[tlinh2110@gmail.com] Restructure to Method Security

spring-security-core/src/test/java/org/baeldung/methodsecurity/TestMethodSecurity.java

@@ -0,0 +1,163 @@
+package org.baeldung.methodsecurity;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertTrue;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import org.baeldung.methodsecurity.service.UserRoleService;
+import org.junit.Test;
+import org.junit.runner.RunWith;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.context.annotation.ComponentScan;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.security.access.AccessDeniedException;
+import org.springframework.security.authentication.AuthenticationCredentialsNotFoundException;
+import org.springframework.security.test.context.support.WithAnonymousUser;
+import org.springframework.security.test.context.support.WithMockUser;
+import org.springframework.test.context.ContextConfiguration;
+import org.springframework.test.context.junit4.SpringRunner;
+
+@RunWith(SpringRunner.class)
+@ContextConfiguration
+public class TestMethodSecurity{
+    
+    @Autowired
+    UserRoleService userRoleService;
+    
+    @Configuration
+    @ComponentScan("org.baeldung.methodsecurity.*")
+    public static class SpringConfig {
+
+    }
+    
+    @Test(expected=AuthenticationCredentialsNotFoundException.class)
+    public void givenNoSecurity_whenCallGetUsername_thenReturnException(){
+        String userName = userRoleService.getUsername();
+        assertEquals("john", userName);
+    }
+    
+    @Test
+    @WithMockUser(username="john",roles={"VIEWER"})
+    public void givenRoleViewer_whenCallGetUsername_thenReturnUsername(){
+        String userName = userRoleService.getUsername();
+        assertEquals("john", userName);
+    }
+    
+    @Test
+    @WithMockUser(username="john",roles={"EDITOR"})
+    public void givenUsernameJohn_whenCallIsValidUsername_thenReturnTrue(){
+        boolean isValid = userRoleService.isValidUsername("john");
+        assertEquals(true, isValid);
+    }
+    
+    @Test(expected = AccessDeniedException.class)
+    @WithMockUser(username = "john", roles = { "ADMIN" })
+    public void givenRoleAdmin_whenCallGetUsername_thenReturnAccessDenied() {
+        userRoleService.getUsername();
+    }
+    
+    @Test(expected = AccessDeniedException.class)
+    @WithMockUser(username = "john", roles = {"USER"})
+    public void givenRoleUser_whenCallGetUsername2_thenReturnAccessDenied() {
+        userRoleService.getUsername2();
+    }
+    
+    @Test
+    @WithMockUser(username="john",roles={"VIEWER","EDITOR"})
+    public void givenRoleViewer_whenCallGetUsername2_thenReturnUsername(){
+        String userName = userRoleService.getUsername2();
+        assertEquals("john", userName);
+    }
+    
+    @Test
+    @WithMockUser(username="john",roles={"VIEWER"})
+    public void givenUsernameJerry_whenCallIsValidUsername2_thenReturnFalse(){
+        boolean isValid = userRoleService.isValidUsername2("jerry");
+        assertEquals(false, isValid);
+    }
+    
+    @Test
+    @WithMockUser(username="JOHN",authorities={"SYS_ADMIN"})
+    public void givenAuthoritySysAdmin_whenCallGetUsernameInLowerCase_thenReturnUsername(){
+        String username = userRoleService.getUsernameInLowerCase();
+        assertEquals("john", username);
+    }
+    
+    @Test
+    @WithMockUser(username="john",roles={"ADMIN","USER","VIEWER"})
+    public void givenUserJohn_whenCallGetMyRolesWithJohn_thenReturnRoles(){
+        String roles = userRoleService.getMyRoles("john");
+        assertEquals("ROLE_ADMIN,ROLE_USER,ROLE_VIEWER", roles);
+    }
+    
+    @Test(expected=AccessDeniedException.class)
+    @WithMockUser(username="john",roles={"ADMIN","USER","VIEWER"})
+    public void givenUserJane_whenCallGetMyRolesWithJane_thenAccessDenied(){
+        userRoleService.getMyRoles("jane");
+    }
+    
+    @Test(expected=AccessDeniedException.class)
+    @WithAnonymousUser
+    public void givenAnomynousUser_whenCallGetUsername_thenAccessDenied(){
+        userRoleService.getUsername();
+    }
+    
+    @Test
+    @WithMockJohnViewer
+    public void givenMockedJohnViewer_whenCallGetUsername_thenReturnUsername(){
+        String userName = userRoleService.getUsername();
+        assertEquals("john", userName);
+    }
+    
+    @Test
+    @WithMockUser(username="jane")
+    public void givenListContainCurrentUsername_whenJoinUsernames_thenReturnUsernames(){
+        List<String> usernames = new ArrayList<>();
+        usernames.add("jane");
+        usernames.add("john");
+        usernames.add("jack");
+        String containCurrentUser = userRoleService.joinUsernames(usernames);
+        assertEquals("john;jack", containCurrentUser);
+       
+    }
+    
+    @Test
+    @WithMockUser(username="john")
+    public void givenListNotContainCurrentUsername_whenCallContainCurrentUser_thenReturnAccessDenied(){
+        List<String> usernames = new ArrayList<>();
+        usernames.add("jane");
+        usernames.add("john");
+        usernames.add("jack");
+        
+        List<String> roles = new ArrayList<>();
+        roles.add("ROLE_ADMIN");
+        roles.add("ROLE_TEST");
+        
+        String containCurrentUser = userRoleService.joinUsernamesAndRoles(usernames,roles);
+        assertEquals("jane;jack:ROLE_ADMIN;ROLE_TEST", containCurrentUser);
+    }
+    
+    @Test
+    @WithMockUser(username="john")
+    public void givenUserJohn_whenCallGetAllUsernamesExceptCurrent_thenReturnOtherusernames(){
+        List<String> others = userRoleService.getAllUsernamesExceptCurrent();
+        assertEquals(2, others.size());
+        assertTrue(others.contains("jane"));
+        assertTrue(others.contains("jack"));
+    }
+    
+    @Test
+    @WithMockUser(username="john",roles={"VIEWER"})
+    public void givenRoleViewer_whenCallGetUsername4_thenReturnUsername(){
+        String userName = userRoleService.getUsername4();
+        assertEquals("john", userName);
+    }
+    
+    @Test(expected=AccessDeniedException.class)
+    @WithMockUser(username="john")
+    public void givenDefaultRole_whenCallGetUsername4_thenAccessDenied(){
+        userRoleService.getUsername4();
+    }
+}

spring-security-core/src/test/java/org/baeldung/methodsecurity/TestWithMockUserAtClassLevel.java

@@ -1,8 +1,8 @@
-package org.baeldung.testmethodsecurity;
+package org.baeldung.methodsecurity;
 
 import static org.junit.Assert.assertEquals;
 
-import org.baeldung.testmethodsecurity.service.UserRoleService;
+import org.baeldung.methodsecurity.service.UserRoleService;
 import org.junit.Test;
 import org.junit.runner.RunWith;
 import org.springframework.beans.factory.annotation.Autowired;
@@ -27,7 +27,7 @@ public class TestWithMockUserAtClassLevel {
     UserRoleService userService;
     
     @Configuration
-    @ComponentScan("org.baeldung.testmethodsecurity.*")
+    @ComponentScan("org.baeldung.methodsecurity.*")
     public static class SpringConfig {
 
     }

spring-security-core/src/test/java/org/baeldung/methodsecurity/TestWithUserDetails.java

@@ -1,9 +1,9 @@
-package org.baeldung.testmethodsecurity;
+package org.baeldung.methodsecurity;
 
 import static org.junit.Assert.assertEquals;
 
-import org.baeldung.testmethodsecurity.entity.CustomUser;
-import org.baeldung.testmethodsecurity.service.UserRoleService;
+import org.baeldung.methodsecurity.entity.CustomUser;
+import org.baeldung.methodsecurity.service.UserRoleService;
 import org.junit.Test;
 import org.junit.runner.RunWith;
 import org.springframework.beans.factory.annotation.Autowired;
@@ -21,7 +21,7 @@ public class TestWithUserDetails {
     UserRoleService userService;
     
     @Configuration
-    @ComponentScan("org.baeldung.testmethodsecurity.*")
+    @ComponentScan("org.baeldung.methodsecurity.*")
     public static class SpringConfig {
 
     }
@@ -32,4 +32,11 @@ public class TestWithUserDetails {
         CustomUser user = userService.loadUserDetail("jane");
         assertEquals("jane",user.getNickName());
     }
+    
+    @Test
+    @WithUserDetails(value="jane",userDetailsServiceBeanName="userDetailService")
+    public void whenJohn_callSecuredLoadUserDetail_thenOK(){
+        CustomUser user = userService.securedLoadUserDetail("john");
+        assertEquals("jane",user.getNickName());
+    }
 }

spring-security-core/src/test/java/org/baeldung/methodsecurity/WithMockJohnViewer.java

@@ -1,4 +1,4 @@
-package org.baeldung.testmethodsecurity;
+package org.baeldung.methodsecurity;
 
 import java.lang.annotation.Retention;
 import java.lang.annotation.RetentionPolicy;

spring-security-core/src/test/java/org/baeldung/testmethodsecurity/TestMethodSecurity.java

@@ -1,57 +0,0 @@
-package org.baeldung.testmethodsecurity;
-
-import static org.junit.Assert.assertEquals;
-
-import org.baeldung.testmethodsecurity.service.UserRoleService;
-import org.junit.Test;
-import org.junit.runner.RunWith;
-import org.springframework.beans.factory.annotation.Autowired;
-import org.springframework.context.annotation.ComponentScan;
-import org.springframework.context.annotation.Configuration;
-import org.springframework.security.access.AccessDeniedException;
-import org.springframework.security.test.context.support.WithAnonymousUser;
-import org.springframework.security.test.context.support.WithMockUser;
-import org.springframework.test.context.ContextConfiguration;
-import org.springframework.test.context.junit4.SpringRunner;
-
-@RunWith(SpringRunner.class)
-@ContextConfiguration
-public class TestMethodSecurity{
-    
-    @Autowired
-    UserRoleService userRoleService;
-    
-    @Configuration
-    @ComponentScan("org.baeldung.testmethodsecurity.*")
-    public static class SpringConfig {
-
-    }
-    
-    @Test
-    @WithMockUser(username="john",roles={"VIEWER"})
-    public void givenRoleViewer_whenCallGetUsername_thenReturnUsername(){
-        String userName = userRoleService.getUsername();
-        assertEquals("john", userName);
-    }
-    
-    @Test
-    @WithMockUser(username="john",authorities={"SYS_ADMIN"})
-    public void givenAuthoritySysAdmin_whenCallGetUsername_thenReturnUsername(){
-        String userName = userRoleService.getUsername();
-        assertEquals("john", userName);
-    }
-    
-    @Test(expected=AccessDeniedException.class)
-    @WithAnonymousUser
-    public void givenAnomynousUser_whenCallGetUsername_thenAccessDenied(){
-        userRoleService.getUsername();
-    }
-    
-    @Test
-    @WithMockJohnViewer
-    public void givenMockedJohnViewer_whenCallGetUsername_thenReturnUsername(){
-        String userName = userRoleService.getUsername();
-        assertEquals("john", userName);
-    }
-    
-}