JAVA-6 : new module spring-security-mvc-boot-1

2020-02-17 21:52:37 +05:30
parent 0bfbec65dd
commit aecfad9448
87 changed files with 3801 additions and 0 deletions
@@ -0,0 +1,112 @@
+package com.baeldung.relationships;
+
+import com.baeldung.AppConfig;
+import com.baeldung.data.repositories.TweetRepository;
+import com.baeldung.data.repositories.UserRepository;
+import com.baeldung.models.AppUser;
+import com.baeldung.models.Tweet;
+import com.baeldung.security.AppUserPrincipal;
+import com.baeldung.util.DummyContentUtil;
+import org.junit.After;
+import org.junit.Before;
+import org.junit.Test;
+import org.junit.runner.RunWith;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.dao.InvalidDataAccessApiUsageException;
+import org.springframework.data.domain.Page;
+import org.springframework.data.domain.PageRequest;
+import org.springframework.jdbc.core.JdbcTemplate;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.test.annotation.DirtiesContext;
+import org.springframework.test.context.ContextConfiguration;
+import org.springframework.test.context.junit4.SpringRunner;
+import org.springframework.test.context.web.WebAppConfiguration;
+import org.springframework.test.jdbc.JdbcTestUtils;
+import org.springframework.web.context.support.AnnotationConfigWebApplicationContext;
+
+import javax.servlet.ServletContext;
+import java.util.Date;
+import java.util.List;
+
+import static org.springframework.util.Assert.isTrue;
+
+@RunWith(SpringRunner.class)
+@WebAppConfiguration
+@ContextConfiguration
+@DirtiesContext
+public class SpringDataWithSecurityIntegrationTest {
+    AnnotationConfigWebApplicationContext ctx = new AnnotationConfigWebApplicationContext();
+    @Autowired
+    private ServletContext servletContext;
+    private static UserRepository userRepository;
+    private static TweetRepository tweetRepository;
+
+    @Before
+    public void testInit() {
+        ctx.register(AppConfig.class);
+        ctx.setServletContext(servletContext);
+        ctx.refresh();
+        userRepository = ctx.getBean(UserRepository.class);
+        tweetRepository = ctx.getBean(TweetRepository.class);
+        List<AppUser> appUsers = (List<AppUser>) userRepository.saveAll(DummyContentUtil.generateDummyUsers());
+        tweetRepository.saveAll(DummyContentUtil.generateDummyTweets(appUsers));
+    }
+
+    /**
+     * This is to ensure the tables are dropped in proper order.
+     * After the Spring Boot 2.2.2 upgrade, DDL statements generated automatically try to drop Tweet table first.
+     * As a result we get org.h2.jdbc.JdbcSQLSyntaxErrorException because Tweet_Likes table depends on Tweet.
+     *
+     * @see <a href="https://stackoverflow.com/questions/59364212/integrationtest-isolation-fails-in-springboot-2-2-2-release-error-dopping-table">
+     * StackOverflow#59364212
+     * </a>
+     * @see <a href="https://stackoverflow.com/questions/59561551/hibernate-h2-specify-drop-table-order">
+     * StackOverflow#59561551
+     * </a>
+     */
+    @After
+    public void tearDown() {
+        JdbcTemplate jdbcTemplate = ctx.getBean(JdbcTemplate.class);
+        JdbcTestUtils.dropTables(jdbcTemplate, "Tweet_Likes", "Tweet");
+    }
+
+    @Test
+    public void givenAppUser_whenLoginSuccessful_shouldUpdateLastLogin() {
+        AppUser appUser = userRepository.findByUsername("lionel@messi.com");
+        Authentication auth = new UsernamePasswordAuthenticationToken(new AppUserPrincipal(appUser), null, DummyContentUtil.getAuthorities());
+        SecurityContextHolder.getContext()
+            .setAuthentication(auth);
+        userRepository.updateLastLogin(new Date());
+    }
+
+    @Test(expected = InvalidDataAccessApiUsageException.class)
+    public void givenNoAppUserInSecurityContext_whenUpdateLastLoginAttempted_shouldFail() {
+        userRepository.updateLastLogin(new Date());
+    }
+
+    @Test
+    public void givenAppUser_whenLoginSuccessful_shouldReadMyPagedTweets() {
+        AppUser appUser = userRepository.findByUsername("lionel@messi.com");
+        Authentication auth = new UsernamePasswordAuthenticationToken(new AppUserPrincipal(appUser), null, DummyContentUtil.getAuthorities());
+        SecurityContextHolder.getContext()
+            .setAuthentication(auth);
+        Page<Tweet> page = null;
+        do {
+            page = tweetRepository.getMyTweetsAndTheOnesILiked(PageRequest.of(page != null ? page.getNumber() + 1 : 0, 5));
+            for (Tweet twt : page.getContent()) {
+                isTrue((twt.getOwner() == appUser.getUsername()) || (twt.getLikes()
+                    .contains(appUser.getUsername())), "I do not have any Tweets");
+            }
+        } while (page.hasNext());
+    }
+
+    @Test(expected = InvalidDataAccessApiUsageException.class)
+    public void givenNoAppUser_whenPaginatedResultsRetrievalAttempted_shouldFail() {
+        Page<Tweet> page = null;
+        do {
+            page = tweetRepository.getMyTweetsAndTheOnesILiked(PageRequest.of(page != null ? page.getNumber() + 1 : 0, 5));
+        } while (page != null && page.hasNext());
+    }
+}