SpringCloud/stream-applications
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

GH-171: Fix security tests for actuator endpoints

Browse Source 
Related to: https://github.com/spring-cloud/stream-applications/issues/171

The `/info` is not unsecured any more starting with Spring Boot `2.5`:
https://github.com/spring-projects/spring-boot/wiki/Spring-Boot-2.5-Release-Notes#secure-info-endpoint
This commit is contained in:
Artem Bilan
2021-06-07 11:33:38 -04:00
parent 76192ac278
commit 72076ab39e
2 changed files with 4 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
applications/stream-applications-core/stream-applications-security-common/src/test/java/org/springframework/cloud/stream/app/security/common/ReactiveSecurityEnabledManagementSecurityEnabledTests.java
View File

@@ -1,5 +1,5 @@
/*
* Copyright 2019-2020 the original author or authors.
* Copyright 2019-2021 the original author or authors.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
@@ -18,7 +18,6 @@ package org.springframework.cloud.stream.app.security.common;
import java.util.Map;
import org.junit.jupiter.api.Disabled;
import org.junit.jupiter.api.Test;
import org.springframework.http.HttpStatus;
@@ -51,13 +50,9 @@ public class ReactiveSecurityEnabledManagementSecurityEnabledTests extends Abstr
@Test
@SuppressWarnings("rawtypes")
@Disabled
public void testInfoEndpoint() {
ResponseEntity<Map> response = this.restTemplate.getForEntity("/actuator/info", Map.class);
assertThat(response.getStatusCode()).isEqualTo(HttpStatus.OK);
assertThat(response.hasBody()).isTrue();
Map info = response.getBody();
assertThat(info.get("name")).isEqualTo("MY TEST APP");
assertThat(response.getStatusCode()).isEqualTo(HttpStatus.UNAUTHORIZED);
}
// The ManagementWebSecurityAutoConfiguration exposes only Info and Health endpoint not Env!

9
applications/stream-applications-core/stream-applications-security-common/src/test/java/org/springframework/cloud/stream/app/security/common/SecurityEnabledManagementSecurityEnabledTests.java
View File

@@ -1,5 +1,5 @@
/*
* Copyright 2019-2020 the original author or authors.
* Copyright 2019-2021 the original author or authors.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
@@ -18,7 +18,6 @@ package org.springframework.cloud.stream.app.security.common;
import java.util.Map;
import org.junit.jupiter.api.Disabled;
import org.junit.jupiter.api.Test;
import org.springframework.http.HttpStatus;
@@ -50,13 +49,9 @@ public class SecurityEnabledManagementSecurityEnabledTests extends AbstractSecur
@Test
@SuppressWarnings("rawtypes")
@Disabled
public void testInfoEndpoint() {
ResponseEntity<Map> response = this.restTemplate.getForEntity("/actuator/info", Map.class);
assertThat(response.getStatusCode()).isEqualTo(HttpStatus.OK);
assertThat(response.hasBody()).isTrue();
Map info = response.getBody();
assertThat(info.get("name")).isEqualTo("MY TEST APP");
assertThat(response.getStatusCode()).isEqualTo(HttpStatus.UNAUTHORIZED);
}
// The ManagementWebSecurityAutoConfiguration exposes only Info and Health endpoint not Env!