/**
* Copyright 2005-2011 Noelios Technologies.
*
* The contents of this file are subject to the terms of one of the following
* open source licenses: LGPL 3.0 or LGPL 2.1 or CDDL 1.0 or EPL 1.0 (the
* "Licenses"). You can select the license that you prefer but you may not use
* this file except in compliance with one of these Licenses.
*
* You can obtain a copy of the LGPL 3.0 license at
* http://www.opensource.org/licenses/lgpl-3.0.html
*
* You can obtain a copy of the LGPL 2.1 license at
* http://www.opensource.org/licenses/lgpl-2.1.php
*
* You can obtain a copy of the CDDL 1.0 license at
* http://www.opensource.org/licenses/cddl1.php
*
* You can obtain a copy of the EPL 1.0 license at
* http://www.opensource.org/licenses/eclipse-1.0.php
*
* See the Licenses for the specific language governing permissions and
* limitations under the Licenses.
*
* Alternatively, you can obtain a royalty free commercial license with less
* limitations, transferable or non-transferable, directly at
* http://www.noelios.com/products/restlet-engine
*
* Restlet is a registered trademark of Noelios Technologies.
*/
package org.restlet.test.engine;
import java.io.IOException;
import java.util.List;
import org.restlet.Request;
import org.restlet.data.ChallengeRequest;
import org.restlet.data.ChallengeResponse;
import org.restlet.data.ChallengeScheme;
import org.restlet.data.Form;
import org.restlet.data.Method;
import org.restlet.engine.header.ChallengeWriter;
import org.restlet.engine.header.HeaderConstants;
import org.restlet.engine.security.AuthenticatorUtils;
import org.restlet.ext.crypto.internal.AwsHelper;
import org.restlet.test.RestletTestCase;
/**
* Unit tests for the SecurityData related classes.
*
* @author Jerome Louvel
*/
public class AuthenticationTestCase extends RestletTestCase {
@Override
protected void setUp() throws Exception {
super.setUp();
org.restlet.engine.Engine.clear();
}
/**
* Test Amazon S3 authentication.
*/
public void testAwsS3() {
AwsHelper helper = new AwsHelper();
// Example Object GET
ChallengeWriter cw = new ChallengeWriter();
ChallengeResponse challenge = new ChallengeResponse(
ChallengeScheme.HTTP_AWS_S3, "0PN5J17HBGZHT7JJ3X82",
"uV3F3YluFJax1cknvbcGwgjvx4QpvB+leU8dUj2o");
Request request = new Request(Method.GET,
"http://johnsmith.s3.amazonaws.com/photos/puppy.jpg");
Form httpHeaders = new Form();
httpHeaders.add(HeaderConstants.HEADER_DATE,
"Tue, 27 Mar 2007 19:36:42 +0000");
helper.formatRawResponse(cw, challenge, request, httpHeaders);
assertEquals("0PN5J17HBGZHT7JJ3X82:xXjDGYUmKxnwqr5KXNPGldn5LbA=",
cw.toString());
// Example Object PUT
cw = new ChallengeWriter();
request.setMethod(Method.PUT);
httpHeaders.set(HeaderConstants.HEADER_DATE,
"Tue, 27 Mar 2007 21:15:45 +0000", true);
httpHeaders.add(HeaderConstants.HEADER_CONTENT_LENGTH, "94328");
httpHeaders.add(HeaderConstants.HEADER_CONTENT_TYPE, "image/jpeg");
helper.formatRawResponse(cw, challenge, request, httpHeaders);
assertEquals("0PN5J17HBGZHT7JJ3X82:hcicpDDvL9SsO6AkvxqmIWkmOuQ=",
cw.toString());
}
/**
* Tests the authentication parsing for HTTP BASIC.
*
* @throws IOException
*/
public void testParsingBasic() throws IOException {
String authenticate1 = "Basic realm=\"Restlet tutorial\"";
String authorization1 = "Basic c2NvdHQ6dGlnZXI=";
assertEquals(authorization1, AuthenticatorUtils.formatResponse(
AuthenticatorUtils.parseResponse(null, authorization1, null),
null, null));
List<ChallengeRequest> creq = AuthenticatorUtils.parseRequest(null,
authenticate1, null);
assertEquals(creq.size(), 1);
assertEquals(authenticate1,
AuthenticatorUtils.formatRequest(creq.get(0), null, null));
}
/**
* Tests the authentication parsing for HTTP DIGEST.
*
* @throws IOException
*/
public void testParsingDigest() throws IOException {
String authorization1 = "Digest username=\"admin\", nonce=\"MTE3NzEwMzIwMjg0Mjo2NzFjODQyMjAyOWRlNWQ1YjFjNmEzYzJmOWRlZmE2Mw==\", uri=\"/protected/asdass\", response=\"a891ebedebb2046b83a9b7540f4e9554\", cnonce=\"MTE3NzEwMzIwMjkwMDoxNmMzODFiYzRjNWRjMmMyOTVkMWFhNDdkMTQ4OGFlMw==\", qop=auth, nc=00000001";
String authenticate1 = "Digest realm=realm, domain=\"/protected/ /alsoProtected/\", qop=auth, algorithm=MD5, nonce=\"MTE3NzEwMzIwMjg0Mjo2NzFjODQyMjAyOWRlNWQ1YjFjNmEzYzJmOWRlZmE2Mw==\"";
ChallengeResponse cres = AuthenticatorUtils.parseResponse(null,
authorization1, null);
cres.setRawValue(null);
assertEquals(authorization1,
AuthenticatorUtils.formatResponse(cres, null, null));
List<ChallengeRequest> creq = AuthenticatorUtils.parseRequest(null,
authenticate1, null);
assertEquals(creq.size(), 1);
assertEquals(authenticate1,
AuthenticatorUtils.formatRequest(creq.get(0), null, null));
}
/**
* Tests the authentication parsing for HTTP DIGEST.
*
* @throws IOException
*/
public void testParsingMultiValuedAuthenticate() throws IOException {
String authenticate0 = "Basic realm=\"Restlet tutorial\"";
String authenticate1 = "Digest realm=realm, domain=\"/protected/ /alsoProtected/\", qop=auth, algorithm=MD5, nonce=\"MTE3NzEwMzIwMjg0Mjo2NzFjODQyMjAyOWRlNWQ1YjFjNmEzYzJmOWRlZmE2Mw==\"";
String authenticate = authenticate0 + "," + authenticate1;
List<ChallengeRequest> creq = AuthenticatorUtils.parseRequest(null,
authenticate, null);
assertEquals(creq.size(), 2);
assertEquals(authenticate0,
AuthenticatorUtils.formatRequest(creq.get(0), null, null));
assertEquals(authenticate1,
AuthenticatorUtils.formatRequest(creq.get(1), null, null));
}
}