use of org.apache.commons.httpclient.NameValuePair in project sling by apache.
the class PostServletOutputContentTypeTest method testJsonContentTypeException.
public void testJsonContentTypeException() throws Exception {
// Perform a POST that fails: invalid PostServlet operation
// with Accept header set to JSON
final String url = HTTP_BASE_URL + MY_TEST_PATH;
final PostMethod post = new PostMethod(url);
post.setFollowRedirects(false);
post.addParameter(new NameValuePair(SlingPostConstants.RP_OPERATION, "InvalidTestOperationFor" + getClass().getSimpleName()));
post.addRequestHeader("Accept", CONTENT_TYPE_JSON);
final int status = httpClient.executeMethod(post);
assertEquals(500, status);
final String contentType = post.getResponseHeader("Content-Type").getValue();
final String expected = CONTENT_TYPE_JSON;
assertTrue("Expecting content-type " + expected + " for failed POST request, got " + contentType, contentType != null && contentType.startsWith(expected));
}
use of org.apache.commons.httpclient.NameValuePair in project sling by apache.
the class PostServletPrivilegesUpdateTest method testUpdatePropertyPrivilegesAndEvents.
/**
* Test for SLING-897 fix:
* 1. Updating a property requires jcr:modifyProperties privilege on node.
* 2. When changing an existing property observers should receive a PROPERTY_CHANGED event instead
* of a PROPERTY_REMOVED event and a PROPERTY_ADDED event
*/
@Test
// TODO fails on jackrabbit 2.6.5 and on Oak
@Ignore
public void testUpdatePropertyPrivilegesAndEvents() throws IOException, JsonException, RepositoryException, InterruptedException {
//1. Create user as admin (OK)
// curl -F:name=myuser -Fpwd=password -FpwdConfirm=password http://admin:admin@localhost:8080/system/userManager/user.create.html
testUserId = H.createTestUser();
//2. Create node as admin (OK)
// curl -F:nameHint=node -FpropOne=propOneValue1 -FpropOne=propOneValue2 -FpropTwo=propTwoValue http://admin:admin@localhost:8080/test/
final String createTestNodeUrl = postUrl + SlingPostConstants.DEFAULT_CREATE_SUFFIX;
NameValuePairList clientNodeProperties = new NameValuePairList();
clientNodeProperties.add(SlingPostConstants.RP_NODE_NAME_HINT, testName.getMethodName());
clientNodeProperties.add("propOne", "propOneValue1");
clientNodeProperties.add("propOne", "propOneValue2");
clientNodeProperties.add("propTwo", "propTwoValue");
String testNodeUrl = H.getTestClient().createNode(createTestNodeUrl, clientNodeProperties, null, false);
String content = H.getContent(testNodeUrl + ".json", HttpTest.CONTENT_TYPE_JSON);
JsonObject json = JsonUtil.parseObject(content);
Object propOneObj = json.get("propOne");
assertTrue(propOneObj instanceof JsonArray);
assertEquals(2, ((JsonArray) propOneObj).size());
assertEquals("propOneValue1", ((JsonArray) propOneObj).getString(0));
assertEquals("propOneValue2", ((JsonArray) propOneObj).getString(1));
Object propTwoObj = json.get("propTwo");
assertTrue(propTwoObj instanceof JsonString);
assertEquals("propTwoValue", ((JsonString) propTwoObj).getString());
//3. Attempt to update property of node as testUser (500: javax.jcr.AccessDeniedException: /test/node/propOne: not allowed to add or modify item)
// curl -FpropOne=propOneValueChanged -FpropTwo=propTwoValueChanged1 -FpropTwo=propTwoValueChanged2 http://myuser:password@localhost:8080/test/node
List<NameValuePair> postParams = new ArrayList<NameValuePair>();
postParams.add(new NameValuePair("propOne", "propOneValueChanged"));
postParams.add(new NameValuePair("propTwo", "propTwoValueChanged1"));
postParams.add(new NameValuePair("propTwo", "propTwoValueChanged2"));
Credentials testUserCreds = new UsernamePasswordCredentials(testUserId, "testPwd");
String expectedMessage = "Expected javax.jcr.AccessDeniedException";
H.assertAuthenticatedPostStatus(testUserCreds, testNodeUrl, HttpServletResponse.SC_INTERNAL_SERVER_ERROR, postParams, expectedMessage);
//4. Grant jcr:modifyProperties rights to testUser as admin (OK)
// curl -FprincipalId=myuser -Fprivilege@jcr:modifyProperties=granted http://admin:admin@localhost:8080/test/node.modifyAce.html
Map<String, String> nodeAceProperties = new HashMap<String, String>();
nodeAceProperties.put("principalId", testUserId);
nodeAceProperties.put("privilege@jcr:modifyProperties", "granted");
H.getTestClient().createNode(testNodeUrl + ".modifyAce.html", nodeAceProperties);
//use a davex session to verify the correct JCR events are delivered
Repository repository = JcrUtils.getRepository(HttpTest.HTTP_BASE_URL + "/server/");
Session jcrSession = null;
TestEventListener listener = new TestEventListener();
ObservationManager observationManager = null;
try {
jcrSession = repository.login(new SimpleCredentials("admin", "admin".toCharArray()));
observationManager = jcrSession.getWorkspace().getObservationManager();
String testNodePath = testNodeUrl.substring(HttpTest.HTTP_BASE_URL.length());
observationManager.addEventListener(listener, //event types
Event.PROPERTY_ADDED | Event.PROPERTY_CHANGED | Event.PROPERTY_REMOVED, //absPath
testNodePath, //isDeep
true, //uuid
null, //nodeTypeName
null, //noLocal
false);
//5. Attempt to update properties of node (OK)
// curl -FpropOne=propOneValueChanged -FpropTwo=propTwoValueChanged1 -FpropTwo=propTwoValueChanged2 http://myuser:password@localhost:8080/test/node
H.assertAuthenticatedPostStatus(testUserCreds, testNodeUrl, HttpServletResponse.SC_OK, postParams, expectedMessage);
//verify the change happened
String afterUpdateContent = H.getContent(testNodeUrl + ".json", HttpTest.CONTENT_TYPE_JSON);
JsonObject afterUpdateJson = JsonUtil.parseObject(afterUpdateContent);
Object afterUpdatePropOneObj = afterUpdateJson.get("propOne");
assertTrue(afterUpdatePropOneObj instanceof JsonArray);
assertEquals(1, ((JsonArray) afterUpdatePropOneObj).size());
assertEquals("propOneValueChanged", ((JsonArray) afterUpdatePropOneObj).getString(0));
Object afterUpdatePropTwoObj = afterUpdateJson.get("propTwo");
assertTrue(afterUpdatePropTwoObj instanceof JsonArray);
assertEquals(2, ((JsonArray) afterUpdatePropTwoObj).size());
assertEquals("propTwoValueChanged1", ((JsonArray) afterUpdatePropTwoObj).getString(0));
assertEquals("propTwoValueChanged2", ((JsonArray) afterUpdatePropTwoObj).getString(1));
//wait for the expected JCR events to be delivered
for (int second = 0; second < 15; second++) {
if (listener.getEventBundlesProcessed() > 0) {
break;
}
Thread.sleep(1000);
}
assertEquals("One property added event was expected: " + listener.toString(), 1, listener.addedProperties.size());
assertEquals(testNodePath + "/propTwo", listener.addedProperties.get(0));
assertEquals("One property removed event was expected: " + listener.toString(), 1, listener.removedProperties.size());
assertEquals(testNodePath + "/propTwo", listener.removedProperties.get(0));
assertEquals("One property changed event was expected: " + listener.toString(), 1, listener.changedProperties.size());
assertEquals(testNodePath + "/propOne", listener.changedProperties.get(0));
} finally {
//cleanup
if (observationManager != null) {
observationManager.removeEventListener(listener);
}
jcrSession.logout();
repository = null;
}
}
use of org.apache.commons.httpclient.NameValuePair in project sling by apache.
the class UserManagerTestUtil method removeUserFromGroup.
/**
* Helper to assist removing a user from a group
* @param testUserId the user
* @param testGroupId the group
*/
public void removeUserFromGroup(String testUserId, String testGroupId) throws IOException {
String postUrl = HTTP_BASE_URL + "/system/userManager/group/" + testGroupId + ".update.html";
List<NameValuePair> postParams = new ArrayList<NameValuePair>();
postParams.add(new NameValuePair(":member@Delete", testUserId));
Credentials creds = new UsernamePasswordCredentials("admin", "admin");
final String info = "Removing user " + testUserId + " from group via " + postUrl;
assertAuthenticatedPostStatus(creds, postUrl, HttpServletResponse.SC_OK, postParams, info);
}
use of org.apache.commons.httpclient.NameValuePair in project sling by apache.
the class UpdateGroupTest method testUpdateGroup.
public void testUpdateGroup() throws IOException, JsonException {
testGroupId = createTestGroup();
String postUrl = HTTP_BASE_URL + "/system/userManager/group/" + testGroupId + ".update.html";
List<NameValuePair> postParams = new ArrayList<NameValuePair>();
postParams.add(new NameValuePair("displayName", "My Updated Test Group"));
postParams.add(new NameValuePair("url", "http://www.apache.org/updated"));
Credentials creds = new UsernamePasswordCredentials("admin", "admin");
assertAuthenticatedPostStatus(creds, postUrl, HttpServletResponse.SC_OK, postParams, null);
//fetch the user profile json to verify the settings
String getUrl = HTTP_BASE_URL + "/system/userManager/group/" + testGroupId + ".json";
//make sure the profile request returns some data
assertAuthenticatedHttpStatus(creds, getUrl, HttpServletResponse.SC_OK, null);
String json = getAuthenticatedContent(creds, getUrl, CONTENT_TYPE_JSON, null, HttpServletResponse.SC_OK);
assertNotNull(json);
JsonObject jsonObj = JsonUtil.parseObject(json);
assertEquals("My Updated Test Group", jsonObj.getString("displayName"));
assertEquals("http://www.apache.org/updated", jsonObj.getString("url"));
}
use of org.apache.commons.httpclient.NameValuePair in project sling by apache.
the class UpdateUserTest method testChangeUserPasswordWrongOldPwd.
@Test
public void testChangeUserPasswordWrongOldPwd() throws IOException {
testUserId = H.createTestUser();
String postUrl = HttpTest.HTTP_BASE_URL + "/system/userManager/user/" + testUserId + ".changePassword.html";
List<NameValuePair> postParams = new ArrayList<NameValuePair>();
postParams.add(new NameValuePair("oldPwd", "wrongTestPwd"));
postParams.add(new NameValuePair("newPwd", "testNewPwd"));
postParams.add(new NameValuePair("newPwdConfirm", "testNewPwd"));
//Credentials creds = new UsernamePasswordCredentials(testUserId, "testPwd");
Credentials creds = new UsernamePasswordCredentials("admin", "admin");
H.assertAuthenticatedPostStatus(creds, postUrl, HttpServletResponse.SC_INTERNAL_SERVER_ERROR, postParams, null);
}
Aggregations