mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-06-20 19:12:14 +00:00
SEC-2832: Fix config tests
This commit is contained in:
parent
dfaebfa63b
commit
1b26d03479
@ -237,6 +237,7 @@ class CsrfConfigurerTests extends BaseSpringSpec {
|
|||||||
setup:
|
setup:
|
||||||
CsrfTokenRepositoryConfig.repo = Mock(CsrfTokenRepository)
|
CsrfTokenRepositoryConfig.repo = Mock(CsrfTokenRepository)
|
||||||
(1.._) * CsrfTokenRepositoryConfig.repo.loadToken(_) >> csrfToken
|
(1.._) * CsrfTokenRepositoryConfig.repo.loadToken(_) >> csrfToken
|
||||||
|
(1.._) * CsrfTokenRepositoryConfig.repo.generateToken(_) >> csrfToken
|
||||||
loadConfig(CsrfTokenRepositoryConfig)
|
loadConfig(CsrfTokenRepositoryConfig)
|
||||||
request.method = "POST"
|
request.method = "POST"
|
||||||
request.getSession()
|
request.getSession()
|
||||||
@ -391,6 +392,7 @@ class CsrfConfigurerTests extends BaseSpringSpec {
|
|||||||
def "csrf disables POST requests from RequestCache"() {
|
def "csrf disables POST requests from RequestCache"() {
|
||||||
setup:
|
setup:
|
||||||
CsrfDisablesPostRequestFromRequestCacheConfig.repo = Mock(CsrfTokenRepository)
|
CsrfDisablesPostRequestFromRequestCacheConfig.repo = Mock(CsrfTokenRepository)
|
||||||
|
(1.._) * CsrfDisablesPostRequestFromRequestCacheConfig.repo.generateToken(_) >> csrfToken
|
||||||
loadConfig(CsrfDisablesPostRequestFromRequestCacheConfig)
|
loadConfig(CsrfDisablesPostRequestFromRequestCacheConfig)
|
||||||
request.servletPath = "/some-url"
|
request.servletPath = "/some-url"
|
||||||
request.requestURI = "/some-url"
|
request.requestURI = "/some-url"
|
||||||
@ -417,6 +419,7 @@ class CsrfConfigurerTests extends BaseSpringSpec {
|
|||||||
def "csrf enables GET requests with RequestCache"() {
|
def "csrf enables GET requests with RequestCache"() {
|
||||||
setup:
|
setup:
|
||||||
CsrfDisablesPostRequestFromRequestCacheConfig.repo = Mock(CsrfTokenRepository)
|
CsrfDisablesPostRequestFromRequestCacheConfig.repo = Mock(CsrfTokenRepository)
|
||||||
|
(1.._) * CsrfDisablesPostRequestFromRequestCacheConfig.repo.generateToken(_) >> csrfToken
|
||||||
loadConfig(CsrfDisablesPostRequestFromRequestCacheConfig)
|
loadConfig(CsrfDisablesPostRequestFromRequestCacheConfig)
|
||||||
request.servletPath = "/some-url"
|
request.servletPath = "/some-url"
|
||||||
request.requestURI = "/some-url"
|
request.requestURI = "/some-url"
|
||||||
|
@ -119,6 +119,7 @@ class CsrfConfigTests extends AbstractHttpConfigTests {
|
|||||||
CsrfTokenRepository repo = appContext.getBean("repo",CsrfTokenRepository)
|
CsrfTokenRepository repo = appContext.getBean("repo",CsrfTokenRepository)
|
||||||
CsrfToken token = new DefaultCsrfToken("X-CSRF-TOKEN","_csrf", "abc")
|
CsrfToken token = new DefaultCsrfToken("X-CSRF-TOKEN","_csrf", "abc")
|
||||||
when(repo.loadToken(any(HttpServletRequest))).thenReturn(token)
|
when(repo.loadToken(any(HttpServletRequest))).thenReturn(token)
|
||||||
|
when(repo.generateToken(any(HttpServletRequest))).thenReturn(token)
|
||||||
request.setParameter(token.parameterName,token.token)
|
request.setParameter(token.parameterName,token.token)
|
||||||
request.servletPath = "/some-url"
|
request.servletPath = "/some-url"
|
||||||
request.requestURI = "/some-url"
|
request.requestURI = "/some-url"
|
||||||
@ -153,6 +154,7 @@ class CsrfConfigTests extends AbstractHttpConfigTests {
|
|||||||
CsrfTokenRepository repo = appContext.getBean("repo",CsrfTokenRepository)
|
CsrfTokenRepository repo = appContext.getBean("repo",CsrfTokenRepository)
|
||||||
CsrfToken token = new DefaultCsrfToken("X-CSRF-TOKEN","_csrf", "abc")
|
CsrfToken token = new DefaultCsrfToken("X-CSRF-TOKEN","_csrf", "abc")
|
||||||
when(repo.loadToken(any(HttpServletRequest))).thenReturn(token)
|
when(repo.loadToken(any(HttpServletRequest))).thenReturn(token)
|
||||||
|
when(repo.generateToken(any(HttpServletRequest))).thenReturn(token)
|
||||||
request.setParameter(token.parameterName,token.token)
|
request.setParameter(token.parameterName,token.token)
|
||||||
request.servletPath = "/some-url"
|
request.servletPath = "/some-url"
|
||||||
request.requestURI = "/some-url"
|
request.requestURI = "/some-url"
|
||||||
@ -252,6 +254,7 @@ class CsrfConfigTests extends AbstractHttpConfigTests {
|
|||||||
CsrfTokenRepository repo = appContext.getBean("repo",CsrfTokenRepository)
|
CsrfTokenRepository repo = appContext.getBean("repo",CsrfTokenRepository)
|
||||||
CsrfToken token = new DefaultCsrfToken("X-CSRF-TOKEN","_csrf", "abc")
|
CsrfToken token = new DefaultCsrfToken("X-CSRF-TOKEN","_csrf", "abc")
|
||||||
when(repo.loadToken(any(HttpServletRequest))).thenReturn(token)
|
when(repo.loadToken(any(HttpServletRequest))).thenReturn(token)
|
||||||
|
when(repo.generateToken(any(HttpServletRequest))).thenReturn(token)
|
||||||
request.setParameter(token.parameterName,token.token)
|
request.setParameter(token.parameterName,token.token)
|
||||||
request.method = "POST"
|
request.method = "POST"
|
||||||
request.setParameter("j_username","user")
|
request.setParameter("j_username","user")
|
||||||
|
Loading…
x
Reference in New Issue
Block a user