com.nike.cerberus.endpoints.authentication.RevokeTokenTest.java Source code

Introduction

Here is the source code for com.nike.cerberus.endpoints.authentication.RevokeTokenTest.java

Source

/*
 * Copyright (c) 2016 Nike, Inc.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package com.nike.cerberus.endpoints.authentication;

import com.google.common.collect.Maps;
import com.nike.backstopper.exception.ApiException;
import com.nike.cerberus.security.CmsRequestSecurityValidator;
import com.nike.cerberus.security.VaultAuthPrincipal;
import com.nike.cerberus.security.VaultSecurityContext;
import com.nike.cerberus.service.AuthenticationService;
import com.nike.vault.client.model.VaultClientTokenResponse;
import com.nike.riposte.server.http.RequestInfo;
import com.nike.riposte.server.http.ResponseInfo;
import io.netty.handler.codec.http.HttpMethod;
import io.netty.handler.codec.http.HttpResponseStatus;
import org.junit.Before;
import org.junit.Test;

import java.util.Collection;
import java.util.Map;
import java.util.concurrent.CompletableFuture;
import java.util.concurrent.CompletionException;
import java.util.concurrent.Executor;
import java.util.concurrent.Executors;

import static org.assertj.core.api.Assertions.assertThat;
import static org.assertj.core.api.Fail.fail;
import static org.mockito.Mockito.mock;
import static org.mockito.Mockito.verify;
import static org.mockito.Mockito.when;

public class RevokeTokenTest {

    private static final String TOKEN_ID = "TOKEN";

    private final Executor executor = Executors.newSingleThreadExecutor();

    private AuthenticationService authenticationService;

    private RevokeToken subject;

    @Before
    public void setUp() throws Exception {
        authenticationService = mock(AuthenticationService.class);
        subject = new RevokeToken(authenticationService);
    }

    @Test
    public void requestMatcher_is_http_delete() {
        final Collection<HttpMethod> httpMethods = subject.requestMatcher().matchingMethods();

        assertThat(httpMethods).hasSize(1);
        assertThat(httpMethods).contains(HttpMethod.DELETE);
    }

    @Test
    public void execute_returns_no_content_code() {
        final RequestInfo<Void> requestInfo = mock(RequestInfo.class);
        final Map<String, Object> requestAttributes = Maps.newHashMap();
        final VaultAuthPrincipal authPrincipal = mock(VaultAuthPrincipal.class);
        final VaultClientTokenResponse vaultClientTokenResponse = new VaultClientTokenResponse().setId(TOKEN_ID);
        requestAttributes.put(CmsRequestSecurityValidator.SECURITY_CONTEXT_ATTR_KEY,
                new VaultSecurityContext(authPrincipal, "https"));

        when(requestInfo.getRequestAttributes()).thenReturn(requestAttributes);
        when(authPrincipal.getClientToken()).thenReturn(vaultClientTokenResponse);

        final CompletableFuture<ResponseInfo<Void>> completableFuture = subject.execute(requestInfo, executor,
                null);
        final ResponseInfo<Void> responseInfo = completableFuture.join();

        assertThat(responseInfo.getHttpStatusCode()).isEqualTo(HttpResponseStatus.NO_CONTENT.code());
        verify(authenticationService).revoke(TOKEN_ID);
    }

    @Test
    public void execute_throws_api_error_if_no_security_context() {
        final Map<String, Object> requestAttributes = Maps.newHashMap();
        requestAttributes.put(CmsRequestSecurityValidator.SECURITY_CONTEXT_ATTR_KEY, null);
        final RequestInfo<Void> requestInfo = mock(RequestInfo.class);
        when(requestInfo.getRequestAttributes()).thenReturn(requestAttributes);

        try {
            final CompletableFuture<ResponseInfo<Void>> completableFuture = subject.execute(requestInfo, executor,
                    null);
            completableFuture.join();
            fail("Expected exception not thrown.");
        } catch (CompletionException cex) {
            assertThat(cex.getCause()).isInstanceOf(ApiException.class);
        }
    }
}