| /* |
| * Licensed to the Apache Software Foundation (ASF) under one |
| * or more contributor license agreements. See the NOTICE file |
| * distributed with this work for additional information |
| * regarding copyright ownership. The ASF licenses this file |
| * to you under the Apache License, Version 2.0 (the |
| * "License"); you may not use this file except in compliance |
| * with the License. You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, |
| * software distributed under the License is distributed on an |
| * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY |
| * KIND, either express or implied. See the License for the |
| * specific language governing permissions and limitations |
| * under the License. |
| * |
| */ |
| package org.apache.directory.server.changepw.service; |
| |
| |
| import javax.security.auth.kerberos.KerberosPrincipal; |
| |
| import org.apache.directory.junit.tools.Concurrent; |
| import org.apache.directory.junit.tools.ConcurrentJunitRunner; |
| import org.junit.Test; |
| import org.junit.runner.RunWith; |
| |
| import static org.junit.Assert.assertTrue; |
| import static org.junit.Assert.assertFalse; |
| |
| /** |
| * Tests {@link CheckPasswordPolicy}. |
| * |
| * @author <a href="mailto:dev@directory.apache.org">Apache Directory Project</a> |
| */ |
| @RunWith(ConcurrentJunitRunner.class) |
| @Concurrent() |
| public class CheckPasswordPolicyTest |
| { |
| private static final int passwordLength = 6; |
| private static final int categoryCount = 3; |
| private static final int tokenSize = 3; |
| |
| private static final CheckPasswordPolicy policy = new CheckPasswordPolicy(); |
| |
| |
| /** |
| * Tests that a good password is valid according to all policy checks. |
| */ |
| @Test |
| public void testGoodPassword() |
| { |
| String username = "Enrique Rodriguez"; |
| String password = "d1r3ct0rY"; |
| assertTrue( policy.isValidPasswordLength( password, passwordLength ) ); |
| assertTrue( policy.isValidCategoryCount( password, categoryCount ) ); |
| assertTrue( policy.isValidUsernameSubstring( username, password, tokenSize ) ); |
| assertTrue( policy.isValid( username, password, passwordLength, categoryCount, tokenSize ) ); |
| } |
| |
| |
| /** |
| * Tests that a bad password fails all validity checks. |
| */ |
| @Test |
| public void testBadPassword() |
| { |
| String username = "Erin Randall"; |
| String password = "erin1"; |
| assertFalse( policy.isValidPasswordLength( password, passwordLength ) ); |
| assertFalse( policy.isValidCategoryCount( password, categoryCount ) ); |
| assertFalse( policy.isValidUsernameSubstring( username, password, tokenSize ) ); |
| assertFalse( policy.isValid( username, password, passwordLength, categoryCount, tokenSize ) ); |
| } |
| |
| |
| /** |
| * Tests variations of a password where the password includes tokens of the username. |
| */ |
| @Test |
| public void testPrincipalAsUsername() |
| { |
| String username = new KerberosPrincipal( "erodriguez@EXAMPLE.COM" ).getName(); |
| String password1 = "d1r3ct0rY"; |
| String password2 = "ERodriguez@d1r3ct0rY"; |
| String password3 = "Example@d1r3ct0rY"; |
| |
| assertTrue( policy.isValidUsernameSubstring( username, password1, tokenSize ) ); |
| |
| assertFalse( policy.isValidUsernameSubstring( username, password2, tokenSize ) ); |
| assertFalse( policy.isValidUsernameSubstring( username, password3, tokenSize ) ); |
| } |
| } |