1 changed files with 82 additions and 0 deletions
@ -0,0 +1,82 @@ |
|||||||
|
/* Copyright 2004, 2005, 2006 Acegi Technology Pty Limited |
||||||
|
* |
||||||
|
* Licensed under the Apache License, Version 2.0 (the "License"); |
||||||
|
* you may not use this file except in compliance with the License. |
||||||
|
* You may obtain a copy of the License at |
||||||
|
* |
||||||
|
* http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
* |
||||||
|
* Unless required by applicable law or agreed to in writing, software |
||||||
|
* distributed under the License is distributed on an "AS IS" BASIS, |
||||||
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||||||
|
* See the License for the specific language governing permissions and |
||||||
|
* limitations under the License. |
||||||
|
*/ |
||||||
|
|
||||||
|
package org.acegisecurity.userdetails.ldap; |
||||||
|
|
||||||
|
import junit.framework.TestCase; |
||||||
|
|
||||||
|
import javax.naming.directory.BasicAttributes; |
||||||
|
import javax.naming.directory.BasicAttribute; |
||||||
|
|
||||||
|
import org.acegisecurity.GrantedAuthorityImpl; |
||||||
|
|
||||||
|
/** |
||||||
|
* Tests {@link LdapUserDetailsMapper}. |
||||||
|
* |
||||||
|
* @author Luke Taylor |
||||||
|
* @version $Id$ |
||||||
|
*/ |
||||||
|
public class LdapUserDetailsMapperTests extends TestCase { |
||||||
|
|
||||||
|
|
||||||
|
public void testMultipleRoleAttributeValuesAreMappedToAuthorities() throws Exception { |
||||||
|
LdapUserDetailsMapper mapper = new LdapUserDetailsMapper(); |
||||||
|
mapper.setConvertToUpperCase(false); |
||||||
|
mapper.setRolePrefix(""); |
||||||
|
|
||||||
|
mapper.setRoleAttributes(new String[] {"userRole"}); |
||||||
|
|
||||||
|
BasicAttributes attrs = new BasicAttributes(); |
||||||
|
BasicAttribute roleAttribute = new BasicAttribute("userRole"); |
||||||
|
roleAttribute.add("X"); |
||||||
|
roleAttribute.add("Y"); |
||||||
|
roleAttribute.add("Z"); |
||||||
|
attrs.put(roleAttribute); |
||||||
|
|
||||||
|
LdapUserDetailsImpl.Essence user = (LdapUserDetailsImpl.Essence) mapper.mapAttributes("cn=someName", attrs); |
||||||
|
|
||||||
|
assertEquals(3, user.getGrantedAuthorities().length); |
||||||
|
} |
||||||
|
|
||||||
|
/** |
||||||
|
* SEC-303. Non-retrieved role attribute causes NullPointerException |
||||||
|
*/ |
||||||
|
public void testNonRetrievedRoleAttributeIsIgnored() throws Exception { |
||||||
|
LdapUserDetailsMapper mapper = new LdapUserDetailsMapper(); |
||||||
|
|
||||||
|
mapper.setRoleAttributes(new String[] {"userRole", "nonRetrievedAttribute"}); |
||||||
|
|
||||||
|
BasicAttributes attrs = new BasicAttributes(); |
||||||
|
attrs.put(new BasicAttribute("userRole", "x")); |
||||||
|
|
||||||
|
LdapUserDetailsImpl.Essence user = (LdapUserDetailsImpl.Essence) mapper.mapAttributes("cn=someName", attrs); |
||||||
|
|
||||||
|
assertEquals(1, user.getGrantedAuthorities().length); |
||||||
|
assertEquals("ROLE_X", user.getGrantedAuthorities()[0].getAuthority()); |
||||||
|
} |
||||||
|
|
||||||
|
public void testNonStringRoleAttributeIsIgnoredByDefault() throws Exception { |
||||||
|
LdapUserDetailsMapper mapper = new LdapUserDetailsMapper(); |
||||||
|
|
||||||
|
mapper.setRoleAttributes(new String[] {"userRole"}); |
||||||
|
|
||||||
|
BasicAttributes attrs = new BasicAttributes(); |
||||||
|
attrs.put(new BasicAttribute("userRole", new GrantedAuthorityImpl("X"))); |
||||||
|
|
||||||
|
LdapUserDetailsImpl.Essence user = (LdapUserDetailsImpl.Essence) mapper.mapAttributes("cn=someName", attrs); |
||||||
|
|
||||||
|
assertEquals(0, user.getGrantedAuthorities().length); |
||||||
|
} |
||||||
|
} |
||||||
Loading…
Reference in new issue