mirror of
https://github.com/Alfresco/alfresco-community-repo.git
synced 2025-06-30 18:15:39 +00:00
0465e9b101
20954: Calendar Dashlet updates. Fixes: ALF-2907 (meeting workspace issue)
20968: Minor VersionableAspect fix to onDeleteNode policy firing (follow-on for r19507)
20981: Removed Install Jammer installers from V3.3.3
20982: AVMTestSuite - run PurgeTestP after AVMServiceTest (investigating ALF-3611)
20997: Fix for ALF-2605 - updated share-config-custom.xml.sample and removed obsolete extension files
21030: Pulled XAMConnector AMP into main 3.3SP3 codeline. Apart from build changes (incl. EOL), there are no repo changes.
21032: StoreSelector passes through NodeContentContext allowing stores access to node information
21036: Fix ALF-245: Can't delete space that contains "translation without content"
- Delete triggers 'unmakeTranslation'
- Empty translations are marked with sys:temporary before being deleted
21051: More on fix ALF-245. Reduced complexity by not deleting empty translations twice
21064: Merged V3.3 to V3.3-BUG_FIX
20898: Merged HEAD to V3.3
20724: AVMTestSuite - temporarily comment out PurgeTestP
- TODO: investigate intermittent test failure
20903: Incremented version revision
20921: AVM - fix purge store so that vr nodes are actually orphaned (ALF-3627)
20952: Fix for ALF-3704: Module conflict - Alfresco web client config property page missing metadata.
This is application of a fix made to the config service in a hotfix. The change provides a deterministic load order for config files loaded via the ConfigBootstrap spring bean. More importantly it means that config files loaded by modules on different machines in a cluster load in the same order.
The forms client and AWE config files have been updated to take advantage of the new loading order.
21061: Merged PATCHES/V3.1.2 to V3.3 (RECORD ONLY)
20890: ALF-3687: Apply LUCENE-1383 patch to Lucene 2.1.0 to reduce memory leaks from ThreadLocals
20891: ALF-3687: Build classpath fix
20892: Incremented version label
21062: Merged PATCHES/V3.2.1 to V3.3
20897: (RECORD ONLY) Incremented version label
20901: (RECORD ONLY) ALF-3740: Merged V3.3 to PATCHES/V3.2.1
20524: VersionMigrator - option to run as scheduled job (ALF-1000)
20904: (RECORD ONLY) ALF-3732: Merged PATCHES/V3.2.r to PATCHES/V3.2.1
19803: ALF-558: File servers (CIFS / FTP / NFS) can now handle concurrent write operations on Alfresco repository
- ContentDiskDriver / AVMDiskDriver now use retrying transactions for write operations
- Disable EagerContentStoreCleaner on ContentDiskDriver / AVMDiskDriver closeFile() operations so that they may be retried after rollback (Sony zero byte problem)
- Allow manual association of AVM ContentData with nodes so that closeFile() may be retried
- Propagation of new argument through AVM interfaces
20905: (RECORD ONLY) ALF-3732: Rolled back the now unnecessary reference()/dereference() stuff from ALF-558
20906: (RECORD ONLY) ALF-3732: Merged DEV/V3.3-BUG-FIX to PATCHES/V3.2.1
20623: Fix for ALF-3188 : Access Denied when updating doc via CIFS
20907: (RECORD ONLY) ALF-3732: Merged V3.3 to PATCHES/V3.2.1
20173: Propagate IOExceptions from retryable write transactions in AlfrescoDiskDriver
20950: ALF-3779: Upgrades on large repositories from v2.1 and v2.2 were failing on MySQL due to "The total number of locks exceeds the lock table size" errors
- Solution was to add support for new --BEGIN TXN and --END TXN comments and execute LOCK TABLES statements in the same transaction as large INSERT - SELECT statements.
20990: ALF-3789: Concurrency issues with InMemoryTicketComponentImpl
- Previous ETHREEOH-1842 method of caching web session 'ref counts' against tickets could cause tickets to unpredictably fall out of the transactional cache
- Rolled back original ETHREEOH-1842 fix. Would be too much overhead to keep these ref counts consistent across a cluster.
- Instead, avoid invalidating tickets on web session timeout and only do it on explicit log out.
- Now tickets maintained in non-transactional shared cache so they can't drop out unpredictably
- Logic for ticket inactivity timeout caching improved so that it should work across a cluster
20991: (RECORD ONLY) Incremented version label
20993: ALF-3789: Fixed Spring configuration backward compatibily issue with previous fix
- Ticket cache bean name restored to ticketsCache. This is actually now a non-transactional cache.
- Also externalized parameters so that they can now be controlled by alfresco-global.properties without any bean overrides
authentication.ticket.ticketsExpire=false
authentication.ticket.expiryMode=AFTER_FIXED_TIME
authentication.ticket.validDuration=PT1H
20994: Eclipse classpath fixes for unit testing after ant build
21057: ALF-3592: PassthruCifsAuthenticator now auto-creates / imports users who do not already exist in Alfresco
- At least one of the following properties must be true for this to happen
synchronization.autoCreatePeopleOnLogin
synchronization.syncWhenMissingPeopleLogIn
- Also improved debug logging of unknown passthru domains
21063: Merged PATCHES/V3.2.r to V3.3
21037: ALF-3793: Final attempt at realigning saved XForm data with a modified Schema
- removeRemovedNodes / insertUpdatedNodes / insertPrototypeNodes replaced by a one stop recursive process that builds a new instance tree from scratch
- Nodes copied over in correct order
- Missing nodes added in and extra nodes discarded
- Prototype nodes appended at appropriate points
21038: (RECORD ONLY) Incremented version label
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@21065 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
694 lines
22 KiB
Java
694 lines
22 KiB
Java
/*
|
|
* Copyright (C) 2005-2010 Alfresco Software Limited.
|
|
*
|
|
* This file is part of Alfresco
|
|
*
|
|
* Alfresco is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Lesser General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* Alfresco is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public License
|
|
* along with Alfresco. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
package org.alfresco.repo.security.authentication;
|
|
|
|
import java.util.ArrayList;
|
|
import java.util.HashMap;
|
|
import java.util.HashSet;
|
|
|
|
import junit.framework.TestCase;
|
|
|
|
import org.alfresco.service.cmr.security.AuthenticationService;
|
|
|
|
public class ChainingAuthenticationServiceTest extends TestCase
|
|
{
|
|
private static final String EMPTY = "Empty";
|
|
|
|
private static final String FIVE_AND_MORE = "FiveAndMore";
|
|
|
|
private static final String FIVE = "Five";
|
|
|
|
private static final String LONELY_DISABLE = "LonelyDisable";
|
|
|
|
private static final String LONELY_ENABLED = "LonelyEnabled";
|
|
|
|
private static final String ALFRESCO = "Alfresco";
|
|
|
|
TestAuthenticationServiceImpl service1;
|
|
|
|
TestAuthenticationServiceImpl service2;
|
|
|
|
TestAuthenticationServiceImpl service3;
|
|
|
|
TestAuthenticationServiceImpl service4;
|
|
|
|
TestAuthenticationServiceImpl service5;
|
|
|
|
private TestAuthenticationServiceImpl service6;
|
|
|
|
public ChainingAuthenticationServiceTest()
|
|
{
|
|
super();
|
|
}
|
|
|
|
public ChainingAuthenticationServiceTest(String arg0)
|
|
{
|
|
super(arg0);
|
|
}
|
|
|
|
@Override
|
|
protected void setUp() throws Exception
|
|
{
|
|
super.setUp();
|
|
|
|
AuthenticationUtil authUtil = new AuthenticationUtil();
|
|
authUtil.setDefaultAdminUserName("admin");
|
|
authUtil.setDefaultGuestUserName("guest");
|
|
authUtil.afterPropertiesSet();
|
|
|
|
service1 = new TestAuthenticationServiceImpl(ALFRESCO, true, true, true, false);
|
|
service1.createAuthentication("andy", "andy".toCharArray());
|
|
|
|
HashMap<String, String> up = new HashMap<String, String>();
|
|
HashSet<String> disabled = new HashSet<String>();
|
|
up.put("lone", "lone");
|
|
service2 = new TestAuthenticationServiceImpl(LONELY_ENABLED, false, false, false, true, up, disabled);
|
|
|
|
up.clear();
|
|
disabled.clear();
|
|
|
|
up.put("ranger", "ranger");
|
|
disabled.add("ranger");
|
|
|
|
service3 = new TestAuthenticationServiceImpl(LONELY_DISABLE, false, false, false, false, up, disabled);
|
|
|
|
service4 = new TestAuthenticationServiceImpl(EMPTY, true, true, true, false);
|
|
|
|
up.clear();
|
|
disabled.clear();
|
|
|
|
up.put("A", "A");
|
|
up.put("B", "B");
|
|
up.put("C", "C");
|
|
up.put("D", "D");
|
|
up.put("E", "E");
|
|
service5 = new TestAuthenticationServiceImpl(FIVE, false, false, false, false, up, disabled);
|
|
|
|
up.clear();
|
|
disabled.clear();
|
|
|
|
up.put("A", "a");
|
|
up.put("B", "b");
|
|
up.put("C", "c");
|
|
up.put("D", "d");
|
|
up.put("E", "e");
|
|
up.put("F", "f");
|
|
up.put("G", "g");
|
|
up.put("H", "h");
|
|
up.put("I", "i");
|
|
up.put("J", "j");
|
|
up.put("K", "k");
|
|
service6 = new TestAuthenticationServiceImpl(FIVE_AND_MORE, false, false, false, false, up, disabled);
|
|
}
|
|
|
|
//
|
|
// Single service test
|
|
//
|
|
|
|
public void testServiceOne_Auth()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service1);
|
|
as.setAuthenticationServices(ases);
|
|
as.authenticate("andy", "andy".toCharArray());
|
|
assertEquals(as.getCurrentUserName(), "andy");
|
|
}
|
|
|
|
public void testServiceOne_AuthFail()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service1);
|
|
as.setAuthenticationServices(ases);
|
|
try
|
|
{
|
|
as.authenticate("andy", "woof".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
}
|
|
|
|
public void testServiceOne_GuestDenied()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service1);
|
|
as.setAuthenticationServices(ases);
|
|
try
|
|
{
|
|
as.authenticateAsGuest();
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
|
|
}
|
|
|
|
public void testServiceTwo_GuestAllowed()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service2);
|
|
as.setAuthenticationServices(ases);
|
|
as.authenticateAsGuest();
|
|
assertEquals(as.getCurrentUserName(), AuthenticationUtil.getGuestUserName());
|
|
as.clearCurrentSecurityContext();
|
|
assertNull(as.getCurrentUserName());
|
|
}
|
|
|
|
public void testServiceOne_CRUD_Fails()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service1);
|
|
as.setAuthenticationServices(ases);
|
|
try
|
|
{
|
|
as.authenticate("bob", "bob".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
try
|
|
{
|
|
as.createAuthentication("bob", "bob".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
}
|
|
|
|
public void testServiceOne_CRUD()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
as.setMutableAuthenticationService(service1);
|
|
try
|
|
{
|
|
as.authenticate("bob", "bob".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
as.createAuthentication("bob", "bob".toCharArray());
|
|
as.authenticate("bob", "bob".toCharArray());
|
|
as.updateAuthentication("bob", "bob".toCharArray(), "carol".toCharArray());
|
|
try
|
|
{
|
|
as.authenticate("bob", "bob".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
as.authenticate("bob", "carol".toCharArray());
|
|
as.deleteAuthentication("bob");
|
|
try
|
|
{
|
|
as.authenticate("bob", "carol".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
}
|
|
|
|
public void testServiceOne_Enabled()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
as.setMutableAuthenticationService(service1);
|
|
|
|
assertTrue(as.getAuthenticationEnabled("andy"));
|
|
|
|
as.setAuthenticationEnabled("andy", false);
|
|
assertFalse(as.getAuthenticationEnabled("andy"));
|
|
|
|
as.setAuthenticationEnabled("andy", true);
|
|
assertTrue(as.getAuthenticationEnabled("andy"));
|
|
as.authenticate("andy", "andy".toCharArray());
|
|
|
|
as.setAuthenticationEnabled("andy", false);
|
|
assertFalse(as.getAuthenticationEnabled("andy"));
|
|
|
|
try
|
|
{
|
|
as.authenticate("andy", "andy".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
}
|
|
|
|
public void testServiceOneDomains()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
as.setMutableAuthenticationService(service1);
|
|
|
|
HashSet<String> testDomains = new HashSet<String>();
|
|
testDomains.add(ALFRESCO);
|
|
|
|
assertTrue(as.getDomains().equals(testDomains));
|
|
assertTrue(as.getDomainsThatAllowUserCreation().equals(testDomains));
|
|
assertTrue(as.getDomainsThatAllowUserDeletion().equals(testDomains));
|
|
assertTrue(as.getDomiansThatAllowUserPasswordChanges().equals(testDomains));
|
|
assertTrue(as.getDomains().equals(service1.getDomains()));
|
|
assertTrue(as.getDomainsThatAllowUserCreation().equals(service1.getDomainsThatAllowUserCreation()));
|
|
assertTrue(as.getDomainsThatAllowUserDeletion().equals(service1.getDomainsThatAllowUserDeletion()));
|
|
assertTrue(as.getDomiansThatAllowUserPasswordChanges()
|
|
.equals(service1.getDomiansThatAllowUserPasswordChanges()));
|
|
|
|
}
|
|
|
|
public void testServiceOneTickets()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
as.setMutableAuthenticationService(service1);
|
|
as.authenticate("andy", "andy".toCharArray());
|
|
|
|
String ticket = as.getCurrentTicket();
|
|
assertTrue(ticket == as.getCurrentTicket());
|
|
|
|
as.validate(ticket);
|
|
as.invalidateTicket(ticket);
|
|
try
|
|
{
|
|
as.validate(ticket);
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
|
|
ticket = as.getCurrentTicket();
|
|
as.validate(ticket);
|
|
as.invalidateUserSession("andy");
|
|
try
|
|
{
|
|
as.validate(ticket);
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
}
|
|
|
|
//
|
|
// Multi service tests
|
|
//
|
|
|
|
public void testAll_Auth()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service2);
|
|
ases.add(service3);
|
|
ases.add(service4);
|
|
ases.add(service5);
|
|
ases.add(service6);
|
|
as.setAuthenticationServices(ases);
|
|
as.setMutableAuthenticationService(service1);
|
|
|
|
as.authenticate("andy", "andy".toCharArray());
|
|
assertEquals(as.getCurrentUserName(), "andy");
|
|
as.authenticate("lone", "lone".toCharArray());
|
|
try
|
|
{
|
|
as.authenticate("ranger", "ranger".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
as.authenticate("A", "A".toCharArray());
|
|
as.authenticate("B", "B".toCharArray());
|
|
as.authenticate("C", "C".toCharArray());
|
|
as.authenticate("D", "D".toCharArray());
|
|
as.authenticate("E", "E".toCharArray());
|
|
as.authenticate("A", "a".toCharArray());
|
|
as.authenticate("B", "b".toCharArray());
|
|
as.authenticate("C", "c".toCharArray());
|
|
as.authenticate("D", "d".toCharArray());
|
|
as.authenticate("E", "e".toCharArray());
|
|
as.authenticate("F", "f".toCharArray());
|
|
as.authenticate("G", "g".toCharArray());
|
|
as.authenticate("H", "h".toCharArray());
|
|
as.authenticate("I", "i".toCharArray());
|
|
as.authenticate("J", "j".toCharArray());
|
|
as.authenticate("K", "k".toCharArray());
|
|
}
|
|
|
|
public void testAll_AuthOverLapReversed()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service2);
|
|
ases.add(service3);
|
|
ases.add(service4);
|
|
ases.add(service6);
|
|
ases.add(service5);
|
|
as.setAuthenticationServices(ases);
|
|
as.setMutableAuthenticationService(service1);
|
|
|
|
as.authenticate("andy", "andy".toCharArray());
|
|
assertEquals(as.getCurrentUserName(), "andy");
|
|
as.authenticate("lone", "lone".toCharArray());
|
|
try
|
|
{
|
|
as.authenticate("ranger", "ranger".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
|
|
try
|
|
{
|
|
as.authenticate("A", "B".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
as.authenticate("A", "A".toCharArray());
|
|
as.authenticate("B", "B".toCharArray());
|
|
as.authenticate("C", "C".toCharArray());
|
|
as.authenticate("D", "D".toCharArray());
|
|
as.authenticate("E", "E".toCharArray());
|
|
as.authenticate("A", "a".toCharArray());
|
|
as.authenticate("B", "b".toCharArray());
|
|
as.authenticate("C", "c".toCharArray());
|
|
as.authenticate("D", "d".toCharArray());
|
|
as.authenticate("E", "e".toCharArray());
|
|
as.authenticate("F", "f".toCharArray());
|
|
as.authenticate("G", "g".toCharArray());
|
|
as.authenticate("H", "h".toCharArray());
|
|
as.authenticate("I", "i".toCharArray());
|
|
as.authenticate("J", "j".toCharArray());
|
|
as.authenticate("K", "k".toCharArray());
|
|
}
|
|
|
|
public void testAll_MutAuth()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service2);
|
|
ases.add(service3);
|
|
ases.add(service4);
|
|
ases.add(service5);
|
|
ases.add(service6);
|
|
as.setAuthenticationServices(ases);
|
|
as.setMutableAuthenticationService(service1);
|
|
|
|
as.authenticate("andy", "andy".toCharArray());
|
|
assertEquals(as.getCurrentUserName(), "andy");
|
|
as.authenticate("lone", "lone".toCharArray());
|
|
try
|
|
{
|
|
as.authenticate("ranger", "ranger".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
as.authenticate("A", "A".toCharArray());
|
|
as.authenticate("B", "B".toCharArray());
|
|
as.authenticate("C", "C".toCharArray());
|
|
as.authenticate("D", "D".toCharArray());
|
|
as.authenticate("E", "E".toCharArray());
|
|
as.authenticate("A", "a".toCharArray());
|
|
as.authenticate("B", "b".toCharArray());
|
|
as.authenticate("C", "c".toCharArray());
|
|
as.authenticate("D", "d".toCharArray());
|
|
as.authenticate("E", "e".toCharArray());
|
|
as.authenticate("F", "f".toCharArray());
|
|
as.authenticate("G", "g".toCharArray());
|
|
as.authenticate("H", "h".toCharArray());
|
|
as.authenticate("I", "i".toCharArray());
|
|
as.authenticate("J", "j".toCharArray());
|
|
as.authenticate("K", "k".toCharArray());
|
|
|
|
as.createAuthentication("A", "woof".toCharArray());
|
|
as.authenticate("A", "woof".toCharArray());
|
|
as.updateAuthentication("A", "woof".toCharArray(), "bark".toCharArray());
|
|
as.authenticate("A", "bark".toCharArray());
|
|
as.setAuthentication("A", "tree".toCharArray());
|
|
as.authenticate("A", "tree".toCharArray());
|
|
as.deleteAuthentication("A");
|
|
as.authenticate("A", "A".toCharArray());
|
|
as.authenticate("A", "a".toCharArray());
|
|
try
|
|
{
|
|
as.authenticate("A", "woof".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
try
|
|
{
|
|
as.authenticate("A", "bark".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
try
|
|
{
|
|
as.authenticate("A", "tree".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
}
|
|
|
|
public void testAll_AuthEnabled()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service2);
|
|
ases.add(service3);
|
|
ases.add(service4);
|
|
ases.add(service5);
|
|
ases.add(service6);
|
|
as.setAuthenticationServices(ases);
|
|
as.setMutableAuthenticationService(service1);
|
|
|
|
assertTrue(as.getAuthenticationEnabled("andy"));
|
|
assertTrue(as.getAuthenticationEnabled("lone"));
|
|
assertFalse(as.getAuthenticationEnabled("ranger"));
|
|
assertTrue(as.getAuthenticationEnabled("A"));
|
|
assertTrue(as.getAuthenticationEnabled("B"));
|
|
assertTrue(as.getAuthenticationEnabled("C"));
|
|
assertTrue(as.getAuthenticationEnabled("D"));
|
|
assertTrue(as.getAuthenticationEnabled("E"));
|
|
assertTrue(as.getAuthenticationEnabled("F"));
|
|
assertTrue(as.getAuthenticationEnabled("G"));
|
|
assertTrue(as.getAuthenticationEnabled("H"));
|
|
assertTrue(as.getAuthenticationEnabled("I"));
|
|
assertTrue(as.getAuthenticationEnabled("J"));
|
|
assertTrue(as.getAuthenticationEnabled("K"));
|
|
|
|
as.setAuthenticationEnabled("andy", false);
|
|
assertFalse(as.getAuthenticationEnabled("andy"));
|
|
as.setAuthenticationEnabled("andy", true);
|
|
assertTrue(as.getAuthenticationEnabled("andy"));
|
|
as.setAuthenticationEnabled("andy", false);
|
|
|
|
try
|
|
{
|
|
as.authenticate("andy", "andy".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
}
|
|
|
|
public void testService_GuestDenied()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service1);
|
|
ases.add(service3);
|
|
ases.add(service4);
|
|
ases.add(service5);
|
|
ases.add(service6);
|
|
as.setAuthenticationServices(ases);
|
|
try
|
|
{
|
|
as.authenticateAsGuest();
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
|
|
}
|
|
|
|
public void testService_GuestAllowed()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service1);
|
|
ases.add(service2);
|
|
ases.add(service3);
|
|
ases.add(service4);
|
|
ases.add(service5);
|
|
ases.add(service6);
|
|
as.setAuthenticationServices(ases);
|
|
as.authenticateAsGuest();
|
|
assertEquals(as.getCurrentUserName(), AuthenticationUtil.getGuestUserName());
|
|
as.clearCurrentSecurityContext();
|
|
assertNull(as.getCurrentUserName());
|
|
}
|
|
|
|
public void testService_NoGuestConfigured() throws Exception
|
|
{
|
|
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service2);
|
|
as.setAuthenticationServices(ases);
|
|
|
|
assertNotNull(AuthenticationUtil.getGuestUserName());
|
|
as.authenticateAsGuest();
|
|
assertEquals(as.getCurrentUserName(), AuthenticationUtil.getGuestUserName());
|
|
as.clearCurrentSecurityContext();
|
|
assertNull(as.getCurrentUserName());
|
|
|
|
AuthenticationUtil authUtil = new AuthenticationUtil();
|
|
authUtil.setDefaultAdminUserName("admin");
|
|
authUtil.setDefaultGuestUserName(null);
|
|
authUtil.afterPropertiesSet();
|
|
|
|
try
|
|
{
|
|
as.authenticateAsGuest();
|
|
fail("Guest authentication should not be supported");
|
|
}
|
|
catch (AuthenticationException ae)
|
|
{
|
|
// expected
|
|
assertTrue(ae.getMessage().contains("Guest authentication not supported"));
|
|
}
|
|
assertNull(as.getCurrentUserName());
|
|
}
|
|
|
|
public void testService_Domains()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service2);
|
|
ases.add(service3);
|
|
ases.add(service4);
|
|
ases.add(service5);
|
|
ases.add(service6);
|
|
as.setAuthenticationServices(ases);
|
|
as.setMutableAuthenticationService(service1);
|
|
|
|
HashSet<String> testDomains = new HashSet<String>();
|
|
testDomains.add(ALFRESCO);
|
|
testDomains.add(LONELY_ENABLED);
|
|
testDomains.add(LONELY_DISABLE);
|
|
testDomains.add(EMPTY);
|
|
testDomains.add(FIVE);
|
|
testDomains.add(FIVE_AND_MORE);
|
|
|
|
HashSet<String> onlyAlfDomain = new HashSet<String>();
|
|
onlyAlfDomain.add(ALFRESCO);
|
|
|
|
assertTrue(as.getDomains().equals(testDomains));
|
|
assertTrue(as.getDomainsThatAllowUserCreation().equals(onlyAlfDomain));
|
|
assertTrue(as.getDomainsThatAllowUserDeletion().equals(onlyAlfDomain));
|
|
assertTrue(as.getDomiansThatAllowUserPasswordChanges().equals(onlyAlfDomain));
|
|
|
|
}
|
|
|
|
public void testServiceTickets()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service2);
|
|
ases.add(service3);
|
|
ases.add(service4);
|
|
ases.add(service5);
|
|
ases.add(service6);
|
|
as.setAuthenticationServices(ases);
|
|
as.setMutableAuthenticationService(service1);
|
|
|
|
as.authenticate("andy", "andy".toCharArray());
|
|
|
|
String ticket = as.getCurrentTicket();
|
|
assertTrue(ticket == as.getCurrentTicket());
|
|
|
|
as.validate(ticket);
|
|
as.invalidateTicket(ticket);
|
|
try
|
|
{
|
|
as.validate(ticket);
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
|
|
ticket = as.getCurrentTicket();
|
|
as.validate(ticket);
|
|
as.invalidateUserSession("andy");
|
|
try
|
|
{
|
|
as.validate(ticket);
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
}
|
|
|
|
}
|