/*
Copyright 2012-2013
Claudio Tesoriero - c.tesoriero-at-baasbox.com
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
// @author: Marco Tibuzzi
import static org.junit.Assert.fail;
import static play.mvc.Http.Status.BAD_REQUEST;
import static play.mvc.Http.Status.UNAUTHORIZED;
import static play.test.Helpers.HTMLUNIT;
import static play.test.Helpers.POST;
import static play.test.Helpers.GET;
import static play.test.Helpers.PUT;
import static play.test.Helpers.fakeApplication;
import static play.test.Helpers.route;
import static play.test.Helpers.routeAndCall;
import static play.test.Helpers.running;
import static play.test.Helpers.testServer;
import java.util.UUID;
import javax.ws.rs.core.HttpHeaders;
import javax.ws.rs.core.MediaType;
import com.fasterxml.jackson.databind.JsonNode;
import com.fasterxml.jackson.databind.ObjectMapper;
import com.fasterxml.jackson.databind.node.ObjectNode;
import org.junit.Assert;
import org.junit.Test;
import play.libs.F.Callback;
import play.libs.Json;
import play.mvc.Http.Status;
import play.mvc.Result;
import play.test.FakeRequest;
import play.test.TestBrowser;
import com.baasbox.dao.UserDao;
import com.baasbox.security.SessionKeys;
import com.baasbox.security.SessionTokenProvider;
import core.AbstractUserTest;
import core.TestConfig;
public class UserCreateTest extends AbstractUserTest
{
public static final String USER_TEST = "user";
String ROUTE_USER="/user";
@Override
public String getRouteAddress()
{
return ROUTE_USER;
}
@Override
public String getMethod()
{
return POST;
}
@Override
protected void assertContent(String s)
{
}
@Override
public String getDefaultPayload()
{
return "/adminUserCreatePayload.json";
}
@Test
public void testRouteNotValid()
{
running
(
getFakeApplication(),
new Runnable()
{
public void run()
{
// No AppCode, No Authorization
FakeRequest request = new FakeRequest(getMethod(), getRouteAddress());
Result result = routeAndCall(request);
assertRoute(result, "No AppCode No Authorization", BAD_REQUEST, TestConfig.MSG_NO_APP_CODE, true);
// Invalid AppCode
request = request.withHeader(TestConfig.KEY_APPCODE, "12345890");
result = routeAndCall(request);
assertRoute(result, "Invalid AppCode", UNAUTHORIZED, TestConfig.MSG_INVALID_APP_CODE, true);
}
}
);
}
@Test
public void testPasswordEmpty()
{
running
(
getFakeApplication(),
new Runnable()
{
public void run()
{
String sFakeUser = USER_TEST + UUID.randomUUID();
// Prepare test user
JsonNode node = updatePayloadFieldValue("/adminUserCreatePayload.json", "username", sFakeUser);
((ObjectNode)node).put("password", "");
// Create user
FakeRequest request = new FakeRequest(getMethod(), getRouteAddress());
request = request.withHeader(TestConfig.KEY_APPCODE, TestConfig.VALUE_APPCODE);
request = request.withJsonBody(node, getMethod());
Result result = routeAndCall(request);
assertRoute(result, "routeCreateUser", 422, null, false);
}
}
);
}
@Test
public void routeCreateUser() {
running
(
getFakeApplication(),
new Runnable()
{
public void run()
{
String sFakeUser = USER_TEST + UUID.randomUUID();
// Prepare test user
JsonNode node = updatePayloadFieldValue("/adminUserCreatePayload.json", "username", sFakeUser);
// Create user
FakeRequest request = new FakeRequest(getMethod(), getRouteAddress());
request = request.withHeader(TestConfig.KEY_APPCODE, TestConfig.VALUE_APPCODE);
request = request.withJsonBody(node, getMethod());
Result result = routeAndCall(request);
assertRoute(result, "routeCreateUser check username", Status.CREATED, "name\":\""+sFakeUser+"\"", true);
assertRoute(result, "routeCreateUser check role", Status.CREATED, "roles\":[{\"name\":\"registered\"}", true);
String body = play.test.Helpers.contentAsString(result);
JsonNode jsonRes = Json.parse(body);
String token = jsonRes.get("data").get(SessionKeys.TOKEN.toString()).textValue();
Assert.assertNotNull(token);
Assert.assertFalse(SessionTokenProvider.getSessionTokenProvider().getSession(token).isEmpty());
}
}
);
}
//https://github.com/baasbox/baasbox/issues/401
//500 error when visibleBy is null during signup
@Test
public void routeCreateUser_issue_401() {
running
(
getFakeApplication(),
new Runnable()
{
public void run()
{
UserDao dao = UserDao.getInstance();
String sFakeUser = USER_TEST + UUID.randomUUID();
// Prepare test user
JsonNode node = updatePayloadFieldValue("/adminUserCreatePayload.json", "username", sFakeUser);
//this MUST not raise an error
((ObjectNode) node).put(dao.ATTRIBUTES_VISIBLE_BY_ANONYMOUS_USER,(JsonNode)null);
// Create user
FakeRequest request = new FakeRequest(getMethod(), getRouteAddress());
request = request.withHeader(TestConfig.KEY_APPCODE, TestConfig.VALUE_APPCODE);
request = request.withJsonBody(node, getMethod());
Result result = routeAndCall(request);
assertRoute(result, "routeCreateUser_issue_401", Status.BAD_REQUEST, "One or more profile sections is not a valid JSON object", true);
}
}
);
}
@Test
public void routeCreateUserCaseInsensitive()
{
running
(
getFakeApplication(),
new Runnable()
{
public void run()
{
UUID uuid = UUID.randomUUID();
String sFakeUser = USER_TEST +uuid;
String sFakeUser2 = USER_TEST.toUpperCase() +uuid;
// Prepare test user
JsonNode node = updatePayloadFieldValue("/adminUserCreatePayload.json", "username", sFakeUser);
// Create user
FakeRequest request = new FakeRequest(getMethod(), getRouteAddress());
request = request.withHeader(TestConfig.KEY_APPCODE, TestConfig.VALUE_APPCODE);
request = request.withJsonBody(node, getMethod());
Result result = routeAndCall(request);
assertRoute(result, "routeCreateUserCaseInsensitive", Status.CREATED, null, false);
// try to create the second one
node = updatePayloadFieldValue("/adminUserCreatePayload.json", "username", sFakeUser2);
request = new FakeRequest(getMethod(), getRouteAddress());
request = request.withHeader(TestConfig.KEY_APPCODE, TestConfig.VALUE_APPCODE);
request = request.withJsonBody(node, getMethod());
result = routeAndCall(request);
//it should be fail
assertRoute(result, "routeCreateUserCaseInsensitive", Status.BAD_REQUEST, sFakeUser2 + " already exists", true);
}
}
);
}
@Test
public void serverCreateUser()
{
running
(
getTestServer(),
HTMLUNIT,
new Callback<TestBrowser>()
{
public void invoke(TestBrowser browser)
{
String sFakeUser = USER_TEST + UUID.randomUUID();
// Prepare test user
JsonNode node = updatePayloadFieldValue("/adminUserCreatePayload.json", "username", sFakeUser);
// Create user
setHeader(TestConfig.KEY_APPCODE, TestConfig.VALUE_APPCODE);
setHeader(HttpHeaders.CONTENT_TYPE, MediaType.APPLICATION_JSON);
httpRequest
(
getURLAddress(),
getMethod(),
node
);
assertServer("serverCreateUser", Status.CREATED, "visibleByAnonymousUsers\":{}", true);
}
}
);
}
@Test
@Override
public void testServerNotValid()
{
running
(
getTestServer(),
HTMLUNIT,
new Callback<TestBrowser>()
{
public void invoke(TestBrowser browser)
{
// No AppCode, No Authorization
removeHeader(TestConfig.KEY_APPCODE);
removeHeader(TestConfig.KEY_AUTH);
httpRequest(getURLAddress(), getMethod(), getDefaultPayload());
assertServer("No AppCode, No Authorization", BAD_REQUEST, TestConfig.MSG_NO_APP_CODE, true);
// Invalid AppCode
setHeader(TestConfig.KEY_APPCODE, "1");
httpRequest(getURLAddress(), getMethod(), getDefaultPayload());
assertServer("Invalid AppCode", UNAUTHORIZED, TestConfig.MSG_INVALID_APP_CODE, true);
}
}
);
}
@Test
public void testInternalUserSuspend(){
running
(
getFakeApplication(),
new Runnable()
{
public void run()
{
FakeRequest request = new FakeRequest(PUT, "/admin/user/suspend/baasbox");
request = request.withHeader(TestConfig.KEY_APPCODE, TestConfig.VALUE_APPCODE);
request = request.withHeader(TestConfig.KEY_AUTH, TestConfig.encodeAuth(TestConfig.AUTH_ADMIN));
Result result = route(request);
assertRoute(result, "routeCreateUser_admin_suspend", Status.BAD_REQUEST, null, false);
request = new FakeRequest(PUT, "/admin/user/suspend/internal_admin");
request = request.withHeader(TestConfig.KEY_APPCODE, TestConfig.VALUE_APPCODE);
request = request.withHeader(TestConfig.KEY_AUTH, TestConfig.encodeAuth(TestConfig.AUTH_ADMIN));
result = route(request);
assertRoute(result, "routeCreateUser_admin_suspend", Status.BAD_REQUEST, null, false);
}
}
);
}
@Test
public void testUnkownUserSuspend(){
running
(
getFakeApplication(),
new Runnable()
{
public void run()
{
FakeRequest request = new FakeRequest(PUT, "/admin/user/suspend/pippopluto");
request = request.withHeader(TestConfig.KEY_APPCODE, TestConfig.VALUE_APPCODE);
request = request.withHeader(TestConfig.KEY_AUTH, TestConfig.encodeAuth(TestConfig.AUTH_ADMIN));
Result result = route(request);
assertRoute(result, "routeCreateUser_admin_suspend", Status.BAD_REQUEST, null, false);
}
}
);
}
@Test
public void testUserAutoSuspend(){
running
(
getFakeApplication(),
new Runnable()
{
public void run()
{
String sFakeUser = USER_TEST + UUID.randomUUID();
// Prepare test user
JsonNode node = updatePayloadFieldValue("/adminUserCreatePayload.json", "username", sFakeUser);
// Create user
FakeRequest request = new FakeRequest(getMethod(), getRouteAddress());
request = request.withHeader(TestConfig.KEY_APPCODE, TestConfig.VALUE_APPCODE);
request = request.withJsonBody(node, getMethod());
Result result = routeAndCall(request);
assertRoute(result, "routeCreateUser_2", Status.CREATED, null, false);
String body = play.test.Helpers.contentAsString(result);
JsonNode jsonRes = Json.parse(body);
String token = jsonRes.get("data").get(SessionKeys.TOKEN.toString()).textValue();
//test if the user can execute a GET on himself
request = new FakeRequest(GET, getRouteAddress());
request = request.withHeader(TestConfig.KEY_APPCODE, TestConfig.VALUE_APPCODE);
request = request.withHeader(TestConfig.KEY_TOKEN, token);
result = route(request);
assertRoute(result, "routeCreateUser_check", Status.OK, null, false);
//now we suspend it
request = new FakeRequest(PUT, getRouteAddress()+"/suspend");
request = request.withHeader(TestConfig.KEY_APPCODE, TestConfig.VALUE_APPCODE);
request = request.withHeader(TestConfig.KEY_TOKEN, token);
result = route(request);
assertRoute(result, "routeCreateUser_suspend", Status.OK, null, false);
//test if the user can execute a GET on himself
request = new FakeRequest(GET, getRouteAddress());
request = request.withHeader(TestConfig.KEY_APPCODE, TestConfig.VALUE_APPCODE);
request = request.withHeader(TestConfig.KEY_TOKEN, token);
result = route(request);
assertRoute(result, "routeCreateUser_check_2", Status.UNAUTHORIZED, null, false);
//now the admin reactivate him
request = new FakeRequest(PUT, "/admin/user/activate/" + sFakeUser);
request = request.withHeader(TestConfig.KEY_APPCODE, TestConfig.VALUE_APPCODE);
request = request.withHeader(TestConfig.KEY_AUTH, TestConfig.encodeAuth(TestConfig.AUTH_ADMIN));
result = route(request);
assertRoute(result, "routeCreateUser_activate", Status.OK, null, false);
//the user should can connect again
request = new FakeRequest(GET, getRouteAddress());
request = request.withHeader(TestConfig.KEY_APPCODE, TestConfig.VALUE_APPCODE);
request = request.withHeader(TestConfig.KEY_TOKEN, token);
result = route(request);
assertRoute(result, "routeCreateUser_check_3", Status.OK, null, false);
//now the admin suspend him again
request = new FakeRequest(PUT, "/admin/user/suspend/" + sFakeUser);
request = request.withHeader(TestConfig.KEY_APPCODE, TestConfig.VALUE_APPCODE);
request = request.withHeader(TestConfig.KEY_AUTH, TestConfig.encodeAuth(TestConfig.AUTH_ADMIN));
result = route(request);
assertRoute(result, "routeCreateUser_admin_suspend", Status.OK, null, false);
//and the user cannot login
request = new FakeRequest(GET, getRouteAddress());
request = request.withHeader(TestConfig.KEY_APPCODE, TestConfig.VALUE_APPCODE);
request = request.withHeader(TestConfig.KEY_TOKEN, token);
result = route(request);
assertRoute(result, "routeCreateUser_check_4", Status.UNAUTHORIZED, null, false);
}
}
);
}
}