Joe Grandja
2 years ago
33 changed files with 583 additions and 150 deletions
@ -0,0 +1,133 @@
@@ -0,0 +1,133 @@
|
||||
/* |
||||
* Copyright 2020-2024 the original author or authors. |
||||
* |
||||
* Licensed under the Apache License, Version 2.0 (the "License"); |
||||
* you may not use this file except in compliance with the License. |
||||
* You may obtain a copy of the License at |
||||
* |
||||
* https://www.apache.org/licenses/LICENSE-2.0
|
||||
* |
||||
* Unless required by applicable law or agreed to in writing, software |
||||
* distributed under the License is distributed on an "AS IS" BASIS, |
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||
* See the License for the specific language governing permissions and |
||||
* limitations under the License. |
||||
*/ |
||||
package org.springframework.security.oauth2.server.authorization.config.annotation.web.configurers; |
||||
|
||||
import java.util.HashSet; |
||||
import java.util.Map; |
||||
import java.util.Set; |
||||
import java.util.concurrent.atomic.AtomicReference; |
||||
|
||||
import jakarta.servlet.FilterChain; |
||||
|
||||
import org.junit.jupiter.api.Test; |
||||
|
||||
import org.springframework.mock.web.MockHttpServletRequest; |
||||
import org.springframework.mock.web.MockHttpServletResponse; |
||||
import org.springframework.security.oauth2.server.authorization.context.AuthorizationServerContextHolder; |
||||
import org.springframework.security.oauth2.server.authorization.settings.AuthorizationServerSettings; |
||||
|
||||
import static org.assertj.core.api.Assertions.assertThat; |
||||
|
||||
/** |
||||
* Tests for {@link AuthorizationServerContextFilter}. |
||||
* |
||||
* @author Joe Grandja |
||||
*/ |
||||
class AuthorizationServerContextFilterTests { |
||||
private static final String SCHEME = "https"; |
||||
private static final String HOST = "example.com"; |
||||
private static final int PORT = 8443; |
||||
private static final String DEFAULT_ISSUER = SCHEME + "://" + HOST + ":" + PORT; |
||||
private AuthorizationServerContextFilter filter; |
||||
|
||||
@Test |
||||
public void doFilterWhenDefaultEndpointsThenIssuerResolved() throws Exception { |
||||
AuthorizationServerSettings authorizationServerSettings = AuthorizationServerSettings.builder().build(); |
||||
this.filter = new AuthorizationServerContextFilter(authorizationServerSettings); |
||||
|
||||
String issuerPath = "/issuer1"; |
||||
String issuerWithPath = DEFAULT_ISSUER.concat(issuerPath); |
||||
Set<String> endpointUris = getEndpointUris(authorizationServerSettings); |
||||
|
||||
for (String endpointUri : endpointUris) { |
||||
assertResolvedIssuer(issuerPath.concat(endpointUri), issuerWithPath); |
||||
} |
||||
} |
||||
|
||||
@Test |
||||
public void doFilterWhenCustomEndpointsThenIssuerResolved() throws Exception { |
||||
AuthorizationServerSettings authorizationServerSettings = AuthorizationServerSettings.builder() |
||||
.authorizationEndpoint("/oauth2/v1/authorize") |
||||
.deviceAuthorizationEndpoint("/oauth2/v1/device_authorization") |
||||
.deviceVerificationEndpoint("/oauth2/v1/device_verification") |
||||
.tokenEndpoint("/oauth2/v1/token") |
||||
.jwkSetEndpoint("/oauth2/v1/jwks") |
||||
.tokenRevocationEndpoint("/oauth2/v1/revoke") |
||||
.tokenIntrospectionEndpoint("/oauth2/v1/introspect") |
||||
.oidcClientRegistrationEndpoint("/connect/v1/register") |
||||
.oidcUserInfoEndpoint("/v1/userinfo") |
||||
.oidcLogoutEndpoint("/connect/v1/logout") |
||||
.build(); |
||||
this.filter = new AuthorizationServerContextFilter(authorizationServerSettings); |
||||
|
||||
String issuerPath = "/issuer2"; |
||||
String issuerWithPath = DEFAULT_ISSUER.concat(issuerPath); |
||||
Set<String> endpointUris = getEndpointUris(authorizationServerSettings); |
||||
|
||||
for (String endpointUri : endpointUris) { |
||||
assertResolvedIssuer(issuerPath.concat(endpointUri), issuerWithPath); |
||||
} |
||||
} |
||||
|
||||
@Test |
||||
public void doFilterWhenIssuerHasMultiplePathsThenIssuerResolved() throws Exception { |
||||
AuthorizationServerSettings authorizationServerSettings = AuthorizationServerSettings.builder().build(); |
||||
this.filter = new AuthorizationServerContextFilter(authorizationServerSettings); |
||||
|
||||
String issuerPath = "/path1/path2/issuer3"; |
||||
String issuerWithPath = DEFAULT_ISSUER.concat(issuerPath); |
||||
Set<String> endpointUris = getEndpointUris(authorizationServerSettings); |
||||
|
||||
for (String endpointUri : endpointUris) { |
||||
assertResolvedIssuer(issuerPath.concat(endpointUri), issuerWithPath); |
||||
} |
||||
} |
||||
|
||||
private void assertResolvedIssuer(String requestUri, String expectedIssuer) throws Exception { |
||||
MockHttpServletRequest request = createRequest(requestUri); |
||||
MockHttpServletResponse response = new MockHttpServletResponse(); |
||||
|
||||
AtomicReference<String> resolvedIssuer = new AtomicReference<>(); |
||||
FilterChain filterChain = (req, resp) -> |
||||
resolvedIssuer.set(AuthorizationServerContextHolder.getContext().getIssuer()); |
||||
|
||||
this.filter.doFilter(request, response, filterChain); |
||||
|
||||
assertThat(resolvedIssuer.get()).isEqualTo(expectedIssuer); |
||||
} |
||||
|
||||
private static Set<String> getEndpointUris(AuthorizationServerSettings authorizationServerSettings) { |
||||
Set<String> endpointUris = new HashSet<>(); |
||||
endpointUris.add("/.well-known/oauth-authorization-server"); |
||||
endpointUris.add("/.well-known/openid-configuration"); |
||||
for (Map.Entry<String, Object> setting : authorizationServerSettings.getSettings().entrySet()) { |
||||
if (setting.getKey().endsWith("-endpoint")) { |
||||
endpointUris.add((String) setting.getValue()); |
||||
} |
||||
} |
||||
return endpointUris; |
||||
} |
||||
|
||||
private static MockHttpServletRequest createRequest(String requestUri) { |
||||
MockHttpServletRequest request = new MockHttpServletRequest(); |
||||
request.setRequestURI(requestUri); |
||||
request.setScheme(SCHEME); |
||||
request.setServerName(HOST); |
||||
request.setServerPort(PORT); |
||||
return request; |
||||
} |
||||
|
||||
} |
||||
Loading…
Reference in new issue