AuthenticationTest.java

/**
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements. See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership. The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License. You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied. See the License for the
 * specific language governing permissions and limitations
 * under the License.
 */
package org.apache.coheigea.cxf.samlsso.authentication;

import java.net.URL;

import javax.ws.rs.core.Response;

import org.apache.coheigea.cxf.samlsso.idp.IdpServer;
import org.apache.coheigea.cxf.samlsso.common.Number;
import org.apache.cxf.jaxrs.client.WebClient;
import org.apache.cxf.testutil.common.AbstractBusClientServerTestBase;
import org.junit.BeforeClass;
import org.w3c.dom.Document;

/**
 * Here the JAX-RS service uses the HTTP redirect binding of SAML SSO to redirect
 * the client to the IdP for authentication. The client is then redirected to the
 * RACS (Request Assertion Consumer Service) which is co-located with the service endpoint.
 * The RACS parses the response from the IdP and then redirects again to the original service.
 */
public class AuthenticationTest extends AbstractBusClientServerTestBase {
    
    private static final String PORT = allocatePort(Server.class);
    static final String IDP_PORT = allocatePort(IdpServer.class);
    
    @BeforeClass
    public static void startServers() throws Exception {
        assertTrue(
                   "Server failed to launch",
                   // run the server in the same process
                   // set this to false to fork
                   launchServer(Server.class, true)
        );
        assertTrue(
                "Server failed to launch",
                // run the server in the same process
                // set this to false to fork
                launchServer(IdpServer.class, true)
        );
    }
    
    @org.junit.Test
    @org.junit.Ignore
    public void testBrowser() throws Exception {
        // https://localhost:9001/doubleit/services/doubleit-rs/25
        System.out.println("https://localhost:" + PORT + "/doubleit/services/25");
        System.out.println("Sleeping...");
        Thread.sleep(5 * 60 * 1000);
    }
   
    @org.junit.Test
    public void testAuthenticatedRequest() throws Exception {

        URL busFile = AuthenticationTest.class.getResource("cxf-client.xml");

        String address = "https://localhost:" + PORT + "/doubleit/services";
        WebClient client = WebClient.create(address, "alice", "security", busFile.toString());
        WebClient.getConfig(client).getHttpConduit().getClient().setAutoRedirect(true);
        WebClient.getConfig(client).getRequestContext().put("http.redirect.max.same.uri.count", "2");
        WebClient.getConfig(client).getRequestContext().put(
                org.apache.cxf.message.Message.MAINTAIN_SESSION, Boolean.TRUE);
        client.accept("application/xml");
        client.path(25);
        
        Response response = client.get();
        assertEquals(response.getStatus(), 200);
        assertEquals(response.readEntity(Number.class).getNumber(), 50);
    }
    
    @org.junit.Test
    public void testUnauthenticatedRequest() throws Exception {
        URL busFile = AuthenticationTest.class.getResource("cxf-client.xml");

        String address = "https://localhost:" + PORT + "/doubleit/services";
        WebClient client = WebClient.create(address, "unknown", "security", busFile.toString());
        WebClient.getConfig(client).getHttpConduit().getClient().setAutoRedirect(true);
        WebClient.getConfig(client).getRequestContext().put("http.redirect.max.same.uri.count", "2");
        WebClient.getConfig(client).getRequestContext().put(
                org.apache.cxf.message.Message.MAINTAIN_SESSION, Boolean.TRUE);
        client.accept("application/xml");
        client.path(25);
        
        Response response = client.get();
        assertEquals(response.getStatus(), 500);
    }
    
    @org.junit.Test
    public void testMetadata() throws Exception {

        URL busFile = AuthenticationTest.class.getResource("cxf-client.xml");

        String address = "https://localhost:" + PORT + "/sso/metadata";
        WebClient client = WebClient.create(address, busFile.toString());
        client.accept("text/xml");
        
        Response response = client.get();
        assertEquals(response.getStatus(), 200);
        Document doc = response.readEntity(Document.class);
        assertEquals("EntityDescriptor", doc.getDocumentElement().getLocalName());
    }
}