mirror of
https://github.com/Alfresco/alfresco-community-repo.git
synced 2025-08-14 17:58:59 +00:00
Merged HEAD-QA to HEAD (4.2) (including moving test classes into separate folders)
51903 to 54309 git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@54310 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
Samuel Langlois
248
source/test-java/org/alfresco/repo/web/scripts/LoginTest.java
Normal file
248
source/test-java/org/alfresco/repo/web/scripts/LoginTest.java
Normal file
@@ -0,0 +1,248 @@
|
||||
/*
|
||||
* Copyright (C) 2005-2010 Alfresco Software Limited.
|
||||
*
|
||||
* This file is part of Alfresco
|
||||
*
|
||||
* Alfresco is free software: you can redistribute it and/or modify
|
||||
* it under the terms of the GNU Lesser General Public License as published by
|
||||
* the Free Software Foundation, either version 3 of the License, or
|
||||
* (at your option) any later version.
|
||||
*
|
||||
* Alfresco is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
* GNU Lesser General Public License for more details.
|
||||
*
|
||||
* You should have received a copy of the GNU Lesser General Public License
|
||||
* along with Alfresco. If not, see <http://www.gnu.org/licenses/>.
|
||||
*/
|
||||
package org.alfresco.repo.web.scripts;
|
||||
|
||||
import org.alfresco.model.ContentModel;
|
||||
import org.alfresco.repo.security.authentication.AuthenticationComponent;
|
||||
import org.alfresco.repo.security.authentication.AuthenticationUtil;
|
||||
import org.alfresco.service.cmr.security.MutableAuthenticationService;
|
||||
import org.alfresco.service.cmr.security.PersonService;
|
||||
import org.alfresco.util.PropertyMap;
|
||||
import org.json.JSONObject;
|
||||
import org.springframework.extensions.webscripts.Status;
|
||||
import org.springframework.extensions.webscripts.TestWebScriptServer.DeleteRequest;
|
||||
import org.springframework.extensions.webscripts.TestWebScriptServer.GetRequest;
|
||||
import org.springframework.extensions.webscripts.TestWebScriptServer.PostRequest;
|
||||
import org.springframework.extensions.webscripts.TestWebScriptServer.Response;
|
||||
|
||||
/**
|
||||
* Junit test for login / logout and validate web scripts
|
||||
*
|
||||
* testing uri /api/login
|
||||
*/
|
||||
public class LoginTest extends BaseWebScriptTest
|
||||
{
|
||||
private MutableAuthenticationService authenticationService;
|
||||
private AuthenticationComponent authenticationComponent;
|
||||
private PersonService personService;
|
||||
|
||||
private static final String USER_ONE = "AuthenticationTestOne";
|
||||
|
||||
protected void setUp() throws Exception
|
||||
{
|
||||
super.setUp();
|
||||
this.authenticationService = (MutableAuthenticationService)getServer().getApplicationContext().getBean("AuthenticationService");
|
||||
this.authenticationComponent = (AuthenticationComponent)getServer().getApplicationContext().getBean("authenticationComponent");
|
||||
this.personService = (PersonService)getServer().getApplicationContext().getBean("PersonService");
|
||||
|
||||
this.authenticationComponent.setSystemUserAsCurrentUser();
|
||||
createUser(USER_ONE, USER_ONE);
|
||||
}
|
||||
|
||||
protected void tearDown() throws Exception
|
||||
{
|
||||
super.tearDown();
|
||||
}
|
||||
|
||||
private void createUser(String userName, String password)
|
||||
{
|
||||
if (this.authenticationService.authenticationExists(userName) == false)
|
||||
{
|
||||
this.authenticationService.createAuthentication(userName, password.toCharArray());
|
||||
|
||||
PropertyMap ppOne = new PropertyMap(4);
|
||||
ppOne.put(ContentModel.PROP_USERNAME, userName);
|
||||
ppOne.put(ContentModel.PROP_FIRSTNAME, "firstName");
|
||||
ppOne.put(ContentModel.PROP_LASTNAME, "lastName");
|
||||
ppOne.put(ContentModel.PROP_EMAIL, "email@email.com");
|
||||
ppOne.put(ContentModel.PROP_JOBTITLE, "jobTitle");
|
||||
|
||||
this.personService.createPerson(ppOne);
|
||||
}
|
||||
}
|
||||
|
||||
private String parseTicket(String ticketResult)
|
||||
{
|
||||
int startTag = ticketResult.indexOf("<ticket>");
|
||||
int endTag = ticketResult.indexOf("</ticket>");
|
||||
if ((startTag != -1) && (endTag != -1))
|
||||
{
|
||||
return ticketResult.substring(startTag+("<ticket>".length()), endTag);
|
||||
}
|
||||
return "";
|
||||
}
|
||||
|
||||
/**
|
||||
* Positive test - login and retrieve a ticket via get - return xml,
|
||||
* - via get method
|
||||
* validate ticket
|
||||
* logout
|
||||
* fail to validate ticket
|
||||
* fail to get ticket
|
||||
*/
|
||||
public void testAuthentication() throws Exception
|
||||
{
|
||||
/**
|
||||
* Login via get method to return xml
|
||||
*/
|
||||
String loginURL = "/api/login?u=" + USER_ONE + "&pw=" + USER_ONE;
|
||||
Response resp = sendRequest(new GetRequest(loginURL), Status.STATUS_OK);
|
||||
String xmlFragment = resp.getContentAsString();
|
||||
|
||||
assertNotNull("xmlFragment");
|
||||
assertTrue("xmlFragment contains ticket", xmlFragment.contains("<ticket>"));
|
||||
String ticket = parseTicket(xmlFragment);
|
||||
|
||||
String ticketURL = "/api/login/ticket/"+ticket;
|
||||
|
||||
/**
|
||||
* Negative test - validate as AuthenticationUtil.getAdminUserName() - should fail with a 404
|
||||
*/
|
||||
setDefaultRunAs(AuthenticationUtil.getAdminUserName());
|
||||
sendRequest(new GetRequest(ticketURL), Status.STATUS_NOT_FOUND);
|
||||
|
||||
/**
|
||||
* Validate the ticket - should succeed
|
||||
*/
|
||||
setDefaultRunAs(USER_ONE);
|
||||
|
||||
sendRequest(new GetRequest(ticketURL), Status.STATUS_OK);
|
||||
|
||||
/**
|
||||
* Logout
|
||||
*/
|
||||
sendRequest(new DeleteRequest(ticketURL), Status.STATUS_OK);
|
||||
|
||||
/**
|
||||
* Validate the ticket - should fail now
|
||||
*/
|
||||
sendRequest(new GetRequest(ticketURL), Status.STATUS_NOT_FOUND);
|
||||
|
||||
}
|
||||
|
||||
/**
|
||||
* Positive test - login and retrieve a ticket,
|
||||
* - via json method
|
||||
*/
|
||||
public void testAuthenticationGetJSON() throws Exception
|
||||
{
|
||||
/**
|
||||
* Login via get method to return json
|
||||
*/
|
||||
String loginURL = "/api/login.json?u=" + USER_ONE + "&pw=" + USER_ONE ;
|
||||
Response resp = sendRequest(new GetRequest(loginURL), Status.STATUS_OK);
|
||||
JSONObject result = new JSONObject(resp.getContentAsString());
|
||||
JSONObject data = result.getJSONObject("data");
|
||||
String ticket = data.getString("ticket");
|
||||
assertNotNull("ticket is null", ticket);
|
||||
|
||||
/**
|
||||
* This is now testing the framework ... With a different format.
|
||||
*/
|
||||
String login2URL = "/api/login?u=" + USER_ONE + "&pw=" + USER_ONE + "&format=json";
|
||||
Response resp2 = sendRequest(new GetRequest(login2URL), Status.STATUS_OK);
|
||||
JSONObject result2 = new JSONObject(resp2.getContentAsString());
|
||||
JSONObject data2 = result2.getJSONObject("data");
|
||||
String ticket2 = data2.getString("ticket");
|
||||
assertNotNull("ticket is null", ticket2);
|
||||
|
||||
}
|
||||
|
||||
/**
|
||||
* Authenticate via a POST
|
||||
* @throws Exception
|
||||
*/
|
||||
public void testPostLogin() throws Exception
|
||||
{
|
||||
String loginURL = "/api/login";
|
||||
/**
|
||||
* logon via POST and JSON
|
||||
*/
|
||||
{
|
||||
JSONObject req = new JSONObject();
|
||||
req.put("username", USER_ONE);
|
||||
req.put("password", USER_ONE);
|
||||
Response response = sendRequest(new PostRequest(loginURL, req.toString(), "application/json"), Status.STATUS_OK);
|
||||
|
||||
JSONObject result = new JSONObject(response.getContentAsString());
|
||||
JSONObject data = result.getJSONObject("data");
|
||||
String ticket = data.getString("ticket");
|
||||
assertNotNull("ticket null", ticket);
|
||||
}
|
||||
|
||||
/**
|
||||
* Negative test - wrong password
|
||||
*/
|
||||
{
|
||||
JSONObject req = new JSONObject();
|
||||
req.put("username", USER_ONE);
|
||||
req.put("password", "blurb");
|
||||
sendRequest(new PostRequest(loginURL, req.toString(), "application/json"), Status.STATUS_FORBIDDEN);
|
||||
}
|
||||
/**
|
||||
* Negative test - missing username
|
||||
*/
|
||||
{
|
||||
JSONObject req = new JSONObject();
|
||||
req.put("password", USER_ONE);
|
||||
sendRequest(new PostRequest(loginURL, req.toString(), "application/json"), Status.STATUS_BAD_REQUEST);
|
||||
}
|
||||
|
||||
/**
|
||||
* Negative test - missing password
|
||||
*/
|
||||
{
|
||||
JSONObject req = new JSONObject();
|
||||
req.put("username", USER_ONE);
|
||||
sendRequest(new PostRequest(loginURL, req.toString(), "application/json"), Status.STATUS_BAD_REQUEST);
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
/**
|
||||
* Negative tests - wrong password
|
||||
*/
|
||||
public void testWrongPassword() throws Exception
|
||||
{
|
||||
/**
|
||||
* Login via get method and wrong password, should get FORBIDDEN
|
||||
*/
|
||||
String loginURL = "/api/login?u=" + USER_ONE + "&pw=" + "crap";
|
||||
sendRequest(new GetRequest(loginURL), Status.STATUS_FORBIDDEN);
|
||||
}
|
||||
|
||||
/**
|
||||
* Negative test - missing parameters
|
||||
*/
|
||||
public void testMissingParameters() throws Exception
|
||||
{
|
||||
/**
|
||||
* Login via get method missing pw
|
||||
*/
|
||||
String loginURL = "/api/login?u=" + USER_ONE;
|
||||
sendRequest(new GetRequest(loginURL), Status.STATUS_BAD_REQUEST);
|
||||
|
||||
/**
|
||||
* Login via get method missing u
|
||||
*/
|
||||
String login2URL = "/api/login?&pw=" + USER_ONE;
|
||||
sendRequest(new GetRequest(login2URL), Status.STATUS_BAD_REQUEST);
|
||||
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user