Restructure samples
Closes gh-485
This commit is contained in:
Joe Grandja
@@ -0,0 +1,137 @@
|
||||
/*
|
||||
* Copyright 2020-2021 the original author or authors.
|
||||
*
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* https://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
*/
|
||||
package sample;
|
||||
|
||||
import java.io.IOException;
|
||||
|
||||
import com.gargoylesoftware.htmlunit.Page;
|
||||
import com.gargoylesoftware.htmlunit.WebClient;
|
||||
import com.gargoylesoftware.htmlunit.WebResponse;
|
||||
import com.gargoylesoftware.htmlunit.html.HtmlButton;
|
||||
import com.gargoylesoftware.htmlunit.html.HtmlElement;
|
||||
import com.gargoylesoftware.htmlunit.html.HtmlInput;
|
||||
import com.gargoylesoftware.htmlunit.html.HtmlPage;
|
||||
import org.junit.Before;
|
||||
import org.junit.Test;
|
||||
import org.junit.runner.RunWith;
|
||||
|
||||
import org.springframework.beans.factory.annotation.Autowired;
|
||||
import org.springframework.boot.test.autoconfigure.web.servlet.AutoConfigureMockMvc;
|
||||
import org.springframework.boot.test.context.SpringBootTest;
|
||||
import org.springframework.http.HttpStatus;
|
||||
import org.springframework.test.context.junit4.SpringRunner;
|
||||
import org.springframework.web.util.UriComponentsBuilder;
|
||||
|
||||
import static org.assertj.core.api.Assertions.assertThat;
|
||||
|
||||
/**
|
||||
* Integration tests for the sample Authorization Server.
|
||||
*
|
||||
* @author Daniel Garnier-Moiroux
|
||||
*/
|
||||
@RunWith(SpringRunner.class)
|
||||
@SpringBootTest(webEnvironment = SpringBootTest.WebEnvironment.RANDOM_PORT)
|
||||
@AutoConfigureMockMvc
|
||||
public class DefaultAuthorizationServerApplicationTests {
|
||||
private static final String REDIRECT_URI = "http://127.0.0.1:8080/login/oauth2/code/messaging-client-oidc";
|
||||
|
||||
private static final String AUTHORIZATION_REQUEST = UriComponentsBuilder
|
||||
.fromPath("/oauth2/authorize")
|
||||
.queryParam("response_type", "code")
|
||||
.queryParam("client_id", "messaging-client")
|
||||
.queryParam("scope", "openid")
|
||||
.queryParam("state", "some-state")
|
||||
.queryParam("redirect_uri", REDIRECT_URI)
|
||||
.toUriString();
|
||||
|
||||
@Autowired
|
||||
private WebClient webClient;
|
||||
|
||||
@Before
|
||||
public void setUp() {
|
||||
this.webClient.getOptions().setThrowExceptionOnFailingStatusCode(true);
|
||||
this.webClient.getOptions().setRedirectEnabled(true);
|
||||
this.webClient.getCookieManager().clearCookies(); // log out
|
||||
}
|
||||
|
||||
@Test
|
||||
public void whenLoginSuccessfulThenDisplayNotFoundError() throws IOException {
|
||||
HtmlPage page = this.webClient.getPage("/");
|
||||
|
||||
assertLoginPage(page);
|
||||
|
||||
this.webClient.getOptions().setThrowExceptionOnFailingStatusCode(false);
|
||||
WebResponse signInResponse = signIn(page, "user1", "password").getWebResponse();
|
||||
assertThat(signInResponse.getStatusCode()).isEqualTo(HttpStatus.NOT_FOUND.value()); // there is no "default" index page
|
||||
}
|
||||
|
||||
@Test
|
||||
public void whenLoginFailsThenDisplayBadCredentials() throws IOException {
|
||||
HtmlPage page = this.webClient.getPage("/");
|
||||
|
||||
HtmlPage loginErrorPage = signIn(page, "user1", "wrong-password");
|
||||
|
||||
HtmlElement alert = loginErrorPage.querySelector("div[role=\"alert\"]");
|
||||
assertThat(alert).isNotNull();
|
||||
assertThat(alert.getTextContent()).isEqualTo("Bad credentials");
|
||||
}
|
||||
|
||||
@Test
|
||||
public void whenNotLoggedInAndRequestingTokenThenRedirectsToLogin() throws IOException {
|
||||
HtmlPage page = this.webClient.getPage(AUTHORIZATION_REQUEST);
|
||||
|
||||
assertLoginPage(page);
|
||||
}
|
||||
|
||||
@Test
|
||||
public void whenLoggingInAndRequestingTokenThenRedirectsToClientApplication() throws IOException {
|
||||
// Log in
|
||||
this.webClient.getOptions().setThrowExceptionOnFailingStatusCode(false);
|
||||
this.webClient.getOptions().setRedirectEnabled(false);
|
||||
signIn(this.webClient.getPage("/login"), "user1", "password");
|
||||
|
||||
// Request token
|
||||
WebResponse response = this.webClient.getPage(AUTHORIZATION_REQUEST).getWebResponse();
|
||||
|
||||
assertThat(response.getStatusCode()).isEqualTo(HttpStatus.MOVED_PERMANENTLY.value());
|
||||
String location = response.getResponseHeaderValue("location");
|
||||
assertThat(location).startsWith(REDIRECT_URI);
|
||||
assertThat(location).contains("code=");
|
||||
}
|
||||
|
||||
private static <P extends Page> P signIn(HtmlPage page, String username, String password) throws IOException {
|
||||
HtmlInput usernameInput = page.querySelector("input[name=\"username\"]");
|
||||
HtmlInput passwordInput = page.querySelector("input[name=\"password\"]");
|
||||
HtmlButton signInButton = page.querySelector("button");
|
||||
|
||||
usernameInput.type(username);
|
||||
passwordInput.type(password);
|
||||
return signInButton.click();
|
||||
}
|
||||
|
||||
private static void assertLoginPage(HtmlPage page) {
|
||||
assertThat(page.getUrl().toString()).endsWith("/login");
|
||||
|
||||
HtmlInput usernameInput = page.querySelector("input[name=\"username\"]");
|
||||
HtmlInput passwordInput = page.querySelector("input[name=\"password\"]");
|
||||
HtmlButton signInButton = page.querySelector("button");
|
||||
|
||||
assertThat(usernameInput).isNotNull();
|
||||
assertThat(passwordInput).isNotNull();
|
||||
assertThat(signInButton.getTextContent()).isEqualTo("Sign in");
|
||||
}
|
||||
|
||||
}
|
||||
@@ -0,0 +1,126 @@
|
||||
/*
|
||||
* Copyright 2020-2021 the original author or authors.
|
||||
*
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* https://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
*/
|
||||
package sample;
|
||||
|
||||
import java.io.IOException;
|
||||
import java.util.ArrayList;
|
||||
import java.util.List;
|
||||
|
||||
import com.gargoylesoftware.htmlunit.WebClient;
|
||||
import com.gargoylesoftware.htmlunit.WebResponse;
|
||||
import com.gargoylesoftware.htmlunit.html.DomElement;
|
||||
import com.gargoylesoftware.htmlunit.html.HtmlCheckBoxInput;
|
||||
import com.gargoylesoftware.htmlunit.html.HtmlPage;
|
||||
import org.junit.Before;
|
||||
import org.junit.Test;
|
||||
import org.junit.runner.RunWith;
|
||||
|
||||
import org.springframework.beans.factory.annotation.Autowired;
|
||||
import org.springframework.boot.test.autoconfigure.web.servlet.AutoConfigureMockMvc;
|
||||
import org.springframework.boot.test.context.SpringBootTest;
|
||||
import org.springframework.boot.test.mock.mockito.MockBean;
|
||||
import org.springframework.http.HttpStatus;
|
||||
import org.springframework.security.oauth2.server.authorization.OAuth2AuthorizationConsentService;
|
||||
import org.springframework.security.test.context.support.WithMockUser;
|
||||
import org.springframework.test.context.junit4.SpringRunner;
|
||||
import org.springframework.web.util.UriComponentsBuilder;
|
||||
|
||||
import static org.assertj.core.api.Assertions.assertThat;
|
||||
import static org.mockito.ArgumentMatchers.any;
|
||||
import static org.mockito.Mockito.when;
|
||||
|
||||
/**
|
||||
* Consent screen integration tests for the sample Authorization Server.
|
||||
*
|
||||
* @author Dmitriy Dubson
|
||||
*/
|
||||
@RunWith(SpringRunner.class)
|
||||
@SpringBootTest(webEnvironment = SpringBootTest.WebEnvironment.RANDOM_PORT)
|
||||
@AutoConfigureMockMvc
|
||||
public class DefaultAuthorizationServerConsentTests {
|
||||
|
||||
@Autowired
|
||||
private WebClient webClient;
|
||||
|
||||
@MockBean
|
||||
private OAuth2AuthorizationConsentService authorizationConsentService;
|
||||
|
||||
private final String redirectUri = "http://127.0.0.1/login/oauth2/code/messaging-client-oidc";
|
||||
|
||||
private final String authorizationRequestUri = UriComponentsBuilder
|
||||
.fromPath("/oauth2/authorize")
|
||||
.queryParam("response_type", "code")
|
||||
.queryParam("client_id", "messaging-client")
|
||||
.queryParam("scope", "openid message.read message.write")
|
||||
.queryParam("state", "state")
|
||||
.queryParam("redirect_uri", this.redirectUri)
|
||||
.toUriString();
|
||||
|
||||
@Before
|
||||
public void setUp() {
|
||||
this.webClient.getOptions().setThrowExceptionOnFailingStatusCode(false);
|
||||
this.webClient.getOptions().setRedirectEnabled(true);
|
||||
this.webClient.getCookieManager().clearCookies();
|
||||
when(this.authorizationConsentService.findById(any(), any())).thenReturn(null);
|
||||
}
|
||||
|
||||
@Test
|
||||
@WithMockUser("user1")
|
||||
public void whenUserConsentsToAllScopesThenReturnAuthorizationCode() throws IOException {
|
||||
final HtmlPage consentPage = this.webClient.getPage(this.authorizationRequestUri);
|
||||
assertThat(consentPage.getTitleText()).isEqualTo("Consent required");
|
||||
|
||||
List<HtmlCheckBoxInput> scopes = new ArrayList<>();
|
||||
consentPage.querySelectorAll("input[name='scope']").forEach(scope ->
|
||||
scopes.add((HtmlCheckBoxInput) scope));
|
||||
for (HtmlCheckBoxInput scope : scopes) {
|
||||
scope.click();
|
||||
}
|
||||
|
||||
List<String> scopeIds = new ArrayList<>();
|
||||
scopes.forEach(scope -> {
|
||||
assertThat(scope.isChecked()).isTrue();
|
||||
scopeIds.add(scope.getId());
|
||||
});
|
||||
assertThat(scopeIds).containsExactlyInAnyOrder("message.read", "message.write");
|
||||
|
||||
DomElement submitConsentButton = consentPage.querySelector("button[id='submit-consent']");
|
||||
this.webClient.getOptions().setRedirectEnabled(false);
|
||||
|
||||
WebResponse approveConsentResponse = submitConsentButton.click().getWebResponse();
|
||||
assertThat(approveConsentResponse.getStatusCode()).isEqualTo(HttpStatus.MOVED_PERMANENTLY.value());
|
||||
String location = approveConsentResponse.getResponseHeaderValue("location");
|
||||
assertThat(location).startsWith(this.redirectUri);
|
||||
assertThat(location).contains("code=");
|
||||
}
|
||||
|
||||
@Test
|
||||
@WithMockUser("user1")
|
||||
public void whenUserCancelsConsentThenReturnAccessDeniedError() throws IOException {
|
||||
final HtmlPage consentPage = this.webClient.getPage(this.authorizationRequestUri);
|
||||
assertThat(consentPage.getTitleText()).isEqualTo("Consent required");
|
||||
|
||||
DomElement cancelConsentButton = consentPage.querySelector("button[id='cancel-consent']");
|
||||
this.webClient.getOptions().setRedirectEnabled(false);
|
||||
|
||||
WebResponse cancelConsentResponse = cancelConsentButton.click().getWebResponse();
|
||||
assertThat(cancelConsentResponse.getStatusCode()).isEqualTo(HttpStatus.MOVED_PERMANENTLY.value());
|
||||
String location = cancelConsentResponse.getResponseHeaderValue("location");
|
||||
assertThat(location).startsWith(this.redirectUri);
|
||||
assertThat(location).contains("error=access_denied");
|
||||
}
|
||||
|
||||
}
|
||||
Reference in New Issue
Block a user