1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
|
// Copyright Yahoo. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
package com.yahoo.jdisc.http.filter.util;
import com.yahoo.container.logging.AccessLogEntry;
import com.yahoo.jdisc.Container;
import com.yahoo.jdisc.References;
import com.yahoo.jdisc.Request;
import com.yahoo.jdisc.ResourceReference;
import com.yahoo.jdisc.handler.ContentChannel;
import com.yahoo.jdisc.handler.RequestHandler;
import com.yahoo.jdisc.handler.ResponseHandler;
import com.yahoo.jdisc.http.Cookie;
import com.yahoo.jdisc.http.HttpRequest;
import com.yahoo.jdisc.http.HttpRequest.Method;
import com.yahoo.jdisc.http.HttpRequest.Version;
import com.yahoo.jdisc.http.filter.DiscFilterRequest;
import com.yahoo.jdisc.http.filter.SecurityRequestFilter;
import com.yahoo.jdisc.http.filter.SecurityResponseFilter;
import com.yahoo.jdisc.http.server.jetty.RequestUtils;
import com.yahoo.jdisc.service.CurrentContainer;
import java.net.InetSocketAddress;
import java.net.SocketAddress;
import java.net.URI;
import java.security.Principal;
import java.security.cert.X509Certificate;
import java.time.Clock;
import java.time.Instant;
import java.util.ArrayList;
import java.util.List;
import java.util.Map;
import java.util.TreeMap;
import static com.yahoo.jdisc.http.HttpRequest.Version.HTTP_1_1;
import static com.yahoo.jdisc.http.server.jetty.AccessLoggingRequestHandler.CONTEXT_KEY_ACCESS_LOG_ENTRY;
/**
* Test helper for {@link SecurityRequestFilter}/{@link SecurityResponseFilter}.
*
* @author bjorncs
*/
public class FilterTestUtils {
private FilterTestUtils() {}
public static RequestBuilder newRequestBuilder() { return new RequestBuilder(); }
public static class RequestBuilder {
private URI uri = URI.create("https://localhost:443/");
private Method method = Method.GET;
private Clock clock = Clock.systemUTC();
private Principal principal;
private final Map<String, Object> attributes = new TreeMap<>();
private List<X509Certificate> certificates = List.of();
private final Map<String, String> headers = new TreeMap<>();
private Version version = HTTP_1_1;
private SocketAddress remoteAddress;
private AccessLogEntry accessLogEntry;
private final List<Cookie> cookies = new ArrayList<>();
private RequestBuilder() {}
public RequestBuilder withUri(String uri) { return withUri(URI.create(uri)); }
public RequestBuilder withUri(URI uri) { this.uri = uri; return this; }
public RequestBuilder withMethod(String method) { return withMethod(Method.valueOf(method)); }
public RequestBuilder withMethod(Method method) { this.method = method; return this; }
public RequestBuilder withClock(Clock clock) { this.clock = clock; return this; }
public RequestBuilder withPrincipal(Principal principal) { this.principal = principal; return this; }
public RequestBuilder withAttribute(String name, Object value) { attributes.put(name, value); return this; }
public RequestBuilder withClientCertificate(X509Certificate cert) { return withClientCertificate(List.of(cert)); }
public RequestBuilder withClientCertificate(List<X509Certificate> certs) { certificates = List.copyOf(certs); return this; }
public RequestBuilder withHeader(String name, String value) { headers.put(name, value); return this; }
public RequestBuilder withHttpVersion(Version version) { this.version = version; return this; }
public RequestBuilder withRemoteAddress(String host, int port) { return withRemoteAddress(new InetSocketAddress(host, port)); }
public RequestBuilder withRemoteAddress(SocketAddress address) { this.remoteAddress = address; return this; }
public RequestBuilder withCookie(String cookie) { cookies.addAll(Cookie.fromCookieHeader(cookie)); return this; }
public RequestBuilder withCookie(Cookie cookie) { cookies.add(cookie); return this; }
public RequestBuilder withAccessLogEntry(AccessLogEntry entry) { this.accessLogEntry = entry; return this; }
public DiscFilterRequest build() {
var httpReq = HttpRequest.newServerRequest(
new DummyContainer(clock), uri, method, version, remoteAddress, clock.millis(), clock.millis());
var filterReq = new DiscFilterRequest(httpReq);
filterReq.setUserPrincipal(principal);
filterReq.setAttribute(CONTEXT_KEY_ACCESS_LOG_ENTRY, accessLogEntry != null ? accessLogEntry : new AccessLogEntry());
attributes.forEach(filterReq::setAttribute);
filterReq.setAttribute(RequestUtils.JDISC_REQUEST_X509CERT, certificates.toArray(X509Certificate[]::new));
headers.forEach(filterReq::addHeader);
filterReq.setCookies(cookies);
return filterReq;
}
}
private record DummyContainer(Clock clock) implements CurrentContainer, Container, RequestHandler {
@Override public RequestHandler resolveHandler(Request request) { return this; }
@Override public <T> T getInstance(Class<T> type) { throw new UnsupportedOperationException(); }
@Override public void release() {}
@Override public long currentTimeMillis() { return clock.millis(); }
@Override public ContentChannel handleRequest(Request request, ResponseHandler handler) { throw new UnsupportedOperationException(); }
@Override public void handleTimeout(Request request, ResponseHandler handler) { throw new UnsupportedOperationException(); }
@Override public Container newReference(URI uri, Object context) { return this; }
@Override public Container newReference(URI uri) { return this; }
@Override public ResourceReference refer(Object context) { return References.NOOP_REFERENCE; }
@Override public ResourceReference refer() { return References.NOOP_REFERENCE; }
@Override public Instant currentTime() { return clock.instant(); }
}
}
|
