UserRoleRestControllerTest.java

/* (c) 2015 Open Source Geospatial Foundation - all rights reserved
 * This code is licensed under the GPL 2.0 license, available at the root
 * application directory.
 */
package org.geoserver.geofence.rest;

import java.io.IOException;

import org.geoserver.geofence.GeofenceBaseTest;
import org.geoserver.geofence.rest.xml.JaxbGroupList;
import org.geoserver.geofence.rest.xml.JaxbRoleList;
import org.geoserver.geofence.rest.xml.JaxbUser;
import org.geoserver.geofence.rest.xml.JaxbUserList;
import org.geoserver.security.validation.PasswordPolicyException;
import org.junit.Test;

public class UserRoleRestControllerTest extends GeofenceBaseTest {
    
    private static final String USER_SERVICE = "default";

    protected UsersRestController usersController;

    protected RolesRestController rolesController;    

    @Override
    public void oneTimeSetUp() throws Exception {
        setValidating(true);
        super.oneTimeSetUp();
        usersController = (UsersRestController) applicationContext.getBean("usersRestController");
        rolesController = (RolesRestController) applicationContext.getBean("rolesRestController");
    }

    @Test
    public void test() throws PasswordPolicyException, IOException {
        
        JaxbUser user = new JaxbUser();
        user.setUserName("pipo");
        user.setPassword("secret");
        user.setEnabled(true);
        
        usersController.insertUser(USER_SERVICE, user);
        usersController.insertGroup(USER_SERVICE, "clowns");
        usersController.insertGroup(USER_SERVICE, "circus");
        usersController.associateUserToGroup(USER_SERVICE, "pipo", "clowns");
        usersController.associateUserToGroup(USER_SERVICE, "pipo", "circus");
        
        JaxbUserList users = usersController.getUsers(USER_SERVICE);
        boolean found = false;
        for (JaxbUser u : users.getUsers()) {
            if ("pipo".equals(u.getUserName())) {
                assertTrue(u.isEnabled());
                found = true;
            }
        }
        assertTrue(found);
        
        users = usersController.getUsersFromGroup(USER_SERVICE, "clowns");
        found = false;
        for (JaxbUser u : users.getUsers()) {
            if ("pipo".equals(u.getUserName())) {
                assertTrue(u.isEnabled());
                found = true;
            }
        }
        assertTrue(found);
        
        JaxbGroupList groups = usersController.getGroupsFromUser(USER_SERVICE, "pipo");
        assertEquals(2, groups.getGroups().size());
        assertTrue(groups.getGroups().contains("clowns"));
        assertTrue(groups.getGroups().contains("circus"));
        
        usersController.disassociateUserFromGroup(USER_SERVICE, "pipo", "circus");
        groups = usersController.getGroupsFromUser(USER_SERVICE, "pipo");
        assertEquals(1, groups.getGroups().size());
        assertTrue(groups.getGroups().contains("clowns"));
        assertFalse(groups.getGroups().contains("circus"));
        
        usersController.deleteGroup(USER_SERVICE, "circus");
        assertEquals(1, groups.getGroups().size());
        assertTrue(groups.getGroups().contains("clowns"));
        assertFalse(groups.getGroups().contains("circus"));
        
        user = new JaxbUser();
        user.setEnabled(false);       
        usersController.updateUser(USER_SERVICE, "pipo", user);
        users = usersController.getUsers(USER_SERVICE);
        found = false;
        for (JaxbUser u : users.getUsers()) {
            if ("pipo".equals(u.getUserName())) {
                assertFalse(u.isEnabled());
                found = true;
            }
        }
        assertTrue(found);
        
        rolesController.insert("vozen");
        rolesController.insert("kwiestenbiebel");
        users = usersController.getUsers(USER_SERVICE);
        JaxbRoleList roles = rolesController.get();
        assertTrue(roles.getRoles().contains("vozen"));
        assertTrue(roles.getRoles().contains("kwiestenbiebel"));
        
        rolesController.associate( "vozen", "pipo");
        rolesController.associate( "kwiestenbiebel", "pipo");
                
        roles = rolesController.getUser("pipo");
        assertEquals(2, roles.getRoles().size());
        assertTrue(roles.getRoles().contains("vozen"));
        assertTrue(roles.getRoles().contains("kwiestenbiebel"));
                
        rolesController.disassociate("kwiestenbiebel", "pipo");
        roles = rolesController.getUser("pipo");
        assertEquals(1, roles.getRoles().size());
        assertTrue(roles.getRoles().contains("vozen"));
        assertFalse(roles.getRoles().contains("kwiestenbiebel"));
        
        rolesController.delete( "kwiestenbiebel");
        assertEquals(1, roles.getRoles().size());
        assertTrue(roles.getRoles().contains("vozen"));
        assertFalse(roles.getRoles().contains("kwiestenbiebel"));        
        
        usersController.deleteUser(USER_SERVICE, "pipo");
        users = usersController.getUsers(USER_SERVICE);
        found = false;
        for (JaxbUser u : users.getUsers()) {
            if ("pipo".equals(u.getUserName())) {
                found = true;
            }
        }
        assertFalse(found);
        
        //not found errors - will be translated by spring exception handler to code 404 
        boolean notfound = false;
        try {
        	usersController.getUsers("blabla");
        } catch (IllegalArgumentException e) {
        	notfound = true;
        }
        assertTrue(notfound);
        
        notfound = false;
        try {
        	usersController.getGroupsFromUser(USER_SERVICE, "niemand");
        } catch (IllegalArgumentException e) {
        	notfound = true;
        }
        assertTrue(notfound);
        

        notfound = false;
        try {
        	usersController.getUsersFromGroup(USER_SERVICE, "onbestaand");
        } catch (IllegalArgumentException e) {
        	notfound = true;
        }
        assertTrue(notfound);


        notfound = false;
        try {
        	rolesController.delete("onbestaand");
        } catch (IllegalArgumentException e) {
        	notfound = true;
        }
        assertTrue(notfound);
    }

}