Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ELY-2615] Add a test class that tests creating and making use of a custom NameRewriter #1993

Merged
merged 1 commit into from
Oct 12, 2023
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -0,0 +1,92 @@
/*
* JBoss, Home of Professional Open Source.
* Copyright 2023 Red Hat, Inc., and individual contributors
* as indicated by the @author tags.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.wildfly.security.auth.server;
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@lvydra Just a minor, can you please add a license on top of the file? Thank you!

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@Skyllarr Added


import org.junit.Test;
import org.wildfly.security.auth.permission.LoginPermission;
import org.wildfly.security.auth.realm.FileSystemSecurityRealm;

import static org.junit.Assert.assertEquals;
import static org.junit.Assert.assertFalse;
import static org.junit.Assert.assertTrue;

public class CustomNameRewriterTest {

private static final String BEFORE_USER_NAME = "Bob";
private static final String AFTER_USER_NAME = "Robert";

@Test
public void testCustomNameRewriter() {
CustomNameRewriter rewriter = new CustomNameRewriter();
String adjustedName = rewriter.rewriteName(BEFORE_USER_NAME);
assertEquals(AFTER_USER_NAME, adjustedName);
}

@Test
public void testCustomNameRewriterAuthentication() throws Exception {
FileSystemSecurityRealm fileSystemSecurityRealm = createSecurityRealm();
CustomNameRewriter rewriter = new CustomNameRewriter();
SecurityDomain domainWithRewriter = SecurityDomain.builder().setDefaultRealmName("default").addRealm("default", fileSystemSecurityRealm).build()
.setPermissionMapper(((permissionMappable, roles) -> LoginPermission.getInstance()))
.setPreRealmRewriter(rewriter)
.build();
ServerAuthenticationContext sac1 = domainWithRewriter.createNewAuthenticationContext();
sac1.setAuthenticationName(BEFORE_USER_NAME); // security domain contains the user "Robert"
assertTrue(sac1.authorize());

SecurityDomain domainWithoutRewriter = SecurityDomain.builder().setDefaultRealmName("default").addRealm("default", fileSystemSecurityRealm).build()
.setPermissionMapper(((permissionMappable, roles) -> LoginPermission.getInstance()))
.build();
ServerAuthenticationContext sac2 = domainWithoutRewriter.createNewAuthenticationContext();
sac2.setAuthenticationName(BEFORE_USER_NAME); // should fail if rewriter not configured
assertFalse(sac2.authorize());
}

@Test
public void testCustomNameRewriterNonExistingUser() throws Exception{
FileSystemSecurityRealm fileSystemSecurityRealm = createSecurityRealm();
CustomNameRewriter rewriter = new CustomNameRewriter();
SecurityDomain securityDomain = SecurityDomain.builder().setDefaultRealmName("default").addRealm("default", fileSystemSecurityRealm).build()
.setPermissionMapper(((permissionMappable, roles) -> LoginPermission.getInstance()))
.setPreRealmRewriter(rewriter)
.build();
ServerAuthenticationContext sac = securityDomain.createNewAuthenticationContext();
sac.setAuthenticationName("John");
assertFalse(sac.authorize());
}

private FileSystemSecurityRealm createSecurityRealm() throws Exception {
FileSystemSecurityRealm realm = new FileSystemSecurityRealm(ServerUtils.getRootPath(true, getClass()));
ServerUtils.addUser(realm, AFTER_USER_NAME);
return realm;
}

private final class CustomNameRewriter implements NameRewriter {

@Override
public String rewriteName(String original) {
if (original == null) {
return null;
} else if (original.equals(BEFORE_USER_NAME)) {
return AFTER_USER_NAME;
} else {
return original;
}
}
}
}
Loading