MultiplePartitionTestCase.java example

Explorer
picketlink-master
package org.picketlink.test.idm.partition;

import org.junit.After;
import org.junit.Before;
import org.junit.Test;
import org.picketlink.idm.IdentityManager;
import org.picketlink.idm.PartitionManager;
import org.picketlink.idm.config.IdentityConfigurationBuilder;
import org.picketlink.idm.credential.Credentials;
import org.picketlink.idm.credential.Password;
import org.picketlink.idm.credential.UsernamePasswordCredentials;
import org.picketlink.idm.internal.DefaultPartitionManager;
import org.picketlink.idm.jpa.model.sample.simple.AccountTypeEntity;
import org.picketlink.idm.jpa.model.sample.simple.AttributeTypeEntity;
import org.picketlink.idm.jpa.model.sample.simple.DigestCredentialTypeEntity;
import org.picketlink.idm.jpa.model.sample.simple.GroupTypeEntity;
import org.picketlink.idm.jpa.model.sample.simple.IdentityTypeEntity;
import org.picketlink.idm.jpa.model.sample.simple.OTPCredentialTypeEntity;
import org.picketlink.idm.jpa.model.sample.simple.PartitionTypeEntity;
import org.picketlink.idm.jpa.model.sample.simple.PasswordCredentialTypeEntity;
import org.picketlink.idm.jpa.model.sample.simple.RelationshipIdentityTypeEntity;
import org.picketlink.idm.jpa.model.sample.simple.RelationshipTypeEntity;
import org.picketlink.idm.jpa.model.sample.simple.RoleTypeEntity;
import org.picketlink.idm.jpa.model.sample.simple.X509CredentialTypeEntity;
import org.picketlink.idm.model.Attribute;
import org.picketlink.idm.model.basic.Agent;
import org.picketlink.idm.model.basic.BasicModel;
import org.picketlink.idm.model.basic.Grant;
import org.picketlink.idm.model.basic.Group;
import org.picketlink.idm.model.basic.GroupMembership;
import org.picketlink.idm.model.basic.Realm;
import org.picketlink.idm.model.basic.Role;
import org.picketlink.idm.model.basic.User;
import org.picketlink.test.idm.model.entity.MyCustomAccountEntity;
import org.picketlink.test.idm.relationship.CustomRelationshipTypeEntity;
import org.picketlink.test.idm.util.JPAContextInitializer;
import org.picketlink.test.idm.util.LDAPEmbeddedServer;

import javax.persistence.EntityManager;
import javax.persistence.EntityManagerFactory;
import javax.persistence.Persistence;
import java.io.Serializable;

import static junit.framework.Assert.assertFalse;
import static junit.framework.Assert.assertNotNull;
import static junit.framework.Assert.assertNull;
import static org.junit.Assert.assertEquals;
import static org.picketlink.common.constants.LDAPConstants.CN;
import static org.picketlink.common.constants.LDAPConstants.CREATE_TIMESTAMP;
import static org.picketlink.common.constants.LDAPConstants.EMAIL;
import static org.picketlink.common.constants.LDAPConstants.GROUP_OF_NAMES;
import static org.picketlink.common.constants.LDAPConstants.SN;
import static org.picketlink.common.constants.LDAPConstants.UID;

/**
 * @author pedroigor
 */
public class MultiplePartitionTestCase {

    private EntityManagerFactory emf;
    private EntityManager entityManager;

    private final LDAPEmbeddedServer embeddedServer = new LDAPEmbeddedServer();

    @Test
    public void testLDAPPartition() {
        PartitionManager partitionManager = getPartitionManager();

        Realm internalPartition = new Realm("ldap.managed.partition");

        partitionManager.add(internalPartition, "ldap.config");

        IdentityManager internalIdentityManager = partitionManager.createIdentityManager(internalPartition);

        User john = new User("john");

        internalIdentityManager.add(john);

        User storeLdapJohn = BasicModel.getUser(internalIdentityManager, john.getLoginName());

        assertNotNull(storeLdapJohn);
        assertEquals(john.getId(), storeLdapJohn.getId());

        Realm externalPartition = new Realm("jpa.managed.partition");

        partitionManager.add(externalPartition, "jpa.config");

        User mary = new User("mary");

        IdentityManager externalIdentityManager = partitionManager.createIdentityManager(externalPartition);

        externalIdentityManager.add(mary);

        User storeJpaMary = BasicModel.getUser(externalIdentityManager, mary.getLoginName());

        assertNotNull(storeJpaMary);
        assertEquals(mary.getId(), storeJpaMary.getId());

        assertFalse(storeJpaMary.getId().equals(storeLdapJohn.getId()));

        storeLdapJohn.setAttribute(new Attribute<Serializable>("name", "value"));

        internalIdentityManager.update(storeLdapJohn);

        storeLdapJohn = BasicModel.getUser(internalIdentityManager, john.getLoginName());

        // ldap store does not support ad-hoc attributes
        assertNull(storeLdapJohn.getAttribute("name"));

        storeJpaMary.setAttribute(new Attribute<Serializable>("name", "value"));

        externalIdentityManager.update(storeJpaMary);

        storeJpaMary = BasicModel.getUser(externalIdentityManager, mary.getLoginName());

        // jpa store supports ad-hoc attributes
        assertNotNull(storeJpaMary.getAttribute("name"));

        Password johnPassword = new Password("internal");

        internalIdentityManager.updateCredential(storeLdapJohn, johnPassword);

        UsernamePasswordCredentials johnCredential = new UsernamePasswordCredentials();

        johnCredential.setUsername(storeLdapJohn.getLoginName());
        johnCredential.setPassword(johnPassword);

        internalIdentityManager.validateCredentials(johnCredential);

        assertEquals(Credentials.Status.VALID, johnCredential.getStatus());;

        Password maryPassword = new Password("external");

        externalIdentityManager.updateCredential(storeJpaMary, maryPassword);

        UsernamePasswordCredentials maryCredential = new UsernamePasswordCredentials();

        maryCredential.setUsername(storeJpaMary.getLoginName());
        maryCredential.setPassword(maryPassword);

        externalIdentityManager.validateCredentials(maryCredential);

        assertEquals(Credentials.Status.VALID, maryCredential.getStatus());;

        externalIdentityManager.validateCredentials(johnCredential);
        assertEquals(Credentials.Status.INVALID, johnCredential.getStatus());;

        internalIdentityManager.validateCredentials(maryCredential);
        assertEquals(Credentials.Status.INVALID, maryCredential.getStatus());;
    }

    @Before
    public void onBefore() {
        try {
            this.embeddedServer.setup();
            this.embeddedServer.importLDIF("ldap/users.ldif");
        } catch (Exception e) {
            throw new RuntimeException("Error starting Embedded LDAP server.", e);
        }

        this.emf = Persistence.createEntityManagerFactory("jpa-identity-store-tests-pu");
        this.entityManager = emf.createEntityManager();
        this.entityManager.getTransaction().begin();
    }

    @After
    public void onAfter() {
        try {
            this.embeddedServer.tearDown();
        } catch (Exception e) {
            throw new RuntimeException("Error starting Embedded LDAP server.", e);
        }
        this.entityManager.getTransaction().commit();
        this.entityManager.close();
        this.emf.close();
    }

    public PartitionManager getPartitionManager() {
        IdentityConfigurationBuilder builder = new IdentityConfigurationBuilder();

        builder
            .named("ldap.config")
                .stores()
                    .ldap()
                        .baseDN(embeddedServer.getBaseDn())
                        .bindDN(embeddedServer.getBindDn())
                        .bindCredential(embeddedServer.getBindCredential())
                        .url(embeddedServer.getConnectionUrl())
                        .supportAllFeatures()
                        .supportGlobalRelationship(Grant.class, GroupMembership.class)
                        .mapping(Agent.class)
                            .baseDN(embeddedServer.getAgentDnSuffix())
                            .objectClasses("account")
                            .attribute("loginName", UID, true)
                            .readOnlyAttribute("createdDate", CREATE_TIMESTAMP)
                        .mapping(User.class)
                            .baseDN(embeddedServer.getUserDnSuffix())
                            .objectClasses("inetOrgPerson", "organizationalPerson")
                            .attribute("loginName", UID, true)
                            .attribute("firstName", CN)
                            .attribute("lastName", SN)
                            .attribute("email", EMAIL)
                            .readOnlyAttribute("createdDate", CREATE_TIMESTAMP)
                        .mapping(Role.class)
                            .baseDN(embeddedServer.getRolesDnSuffix())
                            .objectClasses(GROUP_OF_NAMES)
                            .attribute("name", CN, true)
                            .readOnlyAttribute("createdDate", CREATE_TIMESTAMP)
                        .mapping(Group.class)
                            .baseDN(embeddedServer.getGroupDnSuffix())
                            .objectClasses(GROUP_OF_NAMES)
                            .attribute("name", CN, true)
                            .readOnlyAttribute("createdDate", CREATE_TIMESTAMP)
                            .parentMembershipAttributeName("member")
                            .parentMapping("QA Group", "ou=QA," + embeddedServer.getGroupDnSuffix())
                        .mapping(Grant.class)
                            .forMapping(Role.class)
                            .attribute("assignee", "member")
                        .mapping(GroupMembership.class)
                            .forMapping(Group.class)
                            .attribute("member", "member")
            .named("jpa.config")
                .stores()
                    .jpa()
                        .mappedEntity(
                                PartitionTypeEntity.class,
                                MyCustomAccountEntity.class,
                                RoleTypeEntity.class,
                                GroupTypeEntity.class,
                                IdentityTypeEntity.class,
                                CustomRelationshipTypeEntity.class,
                                CustomPartitionEntity.class,
                                RelationshipTypeEntity.class,
                                RelationshipIdentityTypeEntity.class,
                                PasswordCredentialTypeEntity.class,
                                DigestCredentialTypeEntity.class,
                                X509CredentialTypeEntity.class,
                                OTPCredentialTypeEntity.class,
                                AttributeTypeEntity.class,
                                AccountTypeEntity.class
                        )
                        .supportGlobalRelationship(org.picketlink.idm.model.Relationship.class)
                        .addContextInitializer(new JPAContextInitializer(null) {
                            @Override
                            public EntityManager getEntityManager() {
                                return entityManager;
                            }
                        })
                        .supportAllFeatures();

        return new DefaultPartitionManager(builder.buildAll());
    }
}