ModifiabilitySuiteChild.java

/*
 * JBoss, Home of Professional Open Source
 * Copyright 2015 Red Hat, Inc., and individual contributors
 * as indicated by the @author tags.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package org.wildfly.security.ldap;

import org.junit.Assert;
import org.junit.BeforeClass;
import org.junit.Test;
import org.wildfly.security.auth.principal.NamePrincipal;
import org.wildfly.security.auth.realm.ldap.AttributeMapping;
import org.wildfly.security.auth.realm.ldap.LdapSecurityRealmBuilder;
import org.wildfly.security.auth.server.ModifiableRealmIdentity;
import org.wildfly.security.auth.server.ModifiableSecurityRealm;
import org.wildfly.security.auth.server.RealmUnavailableException;
import org.wildfly.security.authz.MapAttributes;

import javax.naming.InvalidNameException;
import javax.naming.directory.Attributes;
import javax.naming.directory.BasicAttribute;
import javax.naming.directory.BasicAttributes;
import javax.naming.ldap.LdapName;

import java.util.Arrays;
import java.util.Iterator;

/**
 * Test case to test creating and removing identities in LDAP
 *
 * @author <a href="mailto:jkalina@redhat.com">Jan Kalina</a>
 */
public class ModifiabilitySuiteChild {

    private static ModifiableSecurityRealm realm;

    @BeforeClass
    public static void createRealm() throws InvalidNameException {

        Attributes attributes = new BasicAttributes(true); // ldap attributes of new identity
        BasicAttribute objectClass = new BasicAttribute("objectClass");
        objectClass.add("top");
        objectClass.add("inetOrgPerson");
        objectClass.add("person");
        objectClass.add("organizationalPerson");
        attributes.put(objectClass);
        attributes.put(new BasicAttribute("sn", "aaa"));
        attributes.put(new BasicAttribute("cn", "bbb"));
        attributes.put(new BasicAttribute("description", "new user"));

        realm = LdapSecurityRealmBuilder.builder()
            .setDirContextSupplier(LdapTestSuite.dirContextFactory.create())
            .setPageSize(3)
            .identityMapping()
                .setSearchDn("dc=elytron,dc=wildfly,dc=org")
                .setRdnIdentifier("uid")
                .map(AttributeMapping.fromIdentity().from("uid").to("userName").build(), // mapping ldap attributes to elytron attributes
                     AttributeMapping.fromIdentity().from("cn").to("firstName").build(),
                     AttributeMapping.fromIdentity().from("sn").to("lastName").build(),
                     AttributeMapping.fromIdentity().from("description").to("description").build(),
                     AttributeMapping.fromIdentity().from("telephoneNumber").to("phones").build(),
                     AttributeMapping.fromFilter("(&(objectClass=groupOfNames)(member={0}))").searchDn("ou=Finance,dc=elytron,dc=wildfly,dc=org").extractRdn("OU").to("businessArea").build())
                .setNewIdentityParent(new LdapName("dc=elytron,dc=wildfly,dc=org"))
                .setNewIdentityAttributes(attributes)
                .setIteratorFilter("(uid=*)")
                .build()
            .build();
    }

    @Test
    public void testCreateDelete() throws RealmUnavailableException, InterruptedException {
        ModifiableRealmIdentity identity = (ModifiableRealmIdentity) realm.getRealmIdentity(new NamePrincipal("myNewIdentity"));
        Assert.assertFalse(identity.exists());
        identity.create();
        identity.dispose();

        identity = (ModifiableRealmIdentity) realm.getRealmIdentity(new NamePrincipal("myNewIdentity"));
        Assert.assertTrue(identity.exists());
        identity.delete();
        identity.dispose();

        identity = (ModifiableRealmIdentity) realm.getRealmIdentity(new NamePrincipal("myNewIdentity"));
        Assert.assertFalse(identity.exists());
        identity.dispose();
    }

    @Test
    public void testCreateDeleteEscaped() throws RealmUnavailableException, InterruptedException {
        String horribleIdentityName = " escape testing identity name , \\ # + < > ; \" = / * ( ) . & - _ [ ] ` ~ | @ $ % ^ ? : { } ! ' ";

        ModifiableRealmIdentity identity = (ModifiableRealmIdentity) realm.getRealmIdentity(new NamePrincipal(horribleIdentityName));
        Assert.assertFalse(identity.exists());
        identity.create();
        identity.dispose();

        identity = (ModifiableRealmIdentity) realm.getRealmIdentity(new NamePrincipal(horribleIdentityName));
        Assert.assertTrue(identity.exists());
        identity.delete();
        identity.dispose();

        identity = (ModifiableRealmIdentity) realm.getRealmIdentity(new NamePrincipal(horribleIdentityName));
        Assert.assertFalse(identity.exists());
        identity.dispose();
    }

    @Test
    public void testAttributeSetting() throws Exception {
        ModifiableRealmIdentity identity = (ModifiableRealmIdentity) realm.getRealmIdentity(new NamePrincipal("myNewAttributesIdentity"));
        Assert.assertFalse(identity.exists());
        identity.create();

        MapAttributes newAttributes = new MapAttributes();
        newAttributes.addFirst("userName", "JohnSmithsNewIdentity");
        newAttributes.addFirst("firstName", "John");
        newAttributes.addFirst("lastName", "Smith");
        newAttributes.addAll("phones", Arrays.asList("123456", "654321"));
        identity.setAttributes(newAttributes);
        identity.dispose();

        identity = (ModifiableRealmIdentity) realm.getRealmIdentity(new NamePrincipal("myNewAttributesIdentity"));
        Assert.assertFalse(identity.exists());
        identity.dispose();

        identity = (ModifiableRealmIdentity) realm.getRealmIdentity(new NamePrincipal("JohnSmithsNewIdentity"));
        Assert.assertTrue(identity.exists());

        org.wildfly.security.authz.Attributes attributes = identity.getAuthorizationIdentity().getAttributes();
        Assert.assertEquals("JohnSmithsNewIdentity", attributes.get("userName").get(0));
        Assert.assertEquals("John", attributes.get("firstName").get(0));
        Assert.assertEquals("Smith", attributes.get("lastName").get(0));
        Assert.assertEquals(0, attributes.get("description").size());
        Assert.assertEquals(2, attributes.get("phones").size());
        identity.dispose();
    }

    @Test
    public void testAttributeSettingEscaped() throws Exception {
        ModifiableRealmIdentity identity = (ModifiableRealmIdentity) realm.getRealmIdentity(new NamePrincipal(" myNewAttributesIdentity , \\ # + < > ; \" = / * ( ) . & - _ [ ] ` ~ | @ $ % ^ ? : { } ! '"));
        Assert.assertFalse(identity.exists());
        identity.create();

        MapAttributes newAttributes = new MapAttributes();
        newAttributes.addFirst("userName", " JohnSmithsNewIdentity , \\ # + < > ; \" = / * ( ) . & - _ [ ] ` ~ | @ $ % ^ ? : { } ! '");
        newAttributes.addFirst("firstName", "John");
        newAttributes.addFirst("lastName", "Smith");
        newAttributes.addAll("phones", Arrays.asList("123456", "654321"));
        identity.setAttributes(newAttributes);
        identity.dispose();

        identity = (ModifiableRealmIdentity) realm.getRealmIdentity(new NamePrincipal(" myNewAttributesIdentity , \\ # + < > ; \" = / * ( ) . & - _ [ ] ` ~ | @ $ % ^ ? : { } ! '"));
        Assert.assertFalse(identity.exists());
        identity.dispose();

        identity = (ModifiableRealmIdentity) realm.getRealmIdentity(new NamePrincipal(" JohnSmithsNewIdentity , \\ # + < > ; \" = / * ( ) . & - _ [ ] ` ~ | @ $ % ^ ? : { } ! '"));
        Assert.assertTrue(identity.exists());

        org.wildfly.security.authz.Attributes attributes = identity.getAuthorizationIdentity().getAttributes();
        Assert.assertEquals(" JohnSmithsNewIdentity , \\ # + < > ; \" = / * ( ) . & - _ [ ] ` ~ | @ $ % ^ ? : { } ! '", attributes.get("userName").get(0));
        Assert.assertEquals("John", attributes.get("firstName").get(0));
        Assert.assertEquals("Smith", attributes.get("lastName").get(0));
        Assert.assertEquals(0, attributes.get("description").size());
        Assert.assertEquals(2, attributes.get("phones").size());
        identity.dispose();
    }

    @Test
    public void testIterating() throws Exception {
        Iterator<ModifiableRealmIdentity> iterator = realm.getRealmIdentityIterator();

        int count = 0;
        while(iterator.hasNext()){
            ModifiableRealmIdentity identity = iterator.next();
            Assert.assertTrue(identity.exists());
            System.out.println(identity.getAuthorizationIdentity().getAttributes().getFirst("userName"));
            identity.dispose();
            count++;
        }
        Assert.assertTrue(count > 10);
    }

}