1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
|
// Copyright Yahoo. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
package com.yahoo.vespa.model.application.validation;// Copyright 2020 Oath Inc. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
import com.yahoo.config.model.MapConfigModelRegistry;
import com.yahoo.config.model.NullConfigModelRegistry;
import com.yahoo.config.model.deploy.DeployState;
import com.yahoo.config.model.test.MockApplicationPackage;
import com.yahoo.config.model.test.ModelBuilderAddingAccessControlFilter;
import com.yahoo.vespa.model.VespaModel;
import org.junit.Rule;
import org.junit.Test;
import org.junit.rules.ExpectedException;
import org.xml.sax.SAXException;
import java.io.IOException;
/**
* @author bjorncs
*/
public class AccessControlFilterValidatorTest {
private static final String SERVICES_XML = String.join(
"\n",
"<services version='1.0'>",
" <container id='container-cluster-with-access-control' version='1.0'>",
" <http>",
" <filtering>",
" <access-control domain='foo' read='true' write='true'/>",
" </filtering>",
" </http>",
" </container>",
"</services>");
@Rule
public ExpectedException exceptionRule = ExpectedException.none();
@Test
public void validator_fails_with_empty_access_control_filter_chain() throws IOException, SAXException {
DeployState deployState = createDeployState();
VespaModel model = new VespaModel(new NullConfigModelRegistry(), deployState);
exceptionRule.expect(IllegalArgumentException.class);
exceptionRule.expectMessage("The 'access-control' feature is not available in open-source Vespa.");
new AccessControlFilterValidator().validate(model, deployState);
}
@Test
public void validator_accepts_non_empty_access_control_filter_chain() throws IOException, SAXException {
DeployState deployState = createDeployState();
VespaModel model = new VespaModel(
MapConfigModelRegistry.createFromList(new ModelBuilderAddingAccessControlFilter()),
deployState);
new AccessControlFilterValidator().validate(model, deployState);
}
private static DeployState createDeployState() {
return new DeployState.Builder()
.applicationPackage(new MockApplicationPackage.Builder().withServices(SERVICES_XML).build())
.build();
}
}
|