/**
* Licensed to the Apache Software Foundation (ASF) under one
* or more contributor license agreements. See the NOTICE file
* distributed with this work for additional information
* regarding copyright ownership. The ASF licenses this file
* to you under the Apache License, Version 2.0 (the
* "License"); you may not use this file except in compliance
* with the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing,
* software distributed under the License is distributed on an
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
* KIND, either express or implied. See the License for the
* specific language governing permissions and limitations
* under the License.
*/
package org.apache.cxf.systest.jaxrs.security;
import java.util.Collections;
import javax.ws.rs.core.HttpHeaders;
import javax.ws.rs.core.Response;
import org.apache.cxf.configuration.security.AuthorizationPolicy;
import org.apache.cxf.jaxrs.client.JAXRSClientFactory;
import org.apache.cxf.jaxrs.client.WebClient;
import org.apache.cxf.systest.jaxrs.Book;
import org.junit.BeforeClass;
import org.junit.Test;
public class JAXRSJaasSecurityTest extends AbstractSpringSecurityTest {
public static final int PORT = BookServerJaasSecurity.PORT;
@BeforeClass
public static void startServers() throws Exception {
String jaasConfig = JAXRSJaasSecurityTest.class
.getResource("/org/apache/cxf/systest/jaxrs/security/jaas.cfg").toURI().getPath();
assertTrue("server did not launch correctly",
launchServer(BookServerJaasSecurity.class,
Collections.singletonMap("java.security.auth.login.config",
jaasConfig),
new String[]{},
false));
}
@Test
public void testJaasInterceptorAuthenticationFailure() throws Exception {
String endpointAddress =
"http://localhost:" + PORT + "/service/jaas/bookstorestorage/thosebooks/123";
getBook(endpointAddress, "foo", "bar1", 401);
}
@Test
public void testGetBookUserAdminJaasInterceptor() throws Exception {
String endpointAddress =
"http://localhost:" + PORT + "/service/jaas/bookstorestorage/thosebooks/123";
getBook(endpointAddress, "foo", "bar", 403);
getBook(endpointAddress, "bob", "bobspassword", 200);
}
@Test
public void testJaasFilterAuthenticationFailure() throws Exception {
String endpointAddress =
"http://localhost:" + PORT + "/service/jaas2/bookstorestorage/thosebooks/123";
WebClient wc = WebClient.create(endpointAddress);
AuthorizationPolicy pol = new AuthorizationPolicy();
pol.setUserName("foo");
pol.setPassword("bar1");
WebClient.getConfig(wc).getHttpConduit().setAuthorization(pol);
wc.accept("application/xml");
//wc.header(HttpHeaders.AUTHORIZATION,
// "Basic " + base64Encode("foo" + ":" + "bar1"));
Response r = wc.get();
assertEquals(401, r.getStatus());
Object wwwAuthHeader = r.getMetadata().getFirst(HttpHeaders.WWW_AUTHENTICATE);
assertNotNull(wwwAuthHeader);
assertEquals("Basic", wwwAuthHeader.toString());
}
@Test
public void testJaasFilterWebClientAuthorizationPolicy() throws Exception {
String endpointAddress =
"http://localhost:" + PORT + "/service/jaas2/bookstorestorage/thosebooks/123";
WebClient wc = WebClient.create(endpointAddress);
AuthorizationPolicy pol = new AuthorizationPolicy();
pol.setUserName("bob");
pol.setPassword("bobspassword");
WebClient.getConfig(wc).getHttpConduit().setAuthorization(pol);
wc.accept("application/xml");
Book book = wc.get(Book.class);
assertEquals(123L, book.getId());
}
@Test
public void testJaasFilterWebClientAuthorizationPolicy2() throws Exception {
String endpointAddress =
"http://localhost:" + PORT + "/service/jaas2/bookstorestorage/thosebooks/123";
WebClient wc = WebClient.create(endpointAddress, "bob", "bobspassword", null);
//WebClient.getConfig(wc).getOutInterceptors().add(new LoggingOutInterceptor());
wc.accept("application/xml");
Book book = wc.get(Book.class);
assertEquals(123L, book.getId());
}
@Test
public void testJaasFilterProxyAuthorizationPolicy() throws Exception {
String endpointAddress =
"http://localhost:" + PORT + "/service/jaas2";
SecureBookStoreNoAnnotations proxy =
JAXRSClientFactory.create(endpointAddress, SecureBookStoreNoAnnotations.class,
"bob", "bobspassword", null);
Book book = proxy.getThatBook(123L);
assertEquals(123L, book.getId());
}
@Test
public void testJaasFilterAuthenticationFailureWithRedirection() throws Exception {
String endpointAddress =
"http://localhost:" + PORT + "/service/jaas2/bookstorestorage/thosebooks/123";
WebClient wc = WebClient.create(endpointAddress);
wc.accept("text/xml,text/html");
wc.header(HttpHeaders.AUTHORIZATION,
"Basic " + base64Encode("foo" + ":" + "bar1"));
Response r = wc.get();
assertEquals(307, r.getStatus());
Object locationHeader = r.getMetadata().getFirst(HttpHeaders.LOCATION);
assertNotNull(locationHeader);
assertEquals("http://localhost:" + PORT + "/login.jsp",
locationHeader.toString());
}
@Test
public void testGetBookUserAdminJaasFilter() throws Exception {
String endpointAddress =
"http://localhost:" + PORT + "/service/jaas2/bookstorestorage/thosebooks/123";
getBook(endpointAddress, "foo", "bar", 403);
getBook(endpointAddress, "bob", "bobspassword", 200);
}
}