Archives/Athou_commafeed
1
0
Fork 1
mirror of https://github.com/Athou/commafeed.git synced 2026-03-21 21:37:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

SecurityCheckProvider now depends on SessionHelper instead of the request

Browse Source
This commit is contained in:
Athou
2014-10-22 10:52:01 +02:00
parent c48e248283
commit effc65b777
3 changed files with 82 additions and 81 deletions
Download Patch File Download Diff File Expand all files Collapse all files

79
src/test/java/com/commafeed/frontend/auth/SecurityCheckInjectableTest.java
View File

@@ -4,101 +4,32 @@ import static org.mockito.Mockito.mock;
import static org.mockito.Mockito.verify;
import static org.mockito.Mockito.when;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;
import org.junit.Assert;
import org.junit.Test;
import com.commafeed.backend.model.User;
import com.commafeed.backend.service.UserService;
import com.commafeed.backend.service.internal.PostLoginActivities;
import com.commafeed.frontend.auth.SecurityCheckProvider.SecurityCheckInjectable;
import com.commafeed.frontend.session.SessionHelper;
import com.google.common.base.Optional;
public class SecurityCheckInjectableTest {
private static String SESSION_KEY_USER = "user";
@Test
public void cookie_login_does_not_create_a_session_if_not_present() {
HttpServletRequest request = mock(HttpServletRequest.class);
UserService service = mock(UserService.class);
SecurityCheckInjectable injectable = new SecurityCheckInjectable(request, service, null, false);
injectable.cookieSessionLogin();
verify(request).getSession(false);
}
@Test
public void cookie_login_should_not_return_user_if_there_is_no_preexisting_http_session() {
HttpServletRequest request = mock(HttpServletRequest.class);
when(request.getSession(false)).thenReturn(null);
UserService service = new UserService(null, null, null, null, null, null);
SecurityCheckInjectable injectable = new SecurityCheckInjectable(request, service, null, false);
Optional<User> user = injectable.cookieSessionLogin();
Assert.assertFalse(user.isPresent());
}
@Test
public void cookie_login_should_not_return_user_if_user_not_present_in_http_session() {
HttpSession session = mock(HttpSession.class);
when(session.getAttribute(SESSION_KEY_USER)).thenReturn(null);
HttpServletRequest request = mock(HttpServletRequest.class);
when(request.getSession(false)).thenReturn(session);
UserService service = new UserService(null, null, null, null, null, null);
SecurityCheckInjectable injectable = new SecurityCheckInjectable(request, service, null, false);
Optional<User> user = injectable.cookieSessionLogin();
Assert.assertFalse(user.isPresent());
}
@Test
public void cookie_login_should_perform_post_login_activities_if_user_present_in_http_session() {
public void cookie_login_should_perform_post_login_activities_if_user_is_logged_in() {
User userInSession = new User();
HttpSession session = mock(HttpSession.class);
when(session.getAttribute(SESSION_KEY_USER)).thenReturn(userInSession);
HttpServletRequest request = mock(HttpServletRequest.class);
when(request.getSession(false)).thenReturn(session);
SessionHelper sessionHelper = mock(SessionHelper.class);
when(sessionHelper.getLoggedInUser()).thenReturn(Optional.of(userInSession));
PostLoginActivities postLoginActivities = mock(PostLoginActivities.class);
UserService service = new UserService(null, null, null, null, null, postLoginActivities);
SecurityCheckInjectable injectable = new SecurityCheckInjectable(request, service, null, false);
SecurityCheckInjectable injectable = new SecurityCheckInjectable(sessionHelper, service, null, false);
injectable.cookieSessionLogin();
verify(postLoginActivities).executeFor(userInSession);
}
@Test
public void cookie_login_should_return_user_if_user_present_in_http_session() {
User userInSession = new User();
HttpSession session = mock(HttpSession.class);
when(session.getAttribute(SESSION_KEY_USER)).thenReturn(userInSession);
HttpServletRequest request = mock(HttpServletRequest.class);
when(request.getSession(false)).thenReturn(session);
PostLoginActivities postLoginActivities = mock(PostLoginActivities.class);
UserService service = new UserService(null, null, null, null, null, postLoginActivities);
SecurityCheckInjectable injectable = new SecurityCheckInjectable(request, service, null, false);
Optional<User> user = injectable.cookieSessionLogin();
Assert.assertTrue(user.isPresent());
Assert.assertEquals(userInSession, user.get());
}
}

72
src/test/java/com/commafeed/frontend/session/SessionHelperTest.java Normal file
View File

@@ -0,0 +1,72 @@
package com.commafeed.frontend.session;
import static org.mockito.Mockito.mock;
import static org.mockito.Mockito.verify;
import static org.mockito.Mockito.when;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;
import org.junit.Assert;
import org.junit.Test;
import com.commafeed.backend.model.User;
import com.google.common.base.Optional;
public class SessionHelperTest {
private static String SESSION_KEY_USER = "user";
@Test
public void getting_user_does_not_create_a_session_if_not_present() {
HttpServletRequest request = mock(HttpServletRequest.class);
SessionHelper sessionHelper = new SessionHelper(request);
sessionHelper.getLoggedInUser();
verify(request).getSession(false);
}
@Test
public void getting_user_should_not_return_user_if_there_is_no_preexisting_http_session() {
HttpServletRequest request = mock(HttpServletRequest.class);
when(request.getSession(false)).thenReturn(null);
SessionHelper sessionHelper = new SessionHelper(request);
Optional<User> user = sessionHelper.getLoggedInUser();
Assert.assertFalse(user.isPresent());
}
@Test
public void getting_user_should_not_return_user_if_user_not_present_in_http_session() {
HttpSession session = mock(HttpSession.class);
when(session.getAttribute(SESSION_KEY_USER)).thenReturn(null);
HttpServletRequest request = mock(HttpServletRequest.class);
when(request.getSession(false)).thenReturn(session);
SessionHelper sessionHelper = new SessionHelper(request);
Optional<User> user = sessionHelper.getLoggedInUser();
Assert.assertFalse(user.isPresent());
}
@Test
public void getting_user_should_return_user_if_user_present_in_http_session() {
User userInSession = new User();
HttpSession session = mock(HttpSession.class);
when(session.getAttribute(SESSION_KEY_USER)).thenReturn(userInSession);
HttpServletRequest request = mock(HttpServletRequest.class);
when(request.getSession(false)).thenReturn(session);
SessionHelper sessionHelper = new SessionHelper(request);
Optional<User> user = sessionHelper.getLoggedInUser();
Assert.assertTrue(user.isPresent());
Assert.assertEquals(userInSession, user.get());
}
}