ProtectedRepositoryRegistryTest.java

/**
 * Copyright (c) 2008-2011 Sonatype, Inc.
 * All rights reserved. Includes the third-party code listed at http://www.sonatype.com/products/nexus/attributions.
 *
 * This program is free software: you can redistribute it and/or modify it only under the terms of the GNU Affero General
 * Public License Version 3 as published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License Version 3
 * for more details.
 *
 * You should have received a copy of the GNU Affero General Public License Version 3 along with this program.  If not, see
 * http://www.gnu.org/licenses.
 *
 * Sonatype Nexus (TM) Open Source Version is available from Sonatype, Inc. Sonatype and Sonatype Nexus are trademarks of
 * Sonatype, Inc. Apache Maven is a trademark of the Apache Foundation. M2Eclipse is a trademark of the Eclipse Foundation.
 * All other trademarks are the property of their respective owners.
 */
package org.sonatype.nexus.rest;

import java.io.File;
import java.io.IOException;
import java.net.URL;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Collection;
import java.util.List;

import junit.framework.Assert;

import org.codehaus.plexus.util.FileUtils;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.subject.Subject;
import org.sonatype.nexus.AbstractNexusTestCase;
import org.sonatype.nexus.Nexus;
import org.sonatype.nexus.proxy.NoSuchRepositoryException;
import org.sonatype.nexus.proxy.maven.RepositoryPolicy;
import org.sonatype.nexus.proxy.maven.maven2.Maven2ContentClass;
import org.sonatype.nexus.proxy.registry.RepositoryRegistry;
import org.sonatype.nexus.proxy.repository.GroupRepository;
import org.sonatype.nexus.proxy.repository.Repository;
import org.sonatype.nexus.proxy.target.Target;
import org.sonatype.nexus.proxy.target.TargetRegistry;
import org.sonatype.nexus.security.WebSecurityUtil;
import org.sonatype.nexus.templates.repository.maven.Maven2GroupRepositoryTemplate;
import org.sonatype.nexus.templates.repository.maven.Maven2HostedRepositoryTemplate;
import org.sonatype.nexus.templates.repository.maven.Maven2Maven1ShadowRepositoryTemplate;
import org.sonatype.security.SecuritySystem;
import org.sonatype.security.authentication.AuthenticationException;

public class ProtectedRepositoryRegistryTest
    extends AbstractNexusTestCase
{

    private RepositoryRegistry repositoryRegistry = null;

    private SecuritySystem securitySystem = null;

    private Nexus nexus;

    @Override
    protected boolean loadConfigurationAtSetUp()
    {
        return false;
    }

    @Override
    protected void setUp()
        throws Exception
    {
        super.setUp();

        // copy the security-configuration
        String resource = this.getClass().getName().replaceAll( "\\.", "\\/" ) + "-security-configuration.xml";
        URL url = Thread.currentThread().getContextClassLoader().getResource( resource );
        try
        {
            File securityConfigFile = new File( getConfHomeDir(), "security-configuration.xml" );
            securityConfigFile.getParentFile().mkdirs();
            FileUtils.copyURLToFile( url, securityConfigFile );
        }
        catch ( IOException e )
        {
            throw new IllegalStateException( e );
        }

        // this will trigger config load!
        this.nexus = lookup( Nexus.class );

        this.repositoryRegistry = this.lookup( RepositoryRegistry.class, "protected" );

        this.buildRepository( "repo1" );
        this.buildRepository( "repo2" );

        this.buildGroupRepository( "group1" );
        this.buildGroupRepository( "group2" );

        this.buildShadowRepository( "repo3" );
        this.buildShadowRepository( "repo4" );

        // create a target
        TargetRegistry targetRegistry = this.lookup( TargetRegistry.class );
        Target t1 =
            new Target( "maven2-all", "All (Maven2)", new Maven2ContentClass(), Arrays.asList( new String[] { ".*" } ) );
        targetRegistry.addRepositoryTarget( t1 );
        nexus.getNexusConfiguration().saveConfiguration();

        // setup security
        this.securitySystem = this.lookup( SecuritySystem.class );
        // this.securitySystem.setSecurityEnabled( true );

        // copy the security-configuration
        // String resource = this.getClass().getName().replaceAll( "\\.", "\\/" ) + "-security-configuration.xml";
        // URL url = Thread.currentThread().getContextClassLoader().getResource( resource );
        // FileUtils.copyURLToFile( url, new File( CONF_HOME, "security-configuration.xml" ) );

        // this.securitySystem.start();

        waitForTasksToStop();
    }

    public void testRegistryWithViewAccess()
        throws Exception
    {
        Subject subject = this.loginUser( "repo1user" );

        List<Repository> repositories = this.repositoryRegistry.getRepositories();

        // // this user only has access to repo1, that is all they should see
        Assert.assertEquals( "User should only have access to 'repo1'", 1, repositories.size() );
        Assert.assertEquals( "repo1", repositories.get( 0 ).getId() );

        // logout user
        this.securitySystem.logout( subject );
    }

    public void testRegistryWithViewAccessFacet()
        throws Exception
    {
        Subject subject = this.loginUser( "repo1user" );

        List<Repository> repositories = this.repositoryRegistry.getRepositoriesWithFacet( Repository.class );

        // // this user only has access to repo1, that is all they should see
        Assert.assertEquals( "User should only have access to 'repo1'", 1, repositories.size() );
        Assert.assertEquals( "repo1", repositories.get( 0 ).getId() );

        // logout user
        this.securitySystem.logout( subject );
    }

    public void testRegistryWithViewAccessById()
        throws Exception
    {
        Subject subject = this.loginUser( "repo1user" );

        Repository repository = this.repositoryRegistry.getRepository( "repo1" );

        Assert.assertNotNull( repository );
        Assert.assertEquals( "repo1", repository.getId() );

        // logout user
        this.securitySystem.logout( subject );
    }

    public void testRegistryWithViewAccessByIdNoAccess()
        throws Exception
    {
        Subject subject = this.loginUser( "repo1userNoView" );

        try
        {
            this.repositoryRegistry.getRepository( "repo1" );
            Assert.fail( "expected NoSuchRepositoryAccessException" );
        }
        catch ( NoSuchRepositoryAccessException e )
        {
            // expected
        }
        // logout user
        this.securitySystem.logout( subject );
    }

    public void testRegistryWithViewAccessFacetById()
        throws Exception
    {
        Subject subject = this.loginUser( "repo1user" );

        Repository repository = this.repositoryRegistry.getRepositoryWithFacet( "repo1", Repository.class );

        Assert.assertNotNull( repository );
        Assert.assertEquals( "repo1", repository.getId() );

        // logout user
        this.securitySystem.logout( subject );
    }

    public void testRegistryWithViewAccessFacetByIdNoAccess()
        throws Exception
    {
        Subject subject = this.loginUser( "repo1userNoView" );

        try
        {
            this.repositoryRegistry.getRepositoryWithFacet( "repo1", Repository.class );
            Assert.fail( "expected NoSuchRepositoryAccessException" );
        }
        catch ( NoSuchRepositoryAccessException e )
        {
            // expected
        }
        // logout user
        this.securitySystem.logout( subject );
    }

    public void testRemoveWithAccess()
        throws Exception
    {
        Subject subject = this.loginUser( "repo1user" );

        this.repositoryRegistry.removeRepository( "repo1" );
        try
        {
            this.repositoryRegistry.getRepository( "repo1" );
            Assert.fail( "expected NoSuchRepositoryException" );
        }
        catch ( NoSuchRepositoryException e )
        {
            // expected
        }
        // logout user
        this.securitySystem.logout( subject );
    }

    public void testRemoveWithoutAccess()
        throws Exception
    {
        Subject subject = this.loginUser( "repo1userNoView" );

        try
        {
            this.repositoryRegistry.removeRepository( "repo1" );
            Assert.fail( "expected NoSuchRepositoryAccessException" );
        }
        catch ( NoSuchRepositoryAccessException e )
        {
            // expected
        }
        // logout user
        this.securitySystem.logout( subject );
    }

    public void testRemoveSilentlyWithAccess()
        throws Exception
    {
        Subject subject = this.loginUser( "repo1user" );

        this.repositoryRegistry.removeRepositorySilently( "repo1" );
        try
        {
            this.repositoryRegistry.getRepository( "repo1" );
            Assert.fail( "expected NoSuchRepositoryException" );
        }
        catch ( NoSuchRepositoryException e )
        {
            // expected
        }
        // logout user
        this.securitySystem.logout( subject );
    }

    public void testRemoveSilentlyWithoutAccess()
        throws Exception
    {
        Subject subject = this.loginUser( "repo1userNoView" );

        try
        {
            this.repositoryRegistry.removeRepositorySilently( "repo1" );
            Assert.fail( "expected NoSuchRepositoryAccessException" );
        }
        catch ( NoSuchRepositoryAccessException e )
        {
            // expected
        }
        // logout user
        this.securitySystem.logout( subject );
    }

    public void testGetGroupsWithAccess()
        throws Exception
    {
        Subject subject = this.loginUser( "repoall" );

        Collection<GroupRepository> groups = this.repositoryRegistry.getRepositoriesWithFacet( GroupRepository.class );

        // list should have 2 group repos
        List<String> groupIds = new ArrayList<String>();

        for ( GroupRepository groupRepo : groups )
        {
            groupIds.add( groupRepo.getId() );
        }

        Assert.assertTrue( groupIds.contains( "group1" ) );
        Assert.assertTrue( groupIds.contains( "group2" ) );
        Assert.assertTrue( groupIds.contains( "public" ) );
        Assert.assertEquals( 3, groups.size() );

        // logout user
        this.securitySystem.logout( subject );

    }

    private Repository buildRepository( String repoId )
        throws Exception
    {
        Maven2HostedRepositoryTemplate template =
            (Maven2HostedRepositoryTemplate) nexus.getRepositoryTemplates()
                .getTemplates( Maven2HostedRepositoryTemplate.class, RepositoryPolicy.RELEASE ).pick();

        template.getConfigurableRepository().setIndexable( false );
        template.getConfigurableRepository().setId( repoId );

        return template.create();
    }

    private Repository buildGroupRepository( String repoId )
        throws Exception
    {
        Maven2GroupRepositoryTemplate template =
            (Maven2GroupRepositoryTemplate) nexus.getRepositoryTemplates()
                .getTemplates( Maven2GroupRepositoryTemplate.class ).pick();

        template.getConfigurableRepository().setIndexable( false );
        template.getConfigurableRepository().setId( repoId );

        return template.create();
    }

    private Repository buildShadowRepository( String repoId )
        throws Exception
    {
        Maven2HostedRepositoryTemplate template =
            (Maven2HostedRepositoryTemplate) nexus.getRepositoryTemplates()
                .getTemplates( Maven2HostedRepositoryTemplate.class, RepositoryPolicy.RELEASE ).pick();

        template.getConfigurableRepository().setIndexable( false );
        template.getConfigurableRepository().setId( repoId );

        // just create
        template.create();

        // now for the shadow
        Maven2Maven1ShadowRepositoryTemplate shadowTemplate =
            (Maven2Maven1ShadowRepositoryTemplate) nexus.getRepositoryTemplates()
                .getTemplates( Maven2Maven1ShadowRepositoryTemplate.class ).pick();

        shadowTemplate.getConfigurableRepository().setIndexable( false );
        shadowTemplate.getConfigurableRepository().setId( repoId + "-shadow" );

        shadowTemplate.getExternalConfiguration( true ).setMasterRepositoryId( repoId );

        return shadowTemplate.create();
    }

    private Subject loginUser( String username )
        throws AuthenticationException
    {
        WebSecurityUtil.setupWebContext( username );
        return this.securitySystem.login( new UsernamePasswordToken( username, "" ) );
    }

}