rename project (#1144)

spring-security-mvc-boot/src/test/java/org/baeldung/web/CustomUserDetailsServiceIntegrationTest.java

@@ -0,0 +1,76 @@
+package org.baeldung.web;
+
+import static org.junit.Assert.assertEquals;
+
+import org.baeldung.config.MvcConfig;
+import org.baeldung.config.PersistenceConfig;
+import org.baeldung.config.SecurityConfig;
+import org.baeldung.persistence.dao.UserRepository;
+import org.baeldung.persistence.model.User;
+import org.junit.After;
+import org.junit.Test;
+import org.junit.runner.RunWith;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.SpringApplicationConfiguration;
+import org.springframework.security.authentication.AuthenticationProvider;
+import org.springframework.security.authentication.BadCredentialsException;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.test.context.junit4.SpringJUnit4ClassRunner;
+import org.springframework.test.context.web.WebAppConfiguration;
+
+@RunWith(SpringJUnit4ClassRunner.class)
+@SpringApplicationConfiguration(classes = { MvcConfig.class, SecurityConfig.class, PersistenceConfig.class })
+@WebAppConfiguration
+public class CustomUserDetailsServiceIntegrationTest {
+
+    public static final String USERNAME = "user";
+    public static final String PASSWORD = "pass";
+    public static final String USERNAME2 = "user2";
+
+    @Autowired
+    UserRepository myUserRepository;
+
+    @Autowired
+    AuthenticationProvider authenticationProvider;
+
+    @Autowired
+    PasswordEncoder passwordEncoder;
+
+    //
+
+    @Test
+    public void givenExistingUser_whenAuthenticate_thenRetrieveFromDb() {
+        User user = new User();
+        user.setUsername(USERNAME);
+        user.setPassword(passwordEncoder.encode(PASSWORD));
+
+        myUserRepository.save(user);
+
+        UsernamePasswordAuthenticationToken auth = new UsernamePasswordAuthenticationToken(USERNAME, PASSWORD);
+        Authentication authentication = authenticationProvider.authenticate(auth);
+
+        assertEquals(authentication.getName(), USERNAME);
+    }
+
+    @Test(expected = BadCredentialsException.class)
+    public void givenIncorrectUser_whenAuthenticate_thenBadCredentialsException() {
+        User user = new User();
+        user.setUsername(USERNAME);
+        user.setPassword(passwordEncoder.encode(PASSWORD));
+
+        myUserRepository.save(user);
+
+        UsernamePasswordAuthenticationToken auth = new UsernamePasswordAuthenticationToken(USERNAME2, PASSWORD);
+        authenticationProvider.authenticate(auth);
+    }
+
+    //
+
+    @After
+    public void tearDown() {
+        myUserRepository.removeUserByUsername(USERNAME);
+    }
+
+}

spring-security-mvc-boot/src/test/java/org/baeldung/web/LiveTest.java

@@ -0,0 +1,67 @@
+package org.baeldung.web;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertTrue;
+
+import org.baeldung.persistence.model.Foo;
+import org.junit.Test;
+import org.springframework.http.MediaType;
+
+import com.jayway.restassured.RestAssured;
+import com.jayway.restassured.authentication.FormAuthConfig;
+import com.jayway.restassured.response.Response;
+import com.jayway.restassured.specification.RequestSpecification;
+
+public class LiveTest {
+
+    private final FormAuthConfig formAuthConfig = new FormAuthConfig("http://localhost:8082/spring-security-custom-permission/login", "username", "password");
+
+    @Test
+    public void givenUserWithReadPrivilegeAndHasPermission_whenGetFooById_thenOK() {
+        final Response response = givenAuth("john", "123").get("http://localhost:8082/spring-security-custom-permission/foos/1");
+        assertEquals(200, response.getStatusCode());
+        assertTrue(response.asString().contains("id"));
+    }
+
+    @Test
+    public void givenUserWithNoWritePrivilegeAndHasPermission_whenPostFoo_thenForbidden() {
+        final Response response = givenAuth("john", "123").contentType(MediaType.APPLICATION_JSON_VALUE).body(new Foo("sample")).post("http://localhost:8082/spring-security-custom-permission/foos");
+        assertEquals(403, response.getStatusCode());
+    }
+
+    @Test
+    public void givenUserWithWritePrivilegeAndHasPermission_whenPostFoo_thenOk() {
+        final Response response = givenAuth("tom", "111").contentType(MediaType.APPLICATION_JSON_VALUE).body(new Foo("sample")).post("http://localhost:8082/spring-security-custom-permission/foos");
+        assertEquals(201, response.getStatusCode());
+        assertTrue(response.asString().contains("id"));
+    }
+
+    //
+
+    @Test
+    public void givenUserMemberInOrganization_whenGetOrganization_thenOK() {
+        final Response response = givenAuth("john", "123").get("http://localhost:8082/spring-security-custom-permission/organizations/1");
+        assertEquals(200, response.getStatusCode());
+        assertTrue(response.asString().contains("id"));
+    }
+
+    @Test
+    public void givenUserMemberNotInOrganization_whenGetOrganization_thenForbidden() {
+        final Response response = givenAuth("john", "123").get("http://localhost:8082/spring-security-custom-permission/organizations/2");
+        assertEquals(403, response.getStatusCode());
+    }
+
+    //
+
+    @Test
+    public void givenDisabledSecurityExpression_whenGetFooByName_thenError() {
+        final Response response = givenAuth("john", "123").get("http://localhost:8082/spring-security-custom-permission/foos?name=sample");
+        assertEquals(500, response.getStatusCode());
+        assertTrue(response.asString().contains("method hasAuthority() not allowed"));
+    }
+
+    //
+    private RequestSpecification givenAuth(String username, String password) {
+        return RestAssured.given().auth().form(username, password, formAuthConfig);
+    }
+}