hugegraph-client/src/test/java/com/baidu/hugegraph/api/auth/TokenApiTest.java

/*
 * Copyright 2017 HugeGraph Authors
 *
 * Licensed to the Apache Software Foundation (ASF) under one or more
 * contributor license agreements. See the NOTICE file distributed with this
 * work for additional information regarding copyright ownership. The ASF
 * licenses this file to You under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
 * License for the specific language governing permissions and limitations
 * under the License.
 */

package com.baidu.hugegraph.api.auth;

import java.util.List;

import org.junit.AfterClass;
import org.junit.BeforeClass;
import org.junit.Test;

import com.baidu.hugegraph.client.RestClient;
import com.baidu.hugegraph.exception.ServerException;
import com.baidu.hugegraph.structure.auth.Login;
import com.baidu.hugegraph.structure.auth.LoginResult;
import com.baidu.hugegraph.structure.auth.TokenPayload;
import com.baidu.hugegraph.structure.auth.User;
import com.baidu.hugegraph.testutil.Assert;
import com.baidu.hugegraph.testutil.Whitebox;

public class TokenApiTest extends AuthApiTest {

    private static TokenAPI tokenAPI;
    private static LogoutAPI logoutAPI;
    private static LoginAPI loginAPI;
    private static UserAPI userAPI;

    @BeforeClass
    public static void init() {
        tokenAPI = new TokenAPI(initClient(), GRAPH);
        logoutAPI = new LogoutAPI(initClient(), GRAPH);
        loginAPI = new LoginAPI(initClient(), GRAPH);
        userAPI = new UserAPI(initClient(), GRAPH);
    }

    @AfterClass
    public static void clear() {
        List<User> users = userAPI.list(-1);
        for (User user : users) {
            if (user.name().equals("admin")) {
                continue;
            }
            userAPI.delete(user.id());
        }
    }

    @Test
    public void testVerify() {
        User user1 = new User();
        user1.name("user1");
        user1.password("p1");
        User user = userAPI.create(user1);

        Login login = new Login();
        login.name("user1");
        login.password("p1");
        LoginResult result = loginAPI.login(login);
        Assert.assertNotNull(result);
        Assert.assertNotNull(result.token());

        // Client will set Authentication Header use Basic
        Assert.assertThrows(ServerException.class, () -> {
            tokenAPI.verifyToken();
        }, e -> {
            Assert.assertContains("Only HTTP Bearer authentication is supported",
                                  e.getMessage());
        });

        String token = result.token();
        RestClient client = Whitebox.getInternalState(tokenAPI, "client");
        client.setAuthContext("Bearer " + token);

        TokenPayload payload = tokenAPI.verifyToken();
        Assert.assertEquals("user1", payload.username());
        Assert.assertEquals(user.id(), payload.userId());

        client.setAuthContext("Bearer qweqwaasa");
        Assert.assertThrows(ServerException.class, () -> {
            tokenAPI.verifyToken();
        }, e -> {
            Assert.assertContains("Invalid token", e.getMessage());
        });

        RestClient client2 = Whitebox.getInternalState(logoutAPI, "client");
        Assert.assertThrows(ServerException.class, () -> {
            logoutAPI.logout();
        }, e -> {
            Assert.assertContains("Only HTTP Bearer authentication is supported",
                                  e.getMessage());
        });

        client2.setAuthContext("Bearer " + token);
        logoutAPI.logout();
    }
}