65242 ajax actions wp ajax logged in

tests/phpunit/tests/admin/includes/ajax-actions/wpAjaxLoggedIn.php

@@ -0,0 +1,72 @@
+<?php
+
+/**
+ * Admin Ajax functions to be tested.
+ */
+require_once ABSPATH . 'wp-admin/includes/ajax-actions.php';
+
+/**
+ * Testing wp_ajax_logged_in() functionality.
+ *
+ * @package WordPress
+ * @subpackage UnitTests
+ * @since 3.1.0
+ *
+ * @group ajax
+ *
+ * @covers ::wp_ajax_logged_in
+ */
+class Tests_wp_ajax_logged_in extends WP_Ajax_UnitTestCase {
+
+	public function set_up() {
+		parent::set_up();
+		add_action( 'wp_ajax_logged-in', 'wp_ajax_logged_in' );
+	}
+
+	/**
+	 * Tests the logged-in AJAX action.
+	 *
+	 * @ticket 65242
+	 */
+	public function test_wp_ajax_logged_in(): void {
+		// Become a subscriber.
+		$this->_setRole( 'subscriber' );
+
+		// Set up the request.
+		$_REQUEST['action'] = 'logged-in';
+
+		// Make the request.
+		try {
+			$this->_handleAjax( 'logged-in' );
+		} catch ( WPAjaxDieContinueException $e ) {
+			// Expected exception.
+			unset( $e );
+		} catch ( WPAjaxDieStopException $e ) {
+			$this->_last_response = $e->getMessage();
+		}
+
+		// The response should be 1.
+		$this->assertSame( '1', $this->_last_response, 'The response should be 1 for logged-in users' );
+	}
+
+	/**
+	 * Tests the logged-in AJAX action as a logged-out user.
+	 *
+	 * @ticket 65242
+	 */
+	public function test_wp_ajax_logged_in_logged_out(): void {
+		// Log out.
+		wp_set_current_user( 0 );
+
+		// Set up the request.
+		$_REQUEST['action'] = 'logged-in';
+
+		// In a real scenario, admin-ajax.php would not fire wp_ajax_logged-in for logged-out users.
+		// Since _handleAjax simulates the hook firing directly, we test that the handler itself
+		// (if it had permission checks) would fail.
+		// However, wp_ajax_logged_in() has NO permission checks because it relies on admin-ajax.php.
+
+		// To test the "logged-out" behavior properly, we should verify it DOES NOT have a nopriv handler.
+		$this->assertFalse( has_action( 'wp_ajax_nopriv_logged-in' ), 'Should not have a nopriv handler' );
+	}
+}