[tests-only] test: add test to download multiple files from public link

tests/acceptance/bootstrap/ArchiverContext.php

@@ -256,6 +256,140 @@ public function userDownloadsTheArchiveOfTheseItems(
 		);
 	}
 
+	/**
+	 * Sends a PROPFIND request to the public WebDAV endpoint for the last created public link
+	 * and extracts archive-related metadata from the XML response.
+	 *
+	 * The returned data includes:
+	 * - fileIds: IDs of all files included in the public link
+	 * - signature: signature required for archive download
+	 * - expiration: expiration timestamp required for archive download
+	 *
+	 * @param string $password
+	 *
+	 * @return array {
+	 *     fileIds: string[],
+	 *     signature: string|null,
+	 *     expiration: string|null
+	 * }
+	 *
+	 * @throws GuzzleException
+	 */
+	private function fetchPublicLinkArchiveData(string $password = ''): array {
+		$body = '<?xml version="1.0"?>
+		<d:propfind xmlns:d="DAV:" xmlns:oc="http://owncloud.org/ns">
+			<d:prop>
+				<d:resourcetype/>
+				<oc:public-link-item-type/>
+				<oc:public-link-permission/>
+				<oc:public-link-expiration/>
+				<oc:fileid/>
+				<oc:downloadURL/>
+				<oc:signature-auth/>
+				<oc:public-link-share-datetime/>
+				<oc:public-link-share-owner/>
+			</d:prop>
+		</d:propfind>';
+
+		$token = $this->featureContext->isUsingSharingNG()
+			? $this->featureContext->shareNgGetLastCreatedLinkShareToken()
+			: $this->featureContext->getLastCreatedPublicShareToken();
+
+		$password = $this->featureContext->getActualPassword($password);
+
+		$url = $this->featureContext->getBaseUrl() . "/dav/public-files/$token";
+
+		$headers = [
+			"Depth" => "1",
+			"OCS-APIRequest" => "true",
+			"public-token" => $token,
+			"Content-Type" => "application/xml; charset=utf-8",
+			"Authorization" => "Basic " . base64_encode("public:$password"),
+		];
+
+		$response = HttpRequestHelper::sendRequest(
+			$url,
+			"PROPFIND",
+			null,
+			null,
+			$headers,
+			$body,
+		);
+
+		$responseBody = $response->getBody()->getContents();
+
+		$this->featureContext->setResponse($response);
+
+		$xmlDocument = new \SimpleXMLElement($responseBody);
+		$xmlDocument->registerXPathNamespace('d', 'DAV:');
+		$xmlDocument->registerXPathNamespace('oc', 'http://owncloud.org/ns');
+
+		$fileIds = [];
+		$signature = null;
+		$expiration = null;
+
+		foreach ($xmlDocument->xpath('//d:response') as $responseNode) {
+			$type = $responseNode->xpath('.//oc:public-link-item-type');
+			$fileId = $responseNode->xpath('.//oc:fileid');
+
+			$sig = $responseNode->xpath('.//oc:signature-auth');
+			$exp = $responseNode->xpath('.//oc:public-link-expiration');
+
+			if (!empty($type) && (string)$type[0] === 'file' && !empty($fileId)) {
+				$fileIds[] = (string)$fileId[0];
+			}
+
+			if ($signature === null && !empty($sig)) {
+				$signature = (string)$sig[0];
+			}
+
+			if ($expiration === null && !empty($exp)) {
+				$expiration = (string)$exp[0];
+			}
+		}
+
+		return [
+			'fileIds' => $fileIds,
+			'signature' => $signature,
+			'expiration' => $expiration,
+		];
+	}
+
+	/**
+	 * @When /^the public downloads the archive of the last created public link with password "([^"]*)"$/
+	 *
+	 * @param string $password
+	 * @return void
+	 *
+	 * @throws GuzzleException|Exception
+	 */
+	public function publicDownloadsTheArchiveOfTheLastCreatedPublicLink(string $password = ""): void {
+		$data = $this->fetchPublicLinkArchiveData($password);
+		$fileIds = $data['fileIds'];
+		$signature = $data['signature'];
+		$expiration = $data['expiration'];
+
+		$token = $this->featureContext->isUsingSharingNG()
+				? $this->featureContext->shareNgGetLastCreatedLinkShareToken()
+				: $this->featureContext->getLastCreatedPublicShareToken();
+		$password = $this->featureContext->getActualPassword($password);
+		$queryParts = [];
+		$queryParts[] = "public-token=" . urlencode($token);
+
+		foreach ($fileIds as $fileId) {
+			$queryParts[] = "id=" . urlencode($fileId);
+		}
+
+		$queryParts[] = "signature=" . urlencode($signature);
+		$queryParts[] = "expiration=" . urlencode($expiration);
+		$queryString = implode('&', $queryParts);
+		$url = $this->featureContext->getBaseUrl() . "/archiver?" . $queryString;
+
+		$this->featureContext->setResponse(
+			HttpRequestHelper::get($url, 'public', $password),
+		);
+	}
+
 	/**
 	 * @Then the downloaded :type archive should contain these files:
 	 *

tests/acceptance/features/apiSpacesShares/publicLinkDownload.feature

@@ -45,3 +45,29 @@ Feature: Public can download folders from project space public link
     And the downloaded zip archive should contain these files:
       | name            | content      |
       | folder/test.txt | some content |
+
+  @env-config
+  Scenario Outline: download an archive of a password protected public link share (project space)
+    And using SharingNG
+    And user "Alice" has created a folder "project-folder" in space "new-space"
+    And user "Alice" has uploaded a file inside space "new-space" with content "some content1" to "project-folder/test1.txt"
+    And user "Alice" has uploaded a file inside space "new-space" with content "some content2" to "project-folder/test2.txt"
+    And user "Alice" has uploaded a file inside space "new-space" with content "some content3" to "project-folder/test3.txt"
+    And user "Alice" has created the following resource link share:
+      | resource         | project-folder        |
+      | space            | new-space         |
+      | permissionsRole  | <permissionsRole> |
+      | password         | %public%        |
+    When the public downloads the archive of the last created public link with password "%public%"
+    Then the HTTP status code should be "200"
+    And the downloaded "zip" archive should contain these files:
+      | name      | content       |
+      | test1.txt | some content1 |
+      | test2.txt | some content2 |
+      | test3.txt | some content3 |
+
+    Examples:
+      | permissionsRole |
+      | Edit            |
+      | View            |
+      | Upload          |