Examples with MockServerWebExchange org.springframework.mock.web.server.MockServerWebExchange used on opensource projects

Example 76 with MockServerWebExchange

use of org.springframework.mock.web.server.MockServerWebExchange in project spring-security by spring-projects.

the class SwitchUserWebFilterTests method switchUserWhenExceptionThenCallFailureHandler.

@Test
public void switchUserWhenExceptionThenCallFailureHandler() {
    final String targetUsername = "TEST_USERNAME";
    final MockServerWebExchange exchange = MockServerWebExchange.from(MockServerHttpRequest.post("/login/impersonate?username={targetUser}", targetUsername));
    final WebFilterChain chain = mock(WebFilterChain.class);
    final SecurityContextImpl securityContext = new SecurityContextImpl(mock(Authentication.class));
    final UserDetails switchUserDetails = switchUserDetails(targetUsername, false);
    given(this.userDetailsService.findByUsername(any(String.class))).willReturn(Mono.just(switchUserDetails));
    given(this.failureHandler.onAuthenticationFailure(any(WebFilterExchange.class), any(DisabledException.class))).willReturn(Mono.empty());
    this.switchUserWebFilter.filter(exchange, chain).subscriberContext(ReactiveSecurityContextHolder.withSecurityContext(Mono.just(securityContext))).block();
    verify(this.failureHandler).onAuthenticationFailure(any(WebFilterExchange.class), any(DisabledException.class));
    verifyNoInteractions(chain);
}

Example 77 with MockServerWebExchange

use of org.springframework.mock.web.server.MockServerWebExchange in project spring-security by spring-projects.

the class SwitchUserWebFilterTests method exitSwitchThenReturnToOriginalAuthentication.

@Test
public void exitSwitchThenReturnToOriginalAuthentication() {
    final MockServerWebExchange exchange = MockServerWebExchange.from(MockServerHttpRequest.post("/logout/impersonate"));
    final Authentication originalAuthentication = new UsernamePasswordAuthenticationToken("origPrincipal", "origCredentials");
    final GrantedAuthority switchAuthority = new SwitchUserGrantedAuthority(SwitchUserWebFilter.ROLE_PREVIOUS_ADMINISTRATOR, originalAuthentication);
    final Authentication switchUserAuthentication = new UsernamePasswordAuthenticationToken("switchPrincipal", "switchCredentials", Collections.singleton(switchAuthority));
    final WebFilterChain chain = mock(WebFilterChain.class);
    final SecurityContextImpl securityContext = new SecurityContextImpl(switchUserAuthentication);
    given(this.serverSecurityContextRepository.save(eq(exchange), any(SecurityContext.class))).willReturn(Mono.empty());
    given(this.successHandler.onAuthenticationSuccess(any(WebFilterExchange.class), any(Authentication.class))).willReturn(Mono.empty());
    this.switchUserWebFilter.filter(exchange, chain).subscriberContext(ReactiveSecurityContextHolder.withSecurityContext(Mono.just(securityContext))).block();
    final ArgumentCaptor<SecurityContext> securityContextCaptor = ArgumentCaptor.forClass(SecurityContext.class);
    verify(this.serverSecurityContextRepository).save(eq(exchange), securityContextCaptor.capture());
    final SecurityContext savedSecurityContext = securityContextCaptor.getValue();
    final ArgumentCaptor<Authentication> authenticationCaptor = ArgumentCaptor.forClass(Authentication.class);
    verify(this.successHandler).onAuthenticationSuccess(any(WebFilterExchange.class), authenticationCaptor.capture());
    final Authentication originalAuthenticationValue = authenticationCaptor.getValue();
    assertThat(savedSecurityContext.getAuthentication()).isSameAs(originalAuthentication);
    assertThat(originalAuthenticationValue).isSameAs(originalAuthentication);
    verifyNoInteractions(chain);
}

Example 78 with MockServerWebExchange

use of org.springframework.mock.web.server.MockServerWebExchange in project spring-security by spring-projects.

the class CookieServerCsrfTokenRepositoryTests method saveTokenWhenSecureFlagFalseThenNotSecure.

@Test
public void saveTokenWhenSecureFlagFalseThenNotSecure() {
    MockServerWebExchange exchange = MockServerWebExchange.from(this.request);
    this.csrfTokenRepository.setSecure(false);
    this.csrfTokenRepository.saveToken(exchange, createToken()).block();
    ResponseCookie cookie = exchange.getResponse().getCookies().getFirst(this.expectedCookieName);
    assertThat(cookie).isNotNull();
    assertThat(cookie.isSecure()).isFalse();
}

Example 79 with MockServerWebExchange

use of org.springframework.mock.web.server.MockServerWebExchange in project spring-security by spring-projects.

the class CookieServerCsrfTokenRepositoryTests method saveAndAssertExpectedValues.

private void saveAndAssertExpectedValues(CsrfToken token) {
    if (token == null) {
        this.expectedMaxAge = Duration.ofSeconds(0);
        this.expectedCookieValue = "";
    }
    MockServerWebExchange exchange = MockServerWebExchange.from(this.request);
    this.csrfTokenRepository.saveToken(exchange, token).block();
    ResponseCookie cookie = exchange.getResponse().getCookies().getFirst(this.expectedCookieName);
    assertThat(cookie).isNotNull();
    assertThat(cookie.getMaxAge()).isEqualTo(this.expectedMaxAge);
    assertThat(cookie.getDomain()).isEqualTo(this.expectedDomain);
    assertThat(cookie.getPath()).isEqualTo(this.expectedPath);
    assertThat(cookie.isSecure()).isEqualTo(this.expectedSecure);
    assertThat(cookie.isHttpOnly()).isEqualTo(this.expectedHttpOnly);
    assertThat(cookie.getName()).isEqualTo(this.expectedCookieName);
    assertThat(cookie.getValue()).isEqualTo(this.expectedCookieValue);
}

Example 80 with MockServerWebExchange

use of org.springframework.mock.web.server.MockServerWebExchange in project spring-security by spring-projects.

the class CookieServerCsrfTokenRepositoryTests method saveTokenWhenSslInfoNullThenNotSecure.

@Test
public void saveTokenWhenSslInfoNullThenNotSecure() {
    MockServerWebExchange exchange = MockServerWebExchange.from(this.request);
    this.csrfTokenRepository.saveToken(exchange, createToken()).block();
    ResponseCookie cookie = exchange.getResponse().getCookies().getFirst(this.expectedCookieName);
    assertThat(cookie).isNotNull();
    assertThat(cookie.isSecure()).isFalse();
}