@ -23,6 +23,7 @@ import org.acegisecurity.GrantedAuthorityImpl;
@@ -23,6 +23,7 @@ import org.acegisecurity.GrantedAuthorityImpl;
import org.acegisecurity.MockFilterConfig ;
import org.acegisecurity.adapters.PrincipalAcegiUserToken ;
import org.jmock.Mock ;
import org.springframework.mock.web.MockHttpServletRequest ;
import org.springframework.mock.web.MockHttpServletResponse ;
@ -36,271 +37,387 @@ import javax.servlet.ServletException;
@@ -36,271 +37,387 @@ import javax.servlet.ServletException;
import javax.servlet.ServletRequest ;
import javax.servlet.ServletResponse ;
/ * *
* Tests { @link HttpSessionContextIntegrationFilter } .
*
*
* @author Ben Alex
* @version $Id$
* @version $Id : HttpSessionContextIntegrationFilterTests . java 1858 2007 - 05 - 24
* 02 : 04 : 47Z benalex $
* /
public class HttpSessionContextIntegrationFilterTests extends TestCase {
//~ Constructors ===================================================================================================
public HttpSessionContextIntegrationFilterTests ( ) {
super ( ) ;
}
public HttpSessionContextIntegrationFilterTests ( String arg0 ) {
super ( arg0 ) ;
}
//~ Methods ========================================================================================================
private void executeFilterInContainerSimulator ( FilterConfig filterConfig , Filter filter , ServletRequest request ,
ServletResponse response , FilterChain filterChain )
throws ServletException , IOException {
filter . init ( filterConfig ) ;
filter . doFilter ( request , response , filterChain ) ;
filter . destroy ( ) ;
}
public static void main ( String [ ] args ) {
junit . textui . TestRunner . run ( HttpSessionContextIntegrationFilterTests . class ) ;
}
public void testDetectsIncompatibleSessionProperties ( )
throws Exception {
HttpSessionContextIntegrationFilter filter = new HttpSessionContextIntegrationFilter ( ) ;
try {
filter . setAllowSessionCreation ( false ) ;
filter . setForceEagerSessionCreation ( true ) ;
filter . afterPropertiesSet ( ) ;
fail ( "Shown have thrown IllegalArgumentException" ) ;
} catch ( IllegalArgumentException expected ) {
assertTrue ( true ) ;
}
filter . setAllowSessionCreation ( true ) ;
filter . afterPropertiesSet ( ) ;
assertTrue ( true ) ;
}
public void testDetectsMissingOrInvalidContext ( ) throws Exception {
HttpSessionContextIntegrationFilter filter = new HttpSessionContextIntegrationFilter ( ) ;
try {
filter . setContext ( null ) ;
filter . afterPropertiesSet ( ) ;
fail ( "Shown have thrown IllegalArgumentException" ) ;
} catch ( IllegalArgumentException expected ) {
assertTrue ( true ) ;
}
try {
filter . setContext ( Integer . class ) ;
assertEquals ( Integer . class , filter . getContext ( ) ) ;
filter . afterPropertiesSet ( ) ;
fail ( "Shown have thrown IllegalArgumentException" ) ;
} catch ( IllegalArgumentException expected ) {
assertTrue ( true ) ;
}
}
public void testExceptionWithinFilterChainStillClearsSecurityContextHolder ( )
throws Exception {
// Build an Authentication object we simulate came from HttpSession
PrincipalAcegiUserToken sessionPrincipal = new PrincipalAcegiUserToken ( "key" , "someone" , "password" ,
new GrantedAuthority [ ] { new GrantedAuthorityImpl ( "SOME_ROLE" ) } , null ) ;
// Build a Context to store in HttpSession (simulating prior request)
SecurityContext sc = new SecurityContextImpl ( ) ;
sc . setAuthentication ( sessionPrincipal ) ;
// Build a mock request
MockHttpServletRequest request = new MockHttpServletRequest ( ) ;
request . getSession ( ) . setAttribute ( HttpSessionContextIntegrationFilter . ACEGI_SECURITY_CONTEXT_KEY , sc ) ;
MockHttpServletResponse response = new MockHttpServletResponse ( ) ;
FilterChain chain = new MockFilterChain ( sessionPrincipal , null , new IOException ( ) ) ;
// Prepare filter
HttpSessionContextIntegrationFilter filter = new HttpSessionContextIntegrationFilter ( ) ;
filter . setContext ( SecurityContextImpl . class ) ;
filter . afterPropertiesSet ( ) ;
// Execute filter
try {
executeFilterInContainerSimulator ( new MockFilterConfig ( ) , filter , request , response , chain ) ;
fail ( "We should have received the IOException thrown inside the filter chain here" ) ;
} catch ( IOException ioe ) {
assertTrue ( true ) ;
}
// Check the SecurityContextHolder is null, even though an exception was thrown during chain
assertEquals ( new SecurityContextImpl ( ) , SecurityContextHolder . getContext ( ) ) ;
assertNull ( "Should have cleared FILTER_APPLIED" , request . getAttribute ( HttpSessionContextIntegrationFilter . FILTER_APPLIED ) ) ;
}
public void testExistingContextContentsCopiedIntoContextHolderFromSessionAndChangesToContextCopiedBackToSession ( )
throws Exception {
// Build an Authentication object we simulate came from HttpSession
PrincipalAcegiUserToken sessionPrincipal = new PrincipalAcegiUserToken ( "key" , "someone" , "password" ,
new GrantedAuthority [ ] { new GrantedAuthorityImpl ( "SOME_ROLE" ) } , null ) ;
// Build an Authentication object we simulate our Authentication changed it to
PrincipalAcegiUserToken updatedPrincipal = new PrincipalAcegiUserToken ( "key" , "someone" , "password" ,
new GrantedAuthority [ ] { new GrantedAuthorityImpl ( "SOME_DIFFERENT_ROLE" ) } , null ) ;
// Build a Context to store in HttpSession (simulating prior request)
SecurityContext sc = new SecurityContextImpl ( ) ;
sc . setAuthentication ( sessionPrincipal ) ;
// Build a mock request
MockHttpServletRequest request = new MockHttpServletRequest ( ) ;
request . getSession ( ) . setAttribute ( HttpSessionContextIntegrationFilter . ACEGI_SECURITY_CONTEXT_KEY , sc ) ;
MockHttpServletResponse response = new MockHttpServletResponse ( ) ;
FilterChain chain = new MockFilterChain ( sessionPrincipal , updatedPrincipal , null ) ;
// Prepare filter
HttpSessionContextIntegrationFilter filter = new HttpSessionContextIntegrationFilter ( ) ;
filter . setContext ( SecurityContextImpl . class ) ;
filter . afterPropertiesSet ( ) ;
// Execute filter
executeFilterInContainerSimulator ( new MockFilterConfig ( ) , filter , request , response , chain ) ;
// Obtain new/update Authentication from HttpSession
SecurityContext context = ( SecurityContext ) request . getSession ( )
. getAttribute ( HttpSessionContextIntegrationFilter . ACEGI_SECURITY_CONTEXT_KEY ) ;
assertEquals ( updatedPrincipal , ( ( SecurityContext ) context ) . getAuthentication ( ) ) ;
}
public void testHttpSessionCreatedWhenContextHolderChanges ( )
throws Exception {
// Build an Authentication object we simulate our Authentication changed it to
PrincipalAcegiUserToken updatedPrincipal = new PrincipalAcegiUserToken ( "key" , "someone" , "password" ,
new GrantedAuthority [ ] { new GrantedAuthorityImpl ( "SOME_DIFFERENT_ROLE" ) } , null ) ;
// Build a mock request
MockHttpServletRequest request = new MockHttpServletRequest ( ) ;
MockHttpServletResponse response = new MockHttpServletResponse ( ) ;
FilterChain chain = new MockFilterChain ( null , updatedPrincipal , null ) ;
// Prepare filter
HttpSessionContextIntegrationFilter filter = new HttpSessionContextIntegrationFilter ( ) ;
filter . setContext ( SecurityContextImpl . class ) ;
// don't call afterPropertiesSet to test case when not instantiated by Spring
//filter.afterPropertiesSet();
// Execute filter
executeFilterInContainerSimulator ( new MockFilterConfig ( ) , filter , request , response , chain ) ;
// Obtain new/updated Authentication from HttpSession
SecurityContext context = ( SecurityContext ) request . getSession ( false )
. getAttribute ( HttpSessionContextIntegrationFilter . ACEGI_SECURITY_CONTEXT_KEY ) ;
assertEquals ( updatedPrincipal , ( ( SecurityContext ) context ) . getAuthentication ( ) ) ;
}
public void testHttpSessionEagerlyCreatedWhenDirected ( )
throws Exception {
// Build a mock request
MockHttpServletRequest request = new MockHttpServletRequest ( null , null ) ;
MockHttpServletResponse response = new MockHttpServletResponse ( ) ;
FilterChain chain = new MockFilterChain ( null , null , null ) ;
// Prepare filter
HttpSessionContextIntegrationFilter filter = new HttpSessionContextIntegrationFilter ( ) ;
filter . setContext ( SecurityContextImpl . class ) ;
filter . setForceEagerSessionCreation ( true ) ; // non-default
filter . afterPropertiesSet ( ) ;
// Execute filter
executeFilterInContainerSimulator ( new MockFilterConfig ( ) , filter , request , response , chain ) ;
// Check the session is not null
assertNotNull ( request . getSession ( false ) ) ;
}
public void testHttpSessionNotCreatedUnlessContextHolderChanges ( )
throws Exception {
// Build a mock request
MockHttpServletRequest request = new MockHttpServletRequest ( null , null ) ;
MockHttpServletResponse response = new MockHttpServletResponse ( ) ;
FilterChain chain = new MockFilterChain ( null , null , null ) ;
// Prepare filter
HttpSessionContextIntegrationFilter filter = new HttpSessionContextIntegrationFilter ( ) ;
filter . setContext ( SecurityContextImpl . class ) ;
filter . afterPropertiesSet ( ) ;
// Execute filter
executeFilterInContainerSimulator ( new MockFilterConfig ( ) , filter , request , response , chain ) ;
// Check the session is null
assertNull ( request . getSession ( false ) ) ;
}
public void testHttpSessionWithNonContextInWellKnownLocationIsOverwritten ( )
throws Exception {
// Build an Authentication object we simulate our Authentication changed it to
PrincipalAcegiUserToken updatedPrincipal = new PrincipalAcegiUserToken ( "key" , "someone" , "password" ,
new GrantedAuthority [ ] { new GrantedAuthorityImpl ( "SOME_DIFFERENT_ROLE" ) } , null ) ;
// Build a mock request
MockHttpServletRequest request = new MockHttpServletRequest ( ) ;
request . getSession ( )
. setAttribute ( HttpSessionContextIntegrationFilter . ACEGI_SECURITY_CONTEXT_KEY , "NOT_A_CONTEXT_OBJECT" ) ;
MockHttpServletResponse response = new MockHttpServletResponse ( ) ;
FilterChain chain = new MockFilterChain ( null , updatedPrincipal , null ) ;
// Prepare filter
HttpSessionContextIntegrationFilter filter = new HttpSessionContextIntegrationFilter ( ) ;
filter . setContext ( SecurityContextImpl . class ) ;
filter . afterPropertiesSet ( ) ;
// Execute filter
executeFilterInContainerSimulator ( new MockFilterConfig ( ) , filter , request , response , chain ) ;
// Obtain new/update Authentication from HttpSession
SecurityContext context = ( SecurityContext ) request . getSession ( )
. getAttribute ( HttpSessionContextIntegrationFilter . ACEGI_SECURITY_CONTEXT_KEY ) ;
assertEquals ( updatedPrincipal , ( ( SecurityContext ) context ) . getAuthentication ( ) ) ;
}
//~ Inner Classes ==================================================================================================
private class MockFilterChain extends TestCase implements FilterChain {
private Authentication changeContextHolder ;
private Authentication expectedOnContextHolder ;
private IOException toThrowDuringChain ;
public MockFilterChain ( Authentication expectedOnContextHolder , Authentication changeContextHolder ,
IOException toThrowDuringChain ) {
this . expectedOnContextHolder = expectedOnContextHolder ;
this . changeContextHolder = changeContextHolder ;
this . toThrowDuringChain = toThrowDuringChain ;
}
private MockFilterChain ( ) { }
public void doFilter ( ServletRequest arg0 , ServletResponse arg1 )
throws IOException , ServletException {
if ( expectedOnContextHolder ! = null ) {
assertEquals ( expectedOnContextHolder , SecurityContextHolder . getContext ( ) . getAuthentication ( ) ) ;
}
if ( changeContextHolder ! = null ) {
SecurityContext sc = SecurityContextHolder . getContext ( ) ;
sc . setAuthentication ( changeContextHolder ) ;
SecurityContextHolder . setContext ( sc ) ;
}
if ( toThrowDuringChain ! = null ) {
throw toThrowDuringChain ;
}
}
}
// ~ Constructors
// ===================================================================================================
public HttpSessionContextIntegrationFilterTests ( ) {
super ( ) ;
}
public HttpSessionContextIntegrationFilterTests ( String arg0 ) {
super ( arg0 ) ;
}
// ~ Methods
// ========================================================================================================
private static void executeFilterInContainerSimulator (
FilterConfig filterConfig , Filter filter , ServletRequest request ,
ServletResponse response , FilterChain filterChain )
throws ServletException , IOException {
filter . init ( filterConfig ) ;
filter . doFilter ( request , response , filterChain ) ;
filter . destroy ( ) ;
}
public static void main ( String [ ] args ) {
junit . textui . TestRunner
. run ( HttpSessionContextIntegrationFilterTests . class ) ;
}
public void testDetectsIncompatibleSessionProperties ( ) throws Exception {
HttpSessionContextIntegrationFilter filter = new HttpSessionContextIntegrationFilter ( ) ;
try {
filter . setAllowSessionCreation ( false ) ;
filter . setForceEagerSessionCreation ( true ) ;
filter . afterPropertiesSet ( ) ;
fail ( "Shown have thrown IllegalArgumentException" ) ;
} catch ( IllegalArgumentException expected ) {
assertTrue ( true ) ;
}
filter . setAllowSessionCreation ( true ) ;
filter . afterPropertiesSet ( ) ;
assertTrue ( true ) ;
}
public void testDetectsMissingOrInvalidContext ( ) throws Exception {
HttpSessionContextIntegrationFilter filter = new HttpSessionContextIntegrationFilter ( ) ;
try {
filter . setContext ( null ) ;
filter . afterPropertiesSet ( ) ;
fail ( "Shown have thrown IllegalArgumentException" ) ;
} catch ( IllegalArgumentException expected ) {
assertTrue ( true ) ;
}
try {
filter . setContext ( Integer . class ) ;
assertEquals ( Integer . class , filter . getContext ( ) ) ;
filter . afterPropertiesSet ( ) ;
fail ( "Shown have thrown IllegalArgumentException" ) ;
} catch ( IllegalArgumentException expected ) {
assertTrue ( true ) ;
}
}
public void testExceptionWithinFilterChainStillClearsSecurityContextHolder ( )
throws Exception {
// Build an Authentication object we simulate came from HttpSession
PrincipalAcegiUserToken sessionPrincipal = new PrincipalAcegiUserToken (
"key" ,
"someone" ,
"password" ,
new GrantedAuthority [ ] { new GrantedAuthorityImpl ( "SOME_ROLE" ) } ,
null ) ;
// Build a Context to store in HttpSession (simulating prior request)
SecurityContext sc = new SecurityContextImpl ( ) ;
sc . setAuthentication ( sessionPrincipal ) ;
// Build a mock request
MockHttpServletRequest request = new MockHttpServletRequest ( ) ;
request . getSession ( ) . setAttribute (
HttpSessionContextIntegrationFilter . ACEGI_SECURITY_CONTEXT_KEY ,
sc ) ;
MockHttpServletResponse response = new MockHttpServletResponse ( ) ;
FilterChain chain = new MockFilterChain ( sessionPrincipal , null ,
new IOException ( ) ) ;
// Prepare filter
HttpSessionContextIntegrationFilter filter = new HttpSessionContextIntegrationFilter ( ) ;
filter . setContext ( SecurityContextImpl . class ) ;
filter . afterPropertiesSet ( ) ;
// Execute filter
try {
executeFilterInContainerSimulator ( new MockFilterConfig ( ) , filter ,
request , response , chain ) ;
fail ( "We should have received the IOException thrown inside the filter chain here" ) ;
} catch ( IOException ioe ) {
assertTrue ( true ) ;
}
// Check the SecurityContextHolder is null, even though an exception was
// thrown during chain
assertEquals ( new SecurityContextImpl ( ) , SecurityContextHolder
. getContext ( ) ) ;
assertNull (
"Should have cleared FILTER_APPLIED" ,
request
. getAttribute ( HttpSessionContextIntegrationFilter . FILTER_APPLIED ) ) ;
}
public void testExistingContextContentsCopiedIntoContextHolderFromSessionAndChangesToContextCopiedBackToSession ( )
throws Exception {
// Build an Authentication object we simulate came from HttpSession
PrincipalAcegiUserToken sessionPrincipal = new PrincipalAcegiUserToken (
"key" ,
"someone" ,
"password" ,
new GrantedAuthority [ ] { new GrantedAuthorityImpl ( "SOME_ROLE" ) } ,
null ) ;
// Build an Authentication object we simulate our Authentication changed
// it to
PrincipalAcegiUserToken updatedPrincipal = new PrincipalAcegiUserToken (
"key" , "someone" , "password" ,
new GrantedAuthority [ ] { new GrantedAuthorityImpl (
"SOME_DIFFERENT_ROLE" ) } , null ) ;
// Build a Context to store in HttpSession (simulating prior request)
SecurityContext sc = new SecurityContextImpl ( ) ;
sc . setAuthentication ( sessionPrincipal ) ;
// Build a mock request
MockHttpServletRequest request = new MockHttpServletRequest ( ) ;
request . getSession ( ) . setAttribute (
HttpSessionContextIntegrationFilter . ACEGI_SECURITY_CONTEXT_KEY ,
sc ) ;
MockHttpServletResponse response = new MockHttpServletResponse ( ) ;
FilterChain chain = new MockFilterChain ( sessionPrincipal ,
updatedPrincipal , null ) ;
// Prepare filter
HttpSessionContextIntegrationFilter filter = new HttpSessionContextIntegrationFilter ( ) ;
filter . setContext ( SecurityContextImpl . class ) ;
filter . afterPropertiesSet ( ) ;
// Execute filter
executeFilterInContainerSimulator ( new MockFilterConfig ( ) , filter ,
request , response , chain ) ;
// Obtain new/update Authentication from HttpSession
SecurityContext context = ( SecurityContext ) request
. getSession ( )
. getAttribute (
HttpSessionContextIntegrationFilter . ACEGI_SECURITY_CONTEXT_KEY ) ;
assertEquals ( updatedPrincipal , ( ( SecurityContext ) context )
. getAuthentication ( ) ) ;
}
public void testHttpSessionCreatedWhenContextHolderChanges ( )
throws Exception {
// Build an Authentication object we simulate our Authentication changed
// it to
PrincipalAcegiUserToken updatedPrincipal = new PrincipalAcegiUserToken (
"key" , "someone" , "password" ,
new GrantedAuthority [ ] { new GrantedAuthorityImpl (
"SOME_DIFFERENT_ROLE" ) } , null ) ;
// Build a mock request
MockHttpServletRequest request = new MockHttpServletRequest ( ) ;
MockHttpServletResponse response = new MockHttpServletResponse ( ) ;
FilterChain chain = new MockFilterChain ( null , updatedPrincipal , null ) ;
// Prepare filter
HttpSessionContextIntegrationFilter filter = new HttpSessionContextIntegrationFilter ( ) ;
filter . setContext ( SecurityContextImpl . class ) ;
// don't call afterPropertiesSet to test case when not instantiated by
// Spring
// filter.afterPropertiesSet();
// Execute filter
executeFilterInContainerSimulator ( new MockFilterConfig ( ) , filter ,
request , response , chain ) ;
// Obtain new/updated Authentication from HttpSession
SecurityContext context = ( SecurityContext ) request
. getSession ( false )
. getAttribute (
HttpSessionContextIntegrationFilter . ACEGI_SECURITY_CONTEXT_KEY ) ;
assertEquals ( updatedPrincipal , ( ( SecurityContext ) context )
. getAuthentication ( ) ) ;
}
public void testHttpSessionEagerlyCreatedWhenDirected ( ) throws Exception {
// Build a mock request
MockHttpServletRequest request = new MockHttpServletRequest ( null , null ) ;
MockHttpServletResponse response = new MockHttpServletResponse ( ) ;
FilterChain chain = new MockFilterChain ( null , null , null ) ;
// Prepare filter
HttpSessionContextIntegrationFilter filter = new HttpSessionContextIntegrationFilter ( ) ;
filter . setContext ( SecurityContextImpl . class ) ;
filter . setForceEagerSessionCreation ( true ) ; // non-default
filter . afterPropertiesSet ( ) ;
// Execute filter
executeFilterInContainerSimulator ( new MockFilterConfig ( ) , filter ,
request , response , chain ) ;
// Check the session is not null
assertNotNull ( request . getSession ( false ) ) ;
}
public void testHttpSessionNotCreatedUnlessContextHolderChanges ( )
throws Exception {
// Build a mock request
MockHttpServletRequest request = new MockHttpServletRequest ( null , null ) ;
MockHttpServletResponse response = new MockHttpServletResponse ( ) ;
FilterChain chain = new MockFilterChain ( null , null , null ) ;
// Prepare filter
HttpSessionContextIntegrationFilter filter = new HttpSessionContextIntegrationFilter ( ) ;
filter . setContext ( SecurityContextImpl . class ) ;
filter . afterPropertiesSet ( ) ;
// Execute filter
executeFilterInContainerSimulator ( new MockFilterConfig ( ) , filter ,
request , response , chain ) ;
// Check the session is null
assertNull ( request . getSession ( false ) ) ;
}
public void testHttpSessionWithNonContextInWellKnownLocationIsOverwritten ( )
throws Exception {
// Build an Authentication object we simulate our Authentication changed
// it to
PrincipalAcegiUserToken updatedPrincipal = new PrincipalAcegiUserToken (
"key" , "someone" , "password" ,
new GrantedAuthority [ ] { new GrantedAuthorityImpl (
"SOME_DIFFERENT_ROLE" ) } , null ) ;
// Build a mock request
MockHttpServletRequest request = new MockHttpServletRequest ( ) ;
request . getSession ( ) . setAttribute (
HttpSessionContextIntegrationFilter . ACEGI_SECURITY_CONTEXT_KEY ,
"NOT_A_CONTEXT_OBJECT" ) ;
MockHttpServletResponse response = new MockHttpServletResponse ( ) ;
FilterChain chain = new MockFilterChain ( null , updatedPrincipal , null ) ;
// Prepare filter
HttpSessionContextIntegrationFilter filter = new HttpSessionContextIntegrationFilter ( ) ;
filter . setContext ( SecurityContextImpl . class ) ;
filter . afterPropertiesSet ( ) ;
// Execute filter
executeFilterInContainerSimulator ( new MockFilterConfig ( ) , filter ,
request , response , chain ) ;
// Obtain new/update Authentication from HttpSession
SecurityContext context = ( SecurityContext ) request
. getSession ( )
. getAttribute (
HttpSessionContextIntegrationFilter . ACEGI_SECURITY_CONTEXT_KEY ) ;
assertEquals ( updatedPrincipal , ( ( SecurityContext ) context )
. getAuthentication ( ) ) ;
}
public void testConcurrentThreadsLazilyChangeFilterAppliedValueToTrue ( )
throws Exception {
PrincipalAcegiUserToken sessionPrincipal = new PrincipalAcegiUserToken (
"key" ,
"someone" ,
"password" ,
new GrantedAuthority [ ] { new GrantedAuthorityImpl ( "SOME_ROLE" ) } ,
null ) ;
// Build a Context to store in HttpSession (simulating prior request)
SecurityContext sc = new SecurityContextImpl ( ) ;
sc . setAuthentication ( sessionPrincipal ) ;
MockHttpServletRequest request = new MockHttpServletRequest ( ) ;
request . getSession ( ) . setAttribute (
HttpSessionContextIntegrationFilter . ACEGI_SECURITY_CONTEXT_KEY ,
sc ) ;
MockHttpServletResponse response = new MockHttpServletResponse ( ) ;
// Prepare filter
HttpSessionContextIntegrationFilter filter = new HttpSessionContextIntegrationFilter ( ) ;
filter . setContext ( SecurityContextImpl . class ) ;
filter . afterPropertiesSet ( ) ;
for ( int i = 0 ; i < 3 ; i + + ) {
ThreadRunner runner = new ThreadRunner ( request , response , filter ,
new MockFilterChain ( sessionPrincipal , null , null ) ) ;
runner . start ( ) ;
}
}
// ~ Inner Classes
// ==================================================================================================
private class MockFilterChain extends TestCase implements FilterChain {
private Authentication changeContextHolder ;
private Authentication expectedOnContextHolder ;
private IOException toThrowDuringChain ;
public MockFilterChain ( Authentication expectedOnContextHolder ,
Authentication changeContextHolder ,
IOException toThrowDuringChain ) {
this . expectedOnContextHolder = expectedOnContextHolder ;
this . changeContextHolder = changeContextHolder ;
this . toThrowDuringChain = toThrowDuringChain ;
}
private MockFilterChain ( ) {
}
public void doFilter ( ServletRequest arg0 , ServletResponse arg1 )
throws IOException , ServletException {
if ( expectedOnContextHolder ! = null ) {
assertEquals ( expectedOnContextHolder , SecurityContextHolder
. getContext ( ) . getAuthentication ( ) ) ;
}
if ( changeContextHolder ! = null ) {
SecurityContext sc = SecurityContextHolder . getContext ( ) ;
sc . setAuthentication ( changeContextHolder ) ;
SecurityContextHolder . setContext ( sc ) ;
}
if ( toThrowDuringChain ! = null ) {
throw toThrowDuringChain ;
}
}
}
private static class ThreadRunner extends Thread {
private MockHttpServletRequest request ;
private MockHttpServletResponse response ;
private HttpSessionContextIntegrationFilter filter ;
private MockFilterChain chain ;
public ThreadRunner ( MockHttpServletRequest request ,
MockHttpServletResponse response ,
HttpSessionContextIntegrationFilter filter ,
MockFilterChain chain ) {
this . request = request ;
this . response = response ;
this . filter = filter ;
this . chain = chain ;
}
public void run ( ) {
try {
// Execute filter
executeFilterInContainerSimulator ( new MockFilterConfig ( ) ,
filter , request , response , chain ) ;
// Check the session is not null
assertNotNull ( request . getSession ( false ) ) ;
} catch ( Exception e ) {
e . printStackTrace ( ) ;
}
}
}
}
Vishal Puri
19 years ago