SEC-645: Reimplementation of X509 authentication.

2026-08-06 02:08:01 +00:00 · 2008-01-27 11:12:50 +00:00
parent 718eddadd7
commit c7792458b4
4 changed files with 200 additions and 0 deletions
@@ -0,0 +1,48 @@
+package org.springframework.security.ui.preauth.x509;
+
+import org.springframework.security.providers.x509.X509TestUtils;
+import org.springframework.security.SpringSecurityMessageSource;
+import org.springframework.security.BadCredentialsException;
+
+import org.junit.Test;
+import org.junit.Before;
+
+import static junit.framework.Assert.*;
+
+/**
+ * @author Luke Taylor
+ * @version $Id$
+ */
+public class SubjectDnX509PrincipalExtractorTests {
+    SubjectDnX509PrincipalExtractor extractor;
+
+    @Before
+    public void setUp() {
+        extractor = new SubjectDnX509PrincipalExtractor();
+        extractor.setMessageSource(new SpringSecurityMessageSource());
+    }
+
+    @Test(expected = IllegalArgumentException.class)
+    public void invalidRegexFails() throws Exception {
+        extractor.setSubjectDnRegex("CN=(.*?,"); // missing closing bracket on group
+    }
+
+    @Test
+    public void defaultCNPatternReturnsExcpectedPrincipal() throws Exception {
+        Object principal = extractor.extractPrincipal(X509TestUtils.buildTestCertificate());
+        assertEquals("Luke Taylor", principal);
+    }
+
+    @Test
+    public void matchOnEmailReturnsExpectedPrincipal() throws Exception {
+        extractor.setSubjectDnRegex("emailAddress=(.*?),");
+        Object principal = extractor.extractPrincipal(X509TestUtils.buildTestCertificate());
+        assertEquals("luke@monkeymachine", principal);
+    }
+
+    @Test(expected = BadCredentialsException.class)
+    public void matchOnShoeSizeThrowsBadCredentials() throws Exception {
+        extractor.setSubjectDnRegex("shoeSize=(.*?),");
+        extractor.extractPrincipal(X509TestUtils.buildTestCertificate());
+    }
+}