exception): void {
 		$this->reflector->reflect($this->controller, __FUNCTION__);
 
@@ -159,19 +159,41 @@ public function testAttribute($backend, $lastConfirm, $currentTime, $exception):
 		$this->assertSame($exception, $thrown);
 	}
 
-
-
-	public static function dataProvider(): array {
+	public static function dataProviderNonExemptBackend(): array {
 		return [
 			['foo', 2000, 4000, true],
 			['foo', 2000, 3000, false],
-			['user_saml', 2000, 4000, false],
-			['user_saml', 2000, 3000, false],
 			['foo', 2000, 3815, false],
 			['foo', 2000, 3816, true],
 		];
 	}
 
+	/**
+	 * @dataProvider dataProviderLegacyExemptBackends
+	 */
+	#[\PHPUnit\Framework\Attributes\DataProvider('dataProviderLegacyExemptBackends')]
+	public function testLegacyBackendExempt(string $backend): void {
+		$this->reflector->reflect($this->controller, __FUNCTION__);
+
+		$this->user->method('getBackendClassName')
+			->willReturn($backend);
+		$this->userSession->method('getUser')
+			->willReturn($this->user);
+
+		// Backend is exempt — getToken() must never be called
+		$this->tokenProvider->expects($this->never())
+			->method('getToken');
+
+		$this->middleware->beforeController($this->controller, __FUNCTION__);
+	}
+
+	public static function dataProviderLegacyExemptBackends(): array {
+		return [
+			['user_saml'],
+			['user_globalsiteselector'],
+		];
+	}
+
 	public function testSSO(): void {
 		static $sessionId = 'mySession1d';