/* * Copyright 2005-2011 the original author or authors. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package org.springframework.ws.soap.security.xwss; import javax.xml.soap.MessageFactory; import javax.xml.soap.SOAPMessage; import org.springframework.ws.context.DefaultMessageContext; import org.springframework.ws.context.MessageContext; import org.springframework.ws.soap.SoapMessage; import org.springframework.ws.soap.saaj.SaajSoapMessage; import org.springframework.ws.soap.saaj.SaajSoapMessageFactory; import org.springframework.ws.soap.security.WsSecurityValidationException; import org.junit.Before; import org.junit.Test; import static org.junit.Assert.*; public class XwsSecurityInterceptorTest { private MessageFactory messageFactory; @Before public void setUp() throws Exception { messageFactory = MessageFactory.newInstance(); } @Test public void testHandleServerRequest() throws Exception { final SOAPMessage request = messageFactory.createMessage(); final SOAPMessage validatedRequest = messageFactory.createMessage(); XwsSecurityInterceptor interceptor = new XwsSecurityInterceptor() { @Override protected void secureMessage(SoapMessage soapMessage, MessageContext messageContext) throws XwsSecuritySecurementException { fail("secure not expected"); } @Override protected void validateMessage(SoapMessage message, MessageContext messageContext) throws WsSecurityValidationException { SaajSoapMessage saajSoapMessage = (SaajSoapMessage) message; assertEquals("Invalid message", request, saajSoapMessage.getSaajMessage()); saajSoapMessage.setSaajMessage(validatedRequest); } }; MessageContext context = new DefaultMessageContext(new SaajSoapMessage(request), new SaajSoapMessageFactory(messageFactory)); interceptor.handleRequest(context, null); assertEquals("Invalid request", validatedRequest, ((SaajSoapMessage) context.getRequest()).getSaajMessage()); } @Test public void testHandleServerResponse() throws Exception { final SOAPMessage securedResponse = messageFactory.createMessage(); final boolean[] cleanupCalled = new boolean[1]; cleanupCalled[0] = false; XwsSecurityInterceptor interceptor = new XwsSecurityInterceptor() { @Override protected void secureMessage(SoapMessage message, MessageContext messageContext) throws XwsSecuritySecurementException { SaajSoapMessage saajSoapMessage = (SaajSoapMessage) message; saajSoapMessage.setSaajMessage(securedResponse); } @Override protected void validateMessage(SoapMessage soapMessage, MessageContext messageContext) throws WsSecurityValidationException { fail("validate not expected"); } @Override protected void cleanUp() { cleanupCalled[0] = true; } }; SOAPMessage request = messageFactory.createMessage(); MessageContext context = new DefaultMessageContext(new SaajSoapMessage(request), new SaajSoapMessageFactory(messageFactory)); context.getResponse(); interceptor.handleResponse(context, null); interceptor.afterCompletion(context, null, null); assertEquals("Invalid response", securedResponse, ((SaajSoapMessage) context.getResponse()).getSaajMessage()); assertTrue("Cleanup not called", cleanupCalled[0]); } @Test public void testHandleServerFault() throws Exception { final boolean[] cleanupCalled = new boolean[1]; cleanupCalled[0] = false; XwsSecurityInterceptor interceptor = new XwsSecurityInterceptor() { @Override protected void cleanUp() { cleanupCalled[0] = true; } }; SOAPMessage request = messageFactory.createMessage(); MessageContext context = new DefaultMessageContext(new SaajSoapMessage(request), new SaajSoapMessageFactory(messageFactory)); context.getResponse(); interceptor.handleFault(context, null); interceptor.afterCompletion(context, null, null); assertTrue("Cleanup not called", cleanupCalled[0]); } @Test public void testHandleClientRequest() throws Exception { final SOAPMessage request = messageFactory.createMessage(); final SOAPMessage securedRequest = messageFactory.createMessage(); XwsSecurityInterceptor interceptor = new XwsSecurityInterceptor() { @Override protected void secureMessage(SoapMessage soapMessage, MessageContext messageContext) throws XwsSecuritySecurementException { SaajSoapMessage saajSoapMessage = (SaajSoapMessage) soapMessage; assertEquals("Invalid message", request, saajSoapMessage.getSaajMessage()); saajSoapMessage.setSaajMessage(securedRequest); } @Override protected void validateMessage(SoapMessage message, MessageContext messageContext) throws WsSecurityValidationException { fail("validate not expected"); } }; MessageContext context = new DefaultMessageContext(new SaajSoapMessage(request), new SaajSoapMessageFactory(messageFactory)); interceptor.handleRequest(context); assertEquals("Invalid request", securedRequest, ((SaajSoapMessage) context.getRequest()).getSaajMessage()); } @Test public void testHandleClientResponse() throws Exception { final SOAPMessage validatedResponse = messageFactory.createMessage(); XwsSecurityInterceptor interceptor = new XwsSecurityInterceptor() { @Override protected void secureMessage(SoapMessage message, MessageContext messageContext) throws XwsSecuritySecurementException { fail("secure not expected"); } @Override protected void validateMessage(SoapMessage soapMessage, MessageContext messageContext) throws WsSecurityValidationException { SaajSoapMessage saajSoapMessage = (SaajSoapMessage) soapMessage; saajSoapMessage.setSaajMessage(validatedResponse); } }; SOAPMessage request = messageFactory.createMessage(); MessageContext context = new DefaultMessageContext(new SaajSoapMessage(request), new SaajSoapMessageFactory(messageFactory)); context.getResponse(); interceptor.handleResponse(context); assertEquals("Invalid response", validatedResponse, ((SaajSoapMessage) context.getResponse()).getSaajMessage()); } }