OPEN - issue SEC-657: Create pre-authenticated processing filter which obtains username from request header

http://jira.springframework.org/browse/SEC-657. Added filter and test class.

core/src/test/java/org/springframework/security/ui/preauth/header/RequestHeaderPreAuthenticatedProcessingFilterTests.java

@@ -0,0 +1,83 @@
+package org.springframework.security.ui.preauth.header;
+
+import static org.junit.Assert.*;
+
+import org.junit.After;
+import org.junit.Test;
+import org.springframework.mock.web.MockFilterChain;
+import org.springframework.mock.web.MockHttpServletRequest;
+import org.springframework.mock.web.MockHttpServletResponse;
+import org.springframework.security.MockAuthenticationManager;
+import org.springframework.security.context.SecurityContextHolder;
+import org.springframework.security.ui.preauth.PreAuthenticatedCredentialsNotFoundException;
+
+/**
+ * 
+ * @author Luke Taylor
+ * @version $Id$
+ */
+public class RequestHeaderPreAuthenticatedProcessingFilterTests {
+	
+	@After
+	public void clearContext() {
+		SecurityContextHolder.clearContext();
+	}
+	
+	@Test(expected = PreAuthenticatedCredentialsNotFoundException.class)
+	public void rejectsMissingHeader() throws Exception {
+		MockHttpServletRequest request = new MockHttpServletRequest();
+		MockHttpServletResponse response = new MockHttpServletResponse();
+		MockFilterChain chain = new MockFilterChain();
+		RequestHeaderPreAuthenticatedProcessingFilter filter = new RequestHeaderPreAuthenticatedProcessingFilter();
+		filter.getOrder();
+		
+		filter.doFilter(request, response, chain);
+	}
+	
+	@Test
+	public void defaultsToUsingSiteminderHeader() throws Exception {
+		MockHttpServletRequest request = new MockHttpServletRequest();
+		request.addHeader("SM_USER", "cat");
+		MockHttpServletResponse response = new MockHttpServletResponse();
+		MockFilterChain chain = new MockFilterChain();
+		RequestHeaderPreAuthenticatedProcessingFilter filter = new RequestHeaderPreAuthenticatedProcessingFilter();
+		filter.setAuthenticationManager(new MockAuthenticationManager());
+		
+		filter.doFilter(request, response, chain);
+		assertNotNull(SecurityContextHolder.getContext().getAuthentication());
+		assertEquals("cat", SecurityContextHolder.getContext().getAuthentication().getName());
+		assertEquals("N/A", SecurityContextHolder.getContext().getAuthentication().getCredentials());		
+	}
+
+	@Test
+	public void alternativeHeaderNameIsSupported() throws Exception {
+		MockHttpServletRequest request = new MockHttpServletRequest();
+		request.addHeader("myUsernameHeader", "wolfman");
+		MockHttpServletResponse response = new MockHttpServletResponse();
+		MockFilterChain chain = new MockFilterChain();
+		RequestHeaderPreAuthenticatedProcessingFilter filter = new RequestHeaderPreAuthenticatedProcessingFilter();
+		filter.setAuthenticationManager(new MockAuthenticationManager());		
+		filter.setPrincipalRequestHeader("myUsernameHeader");
+		
+		filter.doFilter(request, response, chain);
+		assertNotNull(SecurityContextHolder.getContext().getAuthentication());
+		assertEquals("wolfman", SecurityContextHolder.getContext().getAuthentication().getName());
+	}
+	
+	@Test
+	public void credentialsAreRetrievedIfHeaderNameIsSet() throws Exception {
+		MockHttpServletRequest request = new MockHttpServletRequest();
+		MockHttpServletResponse response = new MockHttpServletResponse();
+		MockFilterChain chain = new MockFilterChain();
+		RequestHeaderPreAuthenticatedProcessingFilter filter = new RequestHeaderPreAuthenticatedProcessingFilter();
+		filter.setAuthenticationManager(new MockAuthenticationManager());		
+		filter.setCredentialsRequestHeader("myCredentialsHeader");
+		request.addHeader("SM_USER", "cat");
+		request.addHeader("myCredentialsHeader", "catspassword");
+		
+		filter.doFilter(request, response, chain);
+		assertNotNull(SecurityContextHolder.getContext().getAuthentication());
+		assertEquals("catspassword", SecurityContextHolder.getContext().getAuthentication().getCredentials());		
+	}	
+	
+}