Test security and securitySet in CallbackOperation

eclipse · Jun 20, 2022 · d58ec04 · d58ec04
1 parent 2ac736c
commit d58ec04
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 1 deletion.
diff --git a/...rc/main/java/org/eclipse/microprofile/openapi/apps/airlines/resources/ReviewResource.java b/...rc/main/java/org/eclipse/microprofile/openapi/apps/airlines/resources/ReviewResource.java
@@ -41,6 +41,7 @@
 import org.eclipse.microprofile.openapi.annotations.security.OAuthFlows;
 import org.eclipse.microprofile.openapi.annotations.security.OAuthScope;
 import org.eclipse.microprofile.openapi.annotations.security.SecurityRequirement;
+import org.eclipse.microprofile.openapi.annotations.security.SecurityRequirementsSet;
 import org.eclipse.microprofile.openapi.annotations.security.SecurityScheme;
 import org.eclipse.microprofile.openapi.annotations.servers.Server;
 import org.eclipse.microprofile.openapi.annotations.servers.ServerVariable;
@@ -268,7 +269,14 @@ public Response getReviewByAirlineAndUser(
                                                                                                   schema = @Schema(type = SchemaType.ARRAY,
                                                                                                                    implementation = Review.class))),
                                                       extensions = @Extension(name = "x-callback-operation",
-                                                                              value = "test-callback-operation")),
+                                                                              value = "test-callback-operation"),
+                                                      security = @SecurityRequirement(name = "httpTestScheme"),
+                                                      securitySets = {@SecurityRequirementsSet({
+                                                              @SecurityRequirement(name = "testScheme1"),
+                                                              @SecurityRequirement(name = "testScheme2")
+                                                      }),
+                                                              @SecurityRequirementsSet()
+                                                      }),
                       extensions = @Extension(name = "x-callback", value = "test-callback"))
     })
     @Tag(ref = "Reviews")

diff --git a/tck/src/main/java/org/eclipse/microprofile/openapi/tck/AirlinesAppTest.java b/tck/src/main/java/org/eclipse/microprofile/openapi/tck/AirlinesAppTest.java
@@ -564,6 +564,18 @@ public void testSecurityRequirement(String type) {
                         hasEntry(equalTo("userBearerHttp"), empty()))));
     }
 
+    @RunAsClient
+    @Test(dataProvider = "formatProvider")
+    public void testSecuirtyRequirementInCallback(String type) {
+        ValidatableResponse vr = callEndpoint(type);
+        String callbackOpPath =
+                "paths.'/reviews'.post.callbacks.testCallback.'http://localhost:9080/oas3-airlines/reviews'.get";
+        vr.body(callbackOpPath + ".security", containsInAnyOrder(
+                hasKey("httpTestScheme"),
+                allOf(hasKey("testScheme1"), hasKey("testScheme2")),
+                anEmptyMap()));
+    }
+
     @RunAsClient
     @Test(dataProvider = "formatProvider")
     public void testSecuritySchemes(String type) {