/**
* Copyright 2005-2011 Noelios Technologies.
*
* The contents of this file are subject to the terms of one of the following
* open source licenses: LGPL 3.0 or LGPL 2.1 or CDDL 1.0 or EPL 1.0 (the
* "Licenses"). You can select the license that you prefer but you may not use
* this file except in compliance with one of these Licenses.
*
* You can obtain a copy of the LGPL 3.0 license at
* http://www.opensource.org/licenses/lgpl-3.0.html
*
* You can obtain a copy of the LGPL 2.1 license at
* http://www.opensource.org/licenses/lgpl-2.1.php
*
* You can obtain a copy of the CDDL 1.0 license at
* http://www.opensource.org/licenses/cddl1.php
*
* You can obtain a copy of the EPL 1.0 license at
* http://www.opensource.org/licenses/eclipse-1.0.php
*
* See the Licenses for the specific language governing permissions and
* limitations under the Licenses.
*
* Alternatively, you can obtain a royalty free commercial license with less
* limitations, transferable or non-transferable, directly at
* http://www.noelios.com/products/restlet-engine
*
* Restlet is a registered trademark of Noelios Technologies.
*/
package org.restlet.test.security;
import org.junit.Test;
import org.restlet.Application;
import org.restlet.Component;
import org.restlet.Request;
import org.restlet.Response;
import org.restlet.Restlet;
import org.restlet.Server;
import org.restlet.data.ChallengeRequest;
import org.restlet.data.ChallengeResponse;
import org.restlet.data.ChallengeScheme;
import org.restlet.data.MediaType;
import org.restlet.data.Method;
import org.restlet.data.Protocol;
import org.restlet.data.Status;
import org.restlet.ext.crypto.DigestAuthenticator;
import org.restlet.resource.ClientResource;
import org.restlet.resource.ResourceException;
import org.restlet.routing.Router;
import org.restlet.security.MapVerifier;
import org.restlet.test.RestletTestCase;
/**
* Restlet unit tests for HTTP DIGEST authentication client/server.
*
* @author Jerome Louvel
*/
public class HttpDigestTestCase extends RestletTestCase {
private Component component;
private int port;
private static class MyApplication extends Application {
@Override
public Restlet createInboundRoot() {
Router router = new Router(getContext());
DigestAuthenticator da = new DigestAuthenticator(getContext(),
"TestRealm", "mySecretServerKey");
MapVerifier mapVerifier = new MapVerifier();
mapVerifier.getLocalSecrets().put("scott", "tiger".toCharArray());
da.setWrappedVerifier(mapVerifier);
Restlet restlet = new Restlet(getContext()) {
@Override
public void handle(Request request, Response response) {
response.setEntity("hello, world", MediaType.TEXT_PLAIN);
}
};
da.setNext(restlet);
router.attach("/", da);
return router;
}
}
@Override
protected void setUp() throws Exception {
super.setUp();
component = new Component();
Server server = component.getServers().add(Protocol.HTTP, 0);
Application application = new MyApplication();
component.getDefaultHost().attach(application);
component.start();
port = server.getEphemeralPort();
}
@Override
protected void tearDown() throws Exception {
component.stop();
component = null;
super.tearDown();
}
@Test
public void testDigest() throws Exception {
ClientResource cr = new ClientResource("http://localhost:" + port + "/");
// Try unauthenticated request
try {
cr.get();
} catch (ResourceException re) {
assertEquals(Status.CLIENT_ERROR_UNAUTHORIZED, cr.getStatus());
ChallengeRequest c1 = null;
for (ChallengeRequest challengeRequest : cr.getChallengeRequests()) {
if (ChallengeScheme.HTTP_DIGEST.equals(challengeRequest
.getScheme())) {
c1 = challengeRequest;
break;
}
}
assertEquals(ChallengeScheme.HTTP_DIGEST, c1.getScheme());
String realm = c1.getRealm();
assertEquals("TestRealm", realm);
// String opaque = c1.getParameters().getFirstValue("opaque");
// String qop = c1.getParameters().getFirstValue("qop");
// assertEquals(null, opaque);
// assertEquals("auth", qop);
// Try authenticated request
cr.getRequest().setMethod(Method.GET);
ChallengeResponse c2 = new ChallengeResponse(c1, cr.getResponse(),
"scott", "tiger".toCharArray());
cr.setChallengeResponse(c2);
cr.get();
assertTrue(cr.getStatus().isSuccess());
}
}
}