cadi/aaf/src/test/java/org/onap/aaf/cadi/oauth/test/JU_OAuthTest.java

   1 /**
   2  * ============LICENSE_START====================================================
   3  * org.onap.aaf
   4  * ===========================================================================
   5  * Copyright (c) 2018 AT&T Intellectual Property. All rights reserved.
   6  * ===========================================================================
   7  * Licensed under the Apache License, Version 2.0 (the "License");
   8  * you may not use this file except in compliance with the License.
   9  * You may obtain a copy of the License at
  10  *
  11  *      http://www.apache.org/licenses/LICENSE-2.0
  12  *
  13  * Unless required by applicable law or agreed to in writing, software
  14  * distributed under the License is distributed on an "AS IS" BASIS,
  15  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  16  * See the License for the specific language governing permissions and
  17  * limitations under the License.
  18  * ============LICENSE_END====================================================
  19  *
  20  */
  21
  22 package org.onap.aaf.cadi.oauth.test;
  23
  24 import java.io.ByteArrayOutputStream;
  25 import java.io.PrintStream;
  26 import java.lang.reflect.Field;
  27 import java.net.ConnectException;
  28 import java.util.Date;
  29 import java.util.GregorianCalendar;
  30 import java.util.HashMap;
  31
  32 import org.junit.After;
  33 import org.junit.AfterClass;
  34 import org.junit.Before;
  35 import org.junit.BeforeClass;
  36 import org.junit.Test;
  37 import org.onap.aaf.cadi.CadiException;
  38 import org.onap.aaf.cadi.PropAccess;
  39 import org.onap.aaf.cadi.client.Future;
  40 import org.onap.aaf.cadi.client.Rcli;
  41 import org.onap.aaf.cadi.client.Result;
  42 import org.onap.aaf.cadi.client.Retryable;
  43 import org.onap.aaf.cadi.config.Config;
  44 import org.onap.aaf.cadi.config.SecurityInfoC;
  45 import org.onap.aaf.cadi.oauth.TimedToken;
  46 import org.onap.aaf.cadi.oauth.TokenClient;
  47 import org.onap.aaf.cadi.oauth.TokenClientFactory;
  48 import org.onap.aaf.cadi.oauth.TzClient;
  49 import org.onap.aaf.cadi.principal.Kind;
  50 import org.onap.aaf.misc.env.APIException;
  51 import org.onap.aaf.misc.env.util.Chrono;
  52
  53 import aafoauth.v2_0.Introspect;
  54 import aafoauth.v2_0.Token;
  55 import junit.framework.Assert;
  56
  57 public class JU_OAuthTest {
  58
  59     private ByteArrayOutputStream outStream;
  60
  61     private static PropAccess access;
  62     private static TokenClientFactory tcf;
  63
  64     @BeforeClass
  65     public static void setUpBeforeClass()  {
  66         ByteArrayOutputStream outStream = new ByteArrayOutputStream();
  67         System.setOut(new PrintStream(outStream));
  68
  69         access = new PropAccess();
  70         try {
  71             tcf = TokenClientFactory.instance(access);
  72         } catch (Exception e) {
  73             e.printStackTrace();
  74             Assert.fail();
  75         }
  76     }
  77
  78     @AfterClass
  79     public static void tearDownAfterClass() throws Exception {
  80         Field field = SecurityInfoC.class.getDeclaredField("sicMap");
  81         field.setAccessible(true);
  82         field.set(null, new HashMap<>());
  83     }
  84
  85     @Before
  86     public void setUp() throws Exception {
  87         outStream = new ByteArrayOutputStream();
  88         System.setOut(new PrintStream(outStream));
  89     }
  90
  91     @After
  92     public void tearDown() throws Exception {
  93         System.setOut(System.out);
  94     }
  95
  96     @Test
  97     public void testROPCFlowHappy() {
  98         try {
  99             // AAF OAuth
 100             String client_id = access.getProperty(Config.AAF_APPID);
 101             String client_secret = access.getProperty(Config.AAF_APPPASS);
 102             String tokenServiceURL = access.getProperty(Config.AAF_OAUTH2_TOKEN_URL);
 103 //            Assert.assertNotNull(tokenServiceURL);
 104             String tokenIntrospectURL = access.getProperty(Config.AAF_OAUTH2_INTROSPECT_URL);
 105             String tokenAltIntrospectURL = access.getProperty(Config.AAF_ALT_OAUTH2_INTROSPECT_URL);
 106 //            Assert.assertNotNull(tokenIntrospectURL);
 107             final String endServicesURL = access.getProperty(Config.AAF_OAUTH2_HELLO_URL);
 108             String username = access.getProperty("cadi_username");
 109
 110             TokenClient tc;
 111             Result<TimedToken> rtt;
 112             if (true) {
 113                 tc = tcf.newClient(tokenServiceURL, 3000);
 114                 tc.client_creds(client_id,client_secret);
 115                 tc.password(access.getProperty("cadi_username"),access.getProperty("cadi_password"));
 116                 rtt = tc.getToken(Kind.BASIC_AUTH,"org.osaaf.aaf","org.osaaf.test");
 117                 if (rtt.isOK()) {
 118                     print(rtt.value);
 119                     rtt = tc.refreshToken(rtt.value);
 120                     if (rtt.isOK()) {
 121                         print(rtt.value);
 122                         TokenClient ic = tcf.newClient(tokenIntrospectURL,3000);
 123                         ic.client_creds(client_id,client_secret);
 124
 125                         Result<Introspect> ri = ic.introspect(rtt.value.getAccessToken());
 126                         if (ri.isOK()) {
 127                             print(ri.value);
 128                         } else {
 129                             System.out.println(ri.code + ' ' + ri.error);
 130                             Assert.fail(ri.code + ' ' + ri.error);
 131                         }
 132                         TzClient helloClient = tcf.newTzClient(endServicesURL);
 133                         helloClient.setToken(client_id, rtt.value);
 134 //                        String rv = serviceCall(helloClient);
 135 //                        System.out.println(rv);
 136         //                Assert.assertEquals("Hello AAF OAuth2\n",rv);
 137                     } else {
 138                         System.out.println(rtt.code + ' ' + rtt.error);
 139                         Assert.fail(rtt.code + ' ' + rtt.error);
 140                     }
 141                 } else {
 142                     System.out.println(rtt.code + ' ' + rtt.error);
 143                     Assert.fail(rtt.code + ' ' + rtt.error);
 144                 }
 145             }
 146
 147             // ISAM Test
 148             if (true) {
 149                 System.out.println("**** ISAM TEST ****");
 150                 tokenServiceURL=access.getProperty(Config.AAF_ALT_OAUTH2_TOKEN_URL);
 151                 client_id=access.getProperty(Config.AAF_ALT_CLIENT_ID);
 152                 client_secret=access.getProperty(Config.AAF_ALT_CLIENT_SECRET);
 153                 if (tokenServiceURL!=null) {
 154                     tc = tcf.newClient(tokenServiceURL, 3000);
 155                     tc.client_creds(client_id, client_secret);
 156                     int at = username.indexOf('@');
 157
 158                     tc.password(at>=0?username.substring(0, at):username,access.getProperty("cadi_password"));
 159                     rtt = tc.getToken("org.osaaf.aaf","org.osaaf.test");
 160                     if (rtt.isOK()) {
 161                         print(rtt.value);
 162                         rtt = tc.refreshToken(rtt.value);
 163                         if (rtt.isOK()) {
 164                             print(rtt.value);
 165
 166                             tc = tcf.newClient(tokenAltIntrospectURL, 3000);
 167                             tc.client_creds(client_id, client_secret);
 168                             Result<Introspect> rti = tc.introspect(rtt.value.getAccessToken());
 169                             if (rti.isOK()) {
 170                                 System.out.print("Normal ISAM ");
 171                                 print(rti.value);
 172                             } else {
 173                                 System.out.println(rti.code + ' ' + rti.error);
 174                                 Assert.fail(rtt.code + ' ' + rtt.error);
 175                             }
 176
 177                             tc = tcf.newClient(tokenIntrospectURL, 3000);
 178                             tc.client_creds(client_id, client_secret);
 179                             rti = tc.introspect(rtt.value.getAccessToken());
 180                             if (rti.isOK()) {
 181                                 System.out.print("AAF with ISAM Token ");
 182                                 print(rti.value);
 183                             } else {
 184                                 System.out.println(rti.code + ' ' + rti.error);
 185                                 if (rti.code!=404) {
 186                                     Assert.fail(rti.code + ' ' + rti.error);
 187                                 }
 188                             }
 189
 190                             TzClient tzClient = tcf.newTzClient(endServicesURL);
 191                             tzClient.setToken(client_id, rtt.value);
 192                             // Note: this is AAF's "Hello" server
 193                             String rv = serviceCall(tzClient);
 194                             System.out.println(rv);
 195             //                Assert.assertEquals("Hello AAF OAuth2\n",rv);
 196                         } else {
 197                             System.out.println(rtt.code + ' ' + rtt.error);
 198                             Assert.fail(rtt.code + ' ' + rtt.error);
 199                         }
 200                     } else {
 201                         System.out.println(rtt.code + ' ' + rtt.error);
 202                         Assert.fail(rtt.code + ' ' + rtt.error);
 203                     }
 204                 } else {
 205                     Assert.fail(Config.AAF_ALT_OAUTH2_TOKEN_URL + " is required");
 206                 }
 207             }
 208         } catch (Exception e) {
 209 //            Assert.fail();
 210         }
 211     }
 212
 213
 214 //    private TokenClient testROPCFlow(final String url, final String client_id, final String client_secret, String user, String password, final String ... scope) throws Exception {
 215 //        TokenClient tclient = tcf.newClient(url,3000);
 216 //        tclient.client_creds(client_id, client_secret);
 217 //        if (user!=null && password!=null) {
 218 //            tclient.password(user,password);
 219 //        }
 220 //        Result<TimedToken> rt = tclient.getToken(scope);
 221 //        if (rt.isOK()) {
 222 //            print(rt.value);
 223 //            Result<Introspect> rti = tclient.introspect(rt.value.getAccessToken());
 224 //            if (rti.isOK()) {
 225 //                print(rti.value);
 226 //            } else {
 227 //                printAndFail(rti);
 228 //            }
 229 //        } else {
 230 //            printAndFail(rt);
 231 //        }
 232 //        return tclient;
 233 //    }
 234
 235     private String serviceCall(TzClient tzClient) throws Exception {
 236         return tzClient.best(new Retryable<String>() {
 237             @Override
 238             public String code(Rcli<?> client) throws CadiException, ConnectException, APIException {
 239                 Future<String> future = client.read(null,"text/plain");
 240                 if (future.get(3000)) {
 241                     return future.value;
 242                 } else {
 243                     throw new APIException(future.code()  + future.body());
 244                 }
 245             }
 246         });
 247     }
 248 //    private void printAndFail(Result<?> rt) {
 249 //        System.out.printf("HTTP Code %d: %s\n", rt.code, rt.error);
 250 //        Assert.fail(rt.toString());
 251 //    }
 252
 253     private void print(Token t) {
 254         GregorianCalendar exp_date = new GregorianCalendar();
 255         exp_date.add(GregorianCalendar.SECOND, t.getExpiresIn());
 256         System.out.printf("Access Token\n\tToken:\t\t%s\n\tToken Type:\t%s\n\tExpires In:\t%d (%s)\n\tScope:\t\t%s\n\tRefresh Token:\t%s\n",
 257         t.getAccessToken(),
 258         t.getTokenType(),
 259         t.getExpiresIn(),
 260         Chrono.timeStamp(new Date(System.currentTimeMillis()+(t.getExpiresIn()*1000))),
 261         t.getScope(),
 262         t.getRefreshToken());
 263     }
 264
 265     private void print(Introspect ti) {
 266         if (ti==null || ti.getClientId()==null) {
 267             System.out.println("Empty Introspect");
 268             return;
 269         }
 270         Date exp = new Date(ti.getExp()*1000); // seconds
 271         System.out.printf("Introspect\n"
 272                 + "\tAccessToken:\t%s\n"
 273                 + "\tClient-id:\t%s\n"
 274                 + "\tClient Type:\t%s\n"
 275                 + "\tActive:  \t%s\n"
 276                 + "\tUserName:\t%s\n"
 277                 + "\tExpires: \t%d (%s)\n"
 278                 + "\tScope:\t\t%s\n"
 279                 + "\tContent:\t\t%s\n",
 280         ti.getAccessToken(),
 281         ti.getClientId(),
 282         ti.getClientType(),
 283         ti.isActive()?Boolean.TRUE.toString():Boolean.FALSE.toString(),
 284         ti.getUsername(),
 285         ti.getExp(),
 286         Chrono.timeStamp(exp),
 287         ti.getScope(),
 288         ti.getContent()==null?"":ti.getContent());
 289
 290         System.out.println();
 291     }
 292 }