/**
* Waffle (https://github.com/dblock/waffle)
*
* Copyright (c) 2010 - 2014 Application Security, Inc.
*
* All rights reserved. This program and the accompanying materials
* are made available under the terms of the Eclipse Public License v1.0
* which accompanies this distribution, and is available at
* http://www.eclipse.org/legal/epl-v10.html
*
* Contributors:
* Application Security, Inc.
*/
package waffle.spring;
import static org.junit.Assert.assertEquals;
import static org.junit.Assert.assertFalse;
import static org.junit.Assert.assertNotNull;
import static org.junit.Assert.assertTrue;
import static org.junit.Assert.fail;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Collections;
import org.junit.After;
import org.junit.Before;
import org.junit.Test;
import org.springframework.context.ApplicationContext;
import org.springframework.context.support.AbstractApplicationContext;
import org.springframework.context.support.ClassPathXmlApplicationContext;
import org.springframework.security.Authentication;
import org.springframework.security.GrantedAuthority;
import org.springframework.security.providers.UsernamePasswordAuthenticationToken;
import waffle.mock.MockWindowsAuthProvider;
import waffle.mock.MockWindowsIdentity;
import waffle.servlet.WindowsPrincipal;
import waffle.windows.auth.PrincipalFormat;
import waffle.windows.auth.impl.WindowsAccountImpl;
/**
* @author dblock[at]dblock[dot]org
*/
public class WindowsAuthenticationProviderTests {
private WindowsAuthenticationProvider provider;
private ApplicationContext ctx;
@Before
public void setUp() {
String[] configFiles = new String[] { "springTestAuthBeans.xml" };
this.ctx = new ClassPathXmlApplicationContext(configFiles);
this.provider = (WindowsAuthenticationProvider) this.ctx.getBean("waffleSpringAuthenticationProvider");
}
@After
public void shutDown() {
((AbstractApplicationContext) this.ctx).close();
}
@Test
public void testWindowsAuthenticationProvider() {
assertTrue(this.provider.isAllowGuestLogin());
assertTrue(this.provider.getAuthProvider() instanceof MockWindowsAuthProvider);
assertEquals(PrincipalFormat.SID, this.provider.getPrincipalFormatEnum());
assertEquals(PrincipalFormat.BOTH, this.provider.getRoleFormatEnum());
}
@Test
public void testSupports() {
assertFalse(this.provider.supports(this.getClass()));
assertTrue(this.provider.supports(UsernamePasswordAuthenticationToken.class));
}
@SuppressWarnings("unchecked")
@Test
public void testAuthenticate() {
MockWindowsIdentity mockIdentity = new MockWindowsIdentity(WindowsAccountImpl.getCurrentUsername(),
new ArrayList<String>());
WindowsPrincipal principal = new WindowsPrincipal(mockIdentity);
UsernamePasswordAuthenticationToken authentication = new UsernamePasswordAuthenticationToken(principal,
"password");
Authentication authenticated = this.provider.authenticate(authentication);
assertNotNull(authenticated);
assertTrue(authenticated.isAuthenticated());
GrantedAuthority[] authorities = authenticated.getAuthorities();
Collections.sort(Arrays.asList(authorities));
assertEquals(3, authorities.length);
assertEquals("ROLE_EVERYONE", authorities[0].getAuthority());
assertEquals("ROLE_USER", authorities[1].getAuthority());
assertEquals("ROLE_USERS", authorities[2].getAuthority());
assertTrue(authenticated.getPrincipal() instanceof WindowsPrincipal);
}
@SuppressWarnings("unchecked")
@Test
public void testAuthenticateWithCustomGrantedAuthorityFactory() {
this.provider.setDefaultGrantedAuthority(null);
this.provider.setGrantedAuthorityFactory(new FqnGrantedAuthorityFactory(null, false));
MockWindowsIdentity mockIdentity = new MockWindowsIdentity(WindowsAccountImpl.getCurrentUsername(),
new ArrayList<String>());
WindowsPrincipal principal = new WindowsPrincipal(mockIdentity);
UsernamePasswordAuthenticationToken authentication = new UsernamePasswordAuthenticationToken(principal,
"password");
Authentication authenticated = this.provider.authenticate(authentication);
assertNotNull(authenticated);
assertTrue(authenticated.isAuthenticated());
GrantedAuthority[] authorities = authenticated.getAuthorities();
assertEquals(2, authorities.length);
Collections.sort(Arrays.asList(authorities));
assertEquals("Everyone", authorities[0].getAuthority());
assertEquals("Users", authorities[1].getAuthority());
assertTrue(authenticated.getPrincipal() instanceof WindowsPrincipal);
}
@Test(expected = GuestLoginDisabledAuthenticationException.class)
public void testGuestIsDisabled() {
MockWindowsIdentity mockIdentity = new MockWindowsIdentity("Guest", new ArrayList<String>());
this.provider.setAllowGuestLogin(false);
WindowsPrincipal principal = new WindowsPrincipal(mockIdentity);
UsernamePasswordAuthenticationToken authentication = new UsernamePasswordAuthenticationToken(principal,
"password");
this.provider.authenticate(authentication);
fail("expected AuthenticationServiceException");
}
}