Commit eedb5dbb85407c78f9c2dab61181b9e5e037f0cd
Exists in
master
Merge remote-tracking branch 'origin/2.4.0' into 2.4.0
Showing
32 changed files
with
806 additions
and
226 deletions
Show diff stats
impl/core/src/main/java/br/gov/frameworkdemoiselle/internal/implementation/DefaultAuthenticator.java
| ... | ... | @@ -72,7 +72,7 @@ public class DefaultAuthenticator implements Authenticator { |
| 72 | 72 | * @see br.gov.frameworkdemoiselle.security.Authenticator#unAuthenticate() |
| 73 | 73 | */ |
| 74 | 74 | @Override |
| 75 | - public void unAuthenticate() { | |
| 75 | + public void unauthenticate() { | |
| 76 | 76 | throw getException(); |
| 77 | 77 | } |
| 78 | 78 | ... | ... |
impl/core/src/main/java/br/gov/frameworkdemoiselle/internal/implementation/SecurityContextImpl.java
| ... | ... | @@ -38,11 +38,13 @@ package br.gov.frameworkdemoiselle.internal.implementation; |
| 38 | 38 | |
| 39 | 39 | import javax.inject.Named; |
| 40 | 40 | |
| 41 | +import br.gov.frameworkdemoiselle.DemoiselleException; | |
| 41 | 42 | import br.gov.frameworkdemoiselle.internal.configuration.SecurityConfig; |
| 42 | 43 | import br.gov.frameworkdemoiselle.security.AfterLoginSuccessful; |
| 43 | 44 | import br.gov.frameworkdemoiselle.security.AfterLogoutSuccessful; |
| 44 | 45 | import br.gov.frameworkdemoiselle.security.AuthenticationException; |
| 45 | 46 | import br.gov.frameworkdemoiselle.security.Authenticator; |
| 47 | +import br.gov.frameworkdemoiselle.security.AuthorizationException; | |
| 46 | 48 | import br.gov.frameworkdemoiselle.security.Authorizer; |
| 47 | 49 | import br.gov.frameworkdemoiselle.security.NotLoggedInException; |
| 48 | 50 | import br.gov.frameworkdemoiselle.security.SecurityContext; |
| ... | ... | @@ -61,7 +63,7 @@ public class SecurityContextImpl implements SecurityContext { |
| 61 | 63 | |
| 62 | 64 | private static final long serialVersionUID = 1L; |
| 63 | 65 | |
| 64 | - private transient ResourceBundle bundle; | |
| 66 | + private transient ResourceBundle bundle; | |
| 65 | 67 | |
| 66 | 68 | private Authenticator authenticator; |
| 67 | 69 | |
| ... | ... | @@ -99,26 +101,45 @@ public class SecurityContextImpl implements SecurityContext { |
| 99 | 101 | * @see br.gov.frameworkdemoiselle.security.SecurityContext#hasPermission(java.lang.String, java.lang.String) |
| 100 | 102 | */ |
| 101 | 103 | @Override |
| 102 | - public boolean hasPermission(String resource, String operation) throws NotLoggedInException { | |
| 104 | + public boolean hasPermission(String resource, String operation) { | |
| 105 | + boolean result = true; | |
| 106 | + | |
| 103 | 107 | if (getConfig().isEnabled()) { |
| 104 | 108 | checkLoggedIn(); |
| 105 | - return getAuthorizer().hasPermission(resource, operation); | |
| 106 | 109 | |
| 107 | - } else { | |
| 108 | - return true; | |
| 110 | + try { | |
| 111 | + result = getAuthorizer().hasPermission(resource, operation); | |
| 112 | + | |
| 113 | + } catch (DemoiselleException cause) { | |
| 114 | + throw cause; | |
| 115 | + | |
| 116 | + } catch (Exception cause) { | |
| 117 | + throw new AuthorizationException(cause); | |
| 118 | + } | |
| 109 | 119 | } |
| 120 | + | |
| 121 | + return result; | |
| 110 | 122 | } |
| 111 | 123 | |
| 112 | 124 | /** |
| 113 | 125 | * @see br.gov.frameworkdemoiselle.security.SecurityContext#hasRole(java.lang.String) |
| 114 | 126 | */ |
| 115 | 127 | @Override |
| 116 | - public boolean hasRole(String role) throws NotLoggedInException { | |
| 128 | + public boolean hasRole(String role) { | |
| 117 | 129 | boolean result = true; |
| 118 | 130 | |
| 119 | 131 | if (getConfig().isEnabled()) { |
| 120 | 132 | checkLoggedIn(); |
| 121 | - result = getAuthorizer().hasRole(role); | |
| 133 | + | |
| 134 | + try { | |
| 135 | + result = getAuthorizer().hasRole(role); | |
| 136 | + | |
| 137 | + } catch (DemoiselleException cause) { | |
| 138 | + throw cause; | |
| 139 | + | |
| 140 | + } catch (Exception cause) { | |
| 141 | + throw new AuthorizationException(cause); | |
| 142 | + } | |
| 122 | 143 | } |
| 123 | 144 | |
| 124 | 145 | return result; |
| ... | ... | @@ -142,9 +163,18 @@ public class SecurityContextImpl implements SecurityContext { |
| 142 | 163 | * @see br.gov.frameworkdemoiselle.security.SecurityContext#login() |
| 143 | 164 | */ |
| 144 | 165 | @Override |
| 145 | - public void login() throws AuthenticationException { | |
| 166 | + public void login() { | |
| 146 | 167 | if (getConfig().isEnabled()) { |
| 147 | - getAuthenticator().authenticate(); | |
| 168 | + | |
| 169 | + try { | |
| 170 | + getAuthenticator().authenticate(); | |
| 171 | + | |
| 172 | + } catch (DemoiselleException cause) { | |
| 173 | + throw cause; | |
| 174 | + | |
| 175 | + } catch (Exception cause) { | |
| 176 | + throw new AuthenticationException(cause); | |
| 177 | + } | |
| 148 | 178 | |
| 149 | 179 | Beans.getBeanManager().fireEvent(new AfterLoginSuccessful() { |
| 150 | 180 | |
| ... | ... | @@ -161,7 +191,16 @@ public class SecurityContextImpl implements SecurityContext { |
| 161 | 191 | public void logout() throws NotLoggedInException { |
| 162 | 192 | if (getConfig().isEnabled()) { |
| 163 | 193 | checkLoggedIn(); |
| 164 | - getAuthenticator().unAuthenticate(); | |
| 194 | + | |
| 195 | + try { | |
| 196 | + getAuthenticator().unauthenticate(); | |
| 197 | + | |
| 198 | + } catch (DemoiselleException cause) { | |
| 199 | + throw cause; | |
| 200 | + | |
| 201 | + } catch (Exception cause) { | |
| 202 | + throw new AuthenticationException(cause); | |
| 203 | + } | |
| 165 | 204 | |
| 166 | 205 | Beans.getBeanManager().fireEvent(new AfterLogoutSuccessful() { |
| 167 | 206 | |
| ... | ... | @@ -194,7 +233,7 @@ public class SecurityContextImpl implements SecurityContext { |
| 194 | 233 | } |
| 195 | 234 | } |
| 196 | 235 | |
| 197 | - private ResourceBundle getBundle() { | |
| 236 | + private ResourceBundle getBundle() { | |
| 198 | 237 | if (bundle == null) { |
| 199 | 238 | bundle = Beans.getReference(ResourceBundle.class, new NameQualifier("demoiselle-core-bundle")); |
| 200 | 239 | } |
| ... | ... | @@ -202,7 +241,7 @@ public class SecurityContextImpl implements SecurityContext { |
| 202 | 241 | return bundle; |
| 203 | 242 | } |
| 204 | 243 | |
| 205 | - private static class EmptyUser implements User{ | |
| 244 | + private static class EmptyUser implements User { | |
| 206 | 245 | |
| 207 | 246 | private static final long serialVersionUID = 1L; |
| 208 | 247 | ... | ... |
impl/core/src/main/java/br/gov/frameworkdemoiselle/security/AuthorizationException.java
| ... | ... | @@ -54,4 +54,14 @@ public class AuthorizationException extends SecurityException { |
| 54 | 54 | public AuthorizationException(String message) { |
| 55 | 55 | super(message); |
| 56 | 56 | } |
| 57 | + | |
| 58 | + /** | |
| 59 | + * Constructor with the cause. | |
| 60 | + * | |
| 61 | + * @param cause | |
| 62 | + * exception cause | |
| 63 | + */ | |
| 64 | + public AuthorizationException(Throwable cause) { | |
| 65 | + super(cause); | |
| 66 | + } | |
| 57 | 67 | } | ... | ... |
impl/core/src/test/java/configuration/field/beanvalidation/ConfigurationBeanValidationFieldTest.java
impl/core/src/test/java/management/testclasses/DummyManagementExtension.java
impl/core/src/test/java/security/athentication/ambiguity/DuplicatedCustomAuthenticator.java
| ... | ... | @@ -36,7 +36,6 @@ |
| 36 | 36 | */ |
| 37 | 37 | package security.athentication.ambiguity; |
| 38 | 38 | |
| 39 | -import br.gov.frameworkdemoiselle.security.AuthenticationException; | |
| 40 | 39 | import br.gov.frameworkdemoiselle.security.Authenticator; |
| 41 | 40 | import br.gov.frameworkdemoiselle.security.User; |
| 42 | 41 | |
| ... | ... | @@ -45,11 +44,11 @@ public class DuplicatedCustomAuthenticator implements Authenticator { |
| 45 | 44 | private static final long serialVersionUID = 1L; |
| 46 | 45 | |
| 47 | 46 | @Override |
| 48 | - public void authenticate() throws AuthenticationException { | |
| 47 | + public void authenticate() { | |
| 49 | 48 | } |
| 50 | 49 | |
| 51 | 50 | @Override |
| 52 | - public void unAuthenticate() { | |
| 51 | + public void unauthenticate() { | |
| 53 | 52 | } |
| 54 | 53 | |
| 55 | 54 | @Override | ... | ... |
impl/core/src/test/java/security/athentication/credentials/StrictAuthenticator.java
| ... | ... | @@ -48,7 +48,7 @@ public class StrictAuthenticator implements Authenticator { |
| 48 | 48 | private User currentUser; |
| 49 | 49 | |
| 50 | 50 | @Override |
| 51 | - public void authenticate() throws AuthenticationException { | |
| 51 | + public void authenticate() { | |
| 52 | 52 | |
| 53 | 53 | Credentials c = Beans.getReference(Credentials.class); |
| 54 | 54 | if ("demoiselle".equals(c.getLogin())) { |
| ... | ... | @@ -75,7 +75,7 @@ public class StrictAuthenticator implements Authenticator { |
| 75 | 75 | } |
| 76 | 76 | |
| 77 | 77 | @Override |
| 78 | - public void unAuthenticate() { | |
| 78 | + public void unauthenticate() { | |
| 79 | 79 | this.currentUser = null; |
| 80 | 80 | } |
| 81 | 81 | ... | ... |
impl/core/src/test/java/security/athentication/custom/CustomAuthenticator.java
| ... | ... | @@ -36,7 +36,6 @@ |
| 36 | 36 | */ |
| 37 | 37 | package security.athentication.custom; |
| 38 | 38 | |
| 39 | -import br.gov.frameworkdemoiselle.security.AuthenticationException; | |
| 40 | 39 | import br.gov.frameworkdemoiselle.security.Authenticator; |
| 41 | 40 | import br.gov.frameworkdemoiselle.security.User; |
| 42 | 41 | |
| ... | ... | @@ -47,7 +46,7 @@ public class CustomAuthenticator implements Authenticator { |
| 47 | 46 | private User currentUser; |
| 48 | 47 | |
| 49 | 48 | @Override |
| 50 | - public void authenticate() throws AuthenticationException { | |
| 49 | + public void authenticate() { | |
| 51 | 50 | this.currentUser = new User() { |
| 52 | 51 | |
| 53 | 52 | private static final long serialVersionUID = 1L; |
| ... | ... | @@ -68,7 +67,7 @@ public class CustomAuthenticator implements Authenticator { |
| 68 | 67 | } |
| 69 | 68 | |
| 70 | 69 | @Override |
| 71 | - public void unAuthenticate() { | |
| 70 | + public void unauthenticate() { | |
| 72 | 71 | this.currentUser = null; |
| 73 | 72 | } |
| 74 | 73 | ... | ... |
impl/core/src/test/java/security/athentication/disabled/DisabledAuthenticationTest.java
| ... | ... | @@ -93,12 +93,11 @@ public class DisabledAuthenticationTest { |
| 93 | 93 | assertEquals("demoiselle", context.getUser().getId()); |
| 94 | 94 | } |
| 95 | 95 | |
| 96 | - // | |
| 97 | - // @Test | |
| 98 | - // public void logoutProcess() { | |
| 99 | - // context.login(); | |
| 100 | - // context.logout(); | |
| 101 | - // assertFalse(context.isLoggedIn()); | |
| 102 | - // assertNull(context.getCurrentUser()); | |
| 103 | - // } | |
| 96 | + @Test | |
| 97 | + public void logoutProcess() { | |
| 98 | + context.login(); | |
| 99 | + context.logout(); | |
| 100 | + assertTrue(context.isLoggedIn()); | |
| 101 | + assertEquals("demoiselle", context.getUser().getId()); | |
| 102 | + } | |
| 104 | 103 | } | ... | ... |
impl/core/src/test/java/security/athentication/error/ErrorAuthenticator.java
| ... | ... | @@ -1,61 +0,0 @@ |
| 1 | -/* | |
| 2 | - * Demoiselle Framework | |
| 3 | - * Copyright (C) 2010 SERPRO | |
| 4 | - * ---------------------------------------------------------------------------- | |
| 5 | - * This file is part of Demoiselle Framework. | |
| 6 | - * | |
| 7 | - * Demoiselle Framework is free software; you can redistribute it and/or | |
| 8 | - * modify it under the terms of the GNU Lesser General Public License version 3 | |
| 9 | - * as published by the Free Software Foundation. | |
| 10 | - * | |
| 11 | - * This program is distributed in the hope that it will be useful, | |
| 12 | - * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 13 | - * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
| 14 | - * GNU General Public License for more details. | |
| 15 | - * | |
| 16 | - * You should have received a copy of the GNU Lesser General Public License version 3 | |
| 17 | - * along with this program; if not, see <http://www.gnu.org/licenses/> | |
| 18 | - * or write to the Free Software Foundation, Inc., 51 Franklin Street, | |
| 19 | - * Fifth Floor, Boston, MA 02110-1301, USA. | |
| 20 | - * ---------------------------------------------------------------------------- | |
| 21 | - * Este arquivo é parte do Framework Demoiselle. | |
| 22 | - * | |
| 23 | - * O Framework Demoiselle é um software livre; você pode redistribuí-lo e/ou | |
| 24 | - * modificá-lo dentro dos termos da GNU LGPL versão 3 como publicada pela Fundação | |
| 25 | - * do Software Livre (FSF). | |
| 26 | - * | |
| 27 | - * Este programa é distribuído na esperança que possa ser útil, mas SEM NENHUMA | |
| 28 | - * GARANTIA; sem uma garantia implícita de ADEQUAÇÃO a qualquer MERCADO ou | |
| 29 | - * APLICAÇÃO EM PARTICULAR. Veja a Licença Pública Geral GNU/LGPL em português | |
| 30 | - * para maiores detalhes. | |
| 31 | - * | |
| 32 | - * Você deve ter recebido uma cópia da GNU LGPL versão 3, sob o título | |
| 33 | - * "LICENCA.txt", junto com esse programa. Se não, acesse <http://www.gnu.org/licenses/> | |
| 34 | - * ou escreva para a Fundação do Software Livre (FSF) Inc., | |
| 35 | - * 51 Franklin St, Fifth Floor, Boston, MA 02111-1301, USA. | |
| 36 | - */ | |
| 37 | -package security.athentication.error; | |
| 38 | - | |
| 39 | -import br.gov.frameworkdemoiselle.security.AuthenticationException; | |
| 40 | -import br.gov.frameworkdemoiselle.security.Authenticator; | |
| 41 | -import br.gov.frameworkdemoiselle.security.User; | |
| 42 | - | |
| 43 | -public class ErrorAuthenticator implements Authenticator { | |
| 44 | - | |
| 45 | - private static final long serialVersionUID = 1L; | |
| 46 | - | |
| 47 | - @Override | |
| 48 | - public void authenticate() throws AuthenticationException { | |
| 49 | - throw new RuntimeException(); | |
| 50 | - } | |
| 51 | - | |
| 52 | - @Override | |
| 53 | - public void unAuthenticate() { | |
| 54 | - throw new RuntimeException(); | |
| 55 | - } | |
| 56 | - | |
| 57 | - @Override | |
| 58 | - public User getUser() { | |
| 59 | - return null; | |
| 60 | - } | |
| 61 | -} |
impl/core/src/test/java/security/athentication/error/ErrorAuthenticatorTest.java
| ... | ... | @@ -1,95 +0,0 @@ |
| 1 | -/* | |
| 2 | - * Demoiselle Framework | |
| 3 | - * Copyright (C) 2010 SERPRO | |
| 4 | - * ---------------------------------------------------------------------------- | |
| 5 | - * This file is part of Demoiselle Framework. | |
| 6 | - * | |
| 7 | - * Demoiselle Framework is free software; you can redistribute it and/or | |
| 8 | - * modify it under the terms of the GNU Lesser General Public License version 3 | |
| 9 | - * as published by the Free Software Foundation. | |
| 10 | - * | |
| 11 | - * This program is distributed in the hope that it will be useful, | |
| 12 | - * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 13 | - * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
| 14 | - * GNU General Public License for more details. | |
| 15 | - * | |
| 16 | - * You should have received a copy of the GNU Lesser General Public License version 3 | |
| 17 | - * along with this program; if not, see <http://www.gnu.org/licenses/> | |
| 18 | - * or write to the Free Software Foundation, Inc., 51 Franklin Street, | |
| 19 | - * Fifth Floor, Boston, MA 02110-1301, USA. | |
| 20 | - * ---------------------------------------------------------------------------- | |
| 21 | - * Este arquivo é parte do Framework Demoiselle. | |
| 22 | - * | |
| 23 | - * O Framework Demoiselle é um software livre; você pode redistribuí-lo e/ou | |
| 24 | - * modificá-lo dentro dos termos da GNU LGPL versão 3 como publicada pela Fundação | |
| 25 | - * do Software Livre (FSF). | |
| 26 | - * | |
| 27 | - * Este programa é distribuído na esperança que possa ser útil, mas SEM NENHUMA | |
| 28 | - * GARANTIA; sem uma garantia implícita de ADEQUAÇÃO a qualquer MERCADO ou | |
| 29 | - * APLICAÇÃO EM PARTICULAR. Veja a Licença Pública Geral GNU/LGPL em português | |
| 30 | - * para maiores detalhes. | |
| 31 | - * | |
| 32 | - * Você deve ter recebido uma cópia da GNU LGPL versão 3, sob o título | |
| 33 | - * "LICENCA.txt", junto com esse programa. Se não, acesse <http://www.gnu.org/licenses/> | |
| 34 | - * ou escreva para a Fundação do Software Livre (FSF) Inc., | |
| 35 | - * 51 Franklin St, Fifth Floor, Boston, MA 02111-1301, USA. | |
| 36 | - */ | |
| 37 | -package security.athentication.error; | |
| 38 | - | |
| 39 | -import javax.inject.Inject; | |
| 40 | - | |
| 41 | -import junit.framework.Assert; | |
| 42 | - | |
| 43 | -import org.jboss.arquillian.container.test.api.Deployment; | |
| 44 | -import org.jboss.arquillian.junit.Arquillian; | |
| 45 | -import org.jboss.shrinkwrap.api.spec.JavaArchive; | |
| 46 | -import org.junit.Test; | |
| 47 | -import org.junit.runner.RunWith; | |
| 48 | - | |
| 49 | -import test.Tests; | |
| 50 | -import br.gov.frameworkdemoiselle.security.AuthenticationException; | |
| 51 | -import br.gov.frameworkdemoiselle.security.SecurityContext; | |
| 52 | -import configuration.resource.ConfigurationResourceTest; | |
| 53 | - | |
| 54 | -@RunWith(Arquillian.class) | |
| 55 | -public class ErrorAuthenticatorTest { | |
| 56 | - | |
| 57 | - @Inject | |
| 58 | - private SecurityContext context; | |
| 59 | - | |
| 60 | - @Deployment | |
| 61 | - public static JavaArchive createDeployment() { | |
| 62 | - JavaArchive deployment = Tests.createDeployment(ConfigurationResourceTest.class); | |
| 63 | - deployment.addClass(ErrorAuthenticator.class); | |
| 64 | - return deployment; | |
| 65 | - } | |
| 66 | - | |
| 67 | - @Test | |
| 68 | - public void errorDuringLogin(){ | |
| 69 | - try{ | |
| 70 | - context.login(); | |
| 71 | - Assert.fail("Login deveria disparar exceção de runtime"); | |
| 72 | - } | |
| 73 | - catch(AuthenticationException ae){ | |
| 74 | - Assert.fail("A exceção disparada não foi a esperada"); | |
| 75 | - } | |
| 76 | - catch(RuntimeException e){ | |
| 77 | - //PASS | |
| 78 | - } | |
| 79 | - } | |
| 80 | - | |
| 81 | - @Test | |
| 82 | - public void errorDuringLogout(){ | |
| 83 | - try{ | |
| 84 | - context.login(); | |
| 85 | - Assert.fail("Logout deveria disparar exceção de runtime"); | |
| 86 | - } | |
| 87 | - catch(AuthenticationException ae){ | |
| 88 | - Assert.fail("A exceção disparada não foi a esperada"); | |
| 89 | - } | |
| 90 | - catch(RuntimeException e){ | |
| 91 | - //PASS | |
| 92 | - } | |
| 93 | - } | |
| 94 | - | |
| 95 | -} |
impl/core/src/test/java/security/athentication/error/LoginErrorAuthenticator.java
0 → 100644
| ... | ... | @@ -0,0 +1,60 @@ |
| 1 | +/* | |
| 2 | + * Demoiselle Framework | |
| 3 | + * Copyright (C) 2010 SERPRO | |
| 4 | + * ---------------------------------------------------------------------------- | |
| 5 | + * This file is part of Demoiselle Framework. | |
| 6 | + * | |
| 7 | + * Demoiselle Framework is free software; you can redistribute it and/or | |
| 8 | + * modify it under the terms of the GNU Lesser General Public License version 3 | |
| 9 | + * as published by the Free Software Foundation. | |
| 10 | + * | |
| 11 | + * This program is distributed in the hope that it will be useful, | |
| 12 | + * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 13 | + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
| 14 | + * GNU General Public License for more details. | |
| 15 | + * | |
| 16 | + * You should have received a copy of the GNU Lesser General Public License version 3 | |
| 17 | + * along with this program; if not, see <http://www.gnu.org/licenses/> | |
| 18 | + * or write to the Free Software Foundation, Inc., 51 Franklin Street, | |
| 19 | + * Fifth Floor, Boston, MA 02110-1301, USA. | |
| 20 | + * ---------------------------------------------------------------------------- | |
| 21 | + * Este arquivo é parte do Framework Demoiselle. | |
| 22 | + * | |
| 23 | + * O Framework Demoiselle é um software livre; você pode redistribuí-lo e/ou | |
| 24 | + * modificá-lo dentro dos termos da GNU LGPL versão 3 como publicada pela Fundação | |
| 25 | + * do Software Livre (FSF). | |
| 26 | + * | |
| 27 | + * Este programa é distribuído na esperança que possa ser útil, mas SEM NENHUMA | |
| 28 | + * GARANTIA; sem uma garantia implícita de ADEQUAÇÃO a qualquer MERCADO ou | |
| 29 | + * APLICAÇÃO EM PARTICULAR. Veja a Licença Pública Geral GNU/LGPL em português | |
| 30 | + * para maiores detalhes. | |
| 31 | + * | |
| 32 | + * Você deve ter recebido uma cópia da GNU LGPL versão 3, sob o título | |
| 33 | + * "LICENCA.txt", junto com esse programa. Se não, acesse <http://www.gnu.org/licenses/> | |
| 34 | + * ou escreva para a Fundação do Software Livre (FSF) Inc., | |
| 35 | + * 51 Franklin St, Fifth Floor, Boston, MA 02111-1301, USA. | |
| 36 | + */ | |
| 37 | +package security.athentication.error; | |
| 38 | + | |
| 39 | +import br.gov.frameworkdemoiselle.security.Authenticator; | |
| 40 | +import br.gov.frameworkdemoiselle.security.User; | |
| 41 | + | |
| 42 | +public class LoginErrorAuthenticator implements Authenticator { | |
| 43 | + | |
| 44 | + private static final long serialVersionUID = 1L; | |
| 45 | + | |
| 46 | + @Override | |
| 47 | + public void authenticate() { | |
| 48 | + throw new RuntimeException(); | |
| 49 | + } | |
| 50 | + | |
| 51 | + @Override | |
| 52 | + public void unauthenticate() { | |
| 53 | + throw new RuntimeException(); | |
| 54 | + } | |
| 55 | + | |
| 56 | + @Override | |
| 57 | + public User getUser() { | |
| 58 | + return null; | |
| 59 | + } | |
| 60 | +} | ... | ... |
impl/core/src/test/java/security/athentication/error/LoginErrorAuthenticatorTest.java
0 → 100644
| ... | ... | @@ -0,0 +1,94 @@ |
| 1 | +/* | |
| 2 | + * Demoiselle Framework | |
| 3 | + * Copyright (C) 2010 SERPRO | |
| 4 | + * ---------------------------------------------------------------------------- | |
| 5 | + * This file is part of Demoiselle Framework. | |
| 6 | + * | |
| 7 | + * Demoiselle Framework is free software; you can redistribute it and/or | |
| 8 | + * modify it under the terms of the GNU Lesser General Public License version 3 | |
| 9 | + * as published by the Free Software Foundation. | |
| 10 | + * | |
| 11 | + * This program is distributed in the hope that it will be useful, | |
| 12 | + * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 13 | + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
| 14 | + * GNU General Public License for more details. | |
| 15 | + * | |
| 16 | + * You should have received a copy of the GNU Lesser General Public License version 3 | |
| 17 | + * along with this program; if not, see <http://www.gnu.org/licenses/> | |
| 18 | + * or write to the Free Software Foundation, Inc., 51 Franklin Street, | |
| 19 | + * Fifth Floor, Boston, MA 02110-1301, USA. | |
| 20 | + * ---------------------------------------------------------------------------- | |
| 21 | + * Este arquivo é parte do Framework Demoiselle. | |
| 22 | + * | |
| 23 | + * O Framework Demoiselle é um software livre; você pode redistribuí-lo e/ou | |
| 24 | + * modificá-lo dentro dos termos da GNU LGPL versão 3 como publicada pela Fundação | |
| 25 | + * do Software Livre (FSF). | |
| 26 | + * | |
| 27 | + * Este programa é distribuído na esperança que possa ser útil, mas SEM NENHUMA | |
| 28 | + * GARANTIA; sem uma garantia implícita de ADEQUAÇÃO a qualquer MERCADO ou | |
| 29 | + * APLICAÇÃO EM PARTICULAR. Veja a Licença Pública Geral GNU/LGPL em português | |
| 30 | + * para maiores detalhes. | |
| 31 | + * | |
| 32 | + * Você deve ter recebido uma cópia da GNU LGPL versão 3, sob o título | |
| 33 | + * "LICENCA.txt", junto com esse programa. Se não, acesse <http://www.gnu.org/licenses/> | |
| 34 | + * ou escreva para a Fundação do Software Livre (FSF) Inc., | |
| 35 | + * 51 Franklin St, Fifth Floor, Boston, MA 02111-1301, USA. | |
| 36 | + */ | |
| 37 | +package security.athentication.error; | |
| 38 | + | |
| 39 | +import static junit.framework.Assert.assertEquals; | |
| 40 | +import static junit.framework.Assert.fail; | |
| 41 | + | |
| 42 | +import javax.inject.Inject; | |
| 43 | + | |
| 44 | +import org.jboss.arquillian.container.test.api.Deployment; | |
| 45 | +import org.jboss.arquillian.junit.Arquillian; | |
| 46 | +import org.jboss.shrinkwrap.api.spec.JavaArchive; | |
| 47 | +import org.junit.Test; | |
| 48 | +import org.junit.runner.RunWith; | |
| 49 | + | |
| 50 | +import test.Tests; | |
| 51 | +import br.gov.frameworkdemoiselle.security.AuthenticationException; | |
| 52 | +import br.gov.frameworkdemoiselle.security.NotLoggedInException; | |
| 53 | +import br.gov.frameworkdemoiselle.security.SecurityContext; | |
| 54 | +import br.gov.frameworkdemoiselle.util.Beans; | |
| 55 | +import br.gov.frameworkdemoiselle.util.NameQualifier; | |
| 56 | +import br.gov.frameworkdemoiselle.util.ResourceBundle; | |
| 57 | +import configuration.resource.ConfigurationResourceTest; | |
| 58 | + | |
| 59 | +@RunWith(Arquillian.class) | |
| 60 | +public class LoginErrorAuthenticatorTest { | |
| 61 | + | |
| 62 | + @Inject | |
| 63 | + private SecurityContext context; | |
| 64 | + | |
| 65 | + @Deployment | |
| 66 | + public static JavaArchive createDeployment() { | |
| 67 | + JavaArchive deployment = Tests.createDeployment(ConfigurationResourceTest.class); | |
| 68 | + deployment.addClass(LoginErrorAuthenticator.class); | |
| 69 | + return deployment; | |
| 70 | + } | |
| 71 | + | |
| 72 | + @Test | |
| 73 | + public void errorDuringLogin() { | |
| 74 | + try { | |
| 75 | + context.login(); | |
| 76 | + fail("Login deveria disparar exceção de runtime"); | |
| 77 | + | |
| 78 | + } catch (AuthenticationException cause) { | |
| 79 | + assertEquals(RuntimeException.class, cause.getCause().getClass()); | |
| 80 | + } | |
| 81 | + } | |
| 82 | + | |
| 83 | + @Test | |
| 84 | + public void errorDurindCheckLoggedIn() { | |
| 85 | + try { | |
| 86 | + context.checkLoggedIn(); | |
| 87 | + fail("checkLoggedIn deveria disparar exceção de NotLoggedIn"); | |
| 88 | + } catch (NotLoggedInException cause) { | |
| 89 | + assertEquals(Beans.getReference(ResourceBundle.class, new NameQualifier("demoiselle-core-bundle")) | |
| 90 | + .getString("user-not-authenticated"), cause.getMessage()); | |
| 91 | + } | |
| 92 | + } | |
| 93 | + | |
| 94 | +} | ... | ... |
impl/core/src/test/java/security/athentication/error/LogoutErrorAuthenticator.java
0 → 100644
| ... | ... | @@ -0,0 +1,78 @@ |
| 1 | +/* | |
| 2 | + * Demoiselle Framework | |
| 3 | + * Copyright (C) 2010 SERPRO | |
| 4 | + * ---------------------------------------------------------------------------- | |
| 5 | + * This file is part of Demoiselle Framework. | |
| 6 | + * | |
| 7 | + * Demoiselle Framework is free software; you can redistribute it and/or | |
| 8 | + * modify it under the terms of the GNU Lesser General Public License version 3 | |
| 9 | + * as published by the Free Software Foundation. | |
| 10 | + * | |
| 11 | + * This program is distributed in the hope that it will be useful, | |
| 12 | + * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 13 | + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
| 14 | + * GNU General Public License for more details. | |
| 15 | + * | |
| 16 | + * You should have received a copy of the GNU Lesser General Public License version 3 | |
| 17 | + * along with this program; if not, see <http://www.gnu.org/licenses/> | |
| 18 | + * or write to the Free Software Foundation, Inc., 51 Franklin Street, | |
| 19 | + * Fifth Floor, Boston, MA 02110-1301, USA. | |
| 20 | + * ---------------------------------------------------------------------------- | |
| 21 | + * Este arquivo é parte do Framework Demoiselle. | |
| 22 | + * | |
| 23 | + * O Framework Demoiselle é um software livre; você pode redistribuí-lo e/ou | |
| 24 | + * modificá-lo dentro dos termos da GNU LGPL versão 3 como publicada pela Fundação | |
| 25 | + * do Software Livre (FSF). | |
| 26 | + * | |
| 27 | + * Este programa é distribuído na esperança que possa ser útil, mas SEM NENHUMA | |
| 28 | + * GARANTIA; sem uma garantia implícita de ADEQUAÇÃO a qualquer MERCADO ou | |
| 29 | + * APLICAÇÃO EM PARTICULAR. Veja a Licença Pública Geral GNU/LGPL em português | |
| 30 | + * para maiores detalhes. | |
| 31 | + * | |
| 32 | + * Você deve ter recebido uma cópia da GNU LGPL versão 3, sob o título | |
| 33 | + * "LICENCA.txt", junto com esse programa. Se não, acesse <http://www.gnu.org/licenses/> | |
| 34 | + * ou escreva para a Fundação do Software Livre (FSF) Inc., | |
| 35 | + * 51 Franklin St, Fifth Floor, Boston, MA 02111-1301, USA. | |
| 36 | + */ | |
| 37 | +package security.athentication.error; | |
| 38 | + | |
| 39 | +import br.gov.frameworkdemoiselle.security.Authenticator; | |
| 40 | +import br.gov.frameworkdemoiselle.security.User; | |
| 41 | + | |
| 42 | +public class LogoutErrorAuthenticator implements Authenticator { | |
| 43 | + | |
| 44 | + private static final long serialVersionUID = 1L; | |
| 45 | + | |
| 46 | + private User currentUser; | |
| 47 | + | |
| 48 | + @Override | |
| 49 | + public void authenticate() { | |
| 50 | + this.currentUser = new User() { | |
| 51 | + | |
| 52 | + private static final long serialVersionUID = 1L; | |
| 53 | + | |
| 54 | + public String getId() { | |
| 55 | + return "demoiselle"; | |
| 56 | + } | |
| 57 | + | |
| 58 | + @Override | |
| 59 | + public Object getAttribute(Object key) { | |
| 60 | + return null; | |
| 61 | + } | |
| 62 | + | |
| 63 | + @Override | |
| 64 | + public void setAttribute(Object key, Object value) { | |
| 65 | + } | |
| 66 | + }; | |
| 67 | + } | |
| 68 | + | |
| 69 | + @Override | |
| 70 | + public void unauthenticate() { | |
| 71 | + throw new RuntimeException(); | |
| 72 | + } | |
| 73 | + | |
| 74 | + @Override | |
| 75 | + public User getUser() { | |
| 76 | + return currentUser; | |
| 77 | + } | |
| 78 | +} | ... | ... |
impl/core/src/test/java/security/athentication/error/LogoutErrorAuthenticatorTest.java
0 → 100644
| ... | ... | @@ -0,0 +1,82 @@ |
| 1 | +/* | |
| 2 | + * Demoiselle Framework | |
| 3 | + * Copyright (C) 2010 SERPRO | |
| 4 | + * ---------------------------------------------------------------------------- | |
| 5 | + * This file is part of Demoiselle Framework. | |
| 6 | + * | |
| 7 | + * Demoiselle Framework is free software; you can redistribute it and/or | |
| 8 | + * modify it under the terms of the GNU Lesser General Public License version 3 | |
| 9 | + * as published by the Free Software Foundation. | |
| 10 | + * | |
| 11 | + * This program is distributed in the hope that it will be useful, | |
| 12 | + * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 13 | + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
| 14 | + * GNU General Public License for more details. | |
| 15 | + * | |
| 16 | + * You should have received a copy of the GNU Lesser General Public License version 3 | |
| 17 | + * along with this program; if not, see <http://www.gnu.org/licenses/> | |
| 18 | + * or write to the Free Software Foundation, Inc., 51 Franklin Street, | |
| 19 | + * Fifth Floor, Boston, MA 02110-1301, USA. | |
| 20 | + * ---------------------------------------------------------------------------- | |
| 21 | + * Este arquivo é parte do Framework Demoiselle. | |
| 22 | + * | |
| 23 | + * O Framework Demoiselle é um software livre; você pode redistribuí-lo e/ou | |
| 24 | + * modificá-lo dentro dos termos da GNU LGPL versão 3 como publicada pela Fundação | |
| 25 | + * do Software Livre (FSF). | |
| 26 | + * | |
| 27 | + * Este programa é distribuído na esperança que possa ser útil, mas SEM NENHUMA | |
| 28 | + * GARANTIA; sem uma garantia implícita de ADEQUAÇÃO a qualquer MERCADO ou | |
| 29 | + * APLICAÇÃO EM PARTICULAR. Veja a Licença Pública Geral GNU/LGPL em português | |
| 30 | + * para maiores detalhes. | |
| 31 | + * | |
| 32 | + * Você deve ter recebido uma cópia da GNU LGPL versão 3, sob o título | |
| 33 | + * "LICENCA.txt", junto com esse programa. Se não, acesse <http://www.gnu.org/licenses/> | |
| 34 | + * ou escreva para a Fundação do Software Livre (FSF) Inc., | |
| 35 | + * 51 Franklin St, Fifth Floor, Boston, MA 02111-1301, USA. | |
| 36 | + */ | |
| 37 | +package security.athentication.error; | |
| 38 | + | |
| 39 | +import static junit.framework.Assert.assertEquals; | |
| 40 | +import static junit.framework.Assert.assertTrue; | |
| 41 | +import static junit.framework.Assert.fail; | |
| 42 | + | |
| 43 | +import javax.inject.Inject; | |
| 44 | + | |
| 45 | +import org.jboss.arquillian.container.test.api.Deployment; | |
| 46 | +import org.jboss.arquillian.junit.Arquillian; | |
| 47 | +import org.jboss.shrinkwrap.api.spec.JavaArchive; | |
| 48 | +import org.junit.Test; | |
| 49 | +import org.junit.runner.RunWith; | |
| 50 | + | |
| 51 | +import test.Tests; | |
| 52 | +import br.gov.frameworkdemoiselle.security.AuthenticationException; | |
| 53 | +import br.gov.frameworkdemoiselle.security.SecurityContext; | |
| 54 | +import configuration.resource.ConfigurationResourceTest; | |
| 55 | + | |
| 56 | +@RunWith(Arquillian.class) | |
| 57 | +public class LogoutErrorAuthenticatorTest { | |
| 58 | + | |
| 59 | + @Inject | |
| 60 | + private SecurityContext context; | |
| 61 | + | |
| 62 | + @Deployment | |
| 63 | + public static JavaArchive createDeployment() { | |
| 64 | + JavaArchive deployment = Tests.createDeployment(ConfigurationResourceTest.class); | |
| 65 | + deployment.addClass(LogoutErrorAuthenticator.class); | |
| 66 | + return deployment; | |
| 67 | + } | |
| 68 | + | |
| 69 | + @Test | |
| 70 | + public void errorDuringLogout() { | |
| 71 | + try { | |
| 72 | + context.login(); | |
| 73 | + assertTrue(context.isLoggedIn()); | |
| 74 | + context.logout(); | |
| 75 | + fail("Logout deveria disparar exceção de runtime"); | |
| 76 | + | |
| 77 | + } catch (AuthenticationException cause) { | |
| 78 | + assertEquals(RuntimeException.class, cause.getCause().getClass()); | |
| 79 | + } | |
| 80 | + } | |
| 81 | + | |
| 82 | +} | ... | ... |
impl/core/src/test/java/security/authorization/custom/CustomAuthorizer.java
| ... | ... | @@ -49,7 +49,7 @@ public class CustomAuthorizer implements Authorizer { |
| 49 | 49 | |
| 50 | 50 | @Override |
| 51 | 51 | public boolean hasPermission(String resource, String operation) { |
| 52 | - return "resource".equals(resource); | |
| 52 | + return "resource".equals(resource) && "operation".equals(operation); | |
| 53 | 53 | } |
| 54 | 54 | |
| 55 | 55 | ... | ... |
impl/core/src/test/java/security/authorization/custom/CustomAuthorizerTest.java
| ... | ... | @@ -82,6 +82,15 @@ public class CustomAuthorizerTest { |
| 82 | 82 | Assert.assertTrue(context.hasRole("role")); |
| 83 | 83 | } |
| 84 | 84 | |
| 85 | + /** | |
| 86 | + * Verify if when already exist an authorizer, the things keeps working fine. | |
| 87 | + */ | |
| 88 | + @Test | |
| 89 | + public void hasPermitionAndHasRole(){ | |
| 90 | + Assert.assertTrue(context.hasPermission("resource", "operation")); | |
| 91 | + Assert.assertTrue(context.hasRole("role")); | |
| 92 | + } | |
| 93 | + | |
| 85 | 94 | @Test |
| 86 | 95 | public void denyPermission(){ |
| 87 | 96 | Assert.assertFalse(context.hasPermission("falseresource", "falseoperation")); | ... | ... |
impl/core/src/test/java/security/authorization/disable/DisabledAuthorizationTest.java
0 → 100644
| ... | ... | @@ -0,0 +1,98 @@ |
| 1 | +/* | |
| 2 | + * Demoiselle Framework | |
| 3 | + * Copyright (C) 2010 SERPRO | |
| 4 | + * ---------------------------------------------------------------------------- | |
| 5 | + * This file is part of Demoiselle Framework. | |
| 6 | + * | |
| 7 | + * Demoiselle Framework is free software; you can redistribute it and/or | |
| 8 | + * modify it under the terms of the GNU Lesser General Public License version 3 | |
| 9 | + * as published by the Free Software Foundation. | |
| 10 | + * | |
| 11 | + * This program is distributed in the hope that it will be useful, | |
| 12 | + * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 13 | + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
| 14 | + * GNU General Public License for more details. | |
| 15 | + * | |
| 16 | + * You should have received a copy of the GNU Lesser General Public License version 3 | |
| 17 | + * along with this program; if not, see <http://www.gnu.org/licenses/> | |
| 18 | + * or write to the Free Software Foundation, Inc., 51 Franklin Street, | |
| 19 | + * Fifth Floor, Boston, MA 02110-1301, USA. | |
| 20 | + * ---------------------------------------------------------------------------- | |
| 21 | + * Este arquivo é parte do Framework Demoiselle. | |
| 22 | + * | |
| 23 | + * O Framework Demoiselle é um software livre; você pode redistribuí-lo e/ou | |
| 24 | + * modificá-lo dentro dos termos da GNU LGPL versão 3 como publicada pela Fundação | |
| 25 | + * do Software Livre (FSF). | |
| 26 | + * | |
| 27 | + * Este programa é distribuído na esperança que possa ser útil, mas SEM NENHUMA | |
| 28 | + * GARANTIA; sem uma garantia implícita de ADEQUAÇÃO a qualquer MERCADO ou | |
| 29 | + * APLICAÇÃO EM PARTICULAR. Veja a Licença Pública Geral GNU/LGPL em português | |
| 30 | + * para maiores detalhes. | |
| 31 | + * | |
| 32 | + * Você deve ter recebido uma cópia da GNU LGPL versão 3, sob o título | |
| 33 | + * "LICENCA.txt", junto com esse programa. Se não, acesse <http://www.gnu.org/licenses/> | |
| 34 | + * ou escreva para a Fundação do Software Livre (FSF) Inc., | |
| 35 | + * 51 Franklin St, Fifth Floor, Boston, MA 02111-1301, USA. | |
| 36 | + */ | |
| 37 | +package security.authorization.disable; | |
| 38 | + | |
| 39 | +import static org.junit.Assert.assertEquals; | |
| 40 | +import static org.junit.Assert.assertNull; | |
| 41 | +import static org.junit.Assert.assertTrue; | |
| 42 | + | |
| 43 | +import javax.enterprise.context.RequestScoped; | |
| 44 | +import javax.enterprise.event.Observes; | |
| 45 | +import javax.inject.Inject; | |
| 46 | + | |
| 47 | +import junit.framework.Assert; | |
| 48 | + | |
| 49 | +import org.jboss.arquillian.container.test.api.Deployment; | |
| 50 | +import org.jboss.arquillian.junit.Arquillian; | |
| 51 | +import org.jboss.shrinkwrap.api.spec.JavaArchive; | |
| 52 | +import org.junit.Test; | |
| 53 | +import org.junit.runner.RunWith; | |
| 54 | + | |
| 55 | +import security.athentication.custom.CustomAuthenticator; | |
| 56 | +import security.authorization.custom.CustomAuthorizer; | |
| 57 | +import test.Tests; | |
| 58 | +import br.gov.frameworkdemoiselle.security.AfterLoginSuccessful; | |
| 59 | +import br.gov.frameworkdemoiselle.security.SecurityContext; | |
| 60 | +import configuration.resource.ConfigurationResourceTest; | |
| 61 | + | |
| 62 | +@RequestScoped | |
| 63 | +@RunWith(Arquillian.class) | |
| 64 | +public class DisabledAuthorizationTest { | |
| 65 | + | |
| 66 | + private static final String PATH = "src/test/resources/security/authorization/disabled"; | |
| 67 | + | |
| 68 | + @Inject | |
| 69 | + private SecurityContext context; | |
| 70 | + | |
| 71 | + private AfterLoginSuccessful event; | |
| 72 | + | |
| 73 | + @Deployment | |
| 74 | + public static JavaArchive createDeployment() { | |
| 75 | + JavaArchive deployment = Tests.createDeployment(ConfigurationResourceTest.class); | |
| 76 | + deployment.addClass(CustomAuthorizer.class); | |
| 77 | + deployment.addAsResource(Tests.createFileAsset(PATH + "/demoiselle.properties"), "demoiselle.properties"); | |
| 78 | + return deployment; | |
| 79 | + } | |
| 80 | + | |
| 81 | + public void observer(@Observes AfterLoginSuccessful event) { | |
| 82 | + this.event = event; | |
| 83 | + } | |
| 84 | + | |
| 85 | + @Test | |
| 86 | + public void hasPermissionProcess() { | |
| 87 | + Assert.assertTrue(context.hasPermission("resource", "operation")); | |
| 88 | + Assert.assertTrue(context.hasPermission("falseresource", "falseoperation")); | |
| 89 | + assertNull(event); | |
| 90 | + } | |
| 91 | + | |
| 92 | + @Test | |
| 93 | + public void hasRoleProcess(){ | |
| 94 | + Assert.assertTrue(context.hasRole("role")); | |
| 95 | + Assert.assertTrue(context.hasRole("falserole")); | |
| 96 | + assertNull(event); | |
| 97 | + } | |
| 98 | +} | ... | ... |
impl/core/src/test/java/security/authorization/error/ErrorAuthorizer.java
impl/core/src/test/java/security/authorization/error/ErrorAuthorizerTest.java
| ... | ... | @@ -36,9 +36,10 @@ |
| 36 | 36 | */ |
| 37 | 37 | package security.authorization.error; |
| 38 | 38 | |
| 39 | -import javax.inject.Inject; | |
| 39 | +import static junit.framework.Assert.assertEquals; | |
| 40 | +import static junit.framework.Assert.fail; | |
| 40 | 41 | |
| 41 | -import junit.framework.Assert; | |
| 42 | +import javax.inject.Inject; | |
| 42 | 43 | |
| 43 | 44 | import org.jboss.arquillian.container.test.api.Deployment; |
| 44 | 45 | import org.jboss.arquillian.junit.Arquillian; |
| ... | ... | @@ -51,7 +52,6 @@ import org.junit.runner.RunWith; |
| 51 | 52 | import security.athentication.custom.CustomAuthenticator; |
| 52 | 53 | import test.Tests; |
| 53 | 54 | import br.gov.frameworkdemoiselle.security.AuthorizationException; |
| 54 | -import br.gov.frameworkdemoiselle.security.NotLoggedInException; | |
| 55 | 55 | import br.gov.frameworkdemoiselle.security.SecurityContext; |
| 56 | 56 | import configuration.resource.ConfigurationResourceTest; |
| 57 | 57 | |
| ... | ... | @@ -68,43 +68,37 @@ public class ErrorAuthorizerTest { |
| 68 | 68 | deployment.addClass(ErrorAuthorizer.class); |
| 69 | 69 | return deployment; |
| 70 | 70 | } |
| 71 | - | |
| 71 | + | |
| 72 | 72 | @Before |
| 73 | - public void loginToTest(){ | |
| 73 | + public void loginToTest() { | |
| 74 | 74 | context.login(); |
| 75 | 75 | } |
| 76 | 76 | |
| 77 | 77 | @Test |
| 78 | - public void errorDuringCheckPermission(){ | |
| 79 | - try{ | |
| 78 | + public void errorDuringCheckPermission() { | |
| 79 | + try { | |
| 80 | 80 | context.hasPermission("resource", "operation"); |
| 81 | - Assert.fail("Verificar permissão deveria disparar exceção de runtime"); | |
| 82 | - } | |
| 83 | - catch(NotLoggedInException ae){ | |
| 84 | - Assert.fail("A exceção disparada não foi a esperada"); | |
| 85 | - } | |
| 86 | - catch(RuntimeException e){ | |
| 87 | - //PASS | |
| 81 | + fail("Verificar permissão deveria disparar exceção de runtime"); | |
| 82 | + | |
| 83 | + } catch (AuthorizationException cause) { | |
| 84 | + assertEquals(RuntimeException.class, cause.getCause().getClass()); | |
| 88 | 85 | } |
| 89 | 86 | } |
| 90 | - | |
| 87 | + | |
| 91 | 88 | @Test |
| 92 | - public void errorDuringCheckRole(){ | |
| 93 | - try{ | |
| 89 | + public void errorDuringCheckRole() { | |
| 90 | + try { | |
| 94 | 91 | context.hasRole("role"); |
| 95 | - Assert.fail("Verificar papel deveria disparar exceção de runtime"); | |
| 96 | - } | |
| 97 | - catch(AuthorizationException ae){ | |
| 98 | - Assert.fail("A exceção disparada não foi a esperada"); | |
| 99 | - } | |
| 100 | - catch(RuntimeException e){ | |
| 101 | - //PASS | |
| 92 | + fail("Verificar papel deveria disparar exceção de runtime"); | |
| 93 | + | |
| 94 | + } catch (AuthorizationException cause) { | |
| 95 | + assertEquals(RuntimeException.class, cause.getCause().getClass()); | |
| 102 | 96 | } |
| 103 | 97 | } |
| 104 | - | |
| 98 | + | |
| 105 | 99 | @After |
| 106 | - public void logoutAfterTest(){ | |
| 100 | + public void logoutAfterTest() { | |
| 107 | 101 | context.logout(); |
| 108 | 102 | } |
| 109 | - | |
| 103 | + | |
| 110 | 104 | } | ... | ... |
impl/core/src/test/java/security/authorization/selection/SelectedAuthorizerTest.java
impl/core/src/test/java/security/interceptor/loggedin/CustomAuthenticator.java
0 → 100644
| ... | ... | @@ -0,0 +1,81 @@ |
| 1 | +/* | |
| 2 | + * Demoiselle Framework | |
| 3 | + * Copyright (C) 2010 SERPRO | |
| 4 | + * ---------------------------------------------------------------------------- | |
| 5 | + * This file is part of Demoiselle Framework. | |
| 6 | + * | |
| 7 | + * Demoiselle Framework is free software; you can redistribute it and/or | |
| 8 | + * modify it under the terms of the GNU Lesser General Public License version 3 | |
| 9 | + * as published by the Free Software Foundation. | |
| 10 | + * | |
| 11 | + * This program is distributed in the hope that it will be useful, | |
| 12 | + * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 13 | + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
| 14 | + * GNU General Public License for more details. | |
| 15 | + * | |
| 16 | + * You should have received a copy of the GNU Lesser General Public License version 3 | |
| 17 | + * along with this program; if not, see <http://www.gnu.org/licenses/> | |
| 18 | + * or write to the Free Software Foundation, Inc., 51 Franklin Street, | |
| 19 | + * Fifth Floor, Boston, MA 02110-1301, USA. | |
| 20 | + * ---------------------------------------------------------------------------- | |
| 21 | + * Este arquivo é parte do Framework Demoiselle. | |
| 22 | + * | |
| 23 | + * O Framework Demoiselle é um software livre; você pode redistribuí-lo e/ou | |
| 24 | + * modificá-lo dentro dos termos da GNU LGPL versão 3 como publicada pela Fundação | |
| 25 | + * do Software Livre (FSF). | |
| 26 | + * | |
| 27 | + * Este programa é distribuído na esperança que possa ser útil, mas SEM NENHUMA | |
| 28 | + * GARANTIA; sem uma garantia implícita de ADEQUAÇÃO a qualquer MERCADO ou | |
| 29 | + * APLICAÇÃO EM PARTICULAR. Veja a Licença Pública Geral GNU/LGPL em português | |
| 30 | + * para maiores detalhes. | |
| 31 | + * | |
| 32 | + * Você deve ter recebido uma cópia da GNU LGPL versão 3, sob o título | |
| 33 | + * "LICENCA.txt", junto com esse programa. Se não, acesse <http://www.gnu.org/licenses/> | |
| 34 | + * ou escreva para a Fundação do Software Livre (FSF) Inc., | |
| 35 | + * 51 Franklin St, Fifth Floor, Boston, MA 02111-1301, USA. | |
| 36 | + */ | |
| 37 | +package security.interceptor.loggedin; | |
| 38 | + | |
| 39 | +import javax.enterprise.context.SessionScoped; | |
| 40 | + | |
| 41 | +import br.gov.frameworkdemoiselle.security.Authenticator; | |
| 42 | +import br.gov.frameworkdemoiselle.security.User; | |
| 43 | + | |
| 44 | +@SessionScoped | |
| 45 | +public class CustomAuthenticator implements Authenticator { | |
| 46 | + | |
| 47 | + private static final long serialVersionUID = 1L; | |
| 48 | + | |
| 49 | + private User currentUser; | |
| 50 | + | |
| 51 | + @Override | |
| 52 | + public void authenticate() { | |
| 53 | + this.currentUser = new User() { | |
| 54 | + | |
| 55 | + private static final long serialVersionUID = 1L; | |
| 56 | + | |
| 57 | + public String getId() { | |
| 58 | + return "demoiselle"; | |
| 59 | + } | |
| 60 | + | |
| 61 | + @Override | |
| 62 | + public Object getAttribute(Object key) { | |
| 63 | + return null; | |
| 64 | + } | |
| 65 | + | |
| 66 | + @Override | |
| 67 | + public void setAttribute(Object key, Object value) { | |
| 68 | + } | |
| 69 | + }; | |
| 70 | + } | |
| 71 | + | |
| 72 | + @Override | |
| 73 | + public void unauthenticate() { | |
| 74 | + this.currentUser = null; | |
| 75 | + } | |
| 76 | + | |
| 77 | + @Override | |
| 78 | + public User getUser() { | |
| 79 | + return this.currentUser; | |
| 80 | + } | |
| 81 | +} | ... | ... |
impl/core/src/test/java/security/interceptor/loggedin/DummyProtectedClass.java
0 → 100644
| ... | ... | @@ -0,0 +1,54 @@ |
| 1 | +/* | |
| 2 | + * Demoiselle Framework | |
| 3 | + * Copyright (C) 2010 SERPRO | |
| 4 | + * ---------------------------------------------------------------------------- | |
| 5 | + * This file is part of Demoiselle Framework. | |
| 6 | + * | |
| 7 | + * Demoiselle Framework is free software; you can redistribute it and/or | |
| 8 | + * modify it under the terms of the GNU Lesser General Public License version 3 | |
| 9 | + * as published by the Free Software Foundation. | |
| 10 | + * | |
| 11 | + * This program is distributed in the hope that it will be useful, | |
| 12 | + * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 13 | + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
| 14 | + * GNU General Public License for more details. | |
| 15 | + * | |
| 16 | + * You should have received a copy of the GNU Lesser General Public License version 3 | |
| 17 | + * along with this program; if not, see <http://www.gnu.org/licenses/> | |
| 18 | + * or write to the Free Software Foundation, Inc., 51 Franklin Street, | |
| 19 | + * Fifth Floor, Boston, MA 02110-1301, USA. | |
| 20 | + * ---------------------------------------------------------------------------- | |
| 21 | + * Este arquivo é parte do Framework Demoiselle. | |
| 22 | + * | |
| 23 | + * O Framework Demoiselle é um software livre; você pode redistribuí-lo e/ou | |
| 24 | + * modificá-lo dentro dos termos da GNU LGPL versão 3 como publicada pela Fundação | |
| 25 | + * do Software Livre (FSF). | |
| 26 | + * | |
| 27 | + * Este programa é distribuído na esperança que possa ser útil, mas SEM NENHUMA | |
| 28 | + * GARANTIA; sem uma garantia implícita de ADEQUAÇÃO a qualquer MERCADO ou | |
| 29 | + * APLICAÇÃO EM PARTICULAR. Veja a Licença Pública Geral GNU/LGPL em português | |
| 30 | + * para maiores detalhes. | |
| 31 | + * | |
| 32 | + * Você deve ter recebido uma cópia da GNU LGPL versão 3, sob o título | |
| 33 | + * "LICENCA.txt", junto com esse programa. Se não, acesse <http://www.gnu.org/licenses/> | |
| 34 | + * ou escreva para a Fundação do Software Livre (FSF) Inc., | |
| 35 | + * 51 Franklin St, Fifth Floor, Boston, MA 02111-1301, USA. | |
| 36 | + */ | |
| 37 | +package security.interceptor.loggedin; | |
| 38 | + | |
| 39 | +import br.gov.frameworkdemoiselle.security.LoggedIn; | |
| 40 | + | |
| 41 | +@LoggedIn | |
| 42 | +public class DummyProtectedClass { | |
| 43 | + | |
| 44 | + private String dummyAttrib; | |
| 45 | + | |
| 46 | + public String getDummyAttrib() { | |
| 47 | + return dummyAttrib; | |
| 48 | + } | |
| 49 | + | |
| 50 | + public void setDummyAttrib(String dummyAttrib) { | |
| 51 | + this.dummyAttrib = dummyAttrib; | |
| 52 | + } | |
| 53 | + | |
| 54 | +} | ... | ... |
impl/core/src/test/java/security/interceptor/loggedin/LoggedInInterceptorTest.java
0 → 100644
| ... | ... | @@ -0,0 +1,109 @@ |
| 1 | +/* | |
| 2 | + * Demoiselle Framework | |
| 3 | + * Copyright (C) 2010 SERPRO | |
| 4 | + * ---------------------------------------------------------------------------- | |
| 5 | + * This file is part of Demoiselle Framework. | |
| 6 | + * | |
| 7 | + * Demoiselle Framework is free software; you can redistribute it and/or | |
| 8 | + * modify it under the terms of the GNU Lesser General Public License version 3 | |
| 9 | + * as published by the Free Software Foundation. | |
| 10 | + * | |
| 11 | + * This program is distributed in the hope that it will be useful, | |
| 12 | + * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 13 | + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
| 14 | + * GNU General Public License for more details. | |
| 15 | + * | |
| 16 | + * You should have received a copy of the GNU Lesser General Public License version 3 | |
| 17 | + * along with this program; if not, see <http://www.gnu.org/licenses/> | |
| 18 | + * or write to the Free Software Foundation, Inc., 51 Franklin Street, | |
| 19 | + * Fifth Floor, Boston, MA 02110-1301, USA. | |
| 20 | + * ---------------------------------------------------------------------------- | |
| 21 | + * Este arquivo é parte do Framework Demoiselle. | |
| 22 | + * | |
| 23 | + * O Framework Demoiselle é um software livre; você pode redistribuí-lo e/ou | |
| 24 | + * modificá-lo dentro dos termos da GNU LGPL versão 3 como publicada pela Fundação | |
| 25 | + * do Software Livre (FSF). | |
| 26 | + * | |
| 27 | + * Este programa é distribuído na esperança que possa ser útil, mas SEM NENHUMA | |
| 28 | + * GARANTIA; sem uma garantia implícita de ADEQUAÇÃO a qualquer MERCADO ou | |
| 29 | + * APLICAÇÃO EM PARTICULAR. Veja a Licença Pública Geral GNU/LGPL em português | |
| 30 | + * para maiores detalhes. | |
| 31 | + * | |
| 32 | + * Você deve ter recebido uma cópia da GNU LGPL versão 3, sob o título | |
| 33 | + * "LICENCA.txt", junto com esse programa. Se não, acesse <http://www.gnu.org/licenses/> | |
| 34 | + * ou escreva para a Fundação do Software Livre (FSF) Inc., | |
| 35 | + * 51 Franklin St, Fifth Floor, Boston, MA 02111-1301, USA. | |
| 36 | + */ | |
| 37 | +package security.interceptor.loggedin; | |
| 38 | + | |
| 39 | +import static junit.framework.Assert.assertEquals; | |
| 40 | +import static org.junit.Assert.assertEquals; | |
| 41 | +import static org.junit.Assert.assertNotNull; | |
| 42 | +import static org.junit.Assert.assertTrue; | |
| 43 | + | |
| 44 | +import javax.inject.Inject; | |
| 45 | + | |
| 46 | +import org.jboss.arquillian.container.test.api.Deployment; | |
| 47 | +import org.jboss.arquillian.junit.Arquillian; | |
| 48 | +import org.jboss.shrinkwrap.api.spec.JavaArchive; | |
| 49 | +import org.junit.After; | |
| 50 | +import org.junit.Before; | |
| 51 | +import org.junit.Test; | |
| 52 | +import org.junit.runner.RunWith; | |
| 53 | + | |
| 54 | +import br.gov.frameworkdemoiselle.context.RequestContext; | |
| 55 | +import br.gov.frameworkdemoiselle.context.SessionContext; | |
| 56 | +import br.gov.frameworkdemoiselle.security.AuthenticationException; | |
| 57 | +import br.gov.frameworkdemoiselle.security.NotLoggedInException; | |
| 58 | +import br.gov.frameworkdemoiselle.security.SecurityContext; | |
| 59 | +import br.gov.frameworkdemoiselle.util.Beans; | |
| 60 | +import br.gov.frameworkdemoiselle.util.NameQualifier; | |
| 61 | +import br.gov.frameworkdemoiselle.util.ResourceBundle; | |
| 62 | + | |
| 63 | +import test.Tests; | |
| 64 | + | |
| 65 | +@RunWith(Arquillian.class) | |
| 66 | +public class LoggedInInterceptorTest { | |
| 67 | + | |
| 68 | + @Inject | |
| 69 | + private DummyProtectedClass protectedClass; | |
| 70 | + | |
| 71 | + @Inject | |
| 72 | + private SecurityContext context; | |
| 73 | + | |
| 74 | + @Deployment | |
| 75 | + public static JavaArchive createDeployment() { | |
| 76 | + JavaArchive deployment = Tests.createDeployment(); | |
| 77 | + deployment.addClass(DummyProtectedClass.class); | |
| 78 | + deployment.addClass(CustomAuthenticator.class); | |
| 79 | + return deployment; | |
| 80 | + } | |
| 81 | + | |
| 82 | + @Before | |
| 83 | + public void activeContext(){ | |
| 84 | + SessionContext ctx = Beans.getReference(SessionContext.class); | |
| 85 | + ctx.activate(); | |
| 86 | + } | |
| 87 | + | |
| 88 | + @Test | |
| 89 | + public void callProtectedClassAttribNotLogged() { | |
| 90 | + try { | |
| 91 | + protectedClass.getDummyAttrib(); | |
| 92 | + } catch (NotLoggedInException cause) { | |
| 93 | + assertEquals(Beans.getReference(ResourceBundle.class, new NameQualifier("demoiselle-core-bundle")) | |
| 94 | + .getString("user-not-authenticated"), cause.getMessage()); | |
| 95 | + } | |
| 96 | + } | |
| 97 | + | |
| 98 | + @Test | |
| 99 | + public void callProtectedClassAttribLogged() { | |
| 100 | + context.login(); | |
| 101 | + protectedClass.getDummyAttrib(); | |
| 102 | + } | |
| 103 | + | |
| 104 | + @After | |
| 105 | + public void deactiveContext(){ | |
| 106 | + SessionContext ctx = Beans.getReference(SessionContext.class); | |
| 107 | + ctx.deactivate(); | |
| 108 | + } | |
| 109 | +} | ... | ... |
impl/core/src/test/java/transaction/createdstrategy/TransactionWithCreatedStrategyTest.java
| ... | ... | @@ -47,11 +47,10 @@ import org.junit.Before; |
| 47 | 47 | import org.junit.Test; |
| 48 | 48 | import org.junit.runner.RunWith; |
| 49 | 49 | |
| 50 | +import test.Tests; | |
| 50 | 51 | import br.gov.frameworkdemoiselle.transaction.Transaction; |
| 51 | 52 | import br.gov.frameworkdemoiselle.transaction.TransactionContext; |
| 52 | 53 | |
| 53 | -import test.Tests; | |
| 54 | - | |
| 55 | 54 | @RunWith(Arquillian.class) |
| 56 | 55 | public class TransactionWithCreatedStrategyTest { |
| 57 | 56 | ... | ... |
impl/core/src/test/java/transaction/defaultstrategy/TransactionDefaultTest.java
| ... | ... | @@ -45,12 +45,11 @@ import org.junit.Before; |
| 45 | 45 | import org.junit.Test; |
| 46 | 46 | import org.junit.runner.RunWith; |
| 47 | 47 | |
| 48 | +import test.Tests; | |
| 48 | 49 | import br.gov.frameworkdemoiselle.DemoiselleException; |
| 49 | 50 | import br.gov.frameworkdemoiselle.transaction.Transaction; |
| 50 | 51 | import br.gov.frameworkdemoiselle.transaction.TransactionContext; |
| 51 | 52 | |
| 52 | -import test.Tests; | |
| 53 | - | |
| 54 | 53 | @RunWith(Arquillian.class) |
| 55 | 54 | public class TransactionDefaultTest { |
| 56 | 55 | ... | ... |
impl/core/src/test/java/util/beans/BeansTest.java
impl/core/src/test/java/util/beans/QualifierOne.java
| ... | ... | @@ -38,8 +38,8 @@ package util.beans; |
| 38 | 38 | |
| 39 | 39 | import static java.lang.annotation.ElementType.FIELD; |
| 40 | 40 | import static java.lang.annotation.ElementType.METHOD; |
| 41 | -import static java.lang.annotation.ElementType.TYPE; | |
| 42 | 41 | import static java.lang.annotation.ElementType.PARAMETER; |
| 42 | +import static java.lang.annotation.ElementType.TYPE; | |
| 43 | 43 | import static java.lang.annotation.RetentionPolicy.RUNTIME; |
| 44 | 44 | |
| 45 | 45 | import java.lang.annotation.Retention; | ... | ... |
impl/core/src/test/java/util/beans/QualifierTwo.java
| ... | ... | @@ -38,8 +38,8 @@ package util.beans; |
| 38 | 38 | |
| 39 | 39 | import static java.lang.annotation.ElementType.FIELD; |
| 40 | 40 | import static java.lang.annotation.ElementType.METHOD; |
| 41 | -import static java.lang.annotation.ElementType.TYPE; | |
| 42 | 41 | import static java.lang.annotation.ElementType.PARAMETER; |
| 42 | +import static java.lang.annotation.ElementType.TYPE; | |
| 43 | 43 | import static java.lang.annotation.RetentionPolicy.RUNTIME; |
| 44 | 44 | |
| 45 | 45 | import java.lang.annotation.Retention; | ... | ... |
impl/core/src/test/resources/beans.xml
| ... | ... | @@ -5,6 +5,7 @@ |
| 5 | 5 | <class>br.gov.frameworkdemoiselle.transaction.TransactionalInterceptor</class> |
| 6 | 6 | <class>br.gov.frameworkdemoiselle.security.RequiredPermissionInterceptor</class> |
| 7 | 7 | <class>br.gov.frameworkdemoiselle.security.RequiredRoleInterceptor</class> |
| 8 | + <class>br.gov.frameworkdemoiselle.security.LoggedInInterceptor</class> | |
| 8 | 9 | <class>br.gov.frameworkdemoiselle.exception.ExceptionHandlerInterceptor</class> |
| 9 | 10 | </interceptors> |
| 10 | 11 | ... | ... |
impl/core/src/test/resources/security/authorization/disabled/demoiselle.properties
0 → 100644
| ... | ... | @@ -0,0 +1,38 @@ |
| 1 | +# Demoiselle Framework | |
| 2 | +# Copyright (C) 2010 SERPRO | |
| 3 | +# ---------------------------------------------------------------------------- | |
| 4 | +# This file is part of Demoiselle Framework. | |
| 5 | +# | |
| 6 | +# Demoiselle Framework is free software; you can redistribute it and/or | |
| 7 | +# modify it under the terms of the GNU Lesser General Public License version 3 | |
| 8 | +# as published by the Free Software Foundation. | |
| 9 | +# | |
| 10 | +# This program is distributed in the hope that it will be useful, | |
| 11 | +# but WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 12 | +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
| 13 | +# GNU General Public License for more details. | |
| 14 | +# | |
| 15 | +# You should have received a copy of the GNU Lesser General Public License version 3 | |
| 16 | +# along with this program; if not, see <http://www.gnu.org/licenses/> | |
| 17 | +# or write to the Free Software Foundation, Inc., 51 Franklin Street, | |
| 18 | +# Fifth Floor, Boston, MA 02110-1301, USA. | |
| 19 | +# ---------------------------------------------------------------------------- | |
| 20 | +# Este arquivo é parte do Framework Demoiselle. | |
| 21 | +# | |
| 22 | +# O Framework Demoiselle é um software livre; você pode redistribuí-lo e/ou | |
| 23 | +# modificá-lo dentro dos termos da GNU LGPL versão 3 como publicada pela Fundação | |
| 24 | +# do Software Livre (FSF). | |
| 25 | +# | |
| 26 | +# Este programa é distribuído na esperança que possa ser útil, mas SEM NENHUMA | |
| 27 | +# GARANTIA; sem uma garantia implícita de ADEQUAÇÃO a qualquer MERCADO ou | |
| 28 | +# APLICAÇÃO EM PARTICULAR. Veja a Licença Pública Geral GNU/LGPL em português | |
| 29 | +# para maiores detalhes. | |
| 30 | +# | |
| 31 | +# Você deve ter recebido uma cópia da GNU LGPL versão 3, sob o título | |
| 32 | +# "LICENCA.txt", junto com esse programa. Se não, acesse <http://www.gnu.org/licenses/> | |
| 33 | +# ou escreva para a Fundação do Software Livre (FSF) Inc., | |
| 34 | +# 51 Franklin St, Fifth Floor, Boston, MA 02111-1301, USA. | |
| 35 | + | |
| 36 | +frameworkdemoiselle.security.authorizer.class=security.authorization.custom.CustomAuthorizer | |
| 37 | +#frameworkdemoiselle.security.authenticator.class=security.athentication.custom.CustomAuthenticator | |
| 38 | +frameworkdemoiselle.security.enabled=false | |
| 0 | 39 | \ No newline at end of file | ... | ... |
impl/extension/servlet/src/main/java/br/gov/frameworkdemoiselle/security/ServletAuthenticator.java