cadi/core/src/test/java/org/onap/aaf/cadi/taf/dos/test/JU_DenialOfServiceTaf.java

   1 /*******************************************************************************
   2  * ============LICENSE_START====================================================
   3  * * org.onap.aaf
   4  * * ===========================================================================
   5  * * Copyright © 2017 AT&T Intellectual Property. All rights reserved.
   6  * * ===========================================================================
   7  * * Licensed under the Apache License, Version 2.0 (the "License");
   8  * * you may not use this file except in compliance with the License.
   9  * * You may obtain a copy of the License at
  10  * *
  11  *  *      http://www.apache.org/licenses/LICENSE-2.0
  12  * *
  13  *  * Unless required by applicable law or agreed to in writing, software
  14  * * distributed under the License is distributed on an "AS IS" BASIS,
  15  * * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  16  * * See the License for the specific language governing permissions and
  17  * * limitations under the License.
  18  * * ============LICENSE_END====================================================
  19  * *
  20  * *
  21  ******************************************************************************/
  22 package org.onap.aaf.cadi.taf.dos.test;
  23
  24 import static org.junit.Assert.*;
  25 import static org.hamcrest.CoreMatchers.*;
  26 import static org.mockito.Mockito.*;
  27 import org.junit.*;
  28 import org.mockito.*;
  29
  30 import java.io.BufferedReader;
  31 import java.io.File;
  32 import java.io.FileReader;
  33 import java.io.IOException;
  34 import java.lang.reflect.Field;
  35 import java.util.List;
  36
  37 import javax.servlet.http.HttpServletRequest;
  38 import javax.servlet.http.HttpServletResponse;
  39
  40 import org.onap.aaf.cadi.Access;
  41 import org.onap.aaf.cadi.CachedPrincipal.Resp;
  42 import org.onap.aaf.cadi.CadiException;
  43 import org.onap.aaf.cadi.config.Config;
  44 import org.onap.aaf.cadi.taf.TafResp;
  45 import org.onap.aaf.cadi.Taf.LifeForm;
  46 import org.onap.aaf.cadi.taf.dos.DenialOfServiceTaf;
  47 import org.onap.aaf.cadi.taf.dos.DenialOfServiceTaf.Counter;
  48
  49 public class JU_DenialOfServiceTaf {
  50
  51         @Mock
  52         HttpServletResponse respMock;
  53
  54         @Mock
  55         HttpServletRequest reqMock1;
  56
  57         @Mock
  58         HttpServletRequest reqMock2;
  59
  60         @Mock
  61         HttpServletRequest reqMock3;
  62
  63         @Mock
  64         Access accessMock;
  65
  66         private File dosIPFile;
  67         private File dosIDFile;
  68         private File dosDir;
  69         private final String dosDirName = "test";
  70
  71         private final String id1 = "id1";
  72         private final String id2 = "id2";
  73
  74         private final String ip1 = "111.111.111.111";
  75         private final String ip2 = "222.222.222.222";
  76
  77         @Before
  78         public void setup() throws IOException {
  79                 MockitoAnnotations.initMocks(this);
  80
  81                 dosDir = new File(dosDirName);
  82                 dosDir.mkdirs();
  83                 dosIPFile = new File(dosDirName, "/dosIP");
  84                 dosIDFile = new File(dosDirName, "/dosID");
  85                 dosIPFile.delete();
  86                 dosIDFile.delete();
  87
  88                 when(accessMock.getProperty(Config.AAF_DATA_DIR, null)).thenReturn(dosDirName);
  89                 when(reqMock1.getRemoteAddr()).thenReturn(ip1);
  90                 when(reqMock2.getRemoteAddr()).thenReturn(ip2);
  91
  92                 setPrivateField(DenialOfServiceTaf.class, "deniedIP", null);
  93                 setPrivateField(DenialOfServiceTaf.class, "deniedID", null);
  94                 setPrivateField(DenialOfServiceTaf.class, "dosIP", null);
  95                 setPrivateField(DenialOfServiceTaf.class, "dosID", null);
  96         }
  97
  98         @After
  99         public void tearDown() {
 100                 dosIPFile = new File(dosDirName, "/dosIP");
 101                 dosIDFile = new File(dosDirName, "/dosID");
 102                 dosIPFile.delete();
 103                 dosIDFile.delete();
 104         }
 105
 106         @Test
 107         public void constructorTest() throws CadiException {
 108                 @SuppressWarnings("unused")
 109                 DenialOfServiceTaf dost;
 110
 111                 // coverage...
 112                 when(accessMock.getProperty(Config.AAF_DATA_DIR, null)).thenReturn(null);
 113                 dost = new DenialOfServiceTaf(accessMock);
 114
 115                 when(accessMock.getProperty(Config.AAF_DATA_DIR, null)).thenReturn(dosDirName);
 116                 dost = new DenialOfServiceTaf(accessMock);
 117
 118                 // more coverage...
 119                 dost = new DenialOfServiceTaf(accessMock);
 120
 121                 // more coverage...
 122                 setPrivateField(DenialOfServiceTaf.class, "dosID", null);
 123                 dost = new DenialOfServiceTaf(accessMock);
 124         }
 125
 126         @Test
 127         public void validateTest() throws CadiException {
 128                 DenialOfServiceTaf dost;
 129                 TafResp tafResp;
 130
 131                 dost = new DenialOfServiceTaf(accessMock);
 132                 tafResp = dost.validate(LifeForm.SBLF, reqMock1, respMock);
 133
 134                 assertThat(tafResp.desc(), is("Not processing this transaction: This Transaction is not denied"));
 135                 assertThat(tafResp.taf(), is("DenialOfServiceTaf"));
 136
 137                 assertThat(DenialOfServiceTaf.denyIP(ip1), is(true));
 138
 139                 tafResp = dost.validate(LifeForm.SBLF, reqMock1, respMock);
 140                 assertThat(tafResp.desc(), is(ip1 + " is on the IP Denial list"));
 141
 142                 tafResp = dost.validate(LifeForm.SBLF, reqMock2, respMock);
 143                 assertThat(tafResp.desc(), is("Not processing this transaction: This Transaction is not denied"));
 144                 assertThat(tafResp.taf(), is("DenialOfServiceTaf"));
 145         }
 146
 147         @Test
 148         public void revalidateTest() throws CadiException {
 149                 DenialOfServiceTaf dost = new DenialOfServiceTaf(accessMock);
 150                 Resp resp = dost.revalidate(null, null);
 151                 assertThat(resp, is(Resp.NOT_MINE));
 152         }
 153
 154         @Test
 155         public void denyIPTest() throws CadiException {
 156                 assertThat(DenialOfServiceTaf.isDeniedIP(ip1), is(nullValue()));
 157                 assertThat(DenialOfServiceTaf.denyIP(ip1), is(true));  // true because it's been added
 158                 assertThat(DenialOfServiceTaf.denyIP(ip2), is(true));  // true because it's been added
 159                 assertThat(DenialOfServiceTaf.denyIP(ip1), is(false)); // false because it's already been added
 160                 assertThat(DenialOfServiceTaf.denyIP(ip2), is(false)); // false because it's already been added
 161
 162                 Counter counter;
 163                 counter = DenialOfServiceTaf.isDeniedIP(ip1);
 164                 assertThat(counter.getName(), is(ip1));
 165                 assertThat(counter.getCount(), is(0));
 166                 assertThat(counter.getLast(), is(0L));
 167                 assertThat(counter.toString(), is(ip1 + " is on the denied list, but has not attempted Access" ));
 168
 169                 DenialOfServiceTaf dost = new DenialOfServiceTaf(accessMock);
 170                 dost.validate(LifeForm.SBLF, reqMock1, respMock);
 171                 long approxTime = System.currentTimeMillis();
 172
 173                 counter = DenialOfServiceTaf.isDeniedIP(ip1);
 174                 assertThat(counter.getName(), is(ip1));
 175                 assertThat(counter.getCount(), is(1));
 176                 assertThat((Math.abs(approxTime - counter.getLast()) < 10), is(true));
 177                 assertThat(counter.toString().contains(ip1), is(true));
 178                 assertThat(counter.toString().contains(" has been denied 1 times since "), is(true));
 179                 assertThat(counter.toString().contains(".  Last denial was "), is(true));
 180
 181                 // coverage...
 182                 dost.validate(LifeForm.SBLF, reqMock1, respMock);
 183
 184                 assertThat(DenialOfServiceTaf.removeDenyIP(ip1), is(true));
 185                 assertThat(DenialOfServiceTaf.removeDenyIP(ip1), is(false));
 186                 assertThat(DenialOfServiceTaf.removeDenyIP(ip2), is(true));
 187                 assertThat(DenialOfServiceTaf.removeDenyIP(ip2), is(false));
 188         }
 189
 190         @Test
 191         public void denyIDTest() throws CadiException {
 192                 assertThat(DenialOfServiceTaf.isDeniedID(id1), is(nullValue()));
 193                 assertThat(DenialOfServiceTaf.denyID(id1), is(true));  // true because it's been added
 194                 assertThat(DenialOfServiceTaf.denyID(id2), is(true));  // true because it's been added
 195                 assertThat(DenialOfServiceTaf.denyID(id1), is(false)); // false because it's already been added
 196                 assertThat(DenialOfServiceTaf.denyID(id2), is(false)); // false because it's already been added
 197
 198                 Counter counter;
 199                 counter = DenialOfServiceTaf.isDeniedID(id1);
 200                 assertThat(counter.getName(), is(id1));
 201                 assertThat(counter.getCount(), is(0));
 202                 assertThat(counter.getLast(), is(0L));
 203
 204                 assertThat(DenialOfServiceTaf.removeDenyID(id1), is(true));
 205                 assertThat(DenialOfServiceTaf.removeDenyID(id1), is(false));
 206                 assertThat(DenialOfServiceTaf.removeDenyID(id2), is(true));
 207                 assertThat(DenialOfServiceTaf.removeDenyID(id2), is(false));
 208         }
 209
 210         @Test
 211         public void reportTest() throws CadiException {
 212                 DenialOfServiceTaf dost = new DenialOfServiceTaf(accessMock);
 213                 List<String> denials = dost.report();
 214                 assertThat(denials.size(), is(0));
 215
 216                 DenialOfServiceTaf.denyID(id1);
 217                 DenialOfServiceTaf.denyID(id2);
 218
 219                 DenialOfServiceTaf.denyIP(ip1);
 220                 DenialOfServiceTaf.denyIP(ip2);
 221
 222                 denials = dost.report();
 223                 assertThat(denials.size(), is(4));
 224                 for (String denied : denials) {
 225                         switch (denied.split(" ", 2)[0]) {
 226                                 case ip1:
 227                                 case ip2:
 228                                 case id1:
 229                                 case id2:
 230                                         break;
 231                                 default:
 232                                         fail("The line: [" + denied + "] shouldn't be in the report");
 233                         }
 234                 }
 235         }
 236
 237         @Test
 238         public void respDenyIDTest() {
 239                 TafResp tafResp = DenialOfServiceTaf.respDenyID(accessMock, id1);
 240                 assertThat(tafResp.desc(), is(id1 + " is on the Identity Denial list"));
 241         }
 242
 243         @Test
 244         public void ipFileIOTest() throws CadiException, IOException {
 245                 @SuppressWarnings("unused")
 246                 DenialOfServiceTaf dost;
 247
 248                 dosIPFile.createNewFile();
 249
 250                 // coverage...
 251                 DenialOfServiceTaf.denyIP(ip1);
 252                 DenialOfServiceTaf.removeDenyIP(ip1);
 253
 254                 dost = new DenialOfServiceTaf(accessMock);
 255                 DenialOfServiceTaf.denyIP(ip1);
 256                 DenialOfServiceTaf.denyIP(ip2);
 257                 // coverage...
 258                 DenialOfServiceTaf.denyIP(ip2);
 259
 260                 String contents = readContentsFromFile(dosIPFile);
 261                 assertThat(contents.contains(ip1), is(true));
 262                 assertThat(contents.contains(ip2), is(true));
 263
 264                 // Removing all ips should delete the file
 265                 assertThat(dosIPFile.exists(), is(true));
 266                 DenialOfServiceTaf.removeDenyIP(ip1);
 267                 DenialOfServiceTaf.removeDenyIP(ip2);
 268                 assertThat(dosIPFile.exists(), is(false));
 269
 270                 dosIPFile.createNewFile();
 271
 272                 DenialOfServiceTaf.denyIP(ip1);
 273                 DenialOfServiceTaf.denyIP(ip2);
 274
 275                 setPrivateField(DenialOfServiceTaf.class, "dosIP", null);
 276                 dost = new DenialOfServiceTaf(accessMock);
 277
 278                 contents = readContentsFromFile(dosIPFile);
 279                 assertThat(contents.contains(ip1), is(true));
 280                 assertThat(contents.contains(ip2), is(true));
 281
 282                 dosIPFile.delete();
 283
 284                 // coverage...
 285                 setPrivateField(DenialOfServiceTaf.class, "deniedIP", null);
 286                 DenialOfServiceTaf.denyIP(ip1);
 287                 dosIPFile.delete();
 288                 DenialOfServiceTaf.removeDenyIP(ip1);
 289
 290                 // coverage...
 291                 dosIPFile.delete();
 292                 setPrivateField(DenialOfServiceTaf.class, "dosIP", null);
 293                 dost = new DenialOfServiceTaf(accessMock);
 294         }
 295
 296         @Test
 297         public void idFileIOTest() throws CadiException, IOException {
 298                 @SuppressWarnings("unused")
 299                 DenialOfServiceTaf dost;
 300
 301                 dosIDFile.createNewFile();
 302
 303                 // coverage...
 304                 DenialOfServiceTaf.denyID(id1);
 305                 DenialOfServiceTaf.removeDenyID(id1);
 306
 307                 dost = new DenialOfServiceTaf(accessMock);
 308                 DenialOfServiceTaf.denyID(id1);
 309                 DenialOfServiceTaf.denyID(id2);
 310                 // coverage...
 311                 DenialOfServiceTaf.denyID(id2);
 312
 313                 String contents = readContentsFromFile(dosIDFile);
 314                 assertThat(contents.contains(id1), is(true));
 315                 assertThat(contents.contains(id2), is(true));
 316
 317                 // Removing all ids should delete the file
 318                 assertThat(dosIDFile.exists(), is(true));
 319                 DenialOfServiceTaf.removeDenyID(id1);
 320                 DenialOfServiceTaf.removeDenyID(id2);
 321                 assertThat(dosIDFile.exists(), is(false));
 322
 323                 dosIDFile.createNewFile();
 324
 325                 DenialOfServiceTaf.denyID(id1);
 326                 DenialOfServiceTaf.denyID(id2);
 327
 328                 setPrivateField(DenialOfServiceTaf.class, "dosID", null);
 329                 dost = new DenialOfServiceTaf(accessMock);
 330
 331                 contents = readContentsFromFile(dosIDFile);
 332                 assertThat(contents.contains(id1), is(true));
 333                 assertThat(contents.contains(id2), is(true));
 334
 335                 dosIDFile.delete();
 336
 337                 // coverage...
 338                 setPrivateField(DenialOfServiceTaf.class, "deniedID", null);
 339                 DenialOfServiceTaf.denyID(id1);
 340                 dosIDFile.delete();
 341                 DenialOfServiceTaf.removeDenyID(id1);
 342
 343                 // coverage...
 344                 dosIDFile.delete();
 345                 setPrivateField(DenialOfServiceTaf.class, "dosID", null);
 346                 dost = new DenialOfServiceTaf(accessMock);
 347         }
 348
 349         private void setPrivateField(Class<?> clazz, String fieldName, Object value) {
 350                 try {
 351                         Field field = clazz.getDeclaredField(fieldName);
 352                         field.setAccessible(true);
 353                         field.set(null, value);
 354                         field.setAccessible(false);
 355                 } catch(Exception e) {
 356                         System.err.println("Could not set field [" + fieldName + "] to " + value);
 357                 }
 358         }
 359
 360         private String readContentsFromFile(File file) throws IOException {
 361                 BufferedReader br = new BufferedReader(new FileReader(file));
 362                 StringBuilder sb = new StringBuilder();
 363                 String line;
 364                 while ((line = br.readLine()) != null) {
 365                         sb.append(line);
 366                 }
 367                 br.close();
 368                 return sb.toString();
 369         }
 370
 371 }