/* (c) 2014 Open Source Geospatial Foundation - all rights reserved
* (c) 2001 - 2013 OpenPlans
* This code is licensed under the GPL 2.0 license, available at the root
* application directory.
*/
package org.geoserver.security.impl;
import static org.junit.Assert.*;
import junit.framework.Assert;
import org.geoserver.data.test.SystemTestData;
import org.geoserver.security.AbstractSecurityServiceTest;
import org.geoserver.security.GeoServerUserGroupService;
import org.geoserver.security.GeoServerUserGroupStore;
import org.geoserver.security.config.SecurityUserGroupServiceConfig;
import org.junit.Before;
import org.junit.Test;
public abstract class AbstractUserGroupServiceTest extends AbstractSecurityServiceTest {
protected GeoServerUserGroupService service;
protected GeoServerUserGroupStore store;
@Override
protected void onSetUp(SystemTestData testData) throws Exception {
super.onSetUp(testData);
service = createUserGroupService("test");
//store = createStore(service);
}
@Before
public void setServiceAndStore() throws Exception {
service = getSecurityManager().loadUserGroupService("test");
store = createStore(service);
}
abstract protected SecurityUserGroupServiceConfig createConfigObject( String name );
@Test
public void testInsert() {
try {
// all is empty
checkEmpty(service);
checkEmpty(store);
// transaction has values ?
insertValues(store);
if (!isJDBCTest())
checkEmpty(service);
checkValuesInserted(store);
// rollback
store.load();
checkEmpty(store);
checkEmpty(service);
// commit
insertValues(store);
store.store();
checkValuesInserted(store);
checkValuesInserted(service);
} catch ( Exception ex) {
Assert.fail(ex.getMessage());
}
}
@Test
public void testModify() {
try {
// all is empty
checkEmpty(service);
checkEmpty(store);
insertValues(store);
store.store();
checkValuesInserted(store);
checkValuesInserted(service);
modifyValues(store);
if (!isJDBCTest())
checkValuesInserted(service);
checkValuesModified(store);
store.load();
checkValuesInserted(store);
checkValuesInserted(service);
modifyValues(store);
store.store();
checkValuesModified(store);
checkValuesModified(service);
} catch ( Exception ex) {
Assert.fail(ex.getMessage());
}
}
@Test
public void testRemove() {
try {
// all is empty
checkEmpty(service);
checkEmpty(store);
insertValues(store);
store.store();
checkValuesInserted(store);
checkValuesInserted(service);
removeValues(store);
if (!isJDBCTest())
checkValuesInserted(service);
checkValuesRemoved(store);
store.load();
checkValuesInserted(store);
checkValuesInserted(service);
removeValues(store);
store.store();
checkValuesRemoved(store);
checkValuesRemoved(service);
} catch ( Exception ex) {
Assert.fail(ex.getMessage());
}
}
@Test
public void testIsModified() {
try {
assertFalse(store.isModified());
insertValues(store);
assertTrue(store.isModified());
store.load();
assertFalse(store.isModified());
insertValues(store);
store.store();
assertFalse(store.isModified());
GeoServerUser user =
store.createUserObject("uuuu", "",true);
GeoServerUserGroup group =
store.createGroupObject("gggg", true);
assertFalse(store.isModified());
// add,remove,update
store.addUser(user);
assertTrue(store.isModified());
store.store();
assertFalse(store.isModified());
store.addGroup(group);
assertTrue(store.isModified());
store.store();
assertFalse(store.isModified());
store.updateUser(user);
assertTrue(store.isModified());
store.load();
assertFalse(store.isModified());
store.updateGroup(group);
assertTrue(store.isModified());
store.load();
assertFalse(store.isModified());
store.removeUser(user);
assertTrue(store.isModified());
store.load();
assertFalse(store.isModified());
store.removeGroup(group);
assertTrue(store.isModified());
store.load();
assertFalse(store.isModified());
store.associateUserToGroup(user, group);
assertTrue(store.isModified());
store.store();
assertFalse(store.isModified());
store.disAssociateUserFromGroup(user, group);
assertTrue(store.isModified());
store.load();
assertFalse(store.isModified());
store.clear();
assertTrue(store.isModified());
store.load();
} catch ( Exception ex) {
Assert.fail(ex.getMessage());
}
}
@Test
public void testEmptyPassword() throws Exception {
// all is empty
checkEmpty(service);
checkEmpty(store);
GeoServerUser user = store.createUserObject("userNoPasswd", null, true);
store.addUser(user);
store.store();
assertEquals(1, service.getUserCount());
user = service.getUserByUsername("userNoPasswd");
assertNull(user.getPassword());
user = (GeoServerUser) service.loadUserByUsername("userNoPasswd");
assertNull(user.getPassword());
}
@Test
public void testEraseCredentials() throws Exception {
GeoServerUser user = store.createUserObject("user", "foobar", true);
store.addUser(user);
store.store();
user = store.getUserByUsername("user");
assertNotNull(user.getPassword());
user.eraseCredentials();
user = store.getUserByUsername("user");
assertNotNull(user.getPassword());
}
@Test
public void testPasswordRecoding() throws Exception{
SecurityUserGroupServiceConfig config = getSecurityManager().loadUserGroupServiceConfig(service.getName());
config.setPasswordEncoderName(getPlainTextPasswordEncoder().getName());
getSecurityManager().saveUserGroupService(config);
service.initializeFromConfig(config);
store=service.createStore();
store.addUser(store.createUserObject("u1", "p1", true));
store.addUser(store.createUserObject("u2", "p2", true));
store.store();
Util.recodePasswords(service.createStore());
// no recoding
assertTrue(service.loadUserByUsername("u1").getPassword().startsWith(getPlainTextPasswordEncoder().getPrefix()));
assertTrue(service.loadUserByUsername("u2").getPassword().startsWith(getPlainTextPasswordEncoder().getPrefix()));
config.setPasswordEncoderName(getPBEPasswordEncoder().getName());
getSecurityManager().saveUserGroupService(config);
service.initializeFromConfig(config);
Util.recodePasswords(service.createStore());
// recoding
assertTrue(service.loadUserByUsername("u1").getPassword().startsWith(getPBEPasswordEncoder().getPrefix()));
assertTrue(service.loadUserByUsername("u2").getPassword().startsWith(getPBEPasswordEncoder().getPrefix()));
config.setPasswordEncoderName(getDigestPasswordEncoder().getName());
getSecurityManager().saveUserGroupService(config);
service.initializeFromConfig(config);
Util.recodePasswords(service.createStore());
// recoding
assertTrue(service.loadUserByUsername("u1").getPassword().startsWith(getDigestPasswordEncoder().getPrefix()));
assertTrue(service.loadUserByUsername("u2").getPassword().startsWith(getDigestPasswordEncoder().getPrefix()));
config.setPasswordEncoderName(getPBEPasswordEncoder().getName());
getSecurityManager().saveUserGroupService(config);
service.initializeFromConfig(config);
Util.recodePasswords(service.createStore());
// recoding has no effect
assertTrue(service.loadUserByUsername("u1").getPassword().startsWith(getDigestPasswordEncoder().getPrefix()));
assertTrue(service.loadUserByUsername("u2").getPassword().startsWith(getDigestPasswordEncoder().getPrefix()));
// add a user with pbe encoding
store = service.createStore();
store.addUser(store.createUserObject("u3", "p3", true));
store.store();
assertTrue(service.loadUserByUsername("u1").getPassword().startsWith(getDigestPasswordEncoder().getPrefix()));
assertTrue(service.loadUserByUsername("u2").getPassword().startsWith(getDigestPasswordEncoder().getPrefix()));
assertTrue(service.loadUserByUsername("u3").getPassword().startsWith(getPBEPasswordEncoder().getPrefix()));
config.setPasswordEncoderName(getEmptyEncoder().getName());
getSecurityManager().saveUserGroupService(config);
service.initializeFromConfig(config);
Util.recodePasswords(service.createStore());
// recode u3 to empty
assertTrue(service.loadUserByUsername("u1").getPassword().startsWith(getDigestPasswordEncoder().getPrefix()));
assertTrue(service.loadUserByUsername("u2").getPassword().startsWith(getDigestPasswordEncoder().getPrefix()));
assertTrue(service.loadUserByUsername("u3").getPassword().startsWith(getEmptyEncoder().getPrefix()));
config.setPasswordEncoderName(getPBEPasswordEncoder().getName());
getSecurityManager().saveUserGroupService(config);
service.initializeFromConfig(config);
Util.recodePasswords(service.createStore());
// recode has no effect
assertTrue(service.loadUserByUsername("u1").getPassword().startsWith(getDigestPasswordEncoder().getPrefix()));
assertTrue(service.loadUserByUsername("u2").getPassword().startsWith(getDigestPasswordEncoder().getPrefix()));
assertTrue(service.loadUserByUsername("u3").getPassword().startsWith(getEmptyEncoder().getPrefix()));
}
}