[jboss-cvs] JBossAS SVN: r62889 - in projects/security/security-jboss-sx/trunk/src/tests/org/jboss/test: authorization and 1 other directories.
jboss-cvs-commits at lists.jboss.org
jboss-cvs-commits at lists.jboss.org
Tue May 8 17:02:27 EDT 2007
Author: anil.saldhana at jboss.com
Date: 2007-05-08 17:02:27 -0400 (Tue, 08 May 2007)
New Revision: 62889
Added:
projects/security/security-jboss-sx/trunk/src/tests/org/jboss/test/authorization/
projects/security/security-jboss-sx/trunk/src/tests/org/jboss/test/authorization/xacml/
projects/security/security-jboss-sx/trunk/src/tests/org/jboss/test/authorization/xacml/EJBXACMLUnitTestCase.java
projects/security/security-jboss-sx/trunk/src/tests/org/jboss/test/authorization/xacml/TestHttpServletRequest.java
projects/security/security-jboss-sx/trunk/src/tests/org/jboss/test/authorization/xacml/WebXACMLUnitTestCase.java
Log:
xacml tests
Added: projects/security/security-jboss-sx/trunk/src/tests/org/jboss/test/authorization/xacml/EJBXACMLUnitTestCase.java
===================================================================
--- projects/security/security-jboss-sx/trunk/src/tests/org/jboss/test/authorization/xacml/EJBXACMLUnitTestCase.java (rev 0)
+++ projects/security/security-jboss-sx/trunk/src/tests/org/jboss/test/authorization/xacml/EJBXACMLUnitTestCase.java 2007-05-08 21:02:27 UTC (rev 62889)
@@ -0,0 +1,139 @@
+/*
+ * JBoss, Home of Professional Open Source
+ * Copyright 2007, JBoss Inc., and individual contributors as indicated
+ * by the @authors tag. See the copyright.txt in the distribution for a
+ * full listing of individual contributors.
+ *
+ * This is free software; you can redistribute it and/or modify it
+ * under the terms of the GNU Lesser General Public License as
+ * published by the Free Software Foundation; either version 2.1 of
+ * the License, or (at your option) any later version.
+ *
+ * This software is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public
+ * License along with this software; if not, write to the Free
+ * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+ * 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+ */
+package org.jboss.test.authorization.xacml;
+
+import java.io.InputStream;
+import java.security.Principal;
+import java.security.acl.Group;
+import java.util.HashMap;
+
+import javax.security.auth.Subject;
+import javax.security.jacc.PolicyContext;
+
+import junit.framework.TestCase;
+
+import org.jboss.security.AuthorizationManager;
+import org.jboss.security.SecurityConstants;
+import org.jboss.security.SecurityContext;
+import org.jboss.security.SimpleGroup;
+import org.jboss.security.SimplePrincipal;
+import org.jboss.security.authorization.AuthorizationContext;
+import org.jboss.security.authorization.Resource;
+import org.jboss.security.authorization.ResourceKeys;
+import org.jboss.security.authorization.modules.ejb.EJBXACMLPolicyModuleDelegate;
+import org.jboss.security.authorization.resources.EJBResource;
+import org.jboss.security.config.ApplicationPolicy;
+import org.jboss.security.config.SecurityConfiguration;
+import org.jboss.security.jacc.SubjectPolicyContextHandler;
+import org.jboss.security.plugins.JBossAuthorizationManager;
+import org.jboss.security.plugins.SecurityContextAssociation;
+import org.jboss.security.plugins.SecurityContextFactory;
+
+//$Id$
+
+/**
+ * XACML integration tests for the EJB Layer
+ * @author Anil.Saldhana at redhat.com
+ * @since May 8, 2007
+ * @version $Revision$
+ */
+public class EJBXACMLUnitTestCase extends TestCase
+{
+ private Principal p = new SimplePrincipal("scott");
+ private String contextID = "web.jar";
+
+ protected void setUp() throws Exception
+ {
+ super.setUp();
+ setSecurityContext();
+ setUpPolicyContext();
+ setSecurityConfiguration();
+ }
+
+ public void testEJBPolicyContextHandler() throws Exception
+ {
+ EJBXACMLPolicyModuleDelegate pc = new EJBXACMLPolicyModuleDelegate();
+ Resource er = getEJBResource();
+ assertEquals(AuthorizationContext.PERMIT, pc.authorize(er));
+ //Now change the ejb principal
+ er.getMap().put(ResourceKeys.EJB_PRINCIPAL, new SimplePrincipal("baduser"));
+ assertEquals(AuthorizationContext.DENY, pc.authorize(er));
+ }
+
+ private Resource getEJBResource()
+ {
+ HashMap map = new HashMap();
+ map.put(ResourceKeys.EJB_NAME, "StatelessSession");
+ map.put(ResourceKeys.EJB_METHOD, StatelessSession.class.getMethods()[0]);
+ map.put(ResourceKeys.SECURITY_CONTEXT_ROLES, getRoleGroup());
+ map.put(ResourceKeys.AUTHORIZATION_MANAGER, this.getAuthorizationManager());
+ map.put(ResourceKeys.EJB_PRINCIPAL, p);
+
+ return new EJBResource(map);
+ }
+
+ private AuthorizationManager getAuthorizationManager()
+ {
+ String xacmlPolicyFile = "authorization/xacml/jboss-xacml-ejb-policy.xml";
+ JBossAuthorizationManager jam = new JBossAuthorizationManager("other");
+ ClassLoader cl = Thread.currentThread().getContextClassLoader();
+ InputStream is = cl.getResourceAsStream(xacmlPolicyFile);
+ if(is == null)
+ throw new RuntimeException("Input stream is null");
+ jam.registerPolicy(contextID, is);
+ return jam;
+ }
+
+ private Group getRoleGroup()
+ {
+ Group gp = new SimpleGroup(SecurityConstants.ROLES_IDENTIFIER);
+ gp.addMember(new SimplePrincipal("ProjectUser"));
+ return gp;
+ }
+
+ private void setSecurityContext()
+ {
+ Subject subj = new Subject();
+ subj.getPrincipals().add(p);
+ SecurityContext sc = SecurityContextFactory.createSecurityContext("other");
+ sc.getUtil().createSubjectInfo(p, "cred", subj);
+ sc.getUtil().setRoles(getRoleGroup());
+ SecurityContextAssociation.setSecurityContext(sc);
+ }
+
+ private void setUpPolicyContext() throws Exception
+ {
+ PolicyContext.setContextID(contextID);
+ PolicyContext.registerHandler(SecurityConstants.SUBJECT_CONTEXT_KEY,
+ new SubjectPolicyContextHandler(), true);
+ }
+
+ private void setSecurityConfiguration() throws Exception
+ {
+ SecurityConfiguration.addApplicationPolicy("other", new ApplicationPolicy("other"));
+ }
+
+ public class StatelessSession
+ {
+ public void echo(){}
+ }
+}
Added: projects/security/security-jboss-sx/trunk/src/tests/org/jboss/test/authorization/xacml/TestHttpServletRequest.java
===================================================================
--- projects/security/security-jboss-sx/trunk/src/tests/org/jboss/test/authorization/xacml/TestHttpServletRequest.java (rev 0)
+++ projects/security/security-jboss-sx/trunk/src/tests/org/jboss/test/authorization/xacml/TestHttpServletRequest.java 2007-05-08 21:02:27 UTC (rev 62889)
@@ -0,0 +1,327 @@
+/*
+ * JBoss, Home of Professional Open Source
+ * Copyright 2007, JBoss Inc., and individual contributors as indicated
+ * by the @authors tag. See the copyright.txt in the distribution for a
+ * full listing of individual contributors.
+ *
+ * This is free software; you can redistribute it and/or modify it
+ * under the terms of the GNU Lesser General Public License as
+ * published by the Free Software Foundation; either version 2.1 of
+ * the License, or (at your option) any later version.
+ *
+ * This software is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public
+ * License along with this software; if not, write to the Free
+ * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+ * 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+ */
+package org.jboss.test.authorization.xacml;
+
+import java.io.BufferedReader;
+import java.io.IOException;
+import java.io.UnsupportedEncodingException;
+import java.security.Principal;
+import java.util.Enumeration;
+import java.util.Locale;
+import java.util.Map;
+import java.util.Vector;
+
+import javax.servlet.RequestDispatcher;
+import javax.servlet.ServletInputStream;
+import javax.servlet.http.Cookie;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpSession;
+
+//$Id$
+
+/**
+ * Test Http Servlet Request
+ * @author Anil.Saldhana at redhat.com
+ * @since May 8, 2007
+ * @version $Revision$
+ */
+public class TestHttpServletRequest implements HttpServletRequest
+{
+ private Principal p = null;
+ private String uri;
+ private String meth;
+
+ public TestHttpServletRequest(Principal p, String uri, String meth)
+ {
+ this.p = p;
+ this.uri = uri;
+ this.meth = meth;
+ }
+
+ public String getAuthType()
+ {
+ return null;
+ }
+
+ public String getContextPath()
+ {
+ return null;
+ }
+
+ public Cookie[] getCookies()
+ {
+ return null;
+ }
+
+ public long getDateHeader(String arg0)
+ {
+ return 0;
+ }
+
+ public String getHeader(String arg0)
+ {
+ return null;
+ }
+
+ public Enumeration getHeaderNames()
+ {
+ return null;
+ }
+
+ public Enumeration getHeaders(String arg0)
+ {
+ return null;
+ }
+
+ public int getIntHeader(String arg0)
+ {
+ return 0;
+ }
+
+ public String getMethod()
+ {
+ return meth;
+ }
+
+ public String getPathInfo()
+ {
+ return null;
+ }
+
+ public String getPathTranslated()
+ {
+ return null;
+ }
+
+ public String getQueryString()
+ {
+ return null;
+ }
+
+ public String getRemoteUser()
+ {
+ return null;
+ }
+
+ public String getRequestURI()
+ {
+ return uri;
+ }
+
+ public StringBuffer getRequestURL()
+ {
+ return null;
+ }
+
+ public String getRequestedSessionId()
+ {
+ return null;
+ }
+
+ public String getServletPath()
+ {
+ return null;
+ }
+
+ public HttpSession getSession()
+ {
+ return null;
+ }
+
+ public HttpSession getSession(boolean arg0)
+ {
+ return null;
+ }
+
+ public Principal getUserPrincipal()
+ {
+ return p;
+ }
+
+ public boolean isRequestedSessionIdFromCookie()
+ {
+ return false;
+ }
+
+ public boolean isRequestedSessionIdFromURL()
+ {
+ return false;
+ }
+
+ public boolean isRequestedSessionIdFromUrl()
+ {
+ return false;
+ }
+
+ public boolean isRequestedSessionIdValid()
+ {
+ return false;
+ }
+
+ public boolean isUserInRole(String arg0)
+ {
+ return false;
+ }
+
+ public Object getAttribute(String arg0)
+ {
+ return null;
+ }
+
+ public Enumeration getAttributeNames()
+ {
+ return null;
+ }
+
+ public String getCharacterEncoding()
+ {
+ return null;
+ }
+
+ public int getContentLength()
+ {
+ return 0;
+ }
+
+ public String getContentType()
+ {
+ return null;
+ }
+
+ public ServletInputStream getInputStream() throws IOException
+ {
+ return null;
+ }
+
+ public String getLocalAddr()
+ {
+ return null;
+ }
+
+ public String getLocalName()
+ {
+ return null;
+ }
+
+ public int getLocalPort()
+ {
+ return 0;
+ }
+
+ public Locale getLocale()
+ {
+ return null;
+ }
+
+ public Enumeration getLocales()
+ {
+ return null;
+ }
+
+ public String getParameter(String arg0)
+ {
+ return null;
+ }
+
+ public Map getParameterMap()
+ {
+ return null;
+ }
+
+ public Enumeration getParameterNames()
+ {
+ Vector v = new Vector();
+ return v.elements();
+ }
+
+ public String[] getParameterValues(String arg0)
+ {
+ return null;
+ }
+
+ public String getProtocol()
+ {
+ return null;
+ }
+
+ public BufferedReader getReader() throws IOException
+ {
+ return null;
+ }
+
+ public String getRealPath(String arg0)
+ {
+ return null;
+ }
+
+ public String getRemoteAddr()
+ {
+ return null;
+ }
+
+ public String getRemoteHost()
+ {
+ return null;
+ }
+
+ public int getRemotePort()
+ {
+ return 0;
+ }
+
+ public RequestDispatcher getRequestDispatcher(String arg0)
+ {
+ return null;
+ }
+
+ public String getScheme()
+ {
+ return null;
+ }
+
+ public String getServerName()
+ {
+ return null;
+ }
+
+ public int getServerPort()
+ {
+ return 0;
+ }
+
+ public boolean isSecure()
+ {
+ return false;
+ }
+
+ public void removeAttribute(String arg0)
+ {
+ }
+
+ public void setAttribute(String arg0, Object arg1)
+ {
+ }
+
+ public void setCharacterEncoding(String arg0) throws UnsupportedEncodingException
+ {
+ }
+}
Added: projects/security/security-jboss-sx/trunk/src/tests/org/jboss/test/authorization/xacml/WebXACMLUnitTestCase.java
===================================================================
--- projects/security/security-jboss-sx/trunk/src/tests/org/jboss/test/authorization/xacml/WebXACMLUnitTestCase.java (rev 0)
+++ projects/security/security-jboss-sx/trunk/src/tests/org/jboss/test/authorization/xacml/WebXACMLUnitTestCase.java 2007-05-08 21:02:27 UTC (rev 62889)
@@ -0,0 +1,133 @@
+/*
+ * JBoss, Home of Professional Open Source
+ * Copyright 2007, JBoss Inc., and individual contributors as indicated
+ * by the @authors tag. See the copyright.txt in the distribution for a
+ * full listing of individual contributors.
+ *
+ * This is free software; you can redistribute it and/or modify it
+ * under the terms of the GNU Lesser General Public License as
+ * published by the Free Software Foundation; either version 2.1 of
+ * the License, or (at your option) any later version.
+ *
+ * This software is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+ * Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public
+ * License along with this software; if not, write to the Free
+ * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+ * 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+ */
+package org.jboss.test.authorization.xacml;
+
+import java.io.InputStream;
+import java.security.Principal;
+import java.security.acl.Group;
+import java.util.HashMap;
+
+import javax.security.auth.Subject;
+import javax.security.jacc.PolicyContext;
+
+import junit.framework.TestCase;
+
+import org.jboss.security.AuthorizationManager;
+import org.jboss.security.SecurityConstants;
+import org.jboss.security.SecurityContext;
+import org.jboss.security.SimpleGroup;
+import org.jboss.security.SimplePrincipal;
+import org.jboss.security.authorization.AuthorizationContext;
+import org.jboss.security.authorization.Resource;
+import org.jboss.security.authorization.ResourceKeys;
+import org.jboss.security.authorization.modules.web.WebXACMLPolicyModuleDelegate;
+import org.jboss.security.authorization.resources.WebResource;
+import org.jboss.security.config.ApplicationPolicy;
+import org.jboss.security.config.SecurityConfiguration;
+import org.jboss.security.jacc.SubjectPolicyContextHandler;
+import org.jboss.security.plugins.JBossAuthorizationManager;
+import org.jboss.security.plugins.SecurityContextAssociation;
+import org.jboss.security.plugins.SecurityContextFactory;
+
+//$Id$
+
+/**
+ * XACML integration tests for the EJB Layer
+ * @author Anil.Saldhana at redhat.com
+ * @since May 8, 2007
+ * @version $Revision$
+ */
+public class WebXACMLUnitTestCase extends TestCase
+{
+ private Principal p = new SimplePrincipal("jduke");
+ private String contextID = "web.jar";
+ private String uri = "/xacml-subjectrole/test";
+
+ protected void setUp() throws Exception
+ {
+ super.setUp();
+ setSecurityContext();
+ setUpPolicyContext();
+ setSecurityConfiguration();
+ }
+
+ public void testWebPolicyContextHandler() throws Exception
+ {
+ WebXACMLPolicyModuleDelegate pc = new WebXACMLPolicyModuleDelegate();
+ Resource er = getResource();
+ assertEquals(AuthorizationContext.PERMIT, pc.authorize(er));
+ //Now change the ejb principal
+ er.getMap().put(ResourceKeys.WEB_REQUEST,
+ new TestHttpServletRequest(new SimplePrincipal("Notjduke"), uri, "GET"));
+ assertEquals(AuthorizationContext.DENY, pc.authorize(er));
+ }
+
+ private Resource getResource()
+ {
+ HashMap map = new HashMap();
+ map.put(ResourceKeys.WEB_REQUEST, new TestHttpServletRequest(p, uri, "GET"));
+ map.put(ResourceKeys.AUTHORIZATION_MANAGER, this.getAuthorizationManager());
+
+ return new WebResource(map);
+ }
+
+ private AuthorizationManager getAuthorizationManager()
+ {
+ String xacmlPolicyFile = "authorization/xacml/jboss-xacml-web-policy.xml";
+ JBossAuthorizationManager jam = new JBossAuthorizationManager("other");
+ ClassLoader cl = Thread.currentThread().getContextClassLoader();
+ InputStream is = cl.getResourceAsStream(xacmlPolicyFile);
+ if(is == null)
+ throw new RuntimeException("Input stream is null");
+ jam.registerPolicy(contextID, is);
+ return jam;
+ }
+
+ private Group getRoleGroup()
+ {
+ Group gp = new SimpleGroup(SecurityConstants.ROLES_IDENTIFIER);
+ gp.addMember(new SimplePrincipal("ServletUserRole"));
+ return gp;
+ }
+
+ private void setSecurityContext()
+ {
+ Subject subj = new Subject();
+ subj.getPrincipals().add(p);
+ SecurityContext sc = SecurityContextFactory.createSecurityContext("other");
+ sc.getUtil().createSubjectInfo(p, "cred", subj);
+ sc.getUtil().setRoles(getRoleGroup());
+ SecurityContextAssociation.setSecurityContext(sc);
+ }
+
+ private void setUpPolicyContext() throws Exception
+ {
+ PolicyContext.setContextID(contextID);
+ PolicyContext.registerHandler(SecurityConstants.SUBJECT_CONTEXT_KEY,
+ new SubjectPolicyContextHandler(), true);
+ }
+
+ private void setSecurityConfiguration() throws Exception
+ {
+ SecurityConfiguration.addApplicationPolicy("other", new ApplicationPolicy("other"));
+ }
+}
More information about the jboss-cvs-commits
mailing list