[jboss-cvs] jbosstest/src/main/org/jboss/test/security/test ...

[Chris Griffith]

  User: j2ee_junkie
  Date: 06/07/21 14:13:48

  Added:       src/main/org/jboss/test/security/test 
                        SecurityDomainLoginModuleOptionUnitTestCase.java
  Log:
  JBAS-1477: Pass in the security-domain name to the login modules for error reporting
  
  Revision  Changes    Path
  1.1      date: 2006/07/21 18:13:48;  author: j2ee_junkie;  state: Exp;jbosstest/src/main/org/jboss/test/security/test/SecurityDomainLoginModuleOptionUnitTestCase.java
  
  Index: SecurityDomainLoginModuleOptionUnitTestCase.java
  ===================================================================
  /*
    * JBoss, Home of Professional Open Source
    * Copyright 2005, JBoss Inc., and individual contributors as indicated
    * by the @authors tag. See the copyright.txt in the distribution for a
    * full listing of individual contributors.
    *
    * This is free software; you can redistribute it and/or modify it
    * under the terms of the GNU Lesser General Public License as
    * published by the Free Software Foundation; either version 2.1 of
    * the License, or (at your option) any later version.
    *
    * This software is distributed in the hope that it will be useful,
    * but WITHOUT ANY WARRANTY; without even the implied warranty of
    * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
    * Lesser General Public License for more details.
    *
    * You should have received a copy of the GNU Lesser General Public
    * License along with this software; if not, write to the Free
    * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
    * 02110-1301 USA, or see the FSF site: http://www.fsf.org.
    */
  package org.jboss.test.security.test;
  
  import java.util.Map;
  
  import javax.security.auth.login.Configuration;
  import javax.security.auth.login.AppConfigurationEntry;
  
  import org.apache.log4j.Logger;
  
  import org.jboss.logging.XLevel;
  import org.jboss.security.SecurityConstants;
  import org.jboss.security.auth.login.XMLLoginConfigImpl;
  import org.jboss.test.JBossTestCase;
  
  /**
   * For changes made on JBAS-1477, the security domain name is added to every login
   * module option map by the ApplicationInfo object.  When TRACE logging is enable,
   * a login module will then display this option value for trouble shooting.  The
   * first part of test, displays how the security domain option is properly set
   * in a security domain that exists in Configuration.  The second test shows
   * how the "other" security domain is displayed when the original domain does not
   * exist in Configuration.
   *
   * @author chris griffith
   * @version $Revision: 1.1 $
   */
  public class SecurityDomainLoginModuleOptionUnitTestCase extends JBossTestCase
  {
  
     public SecurityDomainLoginModuleOptionUnitTestCase(String name)
     {
        super(name);
     }
  
     protected void setUp() throws Exception
     {
        // Setup the replacement properties
        System.setProperty("users.properties", "/security/config/users.properites");
        System.setProperty("roles.properties", "/security/config/roles.properites");
  
        // Install the custom JAAS configuration
        XMLLoginConfigImpl config = new XMLLoginConfigImpl();
        config.setConfigResource("security/login-config.xml");
        config.loadConfig();
        Configuration.setConfiguration(config);
  
        // Turn on trace level logging
        Logger root = Logger.getRootLogger();
        root.setLevel(XLevel.TRACE);
     }
  
     public void testSecurityDomainLoginModuleOption() throws Exception
     {
        Configuration config = Configuration.getConfiguration();
        String validSecurityDomain = "testUsersRoles";
        String invalidSecurityDomain = "doesNotExist"; 
  
        getLog().info("testSecurityDomainLoginModuleOption");
  
        //get the app configuration for a valid security domain...
        AppConfigurationEntry[] entries = config.getAppConfigurationEntry(validSecurityDomain);
        assertTrue("Entries not null",entries != null);
  
        //for each login module configured in domain, check that the option is set as expected.
        for (int i=0;i<entries.length;i++)
        {
  	 String loginModuleClass = entries[i].getLoginModuleName();
           String flag = entries[i].getControlFlag().toString();
  	 Map options = entries[i].getOptions();
  
  	 getLog().info(loginModuleClass + " is " + flag + "\nWith options...\n" + options);
  	 
  	 String option = (String)options.get(SecurityConstants.SECURITY_DOMAIN_OPTION);
  	 assertTrue("Security domain option has value \"" + option + 
  		    "\", it should be \"" + validSecurityDomain + "\"",
  		    option.equals(validSecurityDomain));
        }
  
        //now get the app configuration for a domain that does not exist.
        entries = config.getAppConfigurationEntry(invalidSecurityDomain);
        assertTrue("Entries not null", entries != null);
  
        //for each login module config'ed in domain, check that the option is set as "other"
        for (int i=0;i<entries.length;i++)
        {
  	 String loginModuleClass = entries[i].getLoginModuleName();
           String flag = entries[i].getControlFlag().toString();
  	 Map options = entries[i].getOptions();
  
  	 getLog().info(loginModuleClass + " is " + flag + "\nWith options...\n" + options);
  	 
  	 String option = (String)options.get(SecurityConstants.SECURITY_DOMAIN_OPTION);
  	 assertTrue("Security domain option has value \"" + option + 
  		    "\", it should be \"" + SecurityConstants.DEFAULT_APPLICATION_POLICY + "\"",
  		    option.equals(SecurityConstants.DEFAULT_APPLICATION_POLICY));
        }
     }
  }