Search in sources :

Example 26 with Cookie

use of jakarta.servlet.http.Cookie in project spring-security by spring-projects.

the class CookieCsrfTokenRepositoryTests method saveTokenEmptyCustomPath.

@Test
public void saveTokenEmptyCustomPath() {
    String customPath = "";
    this.repository.setCookiePath(customPath);
    CsrfToken token = this.repository.generateToken(this.request);
    this.repository.saveToken(token, this.request, this.response);
    Cookie tokenCookie = this.response.getCookie(CookieCsrfTokenRepository.DEFAULT_CSRF_COOKIE_NAME);
    assertThat(tokenCookie.getPath()).isEqualTo(this.request.getContextPath());
}
Also used : Cookie(jakarta.servlet.http.Cookie) Test(org.junit.jupiter.api.Test)

Example 27 with Cookie

use of jakarta.servlet.http.Cookie in project spring-security by spring-projects.

the class CookieCsrfTokenRepositoryTests method saveTokenSecure.

@Test
public void saveTokenSecure() {
    this.request.setSecure(true);
    CsrfToken token = this.repository.generateToken(this.request);
    this.repository.saveToken(token, this.request, this.response);
    Cookie tokenCookie = this.response.getCookie(CookieCsrfTokenRepository.DEFAULT_CSRF_COOKIE_NAME);
    assertThat(tokenCookie.getSecure()).isTrue();
}
Also used : Cookie(jakarta.servlet.http.Cookie) Test(org.junit.jupiter.api.Test)

Example 28 with Cookie

use of jakarta.servlet.http.Cookie in project spring-security by spring-projects.

the class CookieCsrfTokenRepositoryTests method saveToken.

@Test
public void saveToken() {
    CsrfToken token = this.repository.generateToken(this.request);
    this.repository.saveToken(token, this.request, this.response);
    Cookie tokenCookie = this.response.getCookie(CookieCsrfTokenRepository.DEFAULT_CSRF_COOKIE_NAME);
    assertThat(tokenCookie.getMaxAge()).isEqualTo(-1);
    assertThat(tokenCookie.getName()).isEqualTo(CookieCsrfTokenRepository.DEFAULT_CSRF_COOKIE_NAME);
    assertThat(tokenCookie.getPath()).isEqualTo(this.request.getContextPath());
    assertThat(tokenCookie.getSecure()).isEqualTo(this.request.isSecure());
    assertThat(tokenCookie.getValue()).isEqualTo(token.getToken());
    assertThat(tokenCookie.isHttpOnly()).isEqualTo(true);
}
Also used : Cookie(jakarta.servlet.http.Cookie) Test(org.junit.jupiter.api.Test)

Example 29 with Cookie

use of jakarta.servlet.http.Cookie in project spring-security by spring-projects.

the class CookieCsrfTokenRepositoryTests method saveTokenWithHttpOnlyFalse.

@Test
public void saveTokenWithHttpOnlyFalse() {
    this.repository = CookieCsrfTokenRepository.withHttpOnlyFalse();
    CsrfToken token = this.repository.generateToken(this.request);
    this.repository.saveToken(token, this.request, this.response);
    Cookie tokenCookie = this.response.getCookie(CookieCsrfTokenRepository.DEFAULT_CSRF_COOKIE_NAME);
    assertThat(tokenCookie.isHttpOnly()).isFalse();
}
Also used : Cookie(jakarta.servlet.http.Cookie) Test(org.junit.jupiter.api.Test)

Example 30 with Cookie

use of jakarta.servlet.http.Cookie in project spring-security by spring-projects.

the class CookieCsrfTokenRepositoryTests method saveTokenWithCookieDomain.

@Test
public void saveTokenWithCookieDomain() {
    String domainName = "example.com";
    this.repository.setCookieDomain(domainName);
    CsrfToken token = this.repository.generateToken(this.request);
    this.repository.saveToken(token, this.request, this.response);
    Cookie tokenCookie = this.response.getCookie(CookieCsrfTokenRepository.DEFAULT_CSRF_COOKIE_NAME);
    assertThat(tokenCookie.getDomain()).isEqualTo(domainName);
}
Also used : Cookie(jakarta.servlet.http.Cookie) Test(org.junit.jupiter.api.Test)

Aggregations

Cookie (jakarta.servlet.http.Cookie)197 Test (org.junit.jupiter.api.Test)137 MockHttpServletRequest (org.springframework.mock.web.MockHttpServletRequest)45 MockHttpServletResponse (org.springframework.mock.web.MockHttpServletResponse)40 MockHttpServletRequest (org.springframework.web.testfixture.servlet.MockHttpServletRequest)30 Locale (java.util.Locale)19 MockHttpServletResponse (org.springframework.web.testfixture.servlet.MockHttpServletResponse)19 MvcResult (org.springframework.test.web.servlet.MvcResult)15 Authentication (org.springframework.security.core.Authentication)11 Test (org.junit.Test)10 HttpServletRequest (jakarta.servlet.http.HttpServletRequest)9 MockHttpServletRequestBuilder (org.springframework.test.web.servlet.request.MockHttpServletRequestBuilder)9 IOException (java.io.IOException)8 LocaleContext (org.springframework.context.i18n.LocaleContext)8 SimpleLocaleContext (org.springframework.context.i18n.SimpleLocaleContext)8 SimpleTimeZoneAwareLocaleContext (org.springframework.context.i18n.SimpleTimeZoneAwareLocaleContext)8 TimeZoneAwareLocaleContext (org.springframework.context.i18n.TimeZoneAwareLocaleContext)8 Map (java.util.Map)6 SavedCookie (org.springframework.security.web.savedrequest.SavedCookie)6 ModelAndView (org.springframework.web.servlet.ModelAndView)6