Browse Source
This refers to groups that have member: <another group DN> as an attribute - Add in a utility method in the SpringSecurityLdapTemplate to retrieve multiple attributes and their values from an LDAP record - Make the DefaultLdapAuthoritiesPopulator more extensible - Add an LdapAuthority object that holds the DN in addition to other group attributes - Add a NestedLdapAuthoritiesPopulator to search statically nested groupspull/117/head
Filip Hanik
12 years ago
committed by
Rob Winch
10 changed files with 945 additions and 13 deletions
@ -0,0 +1,134 @@
@@ -0,0 +1,134 @@
|
||||
/* Copyright 2004, 2005, 2006 Acegi Technology Pty Limited |
||||
* |
||||
* Licensed under the Apache License, Version 2.0 (the "License"); |
||||
* you may not use this file except in compliance with the License. |
||||
* You may obtain a copy of the License at |
||||
* |
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
* |
||||
* Unless required by applicable law or agreed to in writing, software |
||||
* distributed under the License is distributed on an "AS IS" BASIS, |
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||
* See the License for the specific language governing permissions and |
||||
* limitations under the License. |
||||
*/ |
||||
package org.springframework.security.ldap.userdetails; |
||||
|
||||
|
||||
import org.junit.Before; |
||||
import org.junit.Test; |
||||
import org.springframework.ldap.core.DirContextAdapter; |
||||
import org.springframework.security.core.GrantedAuthority; |
||||
import org.springframework.security.ldap.AbstractLdapIntegrationTests; |
||||
|
||||
import java.util.Arrays; |
||||
import java.util.Collection; |
||||
import java.util.HashSet; |
||||
|
||||
import static org.junit.Assert.assertEquals; |
||||
import static org.junit.Assert.assertNotNull; |
||||
import static org.junit.Assert.assertNull; |
||||
import static org.junit.Assert.assertTrue; |
||||
|
||||
/** |
||||
* @author Filip Hanik |
||||
*/ |
||||
public class NestedLdapAuthoritiesPopulatorTests extends AbstractLdapIntegrationTests { |
||||
|
||||
private NestedLdapAuthoritiesPopulator populator; |
||||
private LdapAuthority javaDevelopers; |
||||
private LdapAuthority groovyDevelopers; |
||||
private LdapAuthority scalaDevelopers; |
||||
private LdapAuthority closureDevelopers; |
||||
private LdapAuthority jDevelopers; |
||||
private LdapAuthority circularJavaDevelopers; |
||||
//~ Methods ========================================================================================================
|
||||
|
||||
@Before |
||||
public void setUp() throws Exception { |
||||
populator = new NestedLdapAuthoritiesPopulator(getContextSource(), "ou=jdeveloper"); |
||||
populator.setGroupSearchFilter("(member={0})"); |
||||
populator.setIgnorePartialResultException(false); |
||||
populator.setRolePrefix(""); |
||||
populator.setSearchSubtree(true); |
||||
populator.setConvertToUpperCase(false); |
||||
jDevelopers = new LdapAuthority("j-developers","cn=j-developers,ou=jdeveloper,dc=springframework,dc=org"); |
||||
javaDevelopers = new LdapAuthority("java-developers","cn=java-developers,ou=jdeveloper,dc=springframework,dc=org"); |
||||
groovyDevelopers = new LdapAuthority("groovy-developers","cn=groovy-developers,ou=jdeveloper,dc=springframework,dc=org"); |
||||
scalaDevelopers = new LdapAuthority("scala-developers","cn=scala-developers,ou=jdeveloper,dc=springframework,dc=org"); |
||||
closureDevelopers = new LdapAuthority("closure-developers","cn=closure-developers,ou=jdeveloper,dc=springframework,dc=org"); |
||||
circularJavaDevelopers = new LdapAuthority("circular-java-developers","cn=circular-java-developers,ou=jdeveloper,dc=springframework,dc=org"); |
||||
} |
||||
|
||||
@Test |
||||
public void testScalaDudeJDevelopersAuthorities() { |
||||
DirContextAdapter ctx = new DirContextAdapter("uid=scaladude,ou=people,dc=springframework,dc=org"); |
||||
Collection<GrantedAuthority> authorities = populator.getGrantedAuthorities(ctx,"scaladude"); |
||||
assertEquals(5, authorities.size()); |
||||
assertEquals(Arrays.asList(javaDevelopers, scalaDevelopers, circularJavaDevelopers, jDevelopers, groovyDevelopers), authorities); |
||||
} |
||||
|
||||
@Test |
||||
public void testJavaDudeJDevelopersAuthorities() { |
||||
DirContextAdapter ctx = new DirContextAdapter("uid=javadude,ou=people,dc=springframework,dc=org"); |
||||
Collection<GrantedAuthority> authorities = populator.getGrantedAuthorities(ctx,"javadude"); |
||||
assertEquals(3, authorities.size()); |
||||
assertEquals(Arrays.asList(javaDevelopers, circularJavaDevelopers, jDevelopers), authorities); |
||||
} |
||||
|
||||
@Test |
||||
public void testScalaDudeJDevelopersAuthoritiesWithSearchLimit() { |
||||
populator.setMaxSearchDepth(1); |
||||
DirContextAdapter ctx = new DirContextAdapter("uid=scaladude,ou=people,dc=springframework,dc=org"); |
||||
Collection<GrantedAuthority> authorities = populator.getGrantedAuthorities(ctx,"scaladude"); |
||||
assertEquals(1, authorities.size()); |
||||
assertEquals(Arrays.asList(scalaDevelopers), authorities); |
||||
} |
||||
|
||||
@Test |
||||
public void testGroovyDudeJDevelopersAuthorities() { |
||||
DirContextAdapter ctx = new DirContextAdapter("uid=groovydude,ou=people,dc=springframework,dc=org"); |
||||
Collection<GrantedAuthority> authorities = populator.getGrantedAuthorities(ctx,"groovydude"); |
||||
assertEquals(4, authorities.size()); |
||||
assertEquals(Arrays.asList(javaDevelopers,circularJavaDevelopers,jDevelopers,groovyDevelopers), authorities); |
||||
} |
||||
|
||||
@Test |
||||
public void testClosureDudeJDevelopersWithMembershipAsAttributeValues() { |
||||
populator.setAttributeNames(new HashSet(Arrays.asList("member"))); |
||||
|
||||
DirContextAdapter ctx = new DirContextAdapter("uid=closuredude,ou=people,dc=springframework,dc=org"); |
||||
Collection<GrantedAuthority> authorities = populator.getGrantedAuthorities(ctx,"closuredude"); |
||||
assertEquals(5, authorities.size()); |
||||
assertEquals(Arrays.asList(closureDevelopers,javaDevelopers,circularJavaDevelopers,jDevelopers,groovyDevelopers), authorities); |
||||
|
||||
LdapAuthority[] ldapAuthorities = authorities.toArray(new LdapAuthority[0]); |
||||
assertEquals(5, ldapAuthorities.length); |
||||
//closure group
|
||||
assertTrue(ldapAuthorities[0].getAttributes().containsKey("member")); |
||||
assertNotNull(ldapAuthorities[0].getAttributes().get("member")); |
||||
assertEquals(1, ldapAuthorities[0].getAttributes().get("member").length); |
||||
assertEquals("uid=closuredude,ou=people,dc=springframework,dc=org",ldapAuthorities[0].getFirstAttributeValue("member")); |
||||
|
||||
//java group
|
||||
assertTrue(ldapAuthorities[1].getAttributes().containsKey("member")); |
||||
assertNotNull(ldapAuthorities[1].getAttributes().get("member")); |
||||
assertEquals(3,ldapAuthorities[1].getAttributes().get("member").length); |
||||
assertEquals(groovyDevelopers.getDn(),ldapAuthorities[1].getFirstAttributeValue("member")); |
||||
assertEquals( |
||||
new String[] { |
||||
groovyDevelopers.getDn(), |
||||
scalaDevelopers.getDn(), |
||||
"uid=javadude,ou=people,dc=springframework,dc=org" |
||||
}, |
||||
ldapAuthorities[1].getAttributes().get("member") |
||||
); |
||||
|
||||
//test non existent attribute
|
||||
assertNull(ldapAuthorities[2].getFirstAttributeValue("test")); |
||||
assertNotNull(ldapAuthorities[2].getAttributeValues("test")); |
||||
assertEquals(0, ldapAuthorities[2].getAttributeValues("test").length); |
||||
//test role name
|
||||
assertEquals(jDevelopers.getAuthority(), ldapAuthorities[3].getAuthority()); |
||||
} |
||||
} |
||||
@ -0,0 +1,142 @@
@@ -0,0 +1,142 @@
|
||||
/* |
||||
* Copyright 2002-2014 the original author or authors. |
||||
* |
||||
* Licensed under the Apache License, Version 2.0 (the "License"); |
||||
* you may not use this file except in compliance with the License. |
||||
* You may obtain a copy of the License at |
||||
* |
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
* |
||||
* Unless required by applicable law or agreed to in writing, software |
||||
* distributed under the License is distributed on an "AS IS" BASIS, |
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||
* See the License for the specific language governing permissions and |
||||
* limitations under the License. |
||||
*/ |
||||
package org.springframework.security.ldap.userdetails; |
||||
|
||||
import org.springframework.security.core.GrantedAuthority; |
||||
|
||||
import java.util.Map; |
||||
|
||||
/** |
||||
* An authority that contains at least a DN and a role name for an LDAP entry |
||||
* but can also contain other desired attributes to be fetched during an LDAP |
||||
* authority search. |
||||
* @author Filip Hanik |
||||
*/ |
||||
public class LdapAuthority implements GrantedAuthority { |
||||
|
||||
|
||||
private String dn; |
||||
private String role; |
||||
private Map<String, String[]> attributes; |
||||
|
||||
/** |
||||
* Constructs an LdapAuthority that has a role and a DN but no other attributes |
||||
* @param role |
||||
* @param dn |
||||
*/ |
||||
public LdapAuthority(String role, String dn) { |
||||
this(role,dn,null); |
||||
} |
||||
|
||||
/** |
||||
* Constructs an LdapAuthority with the given role, DN and other LDAP attributes |
||||
* @param role |
||||
* @param dn |
||||
* @param attributes |
||||
*/ |
||||
public LdapAuthority(String role, String dn, Map<String,String[]> attributes) { |
||||
if (role==null) throw new NullPointerException("role can not be null"); |
||||
this.role = role; |
||||
this.dn = dn; |
||||
this.attributes = attributes; |
||||
} |
||||
|
||||
/** |
||||
* Returns the LDAP attributes |
||||
* @return the LDAP attributes, map can be null |
||||
*/ |
||||
public Map<String, String[]> getAttributes() { |
||||
return attributes; |
||||
} |
||||
|
||||
/** |
||||
* Returns the DN for this LDAP authority |
||||
* @return |
||||
*/ |
||||
public String getDn() { |
||||
return dn; |
||||
} |
||||
|
||||
/** |
||||
* Returns the values for a specific attribute |
||||
* @param name the attribute name |
||||
* @return a String array, never null but may be zero length |
||||
*/ |
||||
public String[] getAttributeValues(String name) { |
||||
String[] result = null; |
||||
if (attributes!=null) { |
||||
result = attributes.get(name); |
||||
} |
||||
if (result==null) { |
||||
result = new String[0]; |
||||
} |
||||
return result; |
||||
} |
||||
|
||||
/** |
||||
* Returns the first attribute value for a specified attribute |
||||
* @param name |
||||
* @return the first attribute value for a specified attribute, may be null |
||||
*/ |
||||
public String getFirstAttributeValue(String name) { |
||||
String[] result = getAttributeValues(name); |
||||
if (result.length>0) { |
||||
return result[0]; |
||||
} else { |
||||
return null; |
||||
} |
||||
} |
||||
|
||||
/** |
||||
* {@inheritDoc} |
||||
*/ |
||||
@Override |
||||
public String getAuthority() { |
||||
return role; |
||||
} |
||||
|
||||
/** |
||||
* Compares the LdapAuthority based on {@link #getAuthority()} and {@link #getDn()} values |
||||
* {@inheritDoc} |
||||
*/ |
||||
@Override |
||||
public boolean equals(Object o) { |
||||
if (this == o) return true; |
||||
if (!(o instanceof LdapAuthority)) return false; |
||||
|
||||
LdapAuthority that = (LdapAuthority) o; |
||||
|
||||
if (!dn.equals(that.dn)) return false; |
||||
if (role != null ? !role.equals(that.role) : that.role != null) return false; |
||||
|
||||
return true; |
||||
} |
||||
|
||||
@Override |
||||
public int hashCode() { |
||||
int result = dn.hashCode(); |
||||
result = 31 * result + (role != null ? role.hashCode() : 0); |
||||
return result; |
||||
} |
||||
|
||||
@Override |
||||
public String toString() { |
||||
return "LdapAuthority{" + |
||||
"dn='" + dn + '\'' + |
||||
", role='" + role + '\'' + |
||||
'}'; |
||||
} |
||||
} |
||||
@ -0,0 +1,258 @@
@@ -0,0 +1,258 @@
|
||||
/* |
||||
* Copyright 2002-2014 the original author or authors. |
||||
* |
||||
* Licensed under the Apache License, Version 2.0 (the "License"); |
||||
* you may not use this file except in compliance with the License. |
||||
* You may obtain a copy of the License at |
||||
* |
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
* |
||||
* Unless required by applicable law or agreed to in writing, software |
||||
* distributed under the License is distributed on an "AS IS" BASIS, |
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||
* See the License for the specific language governing permissions and |
||||
* limitations under the License. |
||||
*/ |
||||
package org.springframework.security.ldap.userdetails; |
||||
|
||||
import org.apache.commons.logging.Log; |
||||
import org.apache.commons.logging.LogFactory; |
||||
import org.springframework.ldap.core.ContextSource; |
||||
import org.springframework.security.core.GrantedAuthority; |
||||
import org.springframework.security.ldap.SpringSecurityLdapTemplate; |
||||
import org.springframework.util.StringUtils; |
||||
|
||||
import java.util.Arrays; |
||||
import java.util.HashSet; |
||||
import java.util.Map; |
||||
import java.util.Set; |
||||
|
||||
/** |
||||
* A LDAP authority populator that can recursively search static nested groups. |
||||
* <p>An example of nested groups can be |
||||
* <pre> |
||||
* #Nested groups data |
||||
* |
||||
* dn: uid=javadude,ou=people,dc=springframework,dc=org |
||||
* objectclass: top |
||||
* objectclass: person |
||||
* objectclass: organizationalPerson |
||||
* objectclass: inetOrgPerson |
||||
* cn: Java Dude |
||||
* sn: Dude |
||||
* uid: javadude |
||||
* userPassword: javadudespassword |
||||
* |
||||
* dn: uid=groovydude,ou=people,dc=springframework,dc=org |
||||
* objectclass: top |
||||
* objectclass: person |
||||
* objectclass: organizationalPerson |
||||
* objectclass: inetOrgPerson |
||||
* cn: Groovy Dude |
||||
* sn: Dude |
||||
* uid: groovydude |
||||
* userPassword: groovydudespassword |
||||
* |
||||
* dn: uid=closuredude,ou=people,dc=springframework,dc=org |
||||
* objectclass: top |
||||
* objectclass: person |
||||
* objectclass: organizationalPerson |
||||
* objectclass: inetOrgPerson |
||||
* cn: Closure Dude |
||||
* sn: Dude |
||||
* uid: closuredude |
||||
* userPassword: closuredudespassword |
||||
* |
||||
* dn: uid=scaladude,ou=people,dc=springframework,dc=org |
||||
* objectclass: top |
||||
* objectclass: person |
||||
* objectclass: organizationalPerson |
||||
* objectclass: inetOrgPerson |
||||
* cn: Scala Dude |
||||
* sn: Dude |
||||
* uid: scaladude |
||||
* userPassword: scaladudespassword |
||||
* |
||||
* dn: cn=j-developers,ou=jdeveloper,dc=springframework,dc=org |
||||
* objectclass: top |
||||
* objectclass: groupOfNames |
||||
* cn: j-developers |
||||
* ou: jdeveloper |
||||
* member: cn=java-developers,ou=groups,dc=springframework,dc=org |
||||
* |
||||
* dn: cn=java-developers,ou=jdeveloper,dc=springframework,dc=org |
||||
* objectclass: top |
||||
* objectclass: groupOfNames |
||||
* cn: java-developers |
||||
* ou: jdeveloper |
||||
* member: cn=groovy-developers,ou=groups,dc=springframework,dc=org |
||||
* member: cn=scala-developers,ou=groups,dc=springframework,dc=org |
||||
* member: uid=javadude,ou=people,dc=springframework,dc=org |
||||
* |
||||
* dn: cn=groovy-developers,ou=jdeveloper,dc=springframework,dc=org |
||||
* objectclass: top |
||||
* objectclass: groupOfNames |
||||
* cn: java-developers |
||||
* ou: jdeveloper |
||||
* member: cn=closure-developers,ou=groups,dc=springframework,dc=org |
||||
* member: uid=groovydude,ou=people,dc=springframework,dc=org |
||||
* |
||||
* dn: cn=closure-developers,ou=jdeveloper,dc=springframework,dc=org |
||||
* objectclass: top |
||||
* objectclass: groupOfNames |
||||
* cn: java-developers |
||||
* ou: jdeveloper |
||||
* member: uid=closuredude,ou=people,dc=springframework,dc=org |
||||
* |
||||
* dn: cn=scala-developers,ou=jdeveloper,dc=springframework,dc=org |
||||
* objectclass: top |
||||
* objectclass: groupOfNames |
||||
* cn: java-developers |
||||
* ou: jdeveloper |
||||
* member: uid=scaladude,ou=people,dc=springframework,dc=org * </pre> |
||||
* </pre> |
||||
* </p> |
||||
* |
||||
* @author Filip Hanik |
||||
*/ |
||||
|
||||
public class NestedLdapAuthoritiesPopulator extends DefaultLdapAuthoritiesPopulator { |
||||
private static final Log logger = LogFactory.getLog(NestedLdapAuthoritiesPopulator.class); |
||||
|
||||
/** |
||||
* The attribute names to retrieve for each LDAP group |
||||
*/ |
||||
private Set<String> attributeNames; |
||||
|
||||
/** |
||||
* Maximum search depth - represents the number of recursive searches performed |
||||
*/ |
||||
private int maxSearchDepth = 10; |
||||
/** |
||||
* Constructor for group search scenarios. <tt>userRoleAttributes</tt> may still be |
||||
* set as a property. |
||||
* |
||||
* @param contextSource supplies the contexts used to search for user roles. |
||||
* @param groupSearchBase if this is an empty string the search will be performed from the root DN of the |
||||
*/ |
||||
public NestedLdapAuthoritiesPopulator(ContextSource contextSource, String groupSearchBase) { |
||||
super(contextSource, groupSearchBase); |
||||
} |
||||
|
||||
/** |
||||
* {@inheritDoc} |
||||
*/ |
||||
@Override |
||||
public Set<GrantedAuthority> getGroupMembershipRoles(String userDn, String username) { |
||||
if (getGroupSearchBase() == null) { |
||||
return new HashSet<GrantedAuthority>(); |
||||
} |
||||
|
||||
Set<GrantedAuthority> authorities = new HashSet<GrantedAuthority>(); |
||||
|
||||
performNestedSearch(userDn, username, authorities, getMaxSearchDepth()); |
||||
|
||||
return authorities; |
||||
} |
||||
|
||||
/** |
||||
* Performs the nested group search |
||||
* @param userDn - the userDN to search for, will become the group DN for subsequent searches |
||||
* @param username - the username of the user |
||||
* @param authorities - the authorities set that will be populated, must not be null |
||||
* @param depth - the depth remaining, when 0 recursion will end |
||||
*/ |
||||
protected void performNestedSearch(String userDn, String username, Set<GrantedAuthority> authorities, int depth) { |
||||
if (depth==0) { |
||||
//back out of recursion
|
||||
if (logger.isDebugEnabled()) { |
||||
logger.debug("Search aborted, max depth reached," + |
||||
" for roles for user '" + username + "', DN = " + "'" + userDn + "', with filter " |
||||
+ getGroupSearchFilter() + " in search base '" + getGroupSearchBase() + "'"); |
||||
} |
||||
return; |
||||
} |
||||
|
||||
if (logger.isDebugEnabled()) { |
||||
logger.debug("Searching for roles for user '" + username + "', DN = " + "'" + userDn + "', with filter " |
||||
+ getGroupSearchFilter() + " in search base '" + getGroupSearchBase() + "'"); |
||||
} |
||||
|
||||
if (getAttributeNames()==null) { |
||||
setAttributeNames(new HashSet<String>()); |
||||
} |
||||
if (StringUtils.hasText(getGroupRoleAttribute()) && !getAttributeNames().contains(getGroupRoleAttribute())) { |
||||
getAttributeNames().add(getGroupRoleAttribute()); |
||||
} |
||||
|
||||
Set<Map<String,String[]>> userRoles = getLdapTemplate().searchForMultipleAttributeValues( |
||||
getGroupSearchBase(), |
||||
getGroupSearchFilter(), |
||||
new String[]{userDn, username}, |
||||
getAttributeNames().toArray(new String[getAttributeNames().size()])); |
||||
|
||||
if (logger.isDebugEnabled()) { |
||||
logger.debug("Roles from search: " + userRoles); |
||||
} |
||||
|
||||
for (Map<String,String[]> record : userRoles) { |
||||
boolean circular = false; |
||||
String dn = record.get(SpringSecurityLdapTemplate.DN_KEY)[0]; |
||||
String[] roleValues = record.get(getGroupRoleAttribute()); |
||||
Set<String> roles = new HashSet<String>(); |
||||
roles.addAll(Arrays.asList(roleValues!=null?roleValues:new String[0])); |
||||
for (String role : roles) { |
||||
if (isConvertToUpperCase()) { |
||||
role = role.toUpperCase(); |
||||
} |
||||
role = getRolePrefix() + role; |
||||
//if the group already exist, we will not search for it's parents again.
|
||||
//this prevents a forever loop for a misconfigured ldap directory
|
||||
circular = circular | (!authorities.add(new LdapAuthority(role,dn,record))); |
||||
} |
||||
String roleName = roles.size()>0 ? roles.iterator().next() : dn; |
||||
if (!circular) { |
||||
performNestedSearch(dn, roleName, authorities, (depth - 1)); |
||||
} |
||||
|
||||
} |
||||
} |
||||
|
||||
/** |
||||
* Returns the attribute names that this populator has been configured to retrieve |
||||
* Value can be null, represents fetch all attributes |
||||
* @return the attribute names or null for all |
||||
*/ |
||||
public Set<String> getAttributeNames() { |
||||
return attributeNames; |
||||
} |
||||
|
||||
/** |
||||
* Sets the attribute names to retrieve for each ldap groups. Null means retrieve all |
||||
* @param attributeNames - the names of the LDAP attributes to retrieve |
||||
*/ |
||||
public void setAttributeNames(Set<String> attributeNames) { |
||||
this.attributeNames = attributeNames; |
||||
} |
||||
|
||||
/** |
||||
* How far should a nested search go. Depth is calculated in the number of levels we search up for |
||||
* parent groups. |
||||
* @return the max search depth, default is 10 |
||||
*/ |
||||
public int getMaxSearchDepth() { |
||||
return maxSearchDepth; |
||||
} |
||||
|
||||
/** |
||||
* How far should a nested search go. Depth is calculated in the number of levels we search up for |
||||
* parent groups. |
||||
* @param maxSearchDepth the max search depth |
||||
*/ |
||||
public void setMaxSearchDepth(int maxSearchDepth) { |
||||
this.maxSearchDepth = maxSearchDepth; |
||||
} |
||||
|
||||
|
||||
|
||||
} |
||||
@ -0,0 +1,52 @@
@@ -0,0 +1,52 @@
|
||||
package org.springframework.security.ldap.userdetails; |
||||
|
||||
import org.junit.Before; |
||||
import org.junit.Test; |
||||
import org.springframework.security.ldap.SpringSecurityLdapTemplate; |
||||
|
||||
import java.util.HashMap; |
||||
import java.util.Map; |
||||
|
||||
import static org.junit.Assert.assertEquals; |
||||
import static org.junit.Assert.assertNotNull; |
||||
|
||||
/** |
||||
* @author Filip Hanik |
||||
*/ |
||||
public class LdapAuthorityTests { |
||||
|
||||
public static final String DN = "cn=filip,ou=Users,dc=test,dc=com"; |
||||
LdapAuthority authority; |
||||
|
||||
@Before |
||||
public void setUp() { |
||||
Map<String,String[]> attributes = new HashMap<String,String[]>(); |
||||
attributes.put(SpringSecurityLdapTemplate.DN_KEY,new String[] {DN}); |
||||
attributes.put("mail",new String[] {"filip@ldap.test.org", "filip@ldap.test2.org"}); |
||||
authority = new LdapAuthority("testRole", DN, attributes); |
||||
} |
||||
|
||||
@Test |
||||
public void testGetDn() throws Exception { |
||||
assertEquals(DN, authority.getDn()); |
||||
assertNotNull(authority.getAttributeValues(SpringSecurityLdapTemplate.DN_KEY)); |
||||
assertEquals(1, authority.getAttributeValues(SpringSecurityLdapTemplate.DN_KEY).length); |
||||
assertEquals(DN, authority.getFirstAttributeValue(SpringSecurityLdapTemplate.DN_KEY)); |
||||
} |
||||
|
||||
@Test |
||||
public void testGetAttributes() throws Exception { |
||||
assertNotNull(authority.getAttributes()); |
||||
assertNotNull(authority.getAttributeValues("mail")); |
||||
assertEquals(2, authority.getAttributeValues("mail").length); |
||||
assertEquals("filip@ldap.test.org", authority.getFirstAttributeValue("mail")); |
||||
assertEquals("filip@ldap.test.org", authority.getAttributeValues("mail")[0]); |
||||
assertEquals("filip@ldap.test2.org", authority.getAttributeValues("mail")[1]); |
||||
} |
||||
|
||||
@Test |
||||
public void testGetAuthority() throws Exception { |
||||
assertNotNull(authority.getAuthority()); |
||||
assertEquals("testRole",authority.getAuthority()); |
||||
} |
||||
} |
||||
Loading…
Reference in new issue