TokenAdminEndpointsTests.java

/*
 * Cloud Foundry 2012.02.03 Beta
 * Copyright (c) [2009-2012] VMware, Inc. All Rights Reserved.
 *
 * This product is licensed to you under the Apache License, Version 2.0 (the "License").
 * You may not use this product except in compliance with the License.
 *
 * This product includes a number of subcomponents with
 * separate copyright notices and license terms. Your use of these
 * subcomponents is subject to the terms and conditions of the
 * subcomponent's license, as noted in the LICENSE file.
 */

package org.cloudfoundry.identity.uaa.oauth;

import static org.junit.Assert.assertEquals;
import static org.junit.Assert.assertNotNull;

import java.util.Collection;
import java.util.Collections;

import org.cloudfoundry.identity.uaa.message.SimpleMessage;
import org.junit.Test;
import org.mockito.Mockito;
import org.springframework.security.access.AccessDeniedException;
import org.springframework.security.authentication.TestingAuthenticationToken;
import org.springframework.security.crypto.password.StandardPasswordEncoder;
import org.springframework.security.oauth2.common.DefaultOAuth2AccessToken;
import org.springframework.security.oauth2.common.OAuth2AccessToken;
import org.springframework.security.oauth2.provider.AuthorizationRequest;
import org.springframework.security.oauth2.provider.DefaultAuthorizationRequest;
import org.springframework.security.oauth2.provider.OAuth2Authentication;
import org.springframework.security.oauth2.provider.token.ConsumerTokenServices;

/**
 * @author Dave Syer
 * 
 */
public class TokenAdminEndpointsTests {

	private TokenAdminEndpoints endpoints = new TokenAdminEndpoints();

	private ConsumerTokenServices tokenServices = Mockito.mock(ConsumerTokenServices.class);

	private AuthorizationRequest authorizationRequest = new DefaultAuthorizationRequest(Collections.singletonMap(
			"client_id", "foo"));

	{
		endpoints.setTokenServices(tokenServices);
	}

	@Test
	public void testListTokensForOAuth2User() throws Exception {
		Mockito.when(tokenServices.findTokensByUserName("marissa")).thenReturn(
				Collections.<OAuth2AccessToken> singleton(new DefaultOAuth2AccessToken("FOO")));
		Collection<OAuth2AccessToken> tokens = endpoints.listTokensForUser("marissa", new OAuth2Authentication(
				authorizationRequest, new TestingAuthenticationToken("marissa", "")));
		assertEquals(1, tokens.size());
		assertNotNull(tokens.iterator().next().getAdditionalInformation().get(JwtTokenEnhancer.TOKEN_ID));
	}

	@Test
	public void testListTokensForOAuth2UserWithClientId() throws Exception {
		Mockito.when(tokenServices.findTokensByUserName("marissa")).thenReturn(
				Collections.<OAuth2AccessToken> singleton(new DefaultOAuth2AccessToken("FOO")));
		Mockito.when(tokenServices.getClientId("FOO")).thenReturn("foo");
		Collection<OAuth2AccessToken> tokens = endpoints.listTokensForUser("marissa", new OAuth2Authentication(
				authorizationRequest, new TestingAuthenticationToken("marissa", "")));
		assertEquals(1, tokens.size());
		assertNotNull(tokens.iterator().next().getAdditionalInformation().get(JwtTokenEnhancer.TOKEN_ID));
	}

	@Test
	public void testListTokensForOAuth2UserByClient() throws Exception {
		Collection<OAuth2AccessToken> tokens = endpoints.listTokensForUser("marissa", new OAuth2Authentication(
				authorizationRequest, null));
		assertEquals(0, tokens.size());
	}

	@Test
	public void testListTokensForUser() throws Exception {
		Collection<OAuth2AccessToken> tokens = endpoints.listTokensForUser("marissa", new TestingAuthenticationToken(
				"marissa", ""));
		assertEquals(0, tokens.size());
	}

	@Test
	public void testRevokeTokenForUser() throws Exception {
		Mockito.when(tokenServices.findTokensByUserName("marissa")).thenReturn(
				Collections.<OAuth2AccessToken> singleton(new DefaultOAuth2AccessToken("FOO")));
		Mockito.when(tokenServices.revokeToken("FOO")).thenReturn(true);
		SimpleMessage result = endpoints.revokeUserToken("marissa", new StandardPasswordEncoder().encode("FOO"),
				new TestingAuthenticationToken("marissa", ""));
		assertEquals("ok", result.getStatus());
	}

	@Test
	public void testRevokeTokenForUserWithTokenId() throws Exception {
		DefaultOAuth2AccessToken token = new DefaultOAuth2AccessToken("FOO");
		token.setAdditionalInformation(Collections.<String, Object> singletonMap(JwtTokenEnhancer.TOKEN_ID, "BAR"));
		Mockito.when(tokenServices.findTokensByUserName("marissa")).thenReturn(
				Collections.<OAuth2AccessToken> singleton(token));
		Mockito.when(tokenServices.revokeToken("FOO")).thenReturn(true);
		SimpleMessage result = endpoints.revokeUserToken("marissa", "BAR", new TestingAuthenticationToken(
				"marissa", ""));
		assertEquals("ok", result.getStatus());
	}

	@Test(expected=NoSuchTokenException.class)
	public void testRevokeInvalidTokenForUser() throws Exception {
		OAuth2AccessToken token = new DefaultOAuth2AccessToken("BAR");
		Mockito.when(tokenServices.findTokensByUserName("marissa")).thenReturn(Collections.singleton(token));
		SimpleMessage result = endpoints.revokeUserToken("marissa", "FOO", new TestingAuthenticationToken(
				"marissa", ""));
		assertEquals("ok", result.getStatus());
	}

	@Test(expected=NoSuchTokenException.class)
	public void testRevokeNullTokenForUser() throws Exception {
		SimpleMessage result = endpoints.revokeUserToken("marissa", null, new TestingAuthenticationToken("marissa",
				""));
		assertEquals("ok", result.getStatus());
	}

	@Test(expected = AccessDeniedException.class)
	public void testListTokensForWrongUser() throws Exception {
		Collection<OAuth2AccessToken> tokens = endpoints.listTokensForUser("barry", new TestingAuthenticationToken(
				"marissa", ""));
		assertEquals(0, tokens.size());
	}

	@Test(expected = AccessDeniedException.class)
	public void testListTokensForWrongOAuth2User() throws Exception {
		Collection<OAuth2AccessToken> tokens = endpoints.listTokensForUser("barry", new OAuth2Authentication(
				authorizationRequest, new TestingAuthenticationToken("marissa", "")));
		assertEquals(0, tokens.size());
	}

	@Test
	public void testListTokensForClient() throws Exception {
		Collection<OAuth2AccessToken> tokens = endpoints.listTokensForClient("foo", new OAuth2Authentication(
				authorizationRequest, null));
		assertEquals(0, tokens.size());
	}

	@Test(expected = AccessDeniedException.class)
	public void testListTokensForWrongClient() throws Exception {
		Collection<OAuth2AccessToken> tokens = endpoints.listTokensForClient("bar", new OAuth2Authentication(
				authorizationRequest, null));
		assertEquals(0, tokens.size());
	}

	@Test
	public void testRevokeTokenForClient() throws Exception {
		Mockito.when(tokenServices.findTokensByClientId("foo")).thenReturn(
				Collections.<OAuth2AccessToken> singleton(new DefaultOAuth2AccessToken("FOO")));
		Mockito.when(tokenServices.revokeToken("FOO")).thenReturn(true);
		SimpleMessage result = endpoints.revokeClientToken("foo", new StandardPasswordEncoder().encode("FOO"),
				new TestingAuthenticationToken("foo", ""));
		assertEquals("ok", result.getStatus());
	}

	@Test(expected=NoSuchTokenException.class)
	public void testRevokeInvalidTokenForClient() throws Exception {
		SimpleMessage result = endpoints.revokeClientToken("foo", "FOO", new TestingAuthenticationToken("foo", ""));
		assertEquals("ok", result.getStatus());
	}

}