mirror of
https://github.com/Alfresco/alfresco-community-repo.git
synced 2025-06-30 18:15:39 +00:00
bb3c8a1244
18088: ETHREEOH-3787: Addition of liferay-display.xml to define category for demo portlet
18053: Build fix: Re-enable log ins to Alfresco web app when not running in a portlet container
- Removed direct dependencies between FacesHelper and portlet API
18037: Merged DEV/DAVEW/SURFPORTLET to V3.2
17669: Changes to enable surf rendering from a portlet
- New DispatcherPortlet forwards portlet requests to the DispatcherServlet as servlet requests.
- A new filter 'lazily' creates users' dashboard pages to avoid the need to have to redirect from site-index.jsp
- Build against JSR 286 portlet 2.0 API jar
- Exclude portlet API jar from war to avoid ClassCastExceptions
- Lazily init portlet authenticators to avoid ClassNotFoundExceptions when not running in a portlet container
- Fix web.xml schema validation problems
- UserFactory session keys given unique prefix to avoid class with Liferay shared session attributes
- Liferay deployment descriptor to enable user principal name resolution
- Fixed subsystem problem that prevented the override of a property with the empty string in alfresco-global.properties. Stopped 'unprotected' external auth from working.
18019: ETHREEOH-3770: LDAP sync now supports attribute range retrieval to get around limits imposed by Active Directory on multi-valued attributes
- Meant that groups with more than 1000 members were getting truncated in Active Directory
- Now switched on in ldap-ad and off in ldap subsystem
- Also switched off result set paging in ldap subsystem by default for wider compatibility with non-AD systems
17759: Merged DEV/BELARUS/V3.2-2009_11_24 to V3.2
17755: ETHREEOH-3739: build 283: Upgrades from 3.1.1 and 3.1.2 fail on JBoss 5.1
- The getFile method was created for ImapFoldersPatch to retrieve acp file for ACPImportPackageHandler.
- This method tries to load ACP file from file location and if it is unsuccessful then creates temporary file from resource input stream.
- In other words we apply aproach from ImporterBootstrap.
17600: ETHREEOH-1002: Avoid using HTTP 1.1 chunked transfer encoding to send heartbeat data because some proxy servers can't cope with it!
- Unit test can now parse chunked and un-chunked HTTP requests
17597: Further optimizations to authority caching
- Don't invalidate entire user authority lookup cache when user added to or removed from an authority
17588: Fix up authority caching
- Need to include tenant domain in cache key
- Also reinstated cache of user recursive group memberships for performance purposes
17559: ETHREEOH-3440: Authority search performance improvements
- AuthorityDAO now uses Lucene (again) to do wildcard style authority searches by name, type and zone
- Retrieval by exact name, type and zone still performed by DB methods
- DB methods now optimized to avoid having to load group child nodes to determine group membership
- Authority cache now stores authority node refs by name to reduce authority resolution queries
- ScriptGroup avoids hammering repository with multiple searches to determine group membership
17545: ETHREEOH-3371: Fixed group searches to search within the default zone and thus hide 'invisible' WCM and Share groups.
17527: ETHREEOH-3375: Use static inner class for cache key to avoid non serializable exceptions
17523: ETHREEOH-3337: Fix NPEs in RepoServerMgmt operations
- Transactional cache can have entries with non-null keys and null values
17521: ETHREEOH-3158: Proper handling of user validation failures in Kerberos Authentication filters.
17490: Fix failing HeartBeatTest
- Prevent possibility of both test and non-test public keys being used at the same time
17481: Fix build for Jan
- Removed JDK 1.6 String.isEmpty() references
17472: Follow-on for ETHREEOH-2648 - tighten guest login, eg. if no guest configured (in auth chain)
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@18108 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
700 lines
23 KiB
Java
700 lines
23 KiB
Java
/*
|
|
* Copyright (C) 2005-2007 Alfresco Software Limited.
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
|
|
* As a special exception to the terms and conditions of version 2.0 of
|
|
* the GPL, you may redistribute this Program in connection with Free/Libre
|
|
* and Open Source Software ("FLOSS") applications as described in Alfresco's
|
|
* FLOSS exception. You should have recieved a copy of the text describing
|
|
* the FLOSS exception, and it is also available here:
|
|
* http://www.alfresco.com/legal/licensing"
|
|
*/
|
|
package org.alfresco.repo.security.authentication;
|
|
|
|
import java.util.ArrayList;
|
|
import java.util.HashMap;
|
|
import java.util.HashSet;
|
|
|
|
import junit.framework.TestCase;
|
|
|
|
import org.alfresco.service.cmr.security.AuthenticationService;
|
|
|
|
public class ChainingAuthenticationServiceTest extends TestCase
|
|
{
|
|
private static final String EMPTY = "Empty";
|
|
|
|
private static final String FIVE_AND_MORE = "FiveAndMore";
|
|
|
|
private static final String FIVE = "Five";
|
|
|
|
private static final String LONELY_DISABLE = "LonelyDisable";
|
|
|
|
private static final String LONELY_ENABLED = "LonelyEnabled";
|
|
|
|
private static final String ALFRESCO = "Alfresco";
|
|
|
|
TestAuthenticationServiceImpl service1;
|
|
|
|
TestAuthenticationServiceImpl service2;
|
|
|
|
TestAuthenticationServiceImpl service3;
|
|
|
|
TestAuthenticationServiceImpl service4;
|
|
|
|
TestAuthenticationServiceImpl service5;
|
|
|
|
private TestAuthenticationServiceImpl service6;
|
|
|
|
public ChainingAuthenticationServiceTest()
|
|
{
|
|
super();
|
|
}
|
|
|
|
public ChainingAuthenticationServiceTest(String arg0)
|
|
{
|
|
super(arg0);
|
|
}
|
|
|
|
@Override
|
|
protected void setUp() throws Exception
|
|
{
|
|
super.setUp();
|
|
|
|
AuthenticationUtil authUtil = new AuthenticationUtil();
|
|
authUtil.setDefaultAdminUserName("admin");
|
|
authUtil.setDefaultGuestUserName("guest");
|
|
authUtil.afterPropertiesSet();
|
|
|
|
service1 = new TestAuthenticationServiceImpl(ALFRESCO, true, true, true, false);
|
|
service1.createAuthentication("andy", "andy".toCharArray());
|
|
|
|
HashMap<String, String> up = new HashMap<String, String>();
|
|
HashSet<String> disabled = new HashSet<String>();
|
|
up.put("lone", "lone");
|
|
service2 = new TestAuthenticationServiceImpl(LONELY_ENABLED, false, false, false, true, up, disabled);
|
|
|
|
up.clear();
|
|
disabled.clear();
|
|
|
|
up.put("ranger", "ranger");
|
|
disabled.add("ranger");
|
|
|
|
service3 = new TestAuthenticationServiceImpl(LONELY_DISABLE, false, false, false, false, up, disabled);
|
|
|
|
service4 = new TestAuthenticationServiceImpl(EMPTY, true, true, true, false);
|
|
|
|
up.clear();
|
|
disabled.clear();
|
|
|
|
up.put("A", "A");
|
|
up.put("B", "B");
|
|
up.put("C", "C");
|
|
up.put("D", "D");
|
|
up.put("E", "E");
|
|
service5 = new TestAuthenticationServiceImpl(FIVE, false, false, false, false, up, disabled);
|
|
|
|
up.clear();
|
|
disabled.clear();
|
|
|
|
up.put("A", "a");
|
|
up.put("B", "b");
|
|
up.put("C", "c");
|
|
up.put("D", "d");
|
|
up.put("E", "e");
|
|
up.put("F", "f");
|
|
up.put("G", "g");
|
|
up.put("H", "h");
|
|
up.put("I", "i");
|
|
up.put("J", "j");
|
|
up.put("K", "k");
|
|
service6 = new TestAuthenticationServiceImpl(FIVE_AND_MORE, false, false, false, false, up, disabled);
|
|
}
|
|
|
|
//
|
|
// Single service test
|
|
//
|
|
|
|
public void testServiceOne_Auth()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service1);
|
|
as.setAuthenticationServices(ases);
|
|
as.authenticate("andy", "andy".toCharArray());
|
|
assertEquals(as.getCurrentUserName(), "andy");
|
|
}
|
|
|
|
public void testServiceOne_AuthFail()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service1);
|
|
as.setAuthenticationServices(ases);
|
|
try
|
|
{
|
|
as.authenticate("andy", "woof".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
}
|
|
|
|
public void testServiceOne_GuestDenied()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service1);
|
|
as.setAuthenticationServices(ases);
|
|
try
|
|
{
|
|
as.authenticateAsGuest();
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
|
|
}
|
|
|
|
public void testServiceTwo_GuestAllowed()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service2);
|
|
as.setAuthenticationServices(ases);
|
|
as.authenticateAsGuest();
|
|
assertEquals(as.getCurrentUserName(), AuthenticationUtil.getGuestUserName());
|
|
as.clearCurrentSecurityContext();
|
|
assertNull(as.getCurrentUserName());
|
|
}
|
|
|
|
public void testServiceOne_CRUD_Fails()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service1);
|
|
as.setAuthenticationServices(ases);
|
|
try
|
|
{
|
|
as.authenticate("bob", "bob".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
try
|
|
{
|
|
as.createAuthentication("bob", "bob".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
}
|
|
|
|
public void testServiceOne_CRUD()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
as.setMutableAuthenticationService(service1);
|
|
try
|
|
{
|
|
as.authenticate("bob", "bob".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
as.createAuthentication("bob", "bob".toCharArray());
|
|
as.authenticate("bob", "bob".toCharArray());
|
|
as.updateAuthentication("bob", "bob".toCharArray(), "carol".toCharArray());
|
|
try
|
|
{
|
|
as.authenticate("bob", "bob".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
as.authenticate("bob", "carol".toCharArray());
|
|
as.deleteAuthentication("bob");
|
|
try
|
|
{
|
|
as.authenticate("bob", "carol".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
}
|
|
|
|
public void testServiceOne_Enabled()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
as.setMutableAuthenticationService(service1);
|
|
|
|
assertTrue(as.getAuthenticationEnabled("andy"));
|
|
|
|
as.setAuthenticationEnabled("andy", false);
|
|
assertFalse(as.getAuthenticationEnabled("andy"));
|
|
|
|
as.setAuthenticationEnabled("andy", true);
|
|
assertTrue(as.getAuthenticationEnabled("andy"));
|
|
as.authenticate("andy", "andy".toCharArray());
|
|
|
|
as.setAuthenticationEnabled("andy", false);
|
|
assertFalse(as.getAuthenticationEnabled("andy"));
|
|
|
|
try
|
|
{
|
|
as.authenticate("andy", "andy".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
}
|
|
|
|
public void testServiceOneDomains()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
as.setMutableAuthenticationService(service1);
|
|
|
|
HashSet<String> testDomains = new HashSet<String>();
|
|
testDomains.add(ALFRESCO);
|
|
|
|
assertTrue(as.getDomains().equals(testDomains));
|
|
assertTrue(as.getDomainsThatAllowUserCreation().equals(testDomains));
|
|
assertTrue(as.getDomainsThatAllowUserDeletion().equals(testDomains));
|
|
assertTrue(as.getDomiansThatAllowUserPasswordChanges().equals(testDomains));
|
|
assertTrue(as.getDomains().equals(service1.getDomains()));
|
|
assertTrue(as.getDomainsThatAllowUserCreation().equals(service1.getDomainsThatAllowUserCreation()));
|
|
assertTrue(as.getDomainsThatAllowUserDeletion().equals(service1.getDomainsThatAllowUserDeletion()));
|
|
assertTrue(as.getDomiansThatAllowUserPasswordChanges()
|
|
.equals(service1.getDomiansThatAllowUserPasswordChanges()));
|
|
|
|
}
|
|
|
|
public void testServiceOneTickets()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
as.setMutableAuthenticationService(service1);
|
|
as.authenticate("andy", "andy".toCharArray());
|
|
|
|
String ticket = as.getCurrentTicket();
|
|
assertTrue(ticket == as.getCurrentTicket());
|
|
|
|
as.validate(ticket, null);
|
|
as.invalidateTicket(ticket, null);
|
|
try
|
|
{
|
|
as.validate(ticket, null);
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
|
|
ticket = as.getCurrentTicket();
|
|
as.validate(ticket, null);
|
|
as.invalidateUserSession("andy");
|
|
try
|
|
{
|
|
as.validate(ticket, null);
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
}
|
|
|
|
//
|
|
// Multi service tests
|
|
//
|
|
|
|
public void testAll_Auth()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service2);
|
|
ases.add(service3);
|
|
ases.add(service4);
|
|
ases.add(service5);
|
|
ases.add(service6);
|
|
as.setAuthenticationServices(ases);
|
|
as.setMutableAuthenticationService(service1);
|
|
|
|
as.authenticate("andy", "andy".toCharArray());
|
|
assertEquals(as.getCurrentUserName(), "andy");
|
|
as.authenticate("lone", "lone".toCharArray());
|
|
try
|
|
{
|
|
as.authenticate("ranger", "ranger".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
as.authenticate("A", "A".toCharArray());
|
|
as.authenticate("B", "B".toCharArray());
|
|
as.authenticate("C", "C".toCharArray());
|
|
as.authenticate("D", "D".toCharArray());
|
|
as.authenticate("E", "E".toCharArray());
|
|
as.authenticate("A", "a".toCharArray());
|
|
as.authenticate("B", "b".toCharArray());
|
|
as.authenticate("C", "c".toCharArray());
|
|
as.authenticate("D", "d".toCharArray());
|
|
as.authenticate("E", "e".toCharArray());
|
|
as.authenticate("F", "f".toCharArray());
|
|
as.authenticate("G", "g".toCharArray());
|
|
as.authenticate("H", "h".toCharArray());
|
|
as.authenticate("I", "i".toCharArray());
|
|
as.authenticate("J", "j".toCharArray());
|
|
as.authenticate("K", "k".toCharArray());
|
|
}
|
|
|
|
public void testAll_AuthOverLapReversed()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service2);
|
|
ases.add(service3);
|
|
ases.add(service4);
|
|
ases.add(service6);
|
|
ases.add(service5);
|
|
as.setAuthenticationServices(ases);
|
|
as.setMutableAuthenticationService(service1);
|
|
|
|
as.authenticate("andy", "andy".toCharArray());
|
|
assertEquals(as.getCurrentUserName(), "andy");
|
|
as.authenticate("lone", "lone".toCharArray());
|
|
try
|
|
{
|
|
as.authenticate("ranger", "ranger".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
|
|
try
|
|
{
|
|
as.authenticate("A", "B".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
as.authenticate("A", "A".toCharArray());
|
|
as.authenticate("B", "B".toCharArray());
|
|
as.authenticate("C", "C".toCharArray());
|
|
as.authenticate("D", "D".toCharArray());
|
|
as.authenticate("E", "E".toCharArray());
|
|
as.authenticate("A", "a".toCharArray());
|
|
as.authenticate("B", "b".toCharArray());
|
|
as.authenticate("C", "c".toCharArray());
|
|
as.authenticate("D", "d".toCharArray());
|
|
as.authenticate("E", "e".toCharArray());
|
|
as.authenticate("F", "f".toCharArray());
|
|
as.authenticate("G", "g".toCharArray());
|
|
as.authenticate("H", "h".toCharArray());
|
|
as.authenticate("I", "i".toCharArray());
|
|
as.authenticate("J", "j".toCharArray());
|
|
as.authenticate("K", "k".toCharArray());
|
|
}
|
|
|
|
public void testAll_MutAuth()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service2);
|
|
ases.add(service3);
|
|
ases.add(service4);
|
|
ases.add(service5);
|
|
ases.add(service6);
|
|
as.setAuthenticationServices(ases);
|
|
as.setMutableAuthenticationService(service1);
|
|
|
|
as.authenticate("andy", "andy".toCharArray());
|
|
assertEquals(as.getCurrentUserName(), "andy");
|
|
as.authenticate("lone", "lone".toCharArray());
|
|
try
|
|
{
|
|
as.authenticate("ranger", "ranger".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
as.authenticate("A", "A".toCharArray());
|
|
as.authenticate("B", "B".toCharArray());
|
|
as.authenticate("C", "C".toCharArray());
|
|
as.authenticate("D", "D".toCharArray());
|
|
as.authenticate("E", "E".toCharArray());
|
|
as.authenticate("A", "a".toCharArray());
|
|
as.authenticate("B", "b".toCharArray());
|
|
as.authenticate("C", "c".toCharArray());
|
|
as.authenticate("D", "d".toCharArray());
|
|
as.authenticate("E", "e".toCharArray());
|
|
as.authenticate("F", "f".toCharArray());
|
|
as.authenticate("G", "g".toCharArray());
|
|
as.authenticate("H", "h".toCharArray());
|
|
as.authenticate("I", "i".toCharArray());
|
|
as.authenticate("J", "j".toCharArray());
|
|
as.authenticate("K", "k".toCharArray());
|
|
|
|
as.createAuthentication("A", "woof".toCharArray());
|
|
as.authenticate("A", "woof".toCharArray());
|
|
as.updateAuthentication("A", "woof".toCharArray(), "bark".toCharArray());
|
|
as.authenticate("A", "bark".toCharArray());
|
|
as.setAuthentication("A", "tree".toCharArray());
|
|
as.authenticate("A", "tree".toCharArray());
|
|
as.deleteAuthentication("A");
|
|
as.authenticate("A", "A".toCharArray());
|
|
as.authenticate("A", "a".toCharArray());
|
|
try
|
|
{
|
|
as.authenticate("A", "woof".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
try
|
|
{
|
|
as.authenticate("A", "bark".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
try
|
|
{
|
|
as.authenticate("A", "tree".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
}
|
|
|
|
public void testAll_AuthEnabled()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service2);
|
|
ases.add(service3);
|
|
ases.add(service4);
|
|
ases.add(service5);
|
|
ases.add(service6);
|
|
as.setAuthenticationServices(ases);
|
|
as.setMutableAuthenticationService(service1);
|
|
|
|
assertTrue(as.getAuthenticationEnabled("andy"));
|
|
assertTrue(as.getAuthenticationEnabled("lone"));
|
|
assertFalse(as.getAuthenticationEnabled("ranger"));
|
|
assertTrue(as.getAuthenticationEnabled("A"));
|
|
assertTrue(as.getAuthenticationEnabled("B"));
|
|
assertTrue(as.getAuthenticationEnabled("C"));
|
|
assertTrue(as.getAuthenticationEnabled("D"));
|
|
assertTrue(as.getAuthenticationEnabled("E"));
|
|
assertTrue(as.getAuthenticationEnabled("F"));
|
|
assertTrue(as.getAuthenticationEnabled("G"));
|
|
assertTrue(as.getAuthenticationEnabled("H"));
|
|
assertTrue(as.getAuthenticationEnabled("I"));
|
|
assertTrue(as.getAuthenticationEnabled("J"));
|
|
assertTrue(as.getAuthenticationEnabled("K"));
|
|
|
|
as.setAuthenticationEnabled("andy", false);
|
|
assertFalse(as.getAuthenticationEnabled("andy"));
|
|
as.setAuthenticationEnabled("andy", true);
|
|
assertTrue(as.getAuthenticationEnabled("andy"));
|
|
as.setAuthenticationEnabled("andy", false);
|
|
|
|
try
|
|
{
|
|
as.authenticate("andy", "andy".toCharArray());
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
}
|
|
|
|
public void testService_GuestDenied()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service1);
|
|
ases.add(service3);
|
|
ases.add(service4);
|
|
ases.add(service5);
|
|
ases.add(service6);
|
|
as.setAuthenticationServices(ases);
|
|
try
|
|
{
|
|
as.authenticateAsGuest();
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
|
|
}
|
|
|
|
public void testService_GuestAllowed()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service1);
|
|
ases.add(service2);
|
|
ases.add(service3);
|
|
ases.add(service4);
|
|
ases.add(service5);
|
|
ases.add(service6);
|
|
as.setAuthenticationServices(ases);
|
|
as.authenticateAsGuest();
|
|
assertEquals(as.getCurrentUserName(), AuthenticationUtil.getGuestUserName());
|
|
as.clearCurrentSecurityContext();
|
|
assertNull(as.getCurrentUserName());
|
|
}
|
|
|
|
public void testService_NoGuestConfigured() throws Exception
|
|
{
|
|
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service2);
|
|
as.setAuthenticationServices(ases);
|
|
|
|
assertNotNull(AuthenticationUtil.getGuestUserName());
|
|
as.authenticateAsGuest();
|
|
assertEquals(as.getCurrentUserName(), AuthenticationUtil.getGuestUserName());
|
|
as.clearCurrentSecurityContext();
|
|
assertNull(as.getCurrentUserName());
|
|
|
|
AuthenticationUtil authUtil = new AuthenticationUtil();
|
|
authUtil.setDefaultAdminUserName("admin");
|
|
authUtil.setDefaultGuestUserName(null);
|
|
authUtil.afterPropertiesSet();
|
|
|
|
try
|
|
{
|
|
as.authenticateAsGuest();
|
|
fail("Guest authentication should not be supported");
|
|
}
|
|
catch (AuthenticationException ae)
|
|
{
|
|
// expected
|
|
assertTrue(ae.getMessage().contains("Guest authentication not supported"));
|
|
}
|
|
assertNull(as.getCurrentUserName());
|
|
}
|
|
|
|
public void testService_Domains()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service2);
|
|
ases.add(service3);
|
|
ases.add(service4);
|
|
ases.add(service5);
|
|
ases.add(service6);
|
|
as.setAuthenticationServices(ases);
|
|
as.setMutableAuthenticationService(service1);
|
|
|
|
HashSet<String> testDomains = new HashSet<String>();
|
|
testDomains.add(ALFRESCO);
|
|
testDomains.add(LONELY_ENABLED);
|
|
testDomains.add(LONELY_DISABLE);
|
|
testDomains.add(EMPTY);
|
|
testDomains.add(FIVE);
|
|
testDomains.add(FIVE_AND_MORE);
|
|
|
|
HashSet<String> onlyAlfDomain = new HashSet<String>();
|
|
onlyAlfDomain.add(ALFRESCO);
|
|
|
|
assertTrue(as.getDomains().equals(testDomains));
|
|
assertTrue(as.getDomainsThatAllowUserCreation().equals(onlyAlfDomain));
|
|
assertTrue(as.getDomainsThatAllowUserDeletion().equals(onlyAlfDomain));
|
|
assertTrue(as.getDomiansThatAllowUserPasswordChanges().equals(onlyAlfDomain));
|
|
|
|
}
|
|
|
|
public void testServiceTickets()
|
|
{
|
|
ChainingAuthenticationServiceImpl as = new ChainingAuthenticationServiceImpl();
|
|
ArrayList<AuthenticationService> ases = new ArrayList<AuthenticationService>();
|
|
ases.add(service2);
|
|
ases.add(service3);
|
|
ases.add(service4);
|
|
ases.add(service5);
|
|
ases.add(service6);
|
|
as.setAuthenticationServices(ases);
|
|
as.setMutableAuthenticationService(service1);
|
|
|
|
as.authenticate("andy", "andy".toCharArray());
|
|
|
|
String ticket = as.getCurrentTicket();
|
|
assertTrue(ticket == as.getCurrentTicket());
|
|
|
|
as.validate(ticket, null);
|
|
as.invalidateTicket(ticket, null);
|
|
try
|
|
{
|
|
as.validate(ticket, null);
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
|
|
ticket = as.getCurrentTicket();
|
|
as.validate(ticket, null);
|
|
as.invalidateUserSession("andy");
|
|
try
|
|
{
|
|
as.validate(ticket, null);
|
|
fail();
|
|
}
|
|
catch (AuthenticationException e)
|
|
{
|
|
|
|
}
|
|
}
|
|
|
|
}
|