redback-jsecurity is not used so move it to retired.
git-svn-id: https://svn.apache.org/repos/asf/archiva/redback/redback-core/trunk@1399143 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Olivier Lamy
parent
3e9de575ac
commit
0e0dea5057
|
|
@ -1,100 +0,0 @@
|
||||||
<?xml version="1.0" encoding="UTF-8"?>
|
|
||||||
<!--
|
|
||||||
~ Licensed to the Apache Software Foundation (ASF) under one
|
|
||||||
~ or more contributor license agreements. See the NOTICE file
|
|
||||||
~ distributed with this work for additional information
|
|
||||||
~ regarding copyright ownership. The ASF licenses this file
|
|
||||||
~ to you under the Apache License, Version 2.0 (the
|
|
||||||
~ "License"); you may not use this file except in compliance
|
|
||||||
~ with the License. You may obtain a copy of the License at
|
|
||||||
~
|
|
||||||
~ http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
~
|
|
||||||
~ Unless required by applicable law or agreed to in writing,
|
|
||||||
~ software distributed under the License is distributed on an
|
|
||||||
~ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
||||||
~ KIND, either express or implied. See the License for the
|
|
||||||
~ specific language governing permissions and limitations
|
|
||||||
~ under the License.
|
|
||||||
-->
|
|
||||||
|
|
||||||
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
|
|
||||||
|
|
||||||
<modelVersion>4.0.0</modelVersion>
|
|
||||||
|
|
||||||
<parent>
|
|
||||||
<artifactId>redback-integrations</artifactId>
|
|
||||||
<groupId>org.apache.archiva.redback</groupId>
|
|
||||||
<version>2.1-SNAPSHOT</version>
|
|
||||||
</parent>
|
|
||||||
|
|
||||||
<artifactId>redback-jsecurity</artifactId>
|
|
||||||
<packaging>bundle</packaging>
|
|
||||||
<name>Redback :: Integration :: JSecurity Integration</name>
|
|
||||||
|
|
||||||
<dependencies>
|
|
||||||
<dependency>
|
|
||||||
<groupId>org.apache.archiva.redback</groupId>
|
|
||||||
<artifactId>redback-users-api</artifactId>
|
|
||||||
</dependency>
|
|
||||||
<dependency>
|
|
||||||
<groupId>org.apache.archiva.redback</groupId>
|
|
||||||
<artifactId>redback-rbac-model</artifactId>
|
|
||||||
</dependency>
|
|
||||||
<dependency>
|
|
||||||
<groupId>org.apache.archiva.redback</groupId>
|
|
||||||
<artifactId>redback-system</artifactId>
|
|
||||||
</dependency>
|
|
||||||
<dependency>
|
|
||||||
<groupId>org.jsecurity</groupId>
|
|
||||||
<artifactId>jsecurity</artifactId>
|
|
||||||
<version>0.9.0</version>
|
|
||||||
</dependency>
|
|
||||||
|
|
||||||
<!-- Test Dependencies -->
|
|
||||||
<dependency>
|
|
||||||
<groupId>org.apache.archiva.redback</groupId>
|
|
||||||
<artifactId>redback-users-memory</artifactId>
|
|
||||||
<scope>test</scope>
|
|
||||||
</dependency>
|
|
||||||
<dependency>
|
|
||||||
<groupId>org.apache.archiva.redback</groupId>
|
|
||||||
<artifactId>redback-rbac-memory</artifactId>
|
|
||||||
<scope>test</scope>
|
|
||||||
</dependency>
|
|
||||||
<dependency>
|
|
||||||
<groupId>org.hsqldb</groupId>
|
|
||||||
<artifactId>hsqldb</artifactId>
|
|
||||||
<scope>test</scope>
|
|
||||||
</dependency>
|
|
||||||
<dependency>
|
|
||||||
<groupId>org.slf4j</groupId>
|
|
||||||
<artifactId>slf4j-simple</artifactId>
|
|
||||||
<scope>test</scope>
|
|
||||||
</dependency>
|
|
||||||
</dependencies>
|
|
||||||
|
|
||||||
<build>
|
|
||||||
<plugins>
|
|
||||||
<plugin>
|
|
||||||
<groupId>org.apache.felix</groupId>
|
|
||||||
<artifactId>maven-bundle-plugin</artifactId>
|
|
||||||
<configuration>
|
|
||||||
<instructions>
|
|
||||||
<Export-Package>
|
|
||||||
org.apache.archiva.redback.jsecurity;version=${project.version};-split-package:=merge-first
|
|
||||||
</Export-Package>
|
|
||||||
<Import-Package>
|
|
||||||
org.apache.archiva.redback.policy;version=${project.version},
|
|
||||||
org.apache.archiva.redback.rbac;version=${project.version},
|
|
||||||
org.apache.archiva.redback.users;version=${project.version},
|
|
||||||
org.jsecurity*;version="[0.9,2)",
|
|
||||||
org.slf4j;resolution:=optional
|
|
||||||
</Import-Package>
|
|
||||||
</instructions>
|
|
||||||
</configuration>
|
|
||||||
</plugin>
|
|
||||||
</plugins>
|
|
||||||
</build>
|
|
||||||
|
|
||||||
</project>
|
|
||||||
|
|
@ -1,41 +0,0 @@
|
||||||
package org.apache.archiva.redback.jsecurity;
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Licensed to the Apache Software Foundation (ASF) under one
|
|
||||||
* or more contributor license agreements. See the NOTICE file
|
|
||||||
* distributed with this work for additional information
|
|
||||||
* regarding copyright ownership. The ASF licenses this file
|
|
||||||
* to you under the Apache License, Version 2.0 (the
|
|
||||||
* "License"); you may not use this file except in compliance
|
|
||||||
* with the License. You may obtain a copy of the License at
|
|
||||||
*
|
|
||||||
* http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
*
|
|
||||||
* Unless required by applicable law or agreed to in writing,
|
|
||||||
* software distributed under the License is distributed on an
|
|
||||||
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
||||||
* KIND, either express or implied. See the License for the
|
|
||||||
* specific language governing permissions and limitations
|
|
||||||
* under the License.
|
|
||||||
*/
|
|
||||||
|
|
||||||
import org.jsecurity.authc.AuthenticationException;
|
|
||||||
|
|
||||||
public class PrincipalLockedException
|
|
||||||
extends AuthenticationException
|
|
||||||
{
|
|
||||||
public PrincipalLockedException( String message, Throwable cause )
|
|
||||||
{
|
|
||||||
super( message, cause );
|
|
||||||
}
|
|
||||||
|
|
||||||
public PrincipalLockedException( String message )
|
|
||||||
{
|
|
||||||
super( message );
|
|
||||||
}
|
|
||||||
|
|
||||||
public PrincipalLockedException( Throwable cause )
|
|
||||||
{
|
|
||||||
super( cause );
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
@ -1,41 +0,0 @@
|
||||||
package org.apache.archiva.redback.jsecurity;
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Licensed to the Apache Software Foundation (ASF) under one
|
|
||||||
* or more contributor license agreements. See the NOTICE file
|
|
||||||
* distributed with this work for additional information
|
|
||||||
* regarding copyright ownership. The ASF licenses this file
|
|
||||||
* to you under the Apache License, Version 2.0 (the
|
|
||||||
* "License"); you may not use this file except in compliance
|
|
||||||
* with the License. You may obtain a copy of the License at
|
|
||||||
*
|
|
||||||
* http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
*
|
|
||||||
* Unless required by applicable law or agreed to in writing,
|
|
||||||
* software distributed under the License is distributed on an
|
|
||||||
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
||||||
* KIND, either express or implied. See the License for the
|
|
||||||
* specific language governing permissions and limitations
|
|
||||||
* under the License.
|
|
||||||
*/
|
|
||||||
|
|
||||||
import org.jsecurity.authc.AuthenticationException;
|
|
||||||
|
|
||||||
public class PrincipalPasswordChangeRequiredException
|
|
||||||
extends AuthenticationException
|
|
||||||
{
|
|
||||||
public PrincipalPasswordChangeRequiredException( String message, Throwable cause )
|
|
||||||
{
|
|
||||||
super( message, cause );
|
|
||||||
}
|
|
||||||
|
|
||||||
public PrincipalPasswordChangeRequiredException( String message )
|
|
||||||
{
|
|
||||||
super( message );
|
|
||||||
}
|
|
||||||
|
|
||||||
public PrincipalPasswordChangeRequiredException( Throwable cause )
|
|
||||||
{
|
|
||||||
super( cause );
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
@ -1,190 +0,0 @@
|
||||||
package org.apache.archiva.redback.jsecurity;
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Licensed to the Apache Software Foundation (ASF) under one
|
|
||||||
* or more contributor license agreements. See the NOTICE file
|
|
||||||
* distributed with this work for additional information
|
|
||||||
* regarding copyright ownership. The ASF licenses this file
|
|
||||||
* to you under the Apache License, Version 2.0 (the
|
|
||||||
* "License"); you may not use this file except in compliance
|
|
||||||
* with the License. You may obtain a copy of the License at
|
|
||||||
*
|
|
||||||
* http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
*
|
|
||||||
* Unless required by applicable law or agreed to in writing,
|
|
||||||
* software distributed under the License is distributed on an
|
|
||||||
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
||||||
* KIND, either express or implied. See the License for the
|
|
||||||
* specific language governing permissions and limitations
|
|
||||||
* under the License.
|
|
||||||
*/
|
|
||||||
|
|
||||||
import org.apache.archiva.redback.policy.AccountLockedException;
|
|
||||||
import org.apache.archiva.redback.policy.UserSecurityPolicy;
|
|
||||||
import org.apache.archiva.redback.rbac.Permission;
|
|
||||||
import org.apache.archiva.redback.rbac.RBACManager;
|
|
||||||
import org.apache.archiva.redback.rbac.RbacManagerException;
|
|
||||||
import org.apache.archiva.redback.rbac.UserAssignment;
|
|
||||||
import org.apache.archiva.redback.users.User;
|
|
||||||
import org.apache.archiva.redback.users.UserManager;
|
|
||||||
import org.apache.archiva.redback.users.UserNotFoundException;
|
|
||||||
import org.jsecurity.authc.AuthenticationException;
|
|
||||||
import org.jsecurity.authc.AuthenticationInfo;
|
|
||||||
import org.jsecurity.authc.AuthenticationToken;
|
|
||||||
import org.jsecurity.authc.SimpleAuthenticationInfo;
|
|
||||||
import org.jsecurity.authc.UsernamePasswordToken;
|
|
||||||
import org.jsecurity.authc.credential.CredentialsMatcher;
|
|
||||||
import org.jsecurity.authz.AuthorizationInfo;
|
|
||||||
import org.jsecurity.authz.SimpleAuthorizationInfo;
|
|
||||||
import org.jsecurity.realm.AuthorizingRealm;
|
|
||||||
import org.jsecurity.subject.PrincipalCollection;
|
|
||||||
import org.slf4j.Logger;
|
|
||||||
import org.slf4j.LoggerFactory;
|
|
||||||
|
|
||||||
import java.util.HashSet;
|
|
||||||
import java.util.Iterator;
|
|
||||||
import java.util.Set;
|
|
||||||
|
|
||||||
public class RedbackRealm
|
|
||||||
extends AuthorizingRealm
|
|
||||||
{
|
|
||||||
private Logger log = LoggerFactory.getLogger( RedbackRealm.class );
|
|
||||||
|
|
||||||
private final UserManager userManager;
|
|
||||||
|
|
||||||
private final RBACManager rbacManager;
|
|
||||||
|
|
||||||
private final UserSecurityPolicy securityPolicy;
|
|
||||||
|
|
||||||
public RedbackRealm( UserManager userManager, RBACManager rbacManager, UserSecurityPolicy securityPolicy )
|
|
||||||
{
|
|
||||||
this.userManager = userManager;
|
|
||||||
this.rbacManager = rbacManager;
|
|
||||||
this.securityPolicy = securityPolicy;
|
|
||||||
}
|
|
||||||
|
|
||||||
@Override
|
|
||||||
protected AuthorizationInfo doGetAuthorizationInfo( PrincipalCollection principals )
|
|
||||||
{
|
|
||||||
final String username = (String) principals.fromRealm( getName() ).iterator().next();
|
|
||||||
|
|
||||||
try
|
|
||||||
{
|
|
||||||
final UserAssignment assignment = rbacManager.getUserAssignment( username );
|
|
||||||
final Set<String> roleNames = new HashSet<String>( assignment.getRoleNames() );
|
|
||||||
final Set<String> permissions = new HashSet<String>();
|
|
||||||
|
|
||||||
for ( Iterator<Permission> it = rbacManager.getAssignedPermissions( username ).iterator(); it.hasNext(); )
|
|
||||||
{
|
|
||||||
Permission permission = it.next();
|
|
||||||
permissions.add( permission.getName() );
|
|
||||||
}
|
|
||||||
|
|
||||||
SimpleAuthorizationInfo authorizationInfo = new SimpleAuthorizationInfo( roleNames );
|
|
||||||
authorizationInfo.setStringPermissions( permissions );
|
|
||||||
|
|
||||||
return authorizationInfo;
|
|
||||||
}
|
|
||||||
catch ( RbacManagerException e )
|
|
||||||
{
|
|
||||||
log.error( "Could not authenticate against data source", e );
|
|
||||||
}
|
|
||||||
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
@Override
|
|
||||||
protected AuthenticationInfo doGetAuthenticationInfo( AuthenticationToken token )
|
|
||||||
throws AuthenticationException
|
|
||||||
{
|
|
||||||
if ( token == null )
|
|
||||||
{
|
|
||||||
throw new AuthenticationException( "AuthenticationToken cannot be null" );
|
|
||||||
}
|
|
||||||
|
|
||||||
final UsernamePasswordToken passwordToken = (UsernamePasswordToken) token;
|
|
||||||
|
|
||||||
User user = null;
|
|
||||||
try
|
|
||||||
{
|
|
||||||
user = userManager.findUser( passwordToken.getUsername() );
|
|
||||||
}
|
|
||||||
catch ( UserNotFoundException e )
|
|
||||||
{
|
|
||||||
log.error( "Could not find user " + passwordToken.getUsername() );
|
|
||||||
}
|
|
||||||
|
|
||||||
if ( user == null )
|
|
||||||
{
|
|
||||||
return null;
|
|
||||||
}
|
|
||||||
|
|
||||||
if ( user.isLocked() && !user.isPasswordChangeRequired() )
|
|
||||||
{
|
|
||||||
throw new PrincipalLockedException( "User " + user.getPrincipal() + " is locked." );
|
|
||||||
}
|
|
||||||
|
|
||||||
if ( user.isPasswordChangeRequired() )
|
|
||||||
{
|
|
||||||
throw new PrincipalPasswordChangeRequiredException(
|
|
||||||
"Password change is required for user " + user.getPrincipal() );
|
|
||||||
}
|
|
||||||
|
|
||||||
return new RedbackAuthenticationInfo( user, getName() );
|
|
||||||
}
|
|
||||||
|
|
||||||
@Override
|
|
||||||
public CredentialsMatcher getCredentialsMatcher()
|
|
||||||
{
|
|
||||||
return new CredentialsMatcher()
|
|
||||||
{
|
|
||||||
public boolean doCredentialsMatch( AuthenticationToken token, AuthenticationInfo info )
|
|
||||||
{
|
|
||||||
final String credentials = new String( (char[]) token.getCredentials() );
|
|
||||||
final boolean match = securityPolicy.getPasswordEncoder().encodePassword( credentials ).equals(
|
|
||||||
(String) info.getCredentials() );
|
|
||||||
if ( !match )
|
|
||||||
{
|
|
||||||
User user = ( (RedbackAuthenticationInfo) info ).getUser();
|
|
||||||
try
|
|
||||||
{
|
|
||||||
securityPolicy.extensionExcessiveLoginAttempts( user );
|
|
||||||
}
|
|
||||||
catch ( AccountLockedException e )
|
|
||||||
{
|
|
||||||
log.info( "User{} has been locked", user.getUsername(), e );
|
|
||||||
}
|
|
||||||
finally
|
|
||||||
{
|
|
||||||
try
|
|
||||||
{
|
|
||||||
userManager.updateUser( user );
|
|
||||||
}
|
|
||||||
catch ( UserNotFoundException e )
|
|
||||||
{
|
|
||||||
log.error( "The user to be updated could not be found", e );
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
return match;
|
|
||||||
}
|
|
||||||
};
|
|
||||||
}
|
|
||||||
|
|
||||||
final class RedbackAuthenticationInfo
|
|
||||||
extends SimpleAuthenticationInfo
|
|
||||||
{
|
|
||||||
private final User user;
|
|
||||||
|
|
||||||
public RedbackAuthenticationInfo( User user, String realmName )
|
|
||||||
{
|
|
||||||
super( user.getPrincipal(), user.getEncodedPassword(), realmName );
|
|
||||||
this.user = user;
|
|
||||||
}
|
|
||||||
|
|
||||||
public User getUser()
|
|
||||||
{
|
|
||||||
return user;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
@ -1,199 +0,0 @@
|
||||||
package org.apache.archiva.redback.jsecurity;
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Licensed to the Apache Software Foundation (ASF) under one
|
|
||||||
* or more contributor license agreements. See the NOTICE file
|
|
||||||
* distributed with this work for additional information
|
|
||||||
* regarding copyright ownership. The ASF licenses this file
|
|
||||||
* to you under the Apache License, Version 2.0 (the
|
|
||||||
* "License"); you may not use this file except in compliance
|
|
||||||
* with the License. You may obtain a copy of the License at
|
|
||||||
*
|
|
||||||
* http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
*
|
|
||||||
* Unless required by applicable law or agreed to in writing,
|
|
||||||
* software distributed under the License is distributed on an
|
|
||||||
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
||||||
* KIND, either express or implied. See the License for the
|
|
||||||
* specific language governing permissions and limitations
|
|
||||||
* under the License.
|
|
||||||
*/
|
|
||||||
|
|
||||||
import junit.framework.TestCase;
|
|
||||||
import org.apache.archiva.redback.jsecurity.PrincipalLockedException;
|
|
||||||
import org.apache.archiva.redback.jsecurity.PrincipalPasswordChangeRequiredException;
|
|
||||||
import org.apache.archiva.redback.jsecurity.RedbackRealm;
|
|
||||||
import org.apache.archiva.redback.policy.UserSecurityPolicy;
|
|
||||||
import org.apache.archiva.redback.rbac.Operation;
|
|
||||||
import org.apache.archiva.redback.rbac.Permission;
|
|
||||||
import org.apache.archiva.redback.rbac.RBACManager;
|
|
||||||
import org.apache.archiva.redback.rbac.Resource;
|
|
||||||
import org.apache.archiva.redback.rbac.Role;
|
|
||||||
import org.apache.archiva.redback.rbac.UserAssignment;
|
|
||||||
import org.apache.archiva.redback.users.User;
|
|
||||||
import org.apache.archiva.redback.users.UserManager;
|
|
||||||
import org.jsecurity.authc.IncorrectCredentialsException;
|
|
||||||
import org.jsecurity.authc.UsernamePasswordToken;
|
|
||||||
import org.jsecurity.mgt.DefaultSecurityManager;
|
|
||||||
import org.jsecurity.subject.PrincipalCollection;
|
|
||||||
import org.jsecurity.subject.SimplePrincipalCollection;
|
|
||||||
import org.jsecurity.subject.Subject;
|
|
||||||
import org.junit.After;
|
|
||||||
import org.junit.Before;
|
|
||||||
import org.junit.Test;
|
|
||||||
import org.junit.runner.RunWith;
|
|
||||||
import org.springframework.test.context.ContextConfiguration;
|
|
||||||
import org.springframework.test.context.junit4.SpringJUnit4ClassRunner;
|
|
||||||
|
|
||||||
import javax.inject.Inject;
|
|
||||||
import javax.inject.Named;
|
|
||||||
|
|
||||||
|
|
||||||
@RunWith( SpringJUnit4ClassRunner.class )
|
|
||||||
@ContextConfiguration( locations = { "classpath*:/META-INF/spring-context.xml", "classpath*:/spring-context.xml" } )
|
|
||||||
public class RedbackRealmTest
|
|
||||||
extends TestCase
|
|
||||||
{
|
|
||||||
private DefaultSecurityManager securityManager;
|
|
||||||
|
|
||||||
private RedbackRealm realm;
|
|
||||||
|
|
||||||
@Inject
|
|
||||||
@Named( value = "userManager#memory" )
|
|
||||||
private UserManager userManager;
|
|
||||||
|
|
||||||
@Inject
|
|
||||||
@Named( value = "rBACManager#memory" )
|
|
||||||
private RBACManager rbacManager;
|
|
||||||
|
|
||||||
@Inject
|
|
||||||
private UserSecurityPolicy userSecurityPolicy;
|
|
||||||
|
|
||||||
private User user;
|
|
||||||
|
|
||||||
@Before
|
|
||||||
public void setUp()
|
|
||||||
throws Exception
|
|
||||||
{
|
|
||||||
super.setUp();
|
|
||||||
securityManager = new DefaultSecurityManager();
|
|
||||||
|
|
||||||
realm = new RedbackRealm( userManager, rbacManager, userSecurityPolicy );
|
|
||||||
securityManager.setRealm( realm );
|
|
||||||
|
|
||||||
user = userManager.createUser( "test1", "John Tester", "jtester@redback.codehaus.org" );
|
|
||||||
user.setPassword( "password1" );
|
|
||||||
userManager.addUser( user );
|
|
||||||
userManager.updateUser( user );
|
|
||||||
}
|
|
||||||
|
|
||||||
@After
|
|
||||||
public void tearDown()
|
|
||||||
throws Exception
|
|
||||||
{
|
|
||||||
super.tearDown();
|
|
||||||
securityManager.destroy();
|
|
||||||
securityManager = null;
|
|
||||||
realm = null;
|
|
||||||
}
|
|
||||||
|
|
||||||
protected String getPlexusConfigLocation()
|
|
||||||
{
|
|
||||||
return "plexus.xml";
|
|
||||||
}
|
|
||||||
|
|
||||||
public void testThrowsExceptionIfUserAccountLocked()
|
|
||||||
throws Exception
|
|
||||||
{
|
|
||||||
user.setLocked( true );
|
|
||||||
userManager.updateUser( user );
|
|
||||||
try
|
|
||||||
{
|
|
||||||
securityManager.login( new UsernamePasswordToken( "test1", "password1" ) );
|
|
||||||
fail( "Should not be able to login" );
|
|
||||||
}
|
|
||||||
catch ( PrincipalLockedException e )
|
|
||||||
{
|
|
||||||
assertTrue( true );
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
@Test
|
|
||||||
public void testThrowsExceptionIfUserAccountNeedsPasswordChange()
|
|
||||||
throws Exception
|
|
||||||
{
|
|
||||||
user.setPasswordChangeRequired( true );
|
|
||||||
userManager.updateUser( user );
|
|
||||||
try
|
|
||||||
{
|
|
||||||
securityManager.login( new UsernamePasswordToken( "test1", "password1" ) );
|
|
||||||
fail( "Should not be able to login" );
|
|
||||||
}
|
|
||||||
catch ( PrincipalPasswordChangeRequiredException e )
|
|
||||||
{
|
|
||||||
assertTrue( true );
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
@Test
|
|
||||||
public void testUnsuccessfullAuthAttemptsLockAccount()
|
|
||||||
throws Exception
|
|
||||||
{
|
|
||||||
assertFalse( user.isLocked() );
|
|
||||||
userSecurityPolicy.setLoginAttemptCount( 2 );
|
|
||||||
try
|
|
||||||
{
|
|
||||||
securityManager.login( new UsernamePasswordToken( "test1", "incorrectpassowrd" ) );
|
|
||||||
fail( "password should be incorrect" );
|
|
||||||
}
|
|
||||||
catch ( IncorrectCredentialsException e )
|
|
||||||
{
|
|
||||||
assertFalse( user.isLocked() );
|
|
||||||
}
|
|
||||||
|
|
||||||
try
|
|
||||||
{
|
|
||||||
securityManager.login( new UsernamePasswordToken( "test1", "incorrectpassowrd" ) );
|
|
||||||
fail( "password should be incorrect" );
|
|
||||||
}
|
|
||||||
catch ( IncorrectCredentialsException e )
|
|
||||||
{
|
|
||||||
assertTrue( user.isLocked() );
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
@Test
|
|
||||||
public void testBasic()
|
|
||||||
throws Exception
|
|
||||||
{
|
|
||||||
assertEquals( 1, userManager.getUsers().size() );
|
|
||||||
|
|
||||||
Role role1 = rbacManager.createRole( "role1" );
|
|
||||||
Permission permission = rbacManager.createPermission( "Allowed to write to repository" );
|
|
||||||
Operation operation = rbacManager.createOperation( "myop" );
|
|
||||||
Resource resource = rbacManager.createResource( "filesystem" );
|
|
||||||
|
|
||||||
permission.setOperation( operation );
|
|
||||||
permission.setPermanent( false );
|
|
||||||
permission.setResource( resource );
|
|
||||||
|
|
||||||
role1.addPermission( permission );
|
|
||||||
rbacManager.savePermission( permission );
|
|
||||||
rbacManager.saveRole( role1 );
|
|
||||||
|
|
||||||
Role role2 = rbacManager.createRole( "role2" );
|
|
||||||
|
|
||||||
UserAssignment assignment = rbacManager.createUserAssignment( user.getUsername() );
|
|
||||||
assignment.addRoleName( "role1" );
|
|
||||||
rbacManager.saveUserAssignment( assignment );
|
|
||||||
|
|
||||||
Subject subject = securityManager.login( new UsernamePasswordToken( "test1", "password1" ) );
|
|
||||||
assertTrue( subject.isAuthenticated() );
|
|
||||||
assertTrue( subject.hasRole( "role1" ) );
|
|
||||||
assertFalse( subject.hasRole( "role2" ) );
|
|
||||||
|
|
||||||
PrincipalCollection principals = new SimplePrincipalCollection( "test1", realm.getName() );
|
|
||||||
|
|
||||||
assertTrue( securityManager.isPermitted( principals, "Allowed to write to repository" ) );
|
|
||||||
}
|
|
||||||
}
|
|
||||||
Loading…
Reference in New Issue