/**
* Copyright 2013 ArcBees Inc.
*
* Licensed under the Apache License, Version 2.0 (the "License"); you may not
* use this file except in compliance with the License. You may obtain a copy of
* the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
* License for the specific language governing permissions and limitations under
* the License.
*/
package com.gwtplatform.carstore.server.authentication;
import javax.inject.Inject;
import javax.persistence.NoResultException;
import javax.servlet.http.HttpSession;
import org.jukito.JukitoModule;
import org.jukito.JukitoRunner;
import org.junit.Test;
import org.junit.runner.RunWith;
import com.gwtplatform.carstore.server.dao.UserDao;
import com.gwtplatform.carstore.server.dao.UserSessionDao;
import com.gwtplatform.carstore.server.dao.domain.User;
import com.gwtplatform.carstore.shared.dto.CurrentUserDto;
import com.gwtplatform.carstore.shared.dto.UserDto;
import static org.junit.Assert.assertNotNull;
import static org.mockito.BDDMockito.given;
import static org.mockito.Matchers.any;
import static org.mockito.Matchers.anyString;
import static org.mockito.Mockito.mock;
import static org.mockito.Mockito.never;
import static org.mockito.Mockito.verify;
@RunWith(JukitoRunner.class)
public class AuthenticatorTest {
@SuppressWarnings("unused")
public static class Module extends JukitoModule {
@Override
protected void configureTest() {
forceMock(UserDao.class);
forceMock(UserSessionDao.class);
forceMock(CurrentUserDtoProvider.class);
}
}
private static final String A_VALID_USER = "valid-user";
private static final String AN_INVALID_USER = "invalid-user";
private static final String A_VALID_PASSWORD = "valid-password";
private static final String AN_INVALID_PASSWORD = "invalid-password";
private static final long A_USER_ID = 1;
@Inject
Authenticator authenticator;
@Inject
UserDao userDao;
@Inject
PasswordSecurity passwordSecurity;
@Inject
HttpSession httpSession;
@Inject
CurrentUserDtoProvider currentUserDtoProvider;
@Test
public void aValidUserShouldBeAbleToConnect() {
// Given
User user = mock(User.class);
given(user.getId()).willReturn(A_USER_ID);
given(userDao.findByUsername(A_VALID_USER)).willReturn(user);
given(passwordSecurity.check(anyString(), anyString())).willReturn(true);
// When
UserDto fetchUser = authenticator.authenticateCredentials(A_VALID_USER, A_VALID_PASSWORD);
// Then
assertNotNull(fetchUser);
verify(httpSession).setAttribute(SecurityParameters.getUserSessionKey(), A_USER_ID);
}
@Test(expected = AuthenticationException.class)
public void aValidUserWithAnInvalidPasswordShouldntBeAbleToConnect(User user) {
// Given
given(userDao.findByUsername(A_VALID_USER)).willReturn(user);
given(passwordSecurity.check(anyString(), anyString())).willReturn(false);
// When
authenticator.authenticateCredentials(A_VALID_USER, AN_INVALID_PASSWORD);
// Then
verify(httpSession, never()).setAttribute(anyString(), any());
}
@Test(expected = AuthenticationException.class)
public void anInvalidUserShouldntBeAbleToConnect() {
// Given
given(userDao.findByUsername(AN_INVALID_USER)).willThrow(new NoResultException());
// When
authenticator.authenticateCredentials(AN_INVALID_USER, AN_INVALID_PASSWORD);
// Then
verify(httpSession, never()).setAttribute(anyString(), any());
}
@Test
public void logoutShouldDestroyTheSession(UserSessionDao userSessionDao) {
// Given
UserDto userDto = mock(UserDto.class);
given(userDto.getId()).willReturn(0l);
CurrentUserDto currentUserDto = mock(CurrentUserDto.class);
given(currentUserDto.getUser()).willReturn(userDto);
given(currentUserDtoProvider.get()).willReturn(currentUserDto);
// When
authenticator.logout();
// Then
verify(httpSession).invalidate();
}
}