Create unit tests for auth-common

Resolves: https://www.pivotaltracker.com/story/show/65492338
fcrepo · Feb 13, 2014 · 5650d03 · 5650d03
1 parent e2773e4
commit 5650d03
Show file tree

Hide file tree

Showing 2 changed files with 468 additions and 0 deletions.
diff --git a/fcrepo-auth-common/src/test/java/org/fcrepo/auth/common/FedoraUserSecurityContextTest.java b/fcrepo-auth-common/src/test/java/org/fcrepo/auth/common/FedoraUserSecurityContextTest.java
@@ -0,0 +1,176 @@
+/**
+ * Copyright 2013 DuraSpace, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.fcrepo.auth.common;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertTrue;
+import static org.mockito.Matchers.any;
+import static org.mockito.Matchers.anySetOf;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static org.mockito.MockitoAnnotations.initMocks;
+
+import java.security.Principal;
+
+import javax.servlet.http.HttpServletRequest;
+
+import org.junit.Before;
+import org.junit.Test;
+import org.mockito.Mock;
+import org.modeshape.jcr.api.ServletCredentials;
+import org.modeshape.jcr.value.Path;
+
+/**
+ * @author bbpennel
+ * @date Feb 12, 2014
+ */
+public class FedoraUserSecurityContextTest {
+
+    @Mock
+    private ServletCredentials creds;
+
+    @Mock
+    private FedoraPolicyEnforcementPoint pep;
+
+    @Mock
+    private Principal principal;
+
+    @Mock
+    private HttpServletRequest request;
+
+    @Before
+    public void setUp() {
+        initMocks(this);
+        when(request.getUserPrincipal()).thenReturn(principal);
+        when(creds.getRequest()).thenReturn(request);
+    }
+
+    @Test(expected = IllegalArgumentException.class)
+    public void testNoPEP() {
+        new FedoraUserSecurityContext(creds, null, null);
+    }
+
+    @Test
+    public void testIsAnonymous() {
+        FedoraUserSecurityContext context =
+                new FedoraUserSecurityContext(creds, null, pep);
+        assertFalse(context.isAnonymous());
+
+        when(request.getUserPrincipal()).thenReturn(null);
+
+        context = new FedoraUserSecurityContext(creds, null, pep);
+        assertTrue(context.isAnonymous());
+    }
+
+    @Test
+    public void testGetEffectiveUserPrincipal() {
+        FedoraUserSecurityContext context =
+                new FedoraUserSecurityContext(creds, null, pep);
+
+        assertEquals("Effective user principal must match given principal",
+                principal, context.getEffectiveUserPrincipal());
+
+        context.logout();
+        assertEquals("User principal when logged out should be EVERYONE",
+                ServletContainerAuthenticationProvider.EVERYONE, context
+                .getEffectiveUserPrincipal());
+
+        when(request.getUserPrincipal()).thenReturn(null);
+        context = new FedoraUserSecurityContext(creds, null, pep);
+
+        assertEquals(
+                "Effective user principal should be EVERYONE when none is provided",
+                ServletContainerAuthenticationProvider.EVERYONE, context
+                .getEffectiveUserPrincipal());
+    }
+
+    @Test
+    public void testNoRequest() {
+        when(creds.getRequest()).thenReturn(null);
+        final FedoraUserSecurityContext context =
+                new FedoraUserSecurityContext(creds, null, pep);
+
+        assertTrue(context.isAnonymous());
+        verify(creds).getRequest();
+    }
+
+    @Test
+    public void testGetUserName() {
+        final FedoraUserSecurityContext context =
+                new FedoraUserSecurityContext(creds, null, pep);
+
+        assertNull(context.getUserName());
+
+        when(principal.getName()).thenReturn("username");
+        assertEquals("username", context.getUserName());
+    }
+
+    @Test
+    public void testHasRole() {
+        final FedoraUserSecurityContext context =
+                new FedoraUserSecurityContext(creds, null, pep);
+
+        assertTrue(context.hasRole("read"));
+        assertTrue(context.hasRole("write"));
+        assertTrue(context.hasRole("admin"));
+        assertFalse(context.hasRole(null));
+        assertFalse(context.hasRole("other"));
+    }
+
+    @Test(expected = NullPointerException.class)
+    public void testHasPermissionNullActions() {
+        final FedoraUserSecurityContext context =
+                new FedoraUserSecurityContext(creds, null, pep);
+
+        context.hasPermission(null, null, (String[]) null);
+    }
+
+    @Test
+    public void testHasPermission() {
+        final FedoraUserSecurityContext context =
+                new FedoraUserSecurityContext(creds, null, pep);
+
+        assertFalse("Granted permission with no action on root", context
+                .hasPermission(null, null, new String[] {}));
+
+        assertFalse("Granted write permission on root", context.hasPermission(
+                null, null, new String[] {"write"}));
+
+        assertTrue("Failed to granted read permission on root", context
+                .hasPermission(null, null, new String[] {"read"}));
+
+        assertFalse("Granted write permission on root", context.hasPermission(
+                null, null, new String[] {"read", "write"}));
+
+        when(
+                pep.hasModeShapePermission(any(Path.class),
+                        any(String[].class), anySetOf(Principal.class),
+                        any(Principal.class))).thenReturn(true);
+        final Path path = mock(Path.class);
+        assertTrue(context.hasPermission(null, path, new String[] {"read"}));
+        verify(pep).hasModeShapePermission(any(Path.class),
+                any(String[].class), anySetOf(Principal.class),
+                any(Principal.class));
+
+        context.logout();
+        assertFalse("Granted permission when the context was logged out",
+                context.hasPermission(null, path, new String[] {"read"}));
+    }
+}