1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
|
// Copyright 2017 Yahoo Holdings. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
package com.yahoo.vespa.hosted.provision.restapi.v2.filter;
import com.yahoo.application.container.handler.Request.Method;
import com.yahoo.config.provision.Environment;
import com.yahoo.config.provision.RegionName;
import com.yahoo.config.provision.SystemName;
import com.yahoo.config.provision.Zone;
import com.yahoo.config.provisioning.NodeRepositoryConfig;
import com.yahoo.vespa.curator.mock.MockCurator;
import com.yahoo.vespa.hosted.provision.restapi.v2.filter.FilterTester.Request;
import com.yahoo.vespa.hosted.provision.testutils.MockNodeFlavors;
import com.yahoo.vespa.hosted.provision.testutils.MockNodeRepository;
import org.junit.Before;
import org.junit.Test;
/**
* @author mpolden
*/
public class AuthorizationFilterTest {
private FilterTester tester;
@Before
public void before() {
tester = filterTester(SystemName.main);
}
@Test
public void filter() {
// These are just rudimentary tests of the filter. See AuthorizerTest for more exhaustive tests
tester.assertRequest(new Request(Method.GET, "/"), 500,
"{\"error-code\":\"INTERNAL_SERVER_ERROR\",\"message\":\"GET / denied for " +
"remote-addr: Principal is missing. NodeIdentifierFilter has not been applied.\"}");
tester.assertRequest(new Request(Method.GET, "/").commonName("foo"), 403,
"{\"error-code\":\"FORBIDDEN\",\"message\":\"GET / " +
"denied for remote-addr: Invalid credentials: NodePrincipal{identityName='foo', hostname='foo', type=LEGACY}\"}");
tester.assertRequest(new Request(Method.GET, "/nodes/v2/node/foo").commonName("bar"),
403, "{\"error-code\":\"FORBIDDEN\",\"message\":\"GET /nodes/v2/node/foo " +
"denied for remote-addr: Invalid credentials: NodePrincipal{identityName='bar', hostname='bar', type=LEGACY}\"}");
tester.assertSuccess(new Request(Method.GET, "/nodes/v2/node/foo").commonName("foo"));
}
private static FilterTester filterTester(SystemName system) {
Zone zone = new Zone(system, Environment.prod, RegionName.defaultName());
return new FilterTester(new AuthorizationFilter(
zone,
new MockNodeRepository(new MockCurator(), new MockNodeFlavors()),
new NodeRepositoryConfig(new NodeRepositoryConfig.Builder())));
}
}
|
