X509CredentialsSha256MatcherTest.java

/*******************************************************************************
 * Copyright French Prime minister Office/SGMAP/DINSIC/Vitam Program (2015-2019)
 *
 * contact.vitam@culture.gouv.fr
 *
 * This software is a computer program whose purpose is to implement a digital archiving back-office system managing
 * high volumetry securely and efficiently.
 *
 * This software is governed by the CeCILL 2.1 license under French law and abiding by the rules of distribution of free
 * software. You can use, modify and/ or redistribute the software under the terms of the CeCILL 2.1 license as
 * circulated by CEA, CNRS and INRIA at the following URL "http://www.cecill.info".
 *
 * As a counterpart to the access to the source code and rights to copy, modify and redistribute granted by the license,
 * users are provided only with a limited warranty and the software's author, the holder of the economic rights, and the
 * successive licensors have only limited liability.
 *
 * In this respect, the user's attention is drawn to the risks associated with loading, using, modifying and/or
 * developing or reproducing the software by the user in light of its specific status of free software, that may mean
 * that it is complicated to manipulate, and that also therefore means that it is reserved for developers and
 * experienced professionals having in-depth computer knowledge. Users are therefore encouraged to load and test the
 * software's suitability as regards their requirements in conditions enabling the security of their systems and/or data
 * to be ensured and, more generally, to use and operate it in the same conditions as regards security.
 *
 * The fact that you are presently reading this means that you have had knowledge of the CeCILL 2.1 license and that you
 * accept its terms.
 *******************************************************************************/
package fr.gouv.vitam.common.auth.core.authc;

import static org.junit.Assert.assertFalse;
import static org.junit.Assert.assertTrue;
import static org.mockito.Mockito.mock;
import static org.mockito.Mockito.when;

import java.math.BigInteger;
import java.security.cert.X509Certificate;
import java.util.HashSet;
import java.util.Set;

import org.junit.Before;
import org.junit.Test;

public class X509CredentialsSha256MatcherTest {
    private X509Certificate cert;
    private X509Certificate cert2;
    private X509AuthenticationToken token;
    private X509CredentialsSha256Matcher match;

    byte[] certBytes = new byte[] {'[', 'B', '@', 1, 4, 0, 'c', 9, 'f', 3, 9};
    byte[] cert2Bytes = new byte[] {'[', 'B', '@', 1, 4, 0, 'c', 9, 'f', 3, 8};
    BigInteger serial = new BigInteger("1000000000000000");

    @Before
    public void setUp() throws Exception {
        cert = mock(X509Certificate.class);
        when(cert.getEncoded()).thenReturn(certBytes);
        when(cert.getSerialNumber()).thenReturn(serial);

        cert2 = mock(X509Certificate.class);
        when(cert2.getEncoded()).thenReturn(cert2Bytes);
        when(cert2.getSerialNumber()).thenReturn(serial);

        final X509Certificate[] clientCertChain = new X509Certificate[] {cert};
        token = new X509AuthenticationToken(clientCertChain, "XXX");

        match = new X509CredentialsSha256Matcher();
    }

    @Test
    public void givenClientCertificateSha256WhenMatchRealmThenReturnTrue() {
        final Set<X509Certificate> grantedIssuers = new HashSet<>();
        grantedIssuers.add(cert);
        final X509AuthenticationInfo info = new X509AuthenticationInfo("username", cert, grantedIssuers, "testRealm");
        assertTrue(match.doCredentialsMatch(token, info));
    }

    @Test
    public void givenClientCertificateSha256WhenNotMatchRealmThenfalse() {
        final Set<X509Certificate> grantedIssuers = new HashSet<>();
        grantedIssuers.add(cert2);
        final X509AuthenticationInfo info = new X509AuthenticationInfo("username", cert2, grantedIssuers, "testRealm");
        assertFalse(match.doCredentialsMatch(token, info));
    }

}