507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestpackage com.sun.identity.authentication.jaas;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestimport com.sun.identity.authentication.spi.InvalidPasswordException;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestimport org.testng.annotations.BeforeMethod;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestimport org.testng.annotations.Test;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestimport javax.security.auth.Subject;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestimport javax.security.auth.callback.CallbackHandler;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestimport javax.security.auth.login.AppConfigurationEntry;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestimport javax.security.auth.login.AppConfigurationEntry.LoginModuleControlFlag;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestimport javax.security.auth.login.LoginException;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestimport javax.security.auth.spi.LoginModule;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestimport java.util.HashMap;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestimport java.util.Map;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestimport static org.mockito.Matchers.anyMap;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestimport static org.mockito.Matchers.eq;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestimport static org.mockito.Matchers.same;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestimport static org.mockito.Mockito.mock;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestimport static org.mockito.Mockito.verify;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestimport static org.mockito.Mockito.verifyNoMoreInteractions;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestimport static org.mockito.Mockito.when;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrestpublic class LoginContextTest {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private static final String LOGIN_MODULE = "com.sun.identity.authentication.jaas.LoginContextTest$MockModule";

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private static final String DELEGATE_MODULE = "delegate";

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private Subject subject;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private CallbackHandler handler;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private LoginContext context;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private LoginModule requisiteDelegate;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private LoginModule requiredDelegate;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private LoginModule optionalDelegate;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private LoginModule sufficientDelegate;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private Map<LoginModule, Map<String, Object>> optionCache;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest @BeforeMethod

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest public void setUp() throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest optionCache = new HashMap<LoginModule, Map<String, Object>>();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest // Create required delegate login module.

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest requiredDelegate = mock(LoginModule.class);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest Map<String, Object> requiredOptions = new HashMap<String, Object>();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest requiredOptions.put(DELEGATE_MODULE, requiredDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest optionCache.put(requiredDelegate, requiredOptions);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest AppConfigurationEntry requiredEntry = new AppConfigurationEntry(LOGIN_MODULE,

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest LoginModuleControlFlag.REQUIRED, requiredOptions);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest // Create requisite delegate login module.

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest requisiteDelegate = mock(LoginModule.class);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest Map<String, Object> requisiteOptions = new HashMap<String, Object>();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest requisiteOptions.put(DELEGATE_MODULE, requisiteDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest optionCache.put(requisiteDelegate, requisiteOptions);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest AppConfigurationEntry requisiteEntry = new AppConfigurationEntry(LOGIN_MODULE,

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest LoginModuleControlFlag.REQUISITE, requisiteOptions);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest // Create sufficient delegate login module.

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest sufficientDelegate = mock(LoginModule.class);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest Map<String, Object> sufficientOptions = new HashMap<String, Object>();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest sufficientOptions.put(DELEGATE_MODULE, sufficientDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest optionCache.put(sufficientDelegate, sufficientOptions);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest AppConfigurationEntry sufficientEntry = new AppConfigurationEntry(LOGIN_MODULE,

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest LoginModuleControlFlag.SUFFICIENT, sufficientOptions);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest // Create optional delegate login module.

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest optionalDelegate = mock(LoginModule.class);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest Map<String, Object> optionalOptions = new HashMap<String, Object>();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest optionalOptions.put(DELEGATE_MODULE, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest optionCache.put(optionalDelegate, optionalOptions);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest AppConfigurationEntry optionalEntry = new AppConfigurationEntry(LOGIN_MODULE,

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest LoginModuleControlFlag.OPTIONAL, optionalOptions);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest AppConfigurationEntry[] entries =

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest new AppConfigurationEntry[] {requiredEntry, requisiteEntry, sufficientEntry, optionalEntry};

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest subject = new Subject();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest handler = mock(CallbackHandler.class);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest // Initialise class under test.

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest context = new LoginContext(entries, subject, handler);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest @Test

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest public void sufficientSuccess() throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenLoginReturnTrue(requiredDelegate, requisiteDelegate, sufficientDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenCommitReturnTrue(requiredDelegate, requisiteDelegate, sufficientDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest context.login();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyInitialize(requiredDelegate, requisiteDelegate, sufficientDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyLogin(requiredDelegate, requisiteDelegate, sufficientDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyCommit(requiredDelegate, requisiteDelegate, sufficientDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyNoMoreInteractions(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest @Test

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest public void sufficientFailureIgnored() throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenLoginReturnTrue(requiredDelegate, requisiteDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenLoginThrowInvalidPasswordException(sufficientDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenCommitReturnTrue(requiredDelegate, requisiteDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenCommitReturnFalse(sufficientDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest context.login();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyInitialize(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyLogin(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyCommit(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyNoMoreInteractions(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest @Test(expectedExceptions = InvalidPasswordException.class)

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest public void requiredFailure() throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenLoginThrowInvalidPasswordException(requiredDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenLoginReturnTrue(requisiteDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest // Sufficient module ignored to stop the chain completing early.

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenLoginReturnFalse(sufficientDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenAbortReturnTrue(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest try {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest context.login();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest } finally {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyInitialize(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyLogin(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyAbort(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyNoMoreInteractions(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest @Test(expectedExceptions = InvalidPasswordException.class)

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest public void requisiteFailure() throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenLoginReturnTrue(requiredDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenLoginThrowInvalidPasswordException(requisiteDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenAbortReturnTrue(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest try {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest context.login();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest } finally {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyInitialize(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyLogin(requiredDelegate, requisiteDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyAbort(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyNoMoreInteractions(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest @Test

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest public void optionalFailureIgnored() throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenLoginReturnTrue(requiredDelegate, requisiteDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest // Sufficient module ignored to stop the chain completing early.

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenLoginReturnFalse(sufficientDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenLoginThrowInvalidPasswordException(optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenCommitReturnTrue(requiredDelegate, requisiteDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenCommitReturnFalse(sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest context.login();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyInitialize(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyLogin(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyCommit(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyNoMoreInteractions(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest @Test(expectedExceptions = InvalidPasswordException.class)

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest public void optionalFailureNoted() throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenLoginReturnFalse(requiredDelegate, requisiteDelegate, sufficientDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenLoginThrowInvalidPasswordException(optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenAbortReturnTrue(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest try {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest context.login();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest } finally {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyInitialize(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyLogin(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyAbort(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyNoMoreInteractions(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest @Test

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest public void optionalSuccessNoted() throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenLoginReturnFalse(requiredDelegate, requisiteDelegate, sufficientDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenLoginReturnTrue(optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenCommitReturnFalse(requiredDelegate, requisiteDelegate, sufficientDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest whenCommitReturnTrue(optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest context.login();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyInitialize(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyLogin(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyCommit(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verifyNoMoreInteractions(requiredDelegate, requisiteDelegate, sufficientDelegate, optionalDelegate);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private void whenLoginReturnTrue(LoginModule... modules) throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest for (LoginModule module : modules) {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest when(module.login()).thenReturn(true);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private void whenLoginThrowInvalidPasswordException(LoginModule... modules) throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest for (LoginModule module : modules) {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest when(module.login()).thenThrow(new InvalidPasswordException("test-pw-failure"));

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private void whenLoginReturnFalse(LoginModule... modules) throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest for (LoginModule module : modules) {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest when(module.login()).thenReturn(false);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private void whenCommitReturnTrue(LoginModule... modules) throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest for (LoginModule module : modules) {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest when(module.commit()).thenReturn(true);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private void whenCommitReturnFalse(LoginModule... modules) throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest for (LoginModule module : modules) {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest when(module.commit()).thenReturn(false);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private void whenAbortReturnTrue(LoginModule... modules) throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest for (LoginModule module : modules) {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest when(module.abort()).thenReturn(true);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private void verifyInitialize(LoginModule... modules) {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest for (LoginModule module : modules) {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest // Options use eq() as opposed to same() because the map is wrapped by the authn framework.

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verify(module).initialize(same(subject), same(handler), anyMap(), eq(optionCache.get(module)));

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private void verifyLogin(LoginModule... modules) throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest for (LoginModule module : modules) {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verify(module).login();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private void verifyCommit(LoginModule... modules) throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest for (LoginModule module : modules) {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verify(module).commit();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private void verifyAbort(LoginModule... modules) throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest for (LoginModule module : modules) {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest verify(module).abort();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest /**

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private static class MockModule implements LoginModule {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest private LoginModule delegate;

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest public MockModule() {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest // No-arg constructor.

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest @Override

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest public void initialize(Subject subject, CallbackHandler callbackHandler,

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest Map<String, ?> sharedState, Map<String, ?> options) {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest // Taking advantage of the options map to pass in the delegate module.

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest delegate = (LoginModule)options.get(DELEGATE_MODULE);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest delegate.initialize(subject, callbackHandler, sharedState, options);

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest @Override

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest public boolean login() throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest return delegate.login();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest @Override

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest public boolean commit() throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest return delegate.commit();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest @Override

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest public boolean abort() throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest return delegate.abort();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest @Override

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest public boolean logout() throws LoginException {

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest return delegate.logout();

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest }

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest

507f293cae556f4b7077d3bcfc882525da3cfe6bAndrew Forrest}