| /** |
| * Licensed to the Apache Software Foundation (ASF) under one or more |
| * contributor license agreements. See the NOTICE file distributed with |
| * this work for additional information regarding copyright ownership. |
| * The ASF licenses this file to You under the Apache License, Version 2.0 |
| * (the "License"); you may not use this file except in compliance with |
| * the License. You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| */ |
| package org.apache.camel.itest.security; |
| |
| import java.util.HashMap; |
| import java.util.Map; |
| |
| import javax.xml.namespace.QName; |
| import javax.xml.ws.BindingProvider; |
| import javax.xml.ws.soap.SOAPFaultException; |
| |
| import org.apache.camel.CamelContext; |
| import org.apache.cxf.endpoint.Client; |
| import org.apache.cxf.frontend.ClientProxy; |
| import org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor; |
| import org.apache.hello_world_soap_http.Greeter; |
| import org.apache.ws.security.WSConstants; |
| import org.apache.ws.security.message.token.UsernameToken; |
| import org.junit.Test; |
| import org.springframework.beans.factory.annotation.Autowired; |
| import org.springframework.test.context.ContextConfiguration; |
| import org.springframework.test.context.junit4.AbstractJUnit4SpringContextTests; |
| |
| |
| import static org.junit.Assert.assertEquals; |
| import static org.junit.Assert.assertTrue; |
| import static org.junit.Assert.fail; |
| |
| @ContextConfiguration(locations = {"camel-context.xml"}) |
| public class GreeterClientTest extends AbstractJUnit4SpringContextTests { |
| private static final java.net.URL WSDL_LOC; |
| static { |
| java.net.URL tmp = null; |
| try { |
| tmp = GreeterClientTest.class.getClassLoader().getResource("wsdl/hello_world.wsdl"); |
| } catch (final Exception e) { |
| e.printStackTrace(); |
| } |
| WSDL_LOC = tmp; |
| } |
| private static final QName SERVICE_QNAME = |
| new QName("http://apache.org/hello_world_soap_http", "SOAPService"); |
| |
| private static final QName PORT_QNAME = |
| new QName("http://apache.org/hello_world_soap_http", "SoapOverHttp" |
| ); |
| |
| @Autowired |
| protected CamelContext camelContext; |
| |
| protected String sendMessageWithUsernameToken(String username, String password, String message) throws Exception { |
| final javax.xml.ws.Service svc = javax.xml.ws.Service.create(WSDL_LOC, SERVICE_QNAME); |
| final Greeter greeter = svc.getPort(PORT_QNAME, Greeter.class); |
| |
| Client client = ClientProxy.getClient(greeter); |
| Map<String, Object> props = new HashMap<String, Object>(); |
| props.put("action", "UsernameToken"); |
| props.put("user", username); |
| // Set the the password type to be plain text, |
| // so we can keep using the password to authenticate with spring security |
| props.put(UsernameToken.PASSWORD_TYPE, WSConstants.PW_TEXT); |
| WSS4JOutInterceptor wss4jOut = new WSS4JOutInterceptor(props); |
| |
| client.getOutInterceptors().add(wss4jOut); |
| ((BindingProvider)greeter).getRequestContext().put("password", password); |
| return greeter.greetMe(message); |
| } |
| |
| @Test |
| public void testServiceWithValidateUser() throws Exception { |
| String response = sendMessageWithUsernameToken("jim", "jimspassword", "CXF"); |
| assertEquals(" Hello CXF", response); |
| |
| try { |
| sendMessageWithUsernameToken("jim", "foo", "CXF"); |
| fail("should fail"); |
| } catch (Exception ex) { |
| assertTrue("Get a wrong type exception.", ex instanceof SOAPFaultException); |
| assertTrue("Get a wrong exception message", ex.getMessage().startsWith("The security token could not be authenticated or authorized")); |
| // CXF 2.4.0 WSecurity doesn't put the authentication exception |
| //assertTrue("Get a wrong exception message", ex.getMessage().endsWith("java.io.IOException: Wrong password!")); |
| } |
| |
| } |
| |
| @Test |
| public void testServiceWithNotAuthorizedUser() throws Exception { |
| try { |
| // this user doesn't have the right to access the processor |
| sendMessageWithUsernameToken("bob", "bobspassword", "CXF"); |
| fail("should fail"); |
| } catch (Exception ex) { |
| assertTrue("Get a wrong type exception.", ex instanceof SOAPFaultException); |
| assertTrue("Get a wrong exception message", ex.getMessage().startsWith("Cannot access the processor which has been protected.")); |
| assertTrue("Get a wrong exception message", ex.getMessage().endsWith("Caused by: [org.springframework.security.access.AccessDeniedException - Access is denied]")); |
| } |
| } |
| |
| } |