de.is24.infrastructure.gridfs.http.security.SecurityIT.java Source code

Introduction

Here is the source code for de.is24.infrastructure.gridfs.http.security.SecurityIT.java

Source

package de.is24.infrastructure.gridfs.http.security;

import de.is24.infrastructure.gridfs.http.web.AbstractContainerAndMongoDBStarter;
import org.apache.http.HttpResponse;
import org.apache.http.client.methods.HttpGet;
import org.freecompany.redline.Builder;
import org.freecompany.redline.header.Architecture;
import org.freecompany.redline.header.Os;
import org.freecompany.redline.header.RpmType;
import org.jboss.arquillian.junit.LocalOrRemoteDeploymentTestRunner;
import org.junit.Before;
import org.junit.Rule;
import org.junit.Test;
import org.junit.rules.TemporaryFolder;
import org.junit.runner.RunWith;

import java.io.File;
import java.io.IOException;
import java.net.InetAddress;
import java.net.UnknownHostException;
import java.security.NoSuchAlgorithmException;

import static de.is24.infrastructure.gridfs.http.web.RepoTestUtils.uploadRpm;
import static javax.servlet.http.HttpServletResponse.SC_FORBIDDEN;
import static javax.servlet.http.HttpServletResponse.SC_OK;
import static org.hamcrest.MatcherAssert.assertThat;
import static org.hamcrest.core.Is.is;

@RunWith(LocalOrRemoteDeploymentTestRunner.class)
public class SecurityIT extends AbstractContainerAndMongoDBStarter {
    public static final String RANDOM_STRING = "foobar";
    private String repoUrl;
    private String myProtectedRPM;
    private String anotherHostsProtectedRPM;

    @Rule
    public TemporaryFolder tempFolder = new TemporaryFolder();

    @Before
    public void setUp() throws Exception {
        repoUrl = deploymentURL + "/repo/protected-repo";

        myProtectedRPM = buildProtectedRPMForMyHostName();
        anotherHostsProtectedRPM = buildProtectedRPMForHost("anotherhost");

        uploadRpm(repoUrl, new File(tempFolder.getRoot(), myProtectedRPM).getPath());
        uploadRpm(repoUrl, new File(tempFolder.getRoot(), anotherHostsProtectedRPM).getPath());
    }

    @Test
    public void allowDownloadOfMyProtectedRPM() throws Exception {
        HttpGet get = new HttpGet(repoUrl + "/noarch/" + myProtectedRPM);

        HttpResponse response = httpClient.execute(get);
        assertThat(response.getStatusLine().getStatusCode(), is(SC_OK));
    }

    @Test
    public void denyDownloadOfOtherHostsProtectedRPM() throws Exception {
        HttpGet get = new HttpGet(repoUrl + "/noarch/" + anotherHostsProtectedRPM);

        HttpResponse response = httpClient.execute(get);
        assertThat(response.getStatusLine().getStatusCode(), is(SC_FORBIDDEN));
    }

    private String getMyShortHostName() throws UnknownHostException {
        String myHostName;

        // local integration tests use localhost access, thus need other hostname in package
        if (deploymentURL.getHost().equals("localhost")) {
            myHostName = "localhost";
        } else {
            myHostName = InetAddress.getLocalHost().getHostName();
        }

        int dotIndex = myHostName.indexOf(".");
        if (dotIndex >= 0) {
            myHostName = myHostName.substring(0, dotIndex);
        }
        return myHostName;
    }

    private String buildProtectedRPMForMyHostName() throws IOException, NoSuchAlgorithmException {
        String myHostName = getMyShortHostName();
        return buildProtectedRPMForHost(myHostName);
    }

    private String buildProtectedRPMForHost(String myHostName) throws NoSuchAlgorithmException, IOException {
        String rpmNamePrefix = "protected-" + myHostName;

        Builder builder = new Builder();
        String version = "1." + System.currentTimeMillis();

        builder.setPackage(rpmNamePrefix, version, "1");
        builder.setType(RpmType.BINARY);
        builder.setPlatform(Architecture.NOARCH, Os.LINUX);
        builder.setSummary("packaged to test protected Repo access during integration test");
        builder.setBuildHost(myHostName);
        builder.setDescription("packaged to test protected Repo access during integration test");
        builder.setLicense(RANDOM_STRING);
        builder.setGroup("integration Testing");
        builder.setDistribution(RANDOM_STRING);
        builder.setVendor(RANDOM_STRING);
        builder.setPackager(this.getClass().getName());
        builder.setUrl("https://github.com/ImmobilienScout24/yum-repo-server");
        builder.setSourceRpm("none");
        return builder.build(tempFolder.getRoot());
    }

}