/* * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER. * * Copyright (c) 1997-2017 Oracle and/or its affiliates. All rights reserved. * * The contents of this file are subject to the terms of either the GNU * General Public License Version 2 only ("GPL") or the Common Development * and Distribution License("CDDL") (collectively, the "License"). You * may not use this file except in compliance with the License. You can * obtain a copy of the License at * https://oss.oracle.com/licenses/CDDL+GPL-1.1 * or LICENSE.txt. See the License for the specific * language governing permissions and limitations under the License. * * When distributing the software, include this License Header Notice in each * file and include the License file at LICENSE.txt. * * GPL Classpath Exception: * Oracle designates this particular file as subject to the "Classpath" * exception as provided by Oracle in the GPL Version 2 section of the License * file that accompanied this code. * * Modifications: * If applicable, add the following below the License Header, with the fields * enclosed by brackets [] replaced by your own identifying information: * "Portions Copyright [year] [name of copyright owner]" * * Contributor(s): * If you wish your version of this file to be governed by only the CDDL or * only the GPL Version 2, indicate your decision by adding "[Contributor] * elects to include this software in this distribution under the [CDDL or GPL * Version 2] license." If you don't indicate a single choice of license, a * recipient has the option to distribute your version of this file under * either the CDDL, the GPL Version 2 or to extend the choice of license to * its licensees as provided above. However, if you add GPL Version 2 code * and therefore, elected the GPL Version 2 license, then the option applies * only if the new code is made subject to such option by the copyright * holder. */ import java.io.*; import java.net.*; import com.sun.ejte.ccl.reporter.*; /* * Unit test for: * * https://glassfish.dev.java.net/issues/show_bug.cgi?id=3823 * ("Make 'Secure' flag of JSESSIONIDSSO cookie configurable") * * This test sets both the 'sso-enabled' and 'ssoCookieSecure' properties * of the virtual-server named 'server' to true, and expects that * the response contains a JSESSIONIDSSO cookie with a 'Secure' flag. */ public class WebTest { private static final String TEST_NAME = "single-sign-on-cookie-secure"; private static final String SSO_COOKIE = "Set-Cookie: JSESSIONIDSSO"; private static SimpleReporterAdapter stat = new SimpleReporterAdapter("appserv-tests"); private String host; private String port; private String contextRoot; private String adminUser; private String adminPassword; public WebTest(String[] args) { host = args[0]; port = args[1]; contextRoot = args[2]; adminUser = args[3]; adminPassword = args[4]; } public static void main(String[] args) { stat.addDescription("Unit test for GlassFish Issue 3823"); WebTest webTest = new WebTest(args); try { webTest.run(); stat.addStatus(TEST_NAME, stat.PASS); } catch( Exception ex) { ex.printStackTrace(); stat.addStatus(TEST_NAME, stat.FAIL); } stat.printSummary(); } public void run() throws Exception { Socket sock = new Socket(host, new Integer(port).intValue()); OutputStream os = sock.getOutputStream(); String get = "GET " + contextRoot + "/j_security_check?j_username=" + adminUser + "&j_password=" + adminPassword + " HTTP/1.0\n"; System.out.println(get); os.write(get.getBytes()); os.write("\n".getBytes()); InputStream is = sock.getInputStream(); BufferedReader br = new BufferedReader(new InputStreamReader(is)); String line = null; while ((line = br.readLine()) != null) { System.out.println(line); if (line.startsWith(SSO_COOKIE)) { if (line.indexOf("Secure") == -1) { throw new Exception("Missing 'Secure' flag in '" + SSO_COOKIE + "' response header"); } break; } } if (line == null) { throw new Exception("Missing '" + SSO_COOKIE + "' response header"); } } }