Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add Configuration Test 

Issue gh-11327
This commit is contained in:
Josh Cummings 2022-07-07 14:42:07 -06:00
parent 01ffc93062
commit e8a7b654b4
No known key found for this signature in database
GPG Key ID: A306A51F43B8E5A5
2 changed files with 45 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
config/src/test/java/org/springframework/security/config/http/MiscHttpConfigTests.java
View File

@ -34,14 +34,15 @@ import javax.security.auth.Subject;
import javax.security.auth.callback.CallbackHandler; import javax.security.auth.callback.CallbackHandler;
import javax.security.auth.spi.LoginModule; import javax.security.auth.spi.LoginModule;
import ch.qos.logback.classic.Logger;
import ch.qos.logback.classic.spi.ILoggingEvent;
import ch.qos.logback.core.Appender;
import jakarta.servlet.Filter; import jakarta.servlet.Filter;
import jakarta.servlet.ServletException; import jakarta.servlet.ServletException;
import jakarta.servlet.http.HttpServletRequest; import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse; import jakarta.servlet.http.HttpServletResponse;
import jakarta.servlet.http.HttpServletResponseWrapper; import jakarta.servlet.http.HttpServletResponseWrapper;
import ch.qos.logback.classic.Logger;
import ch.qos.logback.classic.spi.ILoggingEvent;
import ch.qos.logback.core.Appender;
import org.apache.http.HttpStatus; import org.apache.http.HttpStatus;
import org.assertj.core.api.iterable.Extractor; import org.assertj.core.api.iterable.Extractor;
import org.jetbrains.annotations.NotNull; import org.jetbrains.annotations.NotNull;
@ -546,6 +547,14 @@ public class MiscHttpConfigTests {
assertThat(baos.toString()).contains("[WARN]"); assertThat(baos.toString()).contains("[WARN]");
} }
@Test
public void configureWhenProtectingLoginPageAuthorizationManagerThenWarningLogged() {
ByteArrayOutputStream baos = new ByteArrayOutputStream();
redirectLogsTo(baos, DefaultFilterChainValidator.class);
this.spring.configLocations(xml("ProtectedLoginPageAuthorizationManager")).autowire();
assertThat(baos.toString()).contains("[WARN]");
}
@Test @Test
public void configureWhenUsingDisableUrlRewritingThenRedirectIsNotEncodedByResponse() public void configureWhenUsingDisableUrlRewritingThenRedirectIsNotEncodedByResponse()
throws IOException, ServletException { throws IOException, ServletException {

33
config/src/test/resources/org/springframework/security/config/http/MiscHttpConfigTests-ProtectedLoginPageAuthorizationManager.xml Normal file
View File

@ -0,0 +1,33 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
~ Copyright 2002-2018 the original author or authors.
~
~ Licensed under the Apache License, Version 2.0 (the "License");
~ you may not use this file except in compliance with the License.
~ You may obtain a copy of the License at
~
~ https://www.apache.org/licenses/LICENSE-2.0
~
~ Unless required by applicable law or agreed to in writing, software
~ distributed under the License is distributed on an "AS IS" BASIS,
~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
~ See the License for the specific language governing permissions and
~ limitations under the License.
-->
<b:beans xmlns:b="http://www.springframework.org/schema/beans"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns="http://www.springframework.org/schema/security"
xsi:schemaLocation="
http://www.springframework.org/schema/security
https://www.springframework.org/schema/security/spring-security.xsd
http://www.springframework.org/schema/beans
https://www.springframework.org/schema/beans/spring-beans.xsd">
<http use-authorization-manager="true">
<form-login login-page="/login"/>
<intercept-url pattern="/login*" access="hasRole('ROLE_A')"/>
</http>
<b:import resource="userservice.xml"/>
</b:beans>