gerrit.onap Code Review - ccsdk/features.git/blob

   1 /*
   2  * ============LICENSE_START=======================================================
   3  * ONAP : ccsdk features
   4  * ================================================================================
   5  * Copyright (C) 2021 highstreet technologies GmbH Intellectual Property.
   6  * All rights reserved.
   7  * ================================================================================
   8  * Licensed under the Apache License, Version 2.0 (the "License");
   9  * you may not use this file except in compliance with the License.
  10  * You may obtain a copy of the License at
  11  *
  12  *     http://www.apache.org/licenses/LICENSE-2.0
  13  *
  14  * Unless required by applicable law or agreed to in writing, software
  15  * distributed under the License is distributed on an "AS IS" BASIS,
  16  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  17  * See the License for the specific language governing permissions and
  18  * limitations under the License.
  19  * ============LICENSE_END=========================================================
  20  *
  21  */
  22 package org.onap.ccsdk.features.sdnr.wt.oauthprovider.test;
  23
  24 import static org.junit.Assert.fail;
  25 import static org.mockito.Mockito.mock;
  26 import static org.mockito.Mockito.verify;
  27 import static org.mockito.Mockito.when;
  28 import com.sun.net.httpserver.HttpExchange;
  29 import com.sun.net.httpserver.HttpHandler;
  30 import com.sun.net.httpserver.HttpServer;
  31 import java.io.File;
  32 import java.io.IOException;
  33 import java.io.OutputStream;
  34 import java.net.InetSocketAddress;
  35 import java.nio.file.Files;
  36 import java.util.Random;
  37 import java.util.concurrent.ExecutorService;
  38 import java.util.concurrent.Executors;
  39 import javax.servlet.http.HttpServletRequest;
  40 import javax.servlet.http.HttpServletResponse;
  41 import org.junit.AfterClass;
  42 import org.junit.BeforeClass;
  43 import org.junit.Test;
  44 import org.onap.ccsdk.features.sdnr.wt.oauthprovider.data.Config;
  45 import org.onap.ccsdk.features.sdnr.wt.oauthprovider.data.OAuthProviderConfig;
  46 import org.onap.ccsdk.features.sdnr.wt.oauthprovider.data.UnableToConfigureOAuthService;
  47 import org.onap.ccsdk.features.sdnr.wt.oauthprovider.providers.GitlabProviderService;
  48 import org.onap.ccsdk.features.sdnr.wt.oauthprovider.providers.TokenCreator;
  49
  50 public class TestGitlabAuthService {
  51
  52     private static HttpServer server;
  53     private static ExecutorService httpThreadPool;
  54     private static GitlabProviderServiceToTest oauthService;
  55     private static final int PORT = randomPort(50000, 55000);
  56     private static final String GITURL = String.format("http://127.0.0.1:%d", PORT);
  57     private static final String OAUTH_SECRET = "oauthsecret";
  58     private static final String TOKENCREATOR_SECRET = "secret";
  59     private static final String REDIRECT_URI = "/odlux/token?";
  60
  61     @BeforeClass
  62     public static void init() throws IllegalArgumentException, Exception {
  63
  64         TokenCreator tokenCreator = TokenCreator.getInstance(Config.TOKENALG_HS256, TOKENCREATOR_SECRET, "issuer", 30*60);
  65         OAuthProviderConfig config = new OAuthProviderConfig("git", GITURL, null, "odlux.app", OAUTH_SECRET, "openid",
  66                 "gitlab test", "", null, false);
  67         oauthService = new GitlabProviderServiceToTest(config, REDIRECT_URI, tokenCreator);
  68         try {
  69             initGitlabTestWebserver(PORT, "/");
  70         } catch (IOException e) {
  71             fail(e.getMessage());
  72         }
  73     }
  74
  75     @AfterClass
  76     public static void close() {
  77         stopTestWebserver();
  78     }
  79
  80     @Test
  81     public void test() {
  82         HttpServletRequest req;
  83         HttpServletResponse resp = null;
  84         String host = "http://localhost:8412";
  85         final String state = "stateabc";
  86         try {
  87             req = mock(HttpServletRequest.class);
  88             resp = mock(HttpServletResponse.class);
  89             when(req.getParameter("code")).thenReturn("abcdefg");
  90             when(req.getParameter("state")).thenReturn(state);
  91             oauthService.addState(state);
  92             oauthService.handleRedirect(req, resp, host);
  93         } catch (IOException e) {
  94             fail(e.getMessage());
  95         }
  96         verify(resp).setStatus(302);
  97         //verify(resp).setHeader("Location",any(String.class));
  98     }
  99
 100     public void test2() {
 101         oauthService.sendLoginRedirectResponse(null, null);
 102     }
 103
 104     public static class GitlabProviderServiceToTest extends GitlabProviderService {
 105
 106         public GitlabProviderServiceToTest(OAuthProviderConfig config, String redirectUri, TokenCreator tokenCreator) throws UnableToConfigureOAuthService {
 107             super(config, redirectUri, tokenCreator);
 108         }
 109
 110         public void addState(String state) {
 111             this.randomIds.add(state);
 112         }
 113     }
 114
 115     private static int randomPort(int min, int max) {
 116         Random random = new Random();
 117         return random.nextInt(max + 1 - min) + min;
 118     }
 119
 120     public static void initGitlabTestWebserver(int port, String baseUri) throws IOException {
 121         server = HttpServer.create(new InetSocketAddress("127.0.0.1", port), 0);
 122         httpThreadPool = Executors.newFixedThreadPool(5);
 123         server.setExecutor(httpThreadPool);
 124         server.createContext(baseUri, new MyHandler());
 125         //server.createContext("/", new MyRootHandler());
 126         server.setExecutor(null); // creates a default executor
 127         server.start();
 128         System.out.println("http server started");
 129     }
 130
 131     public static void stopTestWebserver() {
 132         if (server != null) {
 133             server.stop(0);
 134             httpThreadPool.shutdownNow();
 135             System.out.println("http server stopped");
 136         }
 137     }
 138
 139     private static String loadResourceFileContent(String filename) {
 140         try {
 141             return Files.readString(new File(filename).toPath());
 142         } catch (IOException e) {
 143             fail(e.getMessage());
 144         }
 145         return null;
 146     }
 147
 148     public static class MyHandler implements HttpHandler {
 149         private static final String GITLAB_TOKEN_ENDPOINT = "/oauth/token";
 150         private static final String GITLAB_USER_ENDPOINT = "/api/v4/user";
 151         private static final String GITLAB_GROUP_ENDPOINT = "/api/v4/groups?min_access_level=10";
 152         private static final String GITLAB_TOKEN_RESPONSE =
 153                 loadResourceFileContent("src/test/resources/oauth/gitlab-token-response.json");
 154         private static final String GITLAB_USER_RESPONSE =
 155                 loadResourceFileContent("src/test/resources/oauth/gitlab-user-response.json");
 156         private static final String GITLAB_GROUP_RESPONSE =
 157                 loadResourceFileContent("src/test/resources/oauth/gitlab-groups-response.json");
 158
 159         @Override
 160         public void handle(HttpExchange t) throws IOException {
 161             final String method = t.getRequestMethod();
 162             final String uri = t.getRequestURI().toString();
 163             System.out.println(String.format("req received: %s %s", method, t.getRequestURI()));
 164             OutputStream os = null;
 165             try {
 166                 if (method.equals("GET")) {
 167                     if (uri.equals(GITLAB_USER_ENDPOINT)) {
 168                         t.sendResponseHeaders(200, GITLAB_USER_RESPONSE.length());
 169                         os = t.getResponseBody();
 170                         os.write(GITLAB_USER_RESPONSE.getBytes());
 171                     } else if (uri.equals(GITLAB_GROUP_ENDPOINT)) {
 172                         t.sendResponseHeaders(200, GITLAB_GROUP_RESPONSE.length());
 173                         os = t.getResponseBody();
 174                         os.write(GITLAB_GROUP_RESPONSE.getBytes());
 175                     }
 176                 } else if (method.equals("POST")) {
 177                     if (uri.equals(GITLAB_TOKEN_ENDPOINT)) {
 178                         t.sendResponseHeaders(200, GITLAB_TOKEN_RESPONSE.length());
 179                         os = t.getResponseBody();
 180                         os.write(GITLAB_TOKEN_RESPONSE.getBytes());
 181                     } else {
 182                         t.sendResponseHeaders(404, 0);
 183                     }
 184                 } else {
 185                     t.sendResponseHeaders(404, 0);
 186                 }
 187                 System.out.println("req handled successful");
 188
 189             } catch (Exception e) {
 190                 System.out.println(e.getMessage());
 191             } finally {
 192                 if (os != null) {
 193                     os.close();
 194                 }
 195             }
 196         }
 197     }
 198 }