JAVA-841 Standardize packages in spring-security-mvc-boot

spring-security-modules/spring-security-mvc-boot-1/src/test/java/com/baeldung/relationships/SpringDataWithSecurityIntegrationTest.java

@@ -1,12 +1,11 @@
 package com.baeldung.relationships;
 
-import com.baeldung.AppConfig;
-import com.baeldung.data.repositories.TweetRepository;
-import com.baeldung.data.repositories.UserRepository;
-import com.baeldung.models.AppUser;
-import com.baeldung.models.Tweet;
-import com.baeldung.security.AppUserPrincipal;
-import com.baeldung.util.DummyContentUtil;
+import com.baeldung.relationships.repositories.TweetRepository;
+import com.baeldung.relationships.repositories.UserRepository;
+import com.baeldung.relationships.models.AppUser;
+import com.baeldung.relationships.models.Tweet;
+import com.baeldung.relationships.security.AppUserPrincipal;
+import com.baeldung.relationships.util.DummyContentUtil;
 import org.junit.After;
 import org.junit.Before;
 import org.junit.Test;

spring-security-modules/spring-security-mvc-boot-1/src/test/java/com/baeldung/roles/SpringContextTest.java

@@ -0,0 +1,16 @@
+package com.baeldung.roles;
+
+import com.baeldung.roles.custom.Application;
+import org.junit.Test;
+import org.junit.runner.RunWith;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.test.context.junit4.SpringRunner;
+
+@RunWith(SpringRunner.class)
+@SpringBootTest(classes = Application.class)
+public class SpringContextTest {
+
+    @Test
+    public void whenSpringContextIsBootstrapped_thenNoExceptions() {
+    }
+}

spring-security-modules/spring-security-mvc-boot-1/src/test/java/com/baeldung/roles/web/ApplicationLiveTest.java

@@ -0,0 +1,67 @@
+package com.baeldung.roles.web;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertTrue;
+
+import com.baeldung.roles.custom.persistence.model.Foo;
+
+import io.restassured.RestAssured;
+import io.restassured.authentication.FormAuthConfig;
+import io.restassured.response.Response;
+import io.restassured.specification.RequestSpecification;
+
+import org.junit.Test;
+import org.springframework.http.MediaType;
+
+// In order to execute these tests, com.baeldung.custom.Application needs to be running.
+public class ApplicationLiveTest {
+    
+    @Test
+    public void givenUserWithReadPrivilegeAndHasPermission_whenGetFooById_thenOK() {
+        final Response response = givenAuth("john", "123").get("http://localhost:8082/foos/1");
+        assertEquals(200, response.getStatusCode());
+        assertTrue(response.asString().contains("id"));
+    }
+
+    @Test
+    public void givenUserWithNoWritePrivilegeAndHasPermission_whenPostFoo_thenForbidden() {
+        final Response response = givenAuth("john", "123").contentType(MediaType.APPLICATION_JSON_VALUE).body(new Foo("sample")).post("http://localhost:8082/foos");
+        assertEquals(403, response.getStatusCode());
+    }
+
+    @Test
+    public void givenUserWithWritePrivilegeAndHasPermission_whenPostFoo_thenOk() {
+        final Response response = givenAuth("tom", "111").and().body(new Foo("sample")).and().contentType(MediaType.APPLICATION_JSON_VALUE).post("http://localhost:8082/foos");
+        assertEquals(201, response.getStatusCode());
+        assertTrue(response.asString().contains("id"));
+    }
+
+    //
+
+    @Test
+    public void givenUserMemberInOrganization_whenGetOrganization_thenOK() {
+        final Response response = givenAuth("john", "123").get("http://localhost:8082/organizations/1");
+        assertEquals(200, response.getStatusCode());
+        assertTrue(response.asString().contains("id"));
+    }
+
+    @Test
+    public void givenUserMemberNotInOrganization_whenGetOrganization_thenForbidden() {
+        final Response response = givenAuth("john", "123").get("http://localhost:8082/organizations/2");
+        assertEquals(403, response.getStatusCode());
+    }
+
+    //
+
+    @Test
+    public void givenDisabledSecurityExpression_whenGetFooByName_thenError() {
+        final Response response = givenAuth("john", "123").get("http://localhost:8082/foos?name=sample");
+        assertEquals(500, response.getStatusCode());
+        assertTrue(response.asString().contains("method hasAuthority() not allowed"));
+    }
+
+    //
+    private RequestSpecification givenAuth(String username, String password) {
+        return RestAssured.given().log().uri().auth().form(username, password, new FormAuthConfig("/login","username","password"));
+    }
+}

spring-security-modules/spring-security-mvc-boot-1/src/test/java/com/baeldung/roles/web/CustomUserDetailsServiceIntegrationTest.java

@@ -0,0 +1,89 @@
+package com.baeldung.roles.web;
+
+import static org.springframework.security.test.web.servlet.request.SecurityMockMvcRequestPostProcessors.csrf;
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.get;
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.post;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.jsonPath;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
+
+import org.apache.http.HttpHeaders;
+import com.baeldung.roles.custom.Application;
+import com.baeldung.roles.custom.persistence.model.Foo;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.web.servlet.AutoConfigureMockMvc;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.http.MediaType;
+import org.springframework.security.test.context.support.WithAnonymousUser;
+import org.springframework.security.test.context.support.WithUserDetails;
+import org.springframework.test.web.servlet.MockMvc;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+
+@SpringBootTest(classes = { Application.class })
+@AutoConfigureMockMvc
+public class CustomUserDetailsServiceIntegrationTest {
+
+    @Autowired
+    private MockMvc mvc;
+
+    @Test
+    @WithUserDetails("john")
+    public void givenUserWithReadPermissions_whenRequestUserInfo_thenRetrieveUserData() throws Exception {
+        this.mvc.perform(get("/user").with(csrf()))
+            .andExpect(status().isOk())
+            .andExpect(jsonPath("$.user.privileges[0].name").value("FOO_READ_PRIVILEGE"))
+            .andExpect(jsonPath("$.user.organization.name").value("FirstOrg"))
+            .andExpect(jsonPath("$.user.username").value("john"));
+    }
+
+    @Test
+    @WithUserDetails("tom")
+    public void givenUserWithWritePermissions_whenRequestUserInfo_thenRetrieveUserData() throws Exception {
+        this.mvc.perform(get("/user").with(csrf()))
+            .andExpect(status().isOk())
+            .andExpect(jsonPath("$.user.privileges").isArray())
+            .andExpect(jsonPath("$.user.organization.name").value("SecondOrg"))
+            .andExpect(jsonPath("$.user.username").value("tom"));
+    }
+
+    @Test
+    @WithUserDetails("john")
+    public void givenUserWithReadPermissions_whenRequestFoo_thenRetrieveSampleFoo() throws Exception {
+        this.mvc.perform(get("/foos/1").with(csrf()))
+            .andExpect(status().isOk())
+            .andExpect(jsonPath("$.name").value("Sample"));
+    }
+
+    @Test
+    @WithAnonymousUser
+    public void givenAnonymous_whenRequestFoo_thenRetrieveUnauthorized() throws Exception {
+        this.mvc.perform(get("/foos/1").with(csrf()))
+                .andExpect(status().isFound());
+    }
+
+    @Test
+    @WithUserDetails("john")
+    public void givenUserWithReadPermissions_whenCreateNewFoo_thenForbiddenStatusRetrieved() throws Exception {
+        this.mvc.perform(post("/foos").with(csrf())
+            .header(HttpHeaders.CONTENT_TYPE, MediaType.APPLICATION_JSON)
+            .content(asJsonString(new Foo())))
+            .andExpect(status().isForbidden());
+    }
+
+    @Test
+    @WithUserDetails("tom")
+    public void givenUserWithWritePermissions_whenCreateNewFoo_thenOkStatusRetrieved() throws Exception {
+        this.mvc.perform(post("/foos").with(csrf())
+            .header(HttpHeaders.CONTENT_TYPE, MediaType.APPLICATION_JSON)
+            .content(asJsonString(new Foo())))
+            .andExpect(status().isCreated());
+    }
+
+    private static String asJsonString(final Object obj) throws Exception {
+        final ObjectMapper mapper = new ObjectMapper();
+        final String jsonContent = mapper.writeValueAsString(obj);
+        return jsonContent;
+    }
+
+}

spring-security-modules/spring-security-mvc-boot-1/src/test/java/com/baeldung/roles/web/IpLiveTest.java

@@ -0,0 +1,28 @@
+package com.baeldung.roles.web;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertTrue;
+import io.restassured.RestAssured;
+import io.restassured.response.Response;
+
+import org.junit.Test;
+
+
+// In order to execute these tests, com.baeldung.ip.IpApplication needs to be running.
+public class IpLiveTest {
+
+    @Test
+    public void givenUser_whenGetHomePage_thenOK() {
+        final Response response = RestAssured.given().auth().form("john", "123").get("http://localhost:8082/");
+        assertEquals(200, response.getStatusCode());
+        assertTrue(response.asString().contains("Welcome"));
+    }
+    
+    @Test
+    public void givenUserWithWrongIP_whenGetFooById_thenForbidden() {
+        final Response response = RestAssured.given().auth().form("john", "123").get("http://localhost:8082/foos/1");
+        assertEquals(403, response.getStatusCode());
+        assertTrue(response.asString().contains("Forbidden"));
+    }
+   
+}