use of org.pac4j.core.credentials.UsernamePasswordCredentials in project cas by apereo.
the class OAuth20ProofKeyCodeExchangeAuthenticatorTests method verifyAuthenticationPlainWithoutSecret.
@Test
public void verifyAuthenticationPlainWithoutSecret() throws Exception {
val credentials = new UsernamePasswordCredentials("clientWithoutSecret", "ABCD123");
val request = new MockHttpServletRequest();
ticketRegistry.addTicket(new OAuth20DefaultCode("CODE-1234567890", RegisteredServiceTestUtils.getService(), RegisteredServiceTestUtils.getAuthentication(), new HardTimeoutExpirationPolicy(10), new MockTicketGrantingTicket("casuser"), new ArrayList<>(), "ABCD123", "plain", "clientid12345", new HashMap<>(), OAuth20ResponseTypes.CODE, OAuth20GrantTypes.AUTHORIZATION_CODE));
request.addParameter(OAuth20Constants.CLIENT_ID, "clientWithoutSecret");
request.addParameter(OAuth20Constants.CODE_VERIFIER, "ABCD123");
request.addParameter(OAuth20Constants.CODE, "CODE-1234567890");
val ctx = new JEEContext(request, new MockHttpServletResponse());
authenticator.validate(credentials, ctx, JEESessionStore.INSTANCE);
assertNotNull(credentials.getUserProfile());
assertEquals("clientWithoutSecret", credentials.getUserProfile().getId());
}
use of org.pac4j.core.credentials.UsernamePasswordCredentials in project cas by apereo.
the class OAuth20UsernamePasswordAuthenticatorTests method verifyAcceptedCredentialsWithClientSecret.
@Test
public void verifyAcceptedCredentialsWithClientSecret() {
val credentials = new UsernamePasswordCredentials("casuser", "casuser");
val request = new MockHttpServletRequest();
request.addParameter(OAuth20Constants.CLIENT_ID, "client");
request.addParameter(OAuth20Constants.CLIENT_SECRET, "secret");
val ctx = new JEEContext(request, new MockHttpServletResponse());
authenticator.validate(credentials, ctx, JEESessionStore.INSTANCE);
assertNotNull(credentials.getUserProfile());
assertEquals("casuser", credentials.getUserProfile().getId());
}
use of org.pac4j.core.credentials.UsernamePasswordCredentials in project cas by apereo.
the class OAuth20UsernamePasswordAuthenticatorTests method verifyAcceptedCredentialsWithBadClientSecret.
@Test
public void verifyAcceptedCredentialsWithBadClientSecret() {
val credentials = new UsernamePasswordCredentials("casuser", "casuser");
val request = new MockHttpServletRequest();
request.addParameter(OAuth20Constants.CLIENT_ID, "client");
request.addParameter(OAuth20Constants.CLIENT_SECRET, "secretnotfound");
val ctx = new JEEContext(request, new MockHttpServletResponse());
assertThrows(CredentialsException.class, () -> authenticator.validate(credentials, ctx, JEESessionStore.INSTANCE));
}
use of org.pac4j.core.credentials.UsernamePasswordCredentials in project cas by apereo.
the class OAuth20UsernamePasswordAuthenticatorTests method verifyAcceptedCredentialsWithoutClientId.
@Test
public void verifyAcceptedCredentialsWithoutClientId() {
val credentials = new UsernamePasswordCredentials("casuser", "casuser");
val request = new MockHttpServletRequest();
val ctx = new JEEContext(request, new MockHttpServletResponse());
assertThrows(CredentialsException.class, () -> authenticator.validate(credentials, ctx, JEESessionStore.INSTANCE));
}
use of org.pac4j.core.credentials.UsernamePasswordCredentials in project cas by apereo.
the class OAuth20UsernamePasswordAuthenticatorTests method verifyAcceptedCredentialsWithBadCredentials.
@Test
public void verifyAcceptedCredentialsWithBadCredentials() {
val credentials = new UsernamePasswordCredentials("casuser-something", "casuser");
val request = new MockHttpServletRequest();
request.addParameter(OAuth20Constants.CLIENT_ID, "client");
val ctx = new JEEContext(request, new MockHttpServletResponse());
assertThrows(CredentialsException.class, () -> authenticator.validate(credentials, ctx, JEESessionStore.INSTANCE));
}
Aggregations