Examples with AccessLevel org.springframework.boot.actuate.autoconfigure.cloudfoundry.AccessLevel used on opensource projects

Example 1 with AccessLevel

use of org.springframework.boot.actuate.autoconfigure.cloudfoundry.AccessLevel in project spring-boot by spring-projects.

the class CloudFoundrySecurityServiceTests method getAccessLevelWhenSpaceDeveloperShouldReturnFull.

@Test
void getAccessLevelWhenSpaceDeveloperShouldReturnFull() {
    String responseBody = "{\"read_sensitive_data\": true,\"read_basic_data\": true}";
    this.server.expect(requestTo(CLOUD_CONTROLLER_PERMISSIONS)).andExpect(header("Authorization", "bearer my-access-token")).andRespond(withSuccess(responseBody, MediaType.APPLICATION_JSON));
    AccessLevel accessLevel = this.securityService.getAccessLevel("my-access-token", "my-app-id");
    this.server.verify();
    assertThat(accessLevel).isEqualTo(AccessLevel.FULL);
}

Example 2 with AccessLevel

use of org.springframework.boot.actuate.autoconfigure.cloudfoundry.AccessLevel in project spring-boot by spring-projects.

the class CloudFoundrySecurityServiceTests method getAccessLevelWhenNotSpaceDeveloperShouldReturnRestricted.

@Test
void getAccessLevelWhenNotSpaceDeveloperShouldReturnRestricted() {
    String responseBody = "{\"read_sensitive_data\": false,\"read_basic_data\": true}";
    this.server.expect(requestTo(CLOUD_CONTROLLER_PERMISSIONS)).andExpect(header("Authorization", "bearer my-access-token")).andRespond(withSuccess(responseBody, MediaType.APPLICATION_JSON));
    AccessLevel accessLevel = this.securityService.getAccessLevel("my-access-token", "my-app-id");
    this.server.verify();
    assertThat(accessLevel).isEqualTo(AccessLevel.RESTRICTED);
}

Example 3 with AccessLevel

use of org.springframework.boot.actuate.autoconfigure.cloudfoundry.AccessLevel in project spring-boot by spring-projects.

the class ReactiveCloudFoundrySecurityInterceptorTests method preHandleSuccessfulWithFullAccess.

@Test
void preHandleSuccessfulWithFullAccess() {
    String accessToken = mockAccessToken();
    given(this.securityService.getAccessLevel(accessToken, "my-app-id")).willReturn(Mono.just(AccessLevel.FULL));
    given(this.tokenValidator.validate(any())).willReturn(Mono.empty());
    MockServerWebExchange exchange = MockServerWebExchange.from(MockServerHttpRequest.get("/a").header(HttpHeaders.AUTHORIZATION, "bearer " + mockAccessToken()).build());
    StepVerifier.create(this.interceptor.preHandle(exchange, "/a")).consumeNextWith((response) -> {
        assertThat(response.getStatus()).isEqualTo(HttpStatus.OK);
        assertThat((AccessLevel) exchange.getAttribute("cloudFoundryAccessLevel")).isEqualTo(AccessLevel.FULL);
    }).verifyComplete();
}

Example 4 with AccessLevel

use of org.springframework.boot.actuate.autoconfigure.cloudfoundry.AccessLevel in project spring-boot by spring-projects.

the class CloudFoundrySecurityInterceptor method check.

private void check(HttpServletRequest request, EndpointId endpointId) throws Exception {
    Token token = getToken(request);
    this.tokenValidator.validate(token);
    AccessLevel accessLevel = this.cloudFoundrySecurityService.getAccessLevel(token.toString(), this.applicationId);
    if (!accessLevel.isAccessAllowed((endpointId != null) ? endpointId.toLowerCaseString() : "")) {
        throw new CloudFoundryAuthorizationException(Reason.ACCESS_DENIED, "Access denied");
    }
    request.setAttribute(AccessLevel.REQUEST_ATTRIBUTE, accessLevel);
}

Example 5 with AccessLevel

use of org.springframework.boot.actuate.autoconfigure.cloudfoundry.AccessLevel in project spring-boot by spring-projects.

the class ReactiveCloudFoundrySecurityInterceptorTests method preHandleSuccessfulWithRestrictedAccess.

@Test
void preHandleSuccessfulWithRestrictedAccess() {
    String accessToken = mockAccessToken();
    given(this.securityService.getAccessLevel(accessToken, "my-app-id")).willReturn(Mono.just(AccessLevel.RESTRICTED));
    given(this.tokenValidator.validate(any())).willReturn(Mono.empty());
    MockServerWebExchange exchange = MockServerWebExchange.from(MockServerHttpRequest.get("/info").header(HttpHeaders.AUTHORIZATION, "bearer " + mockAccessToken()).build());
    StepVerifier.create(this.interceptor.preHandle(exchange, "info")).consumeNextWith((response) -> {
        assertThat(response.getStatus()).isEqualTo(HttpStatus.OK);
        assertThat((AccessLevel) exchange.getAttribute("cloudFoundryAccessLevel")).isEqualTo(AccessLevel.RESTRICTED);
    }).verifyComplete();
}