gluu
公開メンバ関数 | 静的公開メンバ関数 | 静的公開変数類 | 限定公開変数類 | 全メンバ一覧
org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest クラス
org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest の継承関係図
Inheritance graph
org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest 連携図
Collaboration graph

公開メンバ関数

void defaultAuthenticationMethod (final String redirectUris, final String sectorIdentifierUri) throws Exception
 
void defaultAuthenticationMethodFail (final String redirectUris, final String sectorIdentifierUri) throws Exception
 
void clientSecretBasicAuthenticationMethod (final String redirectUris, final String sectorIdentifierUri) throws Exception
 
void clientSecretBasicAuthenticationMethodFail (final String redirectUris, final String sectorIdentifierUri) throws Exception
 
void clientSecretPostAuthenticationMethod (final String redirectUris, final String sectorIdentifierUri) throws Exception
 
void clientSecretPostAuthenticationMethodFail1 (final String redirectUris, final String sectorIdentifierUri) throws Exception
 
void clientSecretPostAuthenticationMethodFail2 (final String redirectUris, final String sectorIdentifierUri) throws Exception
 
void clientSecretPostAuthenticationMethodFail3 (final String redirectUris, final String sectorIdentifierUri) throws Exception
 
void clientSecretJwtAuthenticationMethodHS256 (final String redirectUris, final String sectorIdentifierUri) throws Exception
 
void clientSecretJwtAuthenticationMethodHS256Fail (final String redirectUris, final String sectorIdentifierUri) throws Exception
 
void clientSecretJwtAuthenticationMethodHS384 (final String redirectUris, final String sectorIdentifierUri) throws Exception
 
void clientSecretJwtAuthenticationMethodHS384Fail (final String redirectUris, final String sectorIdentifierUri) throws Exception
 
void clientSecretJwtAuthenticationMethodHS512 (final String redirectUris, final String sectorIdentifierUri) throws Exception
 
void clientSecretJwtAuthenticationMethodHS512Fail (final String redirectUris, final String sectorIdentifierUri) throws Exception
 
void privateKeyJwtAuthenticationMethodRS256 (final String redirectUris, final String clientJwksUri, final String keyId, final String dnName, final String keyStoreFile, final String keyStoreSecret, final String sectorIdentifierUri) throws Exception
 
void privateKeyJwtAuthenticationMethodRS256Fail (final String redirectUris, final String clientJwksUri, final String dnName, final String keyStoreFile, final String keyStoreSecret, final String sectorIdentifierUri) throws Exception
 
void privateKeyJwtAuthenticationMethodRS384 (final String redirectUris, final String clientJwksUri, final String keyId, final String dnName, final String keyStoreFile, final String keyStoreSecret, final String sectorIdentifierUri) throws Exception
 
void privateKeyJwtAuthenticationMethodRS384Fail (final String redirectUris, final String clientJwksUri, final String dnName, final String keyStoreFile, final String keyStoreSecret, final String sectorIdentifierUri) throws Exception
 
void privateKeyJwtAuthenticationMethodRS512 (final String redirectUris, final String clientJwksUri, final String keyId, final String dnName, final String keyStoreFile, final String keyStoreSecret, final String sectorIdentifierUri) throws Exception
 
void privateKeyJwtAuthenticationMethodRS512Fail (final String redirectUris, final String clientJwksUri, final String dnName, final String keyStoreFile, final String keyStoreSecret, final String sectorIdentifierUri) throws Exception
 
void privateKeyJwtAuthenticationMethodES256 (final String redirectUris, final String clientJwksUri, final String keyId, final String dnName, final String keyStoreFile, final String keyStoreSecret, final String sectorIdentifierUri) throws Exception
 
void privateKeyJwtAuthenticationMethodES256Fail (final String redirectUris, final String clientJwksUri, final String dnName, final String keyStoreFile, final String keyStoreSecret, final String sectorIdentifierUri) throws Exception
 
void privateKeyJwtAuthenticationMethodES384 (final String redirectUris, final String clientJwksUri, final String keyId, final String dnName, final String keyStoreFile, final String keyStoreSecret, final String sectorIdentifierUri) throws Exception
 
void privateKeyJwtAuthenticationMethodES384Fail (final String redirectUris, final String clientJwksUri, final String dnName, final String keyStoreFile, final String keyStoreSecret, final String sectorIdentifierUri) throws Exception
 
void privateKeyJwtAuthenticationMethodES512 (final String redirectUris, final String clientJwksUri, final String keyId, final String dnName, final String keyStoreFile, final String keyStoreSecret, final String sectorIdentifierUri) throws Exception
 
void privateKeyJwtAuthenticationMethodES512Fail (final String redirectUris, final String clientJwksUri, final String dnName, final String keyStoreFile, final String keyStoreSecret, final String sectorIdentifierUri) throws Exception
 
void initTestSuite (ITestContext context) throws FileNotFoundException, IOException
 
WebDriver getDriver ()
 
void setDriver (WebDriver driver)
 
String getAuthorizationEndpoint ()
 
void setAuthorizationEndpoint (String authorizationEndpoint)
 
String getTokenEndpoint ()
 
void setTokenEndpoint (String tokenEndpoint)
 
String getUserInfoEndpoint ()
 
void setUserInfoEndpoint (String userInfoEndpoint)
 
String getClientInfoEndpoint ()
 
void setClientInfoEndpoint (String clientInfoEndpoint)
 
String getCheckSessionIFrame ()
 
void setCheckSessionIFrame (String checkSessionIFrame)
 
String getEndSessionEndpoint ()
 
void setEndSessionEndpoint (String endSessionEndpoint)
 
String getJwksUri ()
 
void setJwksUri (String jwksUri)
 
String getRegistrationEndpoint ()
 
void setRegistrationEndpoint (String registrationEndpoint)
 
String getIntrospectionEndpoint ()
 
void setIntrospectionEndpoint (String p_introspectionEndpoint)
 
Map< String, List< String > > getScopeToClaimsMapping ()
 
void setScopeToClaimsMapping (Map< String, List< String >> p_scopeToClaimsMapping)
 
String getIdGenEndpoint ()
 
void setIdGenEndpoint (String p_idGenEndpoint)
 
String getConfigurationEndpoint ()
 
void setConfigurationEndpoint (String configurationEndpoint)
 
void startSelenium ()
 
void stopSelenium ()
 
AuthorizationResponse authenticateResourceOwnerAndGrantAccess (String authorizeUrl, AuthorizationRequest authorizationRequest, String userId, String userSecret)
 
AuthorizationResponse authenticateResourceOwnerAndGrantAccess (String authorizeUrl, AuthorizationRequest authorizationRequest, String userId, String userSecret, boolean cleanupCookies)
 
AuthorizationResponse authenticateResourceOwnerAndGrantAccess (String authorizeUrl, AuthorizationRequest authorizationRequest, String userId, String userSecret, boolean cleanupCookies, boolean useNewDriver)
 
AuthorizationResponse authenticateResourceOwnerAndGrantAccess (String authorizeUrl, AuthorizationRequest authorizationRequest, String userId, String userSecret, boolean cleanupCookies, boolean useNewDriver, int authzSteps)
 
AuthorizationResponse authenticateResourceOwnerAndDenyAccess (String authorizeUrl, AuthorizationRequest authorizationRequest, String userId, String userSecret)
 
AuthorizationResponse authorizationRequestAndGrantAccess (String authorizeUrl, AuthorizationRequest authorizationRequest)
 
AuthorizationResponse authorizationRequestAndDenyAccess (String authorizeUrl, AuthorizationRequest authorizationRequest)
 
AuthorizationResponse authenticateResourceOwner (String authorizeUrl, AuthorizationRequest authorizationRequest, String userId, String userSecret, boolean cleanupCookies)
 
String waitForResourceOwnerAndGrantLoginForm (String authorizeUrl, AuthorizationRequest authorizationRequest, boolean cleanupCookies)
 
String waitForResourceOwnerAndGrantLoginForm (String authorizeUrl, AuthorizationRequest authorizationRequest)
 
void discovery (ITestContext context) throws Exception
 
void showTitle (String title)
 
void showTitle (String title)
 
void showEntity (String entity)
 
void showResponse (String title, Response response)
 

静的公開メンバ関数

static void showClient (BaseClient client)
 
static void showClient (BaseClient client, CookieStore cookieStore)
 
static void showClientUserAgent (BaseClient client)
 
static void assertErrorResponse (BaseResponseWithErrors p_response, IErrorType p_errorType)
 
static DefaultHttpClient createHttpClient ()
 
static DefaultHttpClient createHttpClient (HostnameVerifierType p_verifierType)
 
static ClientExecutor clientExecutor () throws NoSuchAlgorithmException, KeyManagementException, KeyStoreException, UnrecoverableKeyException
 
static ClientExecutor clientExecutor (boolean trustAll) throws NoSuchAlgorithmException, KeyManagementException, KeyStoreException, UnrecoverableKeyException
 
static HttpClient createHttpClientTrustAll () throws NoSuchAlgorithmException, KeyManagementException, KeyStoreException, UnrecoverableKeyException
 
static void showResponse (String title, Response response, Object entity)
 
static void fails (Throwable e)
 
static void output (String p_msg)
 
static Archive<?> createDeployment ()
 

静的公開変数類

static FileConfiguration testData
 

限定公開変数類

WebDriver driver
 
String authorizationEndpoint
 
String authorizationPageEndpoint
 
String gluuConfigurationEndpoint
 
String tokenEndpoint
 
String userInfoEndpoint
 
String clientInfoEndpoint
 
String checkSessionIFrame
 
String endSessionEndpoint
 
String jwksUri
 
String registrationEndpoint
 
String configurationEndpoint
 
String idGenEndpoint
 
String introspectionEndpoint
 
Map< String, List< String > > scopeToClaimsMapping
 

詳解

著者
Javier Rojas Blum
バージョン
November 29, 2017

関数詳解

◆ assertErrorResponse()

static void org.xdi.oxauth.BaseTest.assertErrorResponse ( BaseResponseWithErrors  p_response,
IErrorType  p_errorType 
)
inlinestaticinherited
787  {
788  assertEquals(p_response.getStatus(), 400, "Unexpected response code. Entity: " + p_response.getEntity());
789  assertNotNull(p_response.getEntity(), "The entity is null");
790  assertEquals(p_response.getErrorType(), p_errorType);
791  assertTrue(StringUtils.isNotBlank(p_response.getErrorDescription()));
792  }
T getErrorType()
Definition: BaseResponseWithErrors.java:48
String getEntity()
Definition: BaseResponse.java:85
int getStatus()
Definition: BaseResponse.java:49
String getErrorDescription()
Definition: BaseResponseWithErrors.java:40

◆ authenticateResourceOwner()

AuthorizationResponse org.xdi.oxauth.BaseTest.authenticateResourceOwner ( String  authorizeUrl,
AuthorizationRequest  authorizationRequest,
String  userId,
String  userSecret,
boolean  cleanupCookies 
)
inlineinherited

The authorization server authenticates the resource owner (via the user-agent) No authorization page.

556  {
557  String authorizationRequestUrl = authorizeUrl + "?" + authorizationRequest.getQueryString();
558 
559  AuthorizeClient authorizeClient = new AuthorizeClient(authorizeUrl);
560  authorizeClient.setRequest(authorizationRequest);
561 
562  System.out.println("authenticateResourceOwner: authorizationRequestUrl:" + authorizationRequestUrl);
563  startSelenium();
564  if (cleanupCookies) {
565  System.out.println("authenticateResourceOwner: Cleaning cookies");
567  }
568 // try {
569  driver.navigate().to(authorizationRequestUrl);
570 // } catch (WebDriverException ex) {
571 // if (ex.getCause() instanceof ScriptException) {
572 // System.out.println("authenticateResourceOwner: Script error: " + ex.getMessage());
573 // } else {
574 // throw ex;
575 // }
576 // }
577 
578  if (userSecret != null) {
579  if (userId != null) {
580  WebElement usernameElement = driver.findElement(By.name(loginFormUsername));
581  usernameElement.sendKeys(userId);
582  }
583 
584  WebElement passwordElement = driver.findElement(By.name(loginFormPassword));
585  passwordElement.sendKeys(userSecret);
586 
587  WebElement loginButton = driver.findElement(By.name(loginFormLoginButton));
588 
589  loginButton.click();
590  }
591 
592  String authorizationResponseStr = driver.getCurrentUrl();
593 
594  Cookie sessionStateCookie = driver.manage().getCookieNamed("session_state");
595  String sessionState = null;
596  if (sessionStateCookie != null) {
597  sessionState = sessionStateCookie.getValue();
598  }
599  System.out.println("authenticateResourceOwner: sessionState:" + sessionState);
600 
601  stopSelenium();
602 
603  AuthorizationResponse authorizationResponse = new AuthorizationResponse(authorizationResponseStr);
604  if (authorizationRequest.getRedirectUri() != null && authorizationRequest.getRedirectUri().equals(authorizationResponseStr)) {
605  authorizationResponse.setResponseMode(ResponseMode.FORM_POST);
606  }
607  authorizeClient.setResponse(authorizationResponse);
608  showClientUserAgent(authorizeClient);
609 
610  return authorizationResponse;
611  }
FORM_POST
Definition: ResponseMode.java:33
String loginFormUsername
Definition: BaseTest.java:88
String loginFormPassword
Definition: BaseTest.java:89
void deleteAllCookies()
Definition: BaseTest.java:661
void stopSelenium()
Definition: BaseTest.java:243
Definition: AuthorizeClient.java:29
Definition: ResponseMode.java:16
void startSelenium()
Definition: BaseTest.java:230
String loginFormLoginButton
Definition: BaseTest.java:90
String getRedirectUri()
Definition: AuthorizationRequest.java:184
void setResponseMode(ResponseMode responseMode)
Definition: AuthorizationResponse.java:228
void setRequest(T request)
Definition: BaseClient.java:68
void setResponse(V response)
Definition: BaseClient.java:76
WebDriver driver
Definition: BaseTest.java:70
Definition: AuthorizationResponse.java:32
String getQueryString()
Definition: AuthorizationRequest.java:486
static void showClientUserAgent(BaseClient client)
Definition: BaseTest.java:783

◆ authenticateResourceOwnerAndDenyAccess()

AuthorizationResponse org.xdi.oxauth.BaseTest.authenticateResourceOwnerAndDenyAccess ( String  authorizeUrl,
AuthorizationRequest  authorizationRequest,
String  userId,
String  userSecret 
)
inlineinherited
408  {
409  String authorizationRequestUrl = authorizeUrl + "?" + authorizationRequest.getQueryString();
410 
411  AuthorizeClient authorizeClient = new AuthorizeClient(authorizeUrl);
412  authorizeClient.setRequest(authorizationRequest);
413 
414  System.out.println("authenticateResourceOwnerAndDenyAccess: authorizationRequestUrl:" + authorizationRequestUrl);
415  startSelenium();
416  driver.navigate().to(authorizationRequestUrl);
417 
418  WebElement usernameElement = driver.findElement(By.name(loginFormUsername));
419  WebElement passwordElement = driver.findElement(By.name(loginFormPassword));
420  WebElement loginButton = driver.findElement(By.name(loginFormLoginButton));
421 
422  if (userId != null) {
423  usernameElement.sendKeys(userId);
424  }
425  passwordElement.sendKeys(userSecret);
426  loginButton.click();
427 
428  String authorizationResponseStr = driver.getCurrentUrl();
429 
430  WebElement doNotAllowButton = driver.findElement(By.id(authorizeFormDoNotAllowButton));
431 
432  final String previousURL = driver.getCurrentUrl();
433  doNotAllowButton.click();
434  WebDriverWait wait = new WebDriverWait(driver, 10);
435  wait.until(new ExpectedCondition<Boolean>() {
436  public Boolean apply(WebDriver d) {
437  return (d.getCurrentUrl() != previousURL);
438  }
439  });
440 
441  authorizationResponseStr = driver.getCurrentUrl();
442 
443  Cookie sessionIdCookie = driver.manage().getCookieNamed("session_id");
444  String sessionId = null;
445  if (sessionIdCookie != null) {
446  sessionId = sessionIdCookie.getValue();
447  }
448  System.out.println("authenticateResourceOwnerAndDenyAccess: sessionId:" + sessionId);
449 
450  stopSelenium();
451 
452  AuthorizationResponse authorizationResponse = new AuthorizationResponse(authorizationResponseStr);
453  if (authorizationRequest.getRedirectUri() != null && authorizationRequest.getRedirectUri().equals(authorizationResponseStr)) {
454  authorizationResponse.setResponseMode(ResponseMode.FORM_POST);
455  }
456  authorizationResponse.setSessionId(sessionId);
457  authorizeClient.setResponse(authorizationResponse);
458  showClientUserAgent(authorizeClient);
459 
460  return authorizationResponse;
461  }
FORM_POST
Definition: ResponseMode.java:33
String loginFormUsername
Definition: BaseTest.java:88
String loginFormPassword
Definition: BaseTest.java:89
void stopSelenium()
Definition: BaseTest.java:243
String authorizeFormDoNotAllowButton
Definition: BaseTest.java:92
void setSessionId(String p_sessionId)
Definition: AuthorizationResponse.java:212
Definition: AuthorizeClient.java:29
Definition: ResponseMode.java:16
void startSelenium()
Definition: BaseTest.java:230
String loginFormLoginButton
Definition: BaseTest.java:90
String getRedirectUri()
Definition: AuthorizationRequest.java:184
void setResponseMode(ResponseMode responseMode)
Definition: AuthorizationResponse.java:228
void setRequest(T request)
Definition: BaseClient.java:68
void setResponse(V response)
Definition: BaseClient.java:76
WebDriver driver
Definition: BaseTest.java:70
Definition: AuthorizationResponse.java:32
String getQueryString()
Definition: AuthorizationRequest.java:486
static void showClientUserAgent(BaseClient client)
Definition: BaseTest.java:783

◆ authenticateResourceOwnerAndGrantAccess() [1/4]

AuthorizationResponse org.xdi.oxauth.BaseTest.authenticateResourceOwnerAndGrantAccess ( String  authorizeUrl,
AuthorizationRequest  authorizationRequest,
String  userId,
String  userSecret 
)
inlineinherited

The authorization server authenticates the resource owner (via the user-agent) and establishes whether the resource owner grants or denies the client's access request.

253  {
254  return authenticateResourceOwnerAndGrantAccess(authorizeUrl, authorizationRequest, userId, userSecret, true);
255  }
AuthorizationResponse authenticateResourceOwnerAndGrantAccess(String authorizeUrl, AuthorizationRequest authorizationRequest, String userId, String userSecret)
Definition: BaseTest.java:252

◆ authenticateResourceOwnerAndGrantAccess() [2/4]

AuthorizationResponse org.xdi.oxauth.BaseTest.authenticateResourceOwnerAndGrantAccess ( String  authorizeUrl,
AuthorizationRequest  authorizationRequest,
String  userId,
String  userSecret,
boolean  cleanupCookies 
)
inlineinherited

The authorization server authenticates the resource owner (via the user-agent) and establishes whether the resource owner grants or denies the client's access request.

262  {
263  return authenticateResourceOwnerAndGrantAccess(authorizeUrl, authorizationRequest, userId, userSecret, cleanupCookies, false);
264  }
AuthorizationResponse authenticateResourceOwnerAndGrantAccess(String authorizeUrl, AuthorizationRequest authorizationRequest, String userId, String userSecret)
Definition: BaseTest.java:252

◆ authenticateResourceOwnerAndGrantAccess() [3/4]

AuthorizationResponse org.xdi.oxauth.BaseTest.authenticateResourceOwnerAndGrantAccess ( String  authorizeUrl,
AuthorizationRequest  authorizationRequest,
String  userId,
String  userSecret,
boolean  cleanupCookies,
boolean  useNewDriver 
)
inlineinherited

The authorization server authenticates the resource owner (via the user-agent) and establishes whether the resource owner grants or denies the client's access request.

272  {
273  return authenticateResourceOwnerAndGrantAccess(authorizeUrl, authorizationRequest, userId, userSecret, cleanupCookies, useNewDriver, 1);
274  }
AuthorizationResponse authenticateResourceOwnerAndGrantAccess(String authorizeUrl, AuthorizationRequest authorizationRequest, String userId, String userSecret)
Definition: BaseTest.java:252

◆ authenticateResourceOwnerAndGrantAccess() [4/4]

AuthorizationResponse org.xdi.oxauth.BaseTest.authenticateResourceOwnerAndGrantAccess ( String  authorizeUrl,
AuthorizationRequest  authorizationRequest,
String  userId,
String  userSecret,
boolean  cleanupCookies,
boolean  useNewDriver,
int  authzSteps 
)
inlineinherited

The authorization server authenticates the resource owner (via the user-agent) and establishes whether the resource owner grants or denies the client's access request.

282  {
283  WebDriver currentDriver = initWebDriver(useNewDriver, cleanupCookies);
284 
285  AuthorizeClient authorizeClient = processAuthentication(currentDriver, authorizeUrl, authorizationRequest,
286  userId, userSecret);
287 
288  int remainAuthzSteps = authzSteps;
289 
290  String authorizationResponseStr = null;
291  do {
292  authorizationResponseStr = acceptAuthorization(currentDriver);
293  remainAuthzSteps--;
294  } while (remainAuthzSteps >= 1);
295 
296  AuthorizationResponse authorizationResponse = buildAuthorizationResponse(authorizationRequest, useNewDriver,
297  currentDriver, authorizeClient, authorizationResponseStr);
298 
299  stopWebDriver(useNewDriver, currentDriver);
300 
301  return authorizationResponse;
302  }
AuthorizationResponse buildAuthorizationResponse(AuthorizationRequest authorizationRequest, boolean useNewDriver, WebDriver currentDriver, AuthorizeClient authorizeClient, String authorizationResponseStr)
Definition: BaseTest.java:387
String acceptAuthorization(WebDriver currentDriver)
Definition: BaseTest.java:358
AuthorizeClient processAuthentication(WebDriver currentDriver, String authorizeUrl, AuthorizationRequest authorizationRequest, String userId, String userSecret)
Definition: BaseTest.java:330
Definition: AuthorizeClient.java:29
WebDriver initWebDriver(boolean useNewDriver, boolean cleanupCookies)
Definition: BaseTest.java:304
Definition: AuthorizationResponse.java:32
void stopWebDriver(boolean useNewDriver, WebDriver currentDriver)
Definition: BaseTest.java:321

◆ authorizationRequestAndDenyAccess()

AuthorizationResponse org.xdi.oxauth.BaseTest.authorizationRequestAndDenyAccess ( String  authorizeUrl,
AuthorizationRequest  authorizationRequest 
)
inlineinherited
509  {
510  String authorizationRequestUrl = authorizeUrl + "?" + authorizationRequest.getQueryString();
511 
512  AuthorizeClient authorizeClient = new AuthorizeClient(authorizeUrl);
513  authorizeClient.setRequest(authorizationRequest);
514 
515  System.out.println("authorizationRequestAndDenyAccess: authorizationRequestUrl:" + authorizationRequestUrl);
516  startSelenium();
517  driver.navigate().to(authorizationRequestUrl);
518 
519  WebElement doNotAllowButton = driver.findElement(By.id(authorizeFormDoNotAllowButton));
520 
521  final String previousURL = driver.getCurrentUrl();
522  doNotAllowButton.click();
523  WebDriverWait wait = new WebDriverWait(driver, 10);
524  wait.until(new ExpectedCondition<Boolean>() {
525  public Boolean apply(WebDriver d) {
526  return (d.getCurrentUrl() != previousURL);
527  }
528  });
529 
530  String authorizationResponseStr = driver.getCurrentUrl();
531 
532  Cookie sessionStateCookie = driver.manage().getCookieNamed("session_state");
533  String sessionState = null;
534  if (sessionStateCookie != null) {
535  sessionState = sessionStateCookie.getValue();
536  }
537  System.out.println("authorizationRequestAndDenyAccess: sessionState:" + sessionState);
538 
539  stopSelenium();
540 
541  AuthorizationResponse authorizationResponse = new AuthorizationResponse(authorizationResponseStr);
542  if (authorizationRequest.getRedirectUri() != null && authorizationRequest.getRedirectUri().equals(authorizationResponseStr)) {
543  authorizationResponse.setResponseMode(ResponseMode.FORM_POST);
544  }
545  authorizeClient.setResponse(authorizationResponse);
546  showClientUserAgent(authorizeClient);
547 
548  return authorizationResponse;
549  }
FORM_POST
Definition: ResponseMode.java:33
void stopSelenium()
Definition: BaseTest.java:243
String authorizeFormDoNotAllowButton
Definition: BaseTest.java:92
Definition: AuthorizeClient.java:29
Definition: ResponseMode.java:16
void startSelenium()
Definition: BaseTest.java:230
String getRedirectUri()
Definition: AuthorizationRequest.java:184
void setResponseMode(ResponseMode responseMode)
Definition: AuthorizationResponse.java:228
void setRequest(T request)
Definition: BaseClient.java:68
void setResponse(V response)
Definition: BaseClient.java:76
WebDriver driver
Definition: BaseTest.java:70
Definition: AuthorizationResponse.java:32
String getQueryString()
Definition: AuthorizationRequest.java:486
static void showClientUserAgent(BaseClient client)
Definition: BaseTest.java:783

◆ authorizationRequestAndGrantAccess()

AuthorizationResponse org.xdi.oxauth.BaseTest.authorizationRequestAndGrantAccess ( String  authorizeUrl,
AuthorizationRequest  authorizationRequest 
)
inlineinherited
464  {
465  String authorizationRequestUrl = authorizeUrl + "?" + authorizationRequest.getQueryString();
466 
467  AuthorizeClient authorizeClient = new AuthorizeClient(authorizeUrl);
468  authorizeClient.setRequest(authorizationRequest);
469 
470  System.out.println("authorizationRequestAndGrantAccess: authorizationRequestUrl:" + authorizationRequestUrl);
471  startSelenium();
472  driver.navigate().to(authorizationRequestUrl);
473 
474  String authorizationResponseStr = driver.getCurrentUrl();
475 
476  WebElement allowButton = driver.findElement(By.id(authorizeFormAllowButton));
477 
478  final String previousURL = driver.getCurrentUrl();
479  allowButton.click();
480  WebDriverWait wait = new WebDriverWait(driver, 10);
481  wait.until(new ExpectedCondition<Boolean>() {
482  public Boolean apply(WebDriver d) {
483  return (d.getCurrentUrl() != previousURL);
484  }
485  });
486 
487  authorizationResponseStr = driver.getCurrentUrl();
488 
489  Cookie sessionStateCookie = driver.manage().getCookieNamed("session_state");
490  String sessionState = null;
491  if (sessionStateCookie != null) {
492  sessionState = sessionStateCookie.getValue();
493  }
494  System.out.println("authorizationRequestAndGrantAccess: sessionState:" + sessionState);
495 
496  stopSelenium();
497 
498  AuthorizationResponse authorizationResponse = new AuthorizationResponse(authorizationResponseStr);
499  if (authorizationRequest.getRedirectUri() != null && authorizationRequest.getRedirectUri().equals(authorizationResponseStr)) {
500  authorizationResponse.setResponseMode(ResponseMode.FORM_POST);
501  }
502  authorizeClient.setResponse(authorizationResponse);
503  showClientUserAgent(authorizeClient);
504 
505  return authorizationResponse;
506  }
FORM_POST
Definition: ResponseMode.java:33
void stopSelenium()
Definition: BaseTest.java:243
Definition: AuthorizeClient.java:29
Definition: ResponseMode.java:16
void startSelenium()
Definition: BaseTest.java:230
String getRedirectUri()
Definition: AuthorizationRequest.java:184
void setResponseMode(ResponseMode responseMode)
Definition: AuthorizationResponse.java:228
void setRequest(T request)
Definition: BaseClient.java:68
void setResponse(V response)
Definition: BaseClient.java:76
WebDriver driver
Definition: BaseTest.java:70
Definition: AuthorizationResponse.java:32
String getQueryString()
Definition: AuthorizationRequest.java:486
static void showClientUserAgent(BaseClient client)
Definition: BaseTest.java:783
String authorizeFormAllowButton
Definition: BaseTest.java:91

◆ clientExecutor() [1/2]

static ClientExecutor org.xdi.oxauth.BaseTest.clientExecutor ( ) throws NoSuchAlgorithmException, KeyManagementException, KeyStoreException, UnrecoverableKeyException
inlinestaticinherited
822  {
823  return clientExecutor(false);
824  }
static ClientExecutor clientExecutor()
Definition: BaseTest.java:822

◆ clientExecutor() [2/2]

static ClientExecutor org.xdi.oxauth.BaseTest.clientExecutor ( boolean  trustAll) throws NoSuchAlgorithmException, KeyManagementException, KeyStoreException, UnrecoverableKeyException
inlinestaticinherited
826  {
827  if (trustAll) {
828  return new ApacheHttpClient4Executor(createHttpClientTrustAll());
829  }
830  return ClientRequest.getDefaultExecutor();
831  }
static HttpClient createHttpClientTrustAll()
Definition: BaseTest.java:833

◆ clientSecretBasicAuthenticationMethod()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.clientSecretBasicAuthenticationMethod ( final String  redirectUris,
final String  sectorIdentifierUri 
) throws Exception
inline
141  {
142  showTitle("clientSecretBasicAuthenticationMethod");
143 
144  List<String> scopes = Arrays.asList("openid", "profile", "address", "email", "clientinfo");
145  List<GrantType> grantTypes = Arrays.asList(
147  );
148 
149  // 1. Register client
150  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
151  StringUtils.spaceSeparatedToList(redirectUris));
152  registerRequest.setScope(scopes);
153  registerRequest.setGrantTypes(grantTypes);
155  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
156 
157  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
158  registerClient.setRequest(registerRequest);
159  RegisterResponse registerResponse = registerClient.exec();
160 
161  showClient(registerClient);
162  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
163  assertNotNull(registerResponse.getClientId());
164  assertNotNull(registerResponse.getClientSecret());
165  assertNotNull(registerResponse.getRegistrationAccessToken());
166  assertNotNull(registerResponse.getClientIdIssuedAt());
167  assertNotNull(registerResponse.getClientSecretExpiresAt());
168 
169  String clientId = registerResponse.getClientId();
170  String clientSecret = registerResponse.getClientSecret();
171 
172  // 2. Request Client Credentials Grant
174  tokenRequest.setScope("clientinfo");
175  tokenRequest.setAuthUsername(clientId);
176  tokenRequest.setAuthPassword(clientSecret);
178 
179  TokenClient tokenClient = new TokenClient(tokenEndpoint);
180  tokenClient.setRequest(tokenRequest);
181  TokenResponse tokenResponse = tokenClient.exec();
182 
183  showClient(tokenClient);
184  assertEquals(tokenResponse.getStatus(), 200, "Unexpected response code: " + tokenResponse.getStatus());
185  assertNotNull(tokenResponse.getEntity());
186  assertNotNull(tokenResponse.getAccessToken());
187  assertNotNull(tokenResponse.getTokenType());
188  assertNotNull(tokenResponse.getScope());
189  assertNull(tokenResponse.getRefreshToken());
190 
191  String accessToken = tokenResponse.getAccessToken();
192 
193  // 3. Request client info
194  ClientInfoClient clientInfoClient = new ClientInfoClient(clientInfoEndpoint);
195  ClientInfoResponse clientInfoResponse = clientInfoClient.execClientInfo(accessToken);
196 
197  showClient(clientInfoClient);
198  assertEquals(clientInfoResponse.getStatus(), 200, "Unexpected response code: " + clientInfoResponse.getStatus());
199  assertNotNull(clientInfoResponse.getClaim("displayName"), "Unexpected result: displayName not found");
200  assertNotNull(clientInfoResponse.getClaim("inum"), "Unexpected result: inum not found");
201 
202  // 4. Request user info should fail
203  UserInfoClient userInfoClient = new UserInfoClient(userInfoEndpoint);
204  userInfoClient.setSharedKey(clientSecret);
205  UserInfoResponse userInfoResponse = userInfoClient.execUserInfo(accessToken);
206 
207  showClient(userInfoClient);
208  assertEquals(userInfoResponse.getStatus(), 403);
209  assertEquals(userInfoResponse.getErrorType(), UserInfoErrorResponseType.INSUFFICIENT_SCOPE);
210  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
CLIENT_SECRET_BASIC
Definition: AuthenticationMethod.java:18
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
String clientInfoEndpoint
Definition: BaseTest.java:77
String getScope()
Definition: TokenResponse.java:163
Definition: RegisterResponse.java:34
void setGrantTypes(List< GrantType > grantTypes)
Definition: RegisterRequest.java:290
TokenType getTokenType()
Definition: TokenResponse.java:107
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
UserInfoErrorResponseType getErrorType()
Definition: UserInfoResponse.java:51
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
Definition: UserInfoErrorResponseType.java:14
INSUFFICIENT_SCOPE
Definition: UserInfoErrorResponseType.java:29
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
void setAuthPassword(String authPassword)
Definition: BaseRequest.java:70
ClientInfoResponse execClientInfo(String accessToken)
Definition: ClientInfoClient.java:61
String getAccessToken()
Definition: TokenResponse.java:89
Definition: ClientInfoClient.java:31
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: ClientInfoResponse.java:20
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
Definition: RegisterRequest.java:37
Definition: UserInfoClient.java:34
String userInfoEndpoint
Definition: BaseTest.java:76
int getStatus()
Definition: BaseResponse.java:49
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
Definition: UserInfoResponse.java:20
String getRefreshToken()
Definition: TokenResponse.java:144
List< String > getClaim(String claimName)
Definition: ClientInfoResponse.java:109
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ clientSecretBasicAuthenticationMethodFail()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.clientSecretBasicAuthenticationMethodFail ( final String  redirectUris,
final String  sectorIdentifierUri 
) throws Exception
inline
214  {
215  showTitle("clientSecretBasicAuthenticationMethodFail");
216 
217  List<String> scopes = Arrays.asList("clientinfo");
218 
219  // 1. Register client
220  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
221  StringUtils.spaceSeparatedToList(redirectUris));
222  registerRequest.setScope(scopes);
224  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
225 
226  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
227  registerClient.setRequest(registerRequest);
228  RegisterResponse registerResponse = registerClient.exec();
229 
230  showClient(registerClient);
231  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
232  assertNotNull(registerResponse.getClientId());
233  assertNotNull(registerResponse.getClientSecret());
234  assertNotNull(registerResponse.getRegistrationAccessToken());
235  assertNotNull(registerResponse.getClientIdIssuedAt());
236  assertNotNull(registerResponse.getClientSecretExpiresAt());
237 
238  String clientId = registerResponse.getClientId();
239 
240  // 2. Request Client Credentials Grant
242  tokenRequest.setScope("clientinfo");
243  tokenRequest.setAuthUsername(clientId);
244  tokenRequest.setAuthPassword("INVALID_CLIENT_SECRET");
246 
247  TokenClient tokenClient = new TokenClient(tokenEndpoint);
248  tokenClient.setRequest(tokenRequest);
249  TokenResponse tokenResponse = tokenClient.exec();
250 
251  showClient(tokenClient);
252  assertEquals(tokenResponse.getStatus(), 401, "Unexpected response code: " + tokenResponse.getStatus());
253  assertNotNull(tokenResponse.getErrorType());
254  assertEquals(tokenResponse.getErrorType(), TokenErrorResponseType.INVALID_CLIENT);
255  assertNotNull(tokenResponse.getErrorDescription());
256  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
CLIENT_SECRET_BASIC
Definition: AuthenticationMethod.java:18
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
Definition: RegisterResponse.java:34
T getErrorType()
Definition: BaseResponseWithErrors.java:48
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
void setAuthPassword(String authPassword)
Definition: BaseRequest.java:70
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: TokenErrorResponseType.java:14
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
Definition: RegisterRequest.java:37
INVALID_CLIENT
Definition: TokenErrorResponseType.java:32
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getErrorDescription()
Definition: BaseResponseWithErrors.java:40
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ clientSecretJwtAuthenticationMethodHS256()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.clientSecretJwtAuthenticationMethodHS256 ( final String  redirectUris,
final String  sectorIdentifierUri 
) throws Exception
inline
462  {
463  showTitle("clientSecretJwtAuthenticationMethodHS256");
464 
465  List<String> scopes = Arrays.asList("clientinfo");
466  List<GrantType> grantTypes = Arrays.asList(
468  );
469 
470  // 1. Register client
471  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
472  StringUtils.spaceSeparatedToList(redirectUris));
473  registerRequest.setScope(scopes);
474  registerRequest.setGrantTypes(grantTypes);
476  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
477 
478  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
479  registerClient.setRequest(registerRequest);
480  RegisterResponse registerResponse = registerClient.exec();
481 
482  showClient(registerClient);
483  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
484  assertNotNull(registerResponse.getClientId());
485  assertNotNull(registerResponse.getClientSecret());
486  assertNotNull(registerResponse.getRegistrationAccessToken());
487  assertNotNull(registerResponse.getClientIdIssuedAt());
488  assertNotNull(registerResponse.getClientSecretExpiresAt());
489 
490  String clientId = registerResponse.getClientId();
491  String clientSecret = registerResponse.getClientSecret();
492 
493  // 2. Request Client Credentials Grant
494  OxAuthCryptoProvider cryptoProvider = new OxAuthCryptoProvider();
495 
497  tokenRequest.setScope("clientinfo");
498  tokenRequest.setAuthUsername(clientId);
499  tokenRequest.setAuthPassword(clientSecret);
501  tokenRequest.setAlgorithm(SignatureAlgorithm.HS256);
502  tokenRequest.setCryptoProvider(cryptoProvider);
503  tokenRequest.setAudience(tokenEndpoint);
504 
505  TokenClient tokenClient = new TokenClient(tokenEndpoint);
506  tokenClient.setRequest(tokenRequest);
507  TokenResponse tokenResponse = tokenClient.exec();
508 
509  showClient(tokenClient);
510  assertEquals(tokenResponse.getStatus(), 200, "Unexpected response code: " + tokenResponse.getStatus());
511  assertNotNull(tokenResponse.getEntity());
512  assertNotNull(tokenResponse.getAccessToken());
513  assertNotNull(tokenResponse.getTokenType());
514  assertNotNull(tokenResponse.getScope());
515  assertNull(tokenResponse.getRefreshToken());
516 
517  String accessToken = tokenResponse.getAccessToken();
518 
519  // 3. Request client info
520  ClientInfoClient clientInfoClient = new ClientInfoClient(clientInfoEndpoint);
521  ClientInfoResponse clientInfoResponse = clientInfoClient.execClientInfo(accessToken);
522 
523  showClient(clientInfoClient);
524  assertEquals(clientInfoResponse.getStatus(), 200, "Unexpected response code: " + clientInfoResponse.getStatus());
525  assertNotNull(clientInfoResponse.getClaim("displayName"), "Unexpected result: displayName not found");
526  assertNotNull(clientInfoResponse.getClaim("inum"), "Unexpected result: inum not found");
527  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
void setCryptoProvider(AbstractCryptoProvider cryptoProvider)
Definition: TokenRequest.java:295
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
String clientInfoEndpoint
Definition: BaseTest.java:77
String getScope()
Definition: TokenResponse.java:163
Definition: RegisterResponse.java:34
void setAudience(String audience)
Definition: TokenRequest.java:273
void setGrantTypes(List< GrantType > grantTypes)
Definition: RegisterRequest.java:290
TokenType getTokenType()
Definition: TokenResponse.java:107
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
void setAuthPassword(String authPassword)
Definition: BaseRequest.java:70
HS256
Definition: SignatureAlgorithm.java:23
ClientInfoResponse execClientInfo(String accessToken)
Definition: ClientInfoClient.java:61
String getAccessToken()
Definition: TokenResponse.java:89
Definition: ClientInfoClient.java:31
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: ClientInfoResponse.java:20
CLIENT_SECRET_JWT
Definition: AuthenticationMethod.java:31
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
Definition: RegisterRequest.java:37
void setAlgorithm(SignatureAlgorithm algorithm)
Definition: TokenRequest.java:277
int getStatus()
Definition: BaseResponse.java:49
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getRefreshToken()
Definition: TokenResponse.java:144
Definition: OxAuthCryptoProvider.java:62
List< String > getClaim(String claimName)
Definition: ClientInfoResponse.java:109
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ clientSecretJwtAuthenticationMethodHS256Fail()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.clientSecretJwtAuthenticationMethodHS256Fail ( final String  redirectUris,
final String  sectorIdentifierUri 
) throws Exception
inline
531  {
532  showTitle("clientSecretJwtAuthenticationMethodHS256Fail");
533 
534  List<String> scopes = Arrays.asList("clientinfo");
535 
536  // 1. Register client
537  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
538  StringUtils.spaceSeparatedToList(redirectUris));
539  registerRequest.setScope(scopes);
541  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
542 
543  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
544  registerClient.setRequest(registerRequest);
545  RegisterResponse registerResponse = registerClient.exec();
546 
547  showClient(registerClient);
548  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
549  assertNotNull(registerResponse.getClientId());
550  assertNotNull(registerResponse.getClientSecret());
551  assertNotNull(registerResponse.getRegistrationAccessToken());
552  assertNotNull(registerResponse.getClientIdIssuedAt());
553  assertNotNull(registerResponse.getClientSecretExpiresAt());
554 
555  String clientId = registerResponse.getClientId();
556 
557  // 2. Request Client Credentials Grant
558  OxAuthCryptoProvider cryptoProvider = new OxAuthCryptoProvider();
559 
561  tokenRequest.setScope("clientinfo");
562  tokenRequest.setAuthUsername(clientId);
563  tokenRequest.setAuthPassword("INVALID_CLIENT_SECRET");
565  tokenRequest.setAlgorithm(SignatureAlgorithm.HS256);
566  tokenRequest.setCryptoProvider(cryptoProvider);
567  tokenRequest.setAudience(tokenEndpoint);
568 
569  TokenClient tokenClient = new TokenClient(tokenEndpoint);
570  tokenClient.setRequest(tokenRequest);
571  TokenResponse tokenResponse = tokenClient.exec();
572 
573  showClient(tokenClient);
574  assertEquals(tokenResponse.getStatus(), 401, "Unexpected response code: " + tokenResponse.getStatus());
575  assertNotNull(tokenResponse.getErrorType());
576  assertEquals(tokenResponse.getErrorType(), TokenErrorResponseType.INVALID_CLIENT);
577  assertNotNull(tokenResponse.getErrorDescription());
578  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
void setCryptoProvider(AbstractCryptoProvider cryptoProvider)
Definition: TokenRequest.java:295
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
Definition: RegisterResponse.java:34
void setAudience(String audience)
Definition: TokenRequest.java:273
T getErrorType()
Definition: BaseResponseWithErrors.java:48
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
void setAuthPassword(String authPassword)
Definition: BaseRequest.java:70
HS256
Definition: SignatureAlgorithm.java:23
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: TokenErrorResponseType.java:14
CLIENT_SECRET_JWT
Definition: AuthenticationMethod.java:31
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
Definition: RegisterRequest.java:37
void setAlgorithm(SignatureAlgorithm algorithm)
Definition: TokenRequest.java:277
INVALID_CLIENT
Definition: TokenErrorResponseType.java:32
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getErrorDescription()
Definition: BaseResponseWithErrors.java:40
Definition: OxAuthCryptoProvider.java:62
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ clientSecretJwtAuthenticationMethodHS384()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.clientSecretJwtAuthenticationMethodHS384 ( final String  redirectUris,
final String  sectorIdentifierUri 
) throws Exception
inline
582  {
583  showTitle("clientSecretJwtAuthenticationMethodHS384");
584 
585  List<String> scopes = Arrays.asList("clientinfo");
586  List<GrantType> grantTypes = Arrays.asList(
588  );
589 
590  // 1. Register client
591  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
592  StringUtils.spaceSeparatedToList(redirectUris));
593  registerRequest.setScope(scopes);
594  registerRequest.setGrantTypes(grantTypes);
596  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
597 
598  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
599  registerClient.setRequest(registerRequest);
600  RegisterResponse registerResponse = registerClient.exec();
601 
602  showClient(registerClient);
603  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
604  assertNotNull(registerResponse.getClientId());
605  assertNotNull(registerResponse.getClientSecret());
606  assertNotNull(registerResponse.getRegistrationAccessToken());
607  assertNotNull(registerResponse.getClientIdIssuedAt());
608  assertNotNull(registerResponse.getClientSecretExpiresAt());
609 
610  String clientId = registerResponse.getClientId();
611  String clientSecret = registerResponse.getClientSecret();
612 
613  // 2. Request Client Credentials Grant
614  OxAuthCryptoProvider cryptoProvider = new OxAuthCryptoProvider();
615 
617  tokenRequest.setScope("clientinfo");
618  tokenRequest.setAuthUsername(clientId);
619  tokenRequest.setAuthPassword(clientSecret);
621  tokenRequest.setAlgorithm(SignatureAlgorithm.HS384);
622  tokenRequest.setCryptoProvider(cryptoProvider);
623  tokenRequest.setAudience(tokenEndpoint);
624 
625  TokenClient tokenClient = new TokenClient(tokenEndpoint);
626  tokenClient.setRequest(tokenRequest);
627  TokenResponse tokenResponse = tokenClient.exec();
628 
629  showClient(tokenClient);
630  assertEquals(tokenResponse.getStatus(), 200, "Unexpected response code: " + tokenResponse.getStatus());
631  assertNotNull(tokenResponse.getEntity());
632  assertNotNull(tokenResponse.getAccessToken());
633  assertNotNull(tokenResponse.getTokenType());
634  assertNotNull(tokenResponse.getScope());
635  assertNull(tokenResponse.getRefreshToken());
636 
637  String accessToken = tokenResponse.getAccessToken();
638 
639  // 3. Request client info
640  ClientInfoClient clientInfoClient = new ClientInfoClient(clientInfoEndpoint);
641  ClientInfoResponse clientInfoResponse = clientInfoClient.execClientInfo(accessToken);
642 
643  showClient(clientInfoClient);
644  assertEquals(clientInfoResponse.getStatus(), 200, "Unexpected response code: " + clientInfoResponse.getStatus());
645  assertNotNull(clientInfoResponse.getClaim("displayName"), "Unexpected result: displayName not found");
646  assertNotNull(clientInfoResponse.getClaim("inum"), "Unexpected result: inum not found");
647  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
void setCryptoProvider(AbstractCryptoProvider cryptoProvider)
Definition: TokenRequest.java:295
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
String clientInfoEndpoint
Definition: BaseTest.java:77
String getScope()
Definition: TokenResponse.java:163
Definition: RegisterResponse.java:34
void setAudience(String audience)
Definition: TokenRequest.java:273
void setGrantTypes(List< GrantType > grantTypes)
Definition: RegisterRequest.java:290
TokenType getTokenType()
Definition: TokenResponse.java:107
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
void setAuthPassword(String authPassword)
Definition: BaseRequest.java:70
ClientInfoResponse execClientInfo(String accessToken)
Definition: ClientInfoClient.java:61
String getAccessToken()
Definition: TokenResponse.java:89
Definition: ClientInfoClient.java:31
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: ClientInfoResponse.java:20
CLIENT_SECRET_JWT
Definition: AuthenticationMethod.java:31
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
Definition: RegisterRequest.java:37
void setAlgorithm(SignatureAlgorithm algorithm)
Definition: TokenRequest.java:277
HS384
Definition: SignatureAlgorithm.java:24
int getStatus()
Definition: BaseResponse.java:49
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getRefreshToken()
Definition: TokenResponse.java:144
Definition: OxAuthCryptoProvider.java:62
List< String > getClaim(String claimName)
Definition: ClientInfoResponse.java:109
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ clientSecretJwtAuthenticationMethodHS384Fail()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.clientSecretJwtAuthenticationMethodHS384Fail ( final String  redirectUris,
final String  sectorIdentifierUri 
) throws Exception
inline
651  {
652  showTitle("clientSecretJwtAuthenticationMethodHS384Fail");
653 
654  List<String> scopes = Arrays.asList("clientinfo");
655 
656  // 1. Register client
657  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
658  StringUtils.spaceSeparatedToList(redirectUris));
659  registerRequest.setScope(scopes);
661  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
662 
663  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
664  registerClient.setRequest(registerRequest);
665  RegisterResponse registerResponse = registerClient.exec();
666 
667  showClient(registerClient);
668  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
669  assertNotNull(registerResponse.getClientId());
670  assertNotNull(registerResponse.getClientSecret());
671  assertNotNull(registerResponse.getRegistrationAccessToken());
672  assertNotNull(registerResponse.getClientIdIssuedAt());
673  assertNotNull(registerResponse.getClientSecretExpiresAt());
674 
675  String clientId = registerResponse.getClientId();
676 
677  // 2. Request Client Credentials Grant
678  OxAuthCryptoProvider cryptoProvider = new OxAuthCryptoProvider();
679 
681  tokenRequest.setScope("clientinfo");
682  tokenRequest.setAuthUsername(clientId);
683  tokenRequest.setAuthPassword("INVALID_CLIENT_SECRET");
685  tokenRequest.setAlgorithm(SignatureAlgorithm.HS384);
686  tokenRequest.setCryptoProvider(cryptoProvider);
687  tokenRequest.setAudience(tokenEndpoint);
688 
689  TokenClient tokenClient = new TokenClient(tokenEndpoint);
690  tokenClient.setRequest(tokenRequest);
691  TokenResponse tokenResponse = tokenClient.exec();
692 
693  showClient(tokenClient);
694  assertEquals(tokenResponse.getStatus(), 401, "Unexpected response code: " + tokenResponse.getStatus());
695  assertNotNull(tokenResponse.getErrorType());
696  assertEquals(tokenResponse.getErrorType(), TokenErrorResponseType.INVALID_CLIENT);
697  assertNotNull(tokenResponse.getErrorDescription());
698  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
void setCryptoProvider(AbstractCryptoProvider cryptoProvider)
Definition: TokenRequest.java:295
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
Definition: RegisterResponse.java:34
void setAudience(String audience)
Definition: TokenRequest.java:273
T getErrorType()
Definition: BaseResponseWithErrors.java:48
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
void setAuthPassword(String authPassword)
Definition: BaseRequest.java:70
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: TokenErrorResponseType.java:14
CLIENT_SECRET_JWT
Definition: AuthenticationMethod.java:31
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
Definition: RegisterRequest.java:37
void setAlgorithm(SignatureAlgorithm algorithm)
Definition: TokenRequest.java:277
INVALID_CLIENT
Definition: TokenErrorResponseType.java:32
HS384
Definition: SignatureAlgorithm.java:24
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getErrorDescription()
Definition: BaseResponseWithErrors.java:40
Definition: OxAuthCryptoProvider.java:62
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ clientSecretJwtAuthenticationMethodHS512()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.clientSecretJwtAuthenticationMethodHS512 ( final String  redirectUris,
final String  sectorIdentifierUri 
) throws Exception
inline
702  {
703  showTitle("clientSecretJwtAuthenticationMethodHS512");
704 
705  List<String> scopes = Arrays.asList("clientinfo");
706  List<GrantType> grantTypes = Arrays.asList(
708  );
709 
710  // 1. Register client
711  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
712  StringUtils.spaceSeparatedToList(redirectUris));
713  registerRequest.setScope(scopes);
714  registerRequest.setGrantTypes(grantTypes);
716  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
717 
718  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
719  registerClient.setRequest(registerRequest);
720  RegisterResponse registerResponse = registerClient.exec();
721 
722  showClient(registerClient);
723  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
724  assertNotNull(registerResponse.getClientId());
725  assertNotNull(registerResponse.getClientSecret());
726  assertNotNull(registerResponse.getRegistrationAccessToken());
727  assertNotNull(registerResponse.getClientIdIssuedAt());
728  assertNotNull(registerResponse.getClientSecretExpiresAt());
729 
730  String clientId = registerResponse.getClientId();
731  String clientSecret = registerResponse.getClientSecret();
732 
733  // 2. Request Client Credentials Grant
734  OxAuthCryptoProvider cryptoProvider = new OxAuthCryptoProvider();
735 
737  tokenRequest.setScope("clientinfo");
738  tokenRequest.setAuthUsername(clientId);
739  tokenRequest.setAuthPassword(clientSecret);
741  tokenRequest.setAlgorithm(SignatureAlgorithm.HS512);
742  tokenRequest.setCryptoProvider(cryptoProvider);
743  tokenRequest.setAudience(tokenEndpoint);
744 
745  TokenClient tokenClient = new TokenClient(tokenEndpoint);
746  tokenClient.setRequest(tokenRequest);
747  TokenResponse tokenResponse = tokenClient.exec();
748 
749  showClient(tokenClient);
750  assertEquals(tokenResponse.getStatus(), 200, "Unexpected response code: " + tokenResponse.getStatus());
751  assertNotNull(tokenResponse.getEntity());
752  assertNotNull(tokenResponse.getAccessToken());
753  assertNotNull(tokenResponse.getTokenType());
754  assertNotNull(tokenResponse.getScope());
755  assertNull(tokenResponse.getRefreshToken());
756 
757  String accessToken = tokenResponse.getAccessToken();
758 
759  // 3. Request client info
760  ClientInfoClient clientInfoClient = new ClientInfoClient(clientInfoEndpoint);
761  ClientInfoResponse clientInfoResponse = clientInfoClient.execClientInfo(accessToken);
762 
763  showClient(clientInfoClient);
764  assertEquals(clientInfoResponse.getStatus(), 200, "Unexpected response code: " + clientInfoResponse.getStatus());
765  assertNotNull(clientInfoResponse.getClaim("displayName"), "Unexpected result: displayName not found");
766  assertNotNull(clientInfoResponse.getClaim("inum"), "Unexpected result: inum not found");
767  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
void setCryptoProvider(AbstractCryptoProvider cryptoProvider)
Definition: TokenRequest.java:295
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
String clientInfoEndpoint
Definition: BaseTest.java:77
String getScope()
Definition: TokenResponse.java:163
Definition: RegisterResponse.java:34
void setAudience(String audience)
Definition: TokenRequest.java:273
void setGrantTypes(List< GrantType > grantTypes)
Definition: RegisterRequest.java:290
TokenType getTokenType()
Definition: TokenResponse.java:107
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
void setAuthPassword(String authPassword)
Definition: BaseRequest.java:70
ClientInfoResponse execClientInfo(String accessToken)
Definition: ClientInfoClient.java:61
String getAccessToken()
Definition: TokenResponse.java:89
Definition: ClientInfoClient.java:31
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: ClientInfoResponse.java:20
CLIENT_SECRET_JWT
Definition: AuthenticationMethod.java:31
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
Definition: RegisterRequest.java:37
HS512
Definition: SignatureAlgorithm.java:25
void setAlgorithm(SignatureAlgorithm algorithm)
Definition: TokenRequest.java:277
int getStatus()
Definition: BaseResponse.java:49
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getRefreshToken()
Definition: TokenResponse.java:144
Definition: OxAuthCryptoProvider.java:62
List< String > getClaim(String claimName)
Definition: ClientInfoResponse.java:109
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ clientSecretJwtAuthenticationMethodHS512Fail()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.clientSecretJwtAuthenticationMethodHS512Fail ( final String  redirectUris,
final String  sectorIdentifierUri 
) throws Exception
inline
771  {
772  showTitle("clientSecretJwtAuthenticationMethodHS512Fail");
773 
774  List<String> scopes = Arrays.asList("clientinfo");
775 
776  // 1. Register client
777  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
778  StringUtils.spaceSeparatedToList(redirectUris));
779  registerRequest.setScope(scopes);
781  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
782 
783  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
784  registerClient.setRequest(registerRequest);
785  RegisterResponse registerResponse = registerClient.exec();
786 
787  showClient(registerClient);
788  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
789  assertNotNull(registerResponse.getClientId());
790  assertNotNull(registerResponse.getClientSecret());
791  assertNotNull(registerResponse.getRegistrationAccessToken());
792  assertNotNull(registerResponse.getClientIdIssuedAt());
793  assertNotNull(registerResponse.getClientSecretExpiresAt());
794 
795  String clientId = registerResponse.getClientId();
796  String clientSecret = registerResponse.getClientSecret();
797 
798  // 2. Request Client Credentials Grant
799  OxAuthCryptoProvider cryptoProvider = new OxAuthCryptoProvider();
800 
802  tokenRequest.setScope("clientinfo");
803  tokenRequest.setAuthUsername(clientId);
804  tokenRequest.setAuthPassword("INVALID_CLIENT_SECRET");
806  tokenRequest.setAlgorithm(SignatureAlgorithm.HS512);
807  tokenRequest.setCryptoProvider(cryptoProvider);
808  tokenRequest.setAudience(tokenEndpoint);
809 
810  TokenClient tokenClient = new TokenClient(tokenEndpoint);
811  tokenClient.setRequest(tokenRequest);
812  TokenResponse tokenResponse = tokenClient.exec();
813 
814  showClient(tokenClient);
815  assertEquals(tokenResponse.getStatus(), 401, "Unexpected response code: " + tokenResponse.getStatus());
816  assertNotNull(tokenResponse.getErrorType());
817  assertEquals(tokenResponse.getErrorType(), TokenErrorResponseType.INVALID_CLIENT);
818  assertNotNull(tokenResponse.getErrorDescription());
819  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
void setCryptoProvider(AbstractCryptoProvider cryptoProvider)
Definition: TokenRequest.java:295
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
Definition: RegisterResponse.java:34
void setAudience(String audience)
Definition: TokenRequest.java:273
T getErrorType()
Definition: BaseResponseWithErrors.java:48
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
void setAuthPassword(String authPassword)
Definition: BaseRequest.java:70
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: TokenErrorResponseType.java:14
CLIENT_SECRET_JWT
Definition: AuthenticationMethod.java:31
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
Definition: RegisterRequest.java:37
HS512
Definition: SignatureAlgorithm.java:25
void setAlgorithm(SignatureAlgorithm algorithm)
Definition: TokenRequest.java:277
INVALID_CLIENT
Definition: TokenErrorResponseType.java:32
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getErrorDescription()
Definition: BaseResponseWithErrors.java:40
Definition: OxAuthCryptoProvider.java:62
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ clientSecretPostAuthenticationMethod()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.clientSecretPostAuthenticationMethod ( final String  redirectUris,
final String  sectorIdentifierUri 
) throws Exception
inline
260  {
261  showTitle("clientSecretPostAuthenticationMethod");
262 
263  List<String> scopes = Arrays.asList("clientinfo");
264  List<GrantType> grantTypes = Arrays.asList(
266  );
267 
268  // 1. Register client
269  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
270  StringUtils.spaceSeparatedToList(redirectUris));
271  registerRequest.setScope(scopes);
272  registerRequest.setGrantTypes(grantTypes);
274  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
275 
276  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
277  registerClient.setRequest(registerRequest);
278  RegisterResponse registerResponse = registerClient.exec();
279 
280  showClient(registerClient);
281  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
282  assertNotNull(registerResponse.getClientId());
283  assertNotNull(registerResponse.getClientSecret());
284  assertNotNull(registerResponse.getRegistrationAccessToken());
285  assertNotNull(registerResponse.getClientIdIssuedAt());
286  assertNotNull(registerResponse.getClientSecretExpiresAt());
287 
288  String clientId = registerResponse.getClientId();
289  String clientSecret = registerResponse.getClientSecret();
290 
291  // 2. Request Client Credentials Grant
293  tokenRequest.setScope("clientinfo");
294  tokenRequest.setAuthUsername(clientId);
295  tokenRequest.setAuthPassword(clientSecret);
297 
298  TokenClient tokenClient = new TokenClient(tokenEndpoint);
299  tokenClient.setRequest(tokenRequest);
300  TokenResponse tokenResponse = tokenClient.exec();
301 
302  showClient(tokenClient);
303  assertEquals(tokenResponse.getStatus(), 200, "Unexpected response code: " + tokenResponse.getStatus());
304  assertNotNull(tokenResponse.getEntity());
305  assertNotNull(tokenResponse.getAccessToken());
306  assertNotNull(tokenResponse.getTokenType());
307  assertNotNull(tokenResponse.getScope());
308  assertNull(tokenResponse.getRefreshToken());
309 
310  String accessToken = tokenResponse.getAccessToken();
311 
312  // 3. Request client info
313  ClientInfoClient clientInfoClient = new ClientInfoClient(clientInfoEndpoint);
314  ClientInfoResponse clientInfoResponse = clientInfoClient.execClientInfo(accessToken);
315 
316  showClient(clientInfoClient);
317  assertEquals(clientInfoResponse.getStatus(), 200, "Unexpected response code: " + clientInfoResponse.getStatus());
318  assertNotNull(clientInfoResponse.getClaim("displayName"), "Unexpected result: displayName not found");
319  assertNotNull(clientInfoResponse.getClaim("inum"), "Unexpected result: inum not found");
320  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
String clientInfoEndpoint
Definition: BaseTest.java:77
String getScope()
Definition: TokenResponse.java:163
Definition: RegisterResponse.java:34
void setGrantTypes(List< GrantType > grantTypes)
Definition: RegisterRequest.java:290
TokenType getTokenType()
Definition: TokenResponse.java:107
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
static void showClient(BaseClient client)
Definition: BaseTest.java:775
CLIENT_SECRET_POST
Definition: AuthenticationMethod.java:24
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
void setAuthPassword(String authPassword)
Definition: BaseRequest.java:70
ClientInfoResponse execClientInfo(String accessToken)
Definition: ClientInfoClient.java:61
String getAccessToken()
Definition: TokenResponse.java:89
Definition: ClientInfoClient.java:31
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: ClientInfoResponse.java:20
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
Definition: RegisterRequest.java:37
int getStatus()
Definition: BaseResponse.java:49
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getRefreshToken()
Definition: TokenResponse.java:144
List< String > getClaim(String claimName)
Definition: ClientInfoResponse.java:109
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ clientSecretPostAuthenticationMethodFail1()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.clientSecretPostAuthenticationMethodFail1 ( final String  redirectUris,
final String  sectorIdentifierUri 
) throws Exception
inline
324  {
325  showTitle("clientSecretPostAuthenticationMethodFail1");
326 
327  List<String> scopes = Arrays.asList("clientinfo");
328 
329  // 1. Register client
330  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
331  StringUtils.spaceSeparatedToList(redirectUris));
332  registerRequest.setScope(scopes);
334  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
335 
336  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
337  registerClient.setRequest(registerRequest);
338  RegisterResponse registerResponse = registerClient.exec();
339 
340  showClient(registerClient);
341  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
342  assertNotNull(registerResponse.getClientId());
343  assertNotNull(registerResponse.getClientSecret());
344  assertNotNull(registerResponse.getRegistrationAccessToken());
345  assertNotNull(registerResponse.getClientIdIssuedAt());
346  assertNotNull(registerResponse.getClientSecretExpiresAt());
347 
348  String clientId = registerResponse.getClientId();
349 
350  // 2. Request Client Credentials Grant
352  tokenRequest.setScope("clientinfo");
353  tokenRequest.setAuthUsername(clientId);
354  tokenRequest.setAuthPassword("INVALID_CLIENT_SECRET");
356 
357  TokenClient tokenClient = new TokenClient(tokenEndpoint);
358  tokenClient.setRequest(tokenRequest);
359  TokenResponse tokenResponse = tokenClient.exec();
360 
361  showClient(tokenClient);
362  assertEquals(tokenResponse.getStatus(), 401, "Unexpected response code: " + tokenResponse.getStatus());
363  assertNotNull(tokenResponse.getErrorType());
364  assertEquals(tokenResponse.getErrorType(), TokenErrorResponseType.INVALID_CLIENT);
365  assertNotNull(tokenResponse.getErrorDescription());
366  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
Definition: RegisterResponse.java:34
T getErrorType()
Definition: BaseResponseWithErrors.java:48
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
static void showClient(BaseClient client)
Definition: BaseTest.java:775
CLIENT_SECRET_POST
Definition: AuthenticationMethod.java:24
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
void setAuthPassword(String authPassword)
Definition: BaseRequest.java:70
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: TokenErrorResponseType.java:14
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
Definition: RegisterRequest.java:37
INVALID_CLIENT
Definition: TokenErrorResponseType.java:32
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getErrorDescription()
Definition: BaseResponseWithErrors.java:40
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ clientSecretPostAuthenticationMethodFail2()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.clientSecretPostAuthenticationMethodFail2 ( final String  redirectUris,
final String  sectorIdentifierUri 
) throws Exception
inline
370  {
371  showTitle("clientSecretPostAuthenticationMethodFail2");
372 
373  List<String> scopes = Arrays.asList("clientinfo");
374 
375  // 1. Register client
376  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
377  StringUtils.spaceSeparatedToList(redirectUris));
378  registerRequest.setScope(scopes);
380  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
381 
382  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
383  registerClient.setRequest(registerRequest);
384  RegisterResponse registerResponse = registerClient.exec();
385 
386  showClient(registerClient);
387  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
388  assertNotNull(registerResponse.getClientId());
389  assertNotNull(registerResponse.getClientSecret());
390  assertNotNull(registerResponse.getRegistrationAccessToken());
391  assertNotNull(registerResponse.getClientIdIssuedAt());
392  assertNotNull(registerResponse.getClientSecretExpiresAt());
393 
394  String clientId = registerResponse.getClientId();
395 
396  // 2. Request Client Credentials Grant
398  tokenRequest.setScope("clientinfo");
399  tokenRequest.setAuthUsername(clientId);
400  tokenRequest.setAuthPassword(null);
402 
403  TokenClient tokenClient = new TokenClient(tokenEndpoint);
404  tokenClient.setRequest(tokenRequest);
405  TokenResponse tokenResponse = tokenClient.exec();
406 
407  showClient(tokenClient);
408  assertEquals(tokenResponse.getStatus(), 401, "Unexpected response code: " + tokenResponse.getStatus());
409  assertNotNull(tokenResponse.getErrorType());
410  assertEquals(tokenResponse.getErrorType(), TokenErrorResponseType.INVALID_CLIENT);
411  assertNotNull(tokenResponse.getErrorDescription());
412  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
Definition: RegisterResponse.java:34
T getErrorType()
Definition: BaseResponseWithErrors.java:48
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
static void showClient(BaseClient client)
Definition: BaseTest.java:775
CLIENT_SECRET_POST
Definition: AuthenticationMethod.java:24
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
void setAuthPassword(String authPassword)
Definition: BaseRequest.java:70
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: TokenErrorResponseType.java:14
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
Definition: RegisterRequest.java:37
INVALID_CLIENT
Definition: TokenErrorResponseType.java:32
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getErrorDescription()
Definition: BaseResponseWithErrors.java:40
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ clientSecretPostAuthenticationMethodFail3()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.clientSecretPostAuthenticationMethodFail3 ( final String  redirectUris,
final String  sectorIdentifierUri 
) throws Exception
inline
416  {
417  showTitle("clientSecretPostAuthenticationMethodFail3");
418 
419  List<String> scopes = Arrays.asList("clientinfo");
420 
421  // 1. Register client
422  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
423  StringUtils.spaceSeparatedToList(redirectUris));
424  registerRequest.setScope(scopes);
426  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
427 
428  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
429  registerClient.setRequest(registerRequest);
430  RegisterResponse registerResponse = registerClient.exec();
431 
432  showClient(registerClient);
433  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
434  assertNotNull(registerResponse.getClientId());
435  assertNotNull(registerResponse.getClientSecret());
436  assertNotNull(registerResponse.getRegistrationAccessToken());
437  assertNotNull(registerResponse.getClientIdIssuedAt());
438  assertNotNull(registerResponse.getClientSecretExpiresAt());
439 
440  String clientId = registerResponse.getClientId();
441 
442  // 2. Request Client Credentials Grant
444  tokenRequest.setScope("clientinfo");
445  tokenRequest.setAuthUsername(null);
446  tokenRequest.setAuthPassword(null);
448 
449  TokenClient tokenClient = new TokenClient(tokenEndpoint);
450  tokenClient.setRequest(tokenRequest);
451  TokenResponse tokenResponse = tokenClient.exec();
452 
453  showClient(tokenClient);
454  assertEquals(tokenResponse.getStatus(), 401, "Unexpected response code: " + tokenResponse.getStatus());
455  assertNotNull(tokenResponse.getErrorType());
456  assertEquals(tokenResponse.getErrorType(), TokenErrorResponseType.INVALID_CLIENT);
457  assertNotNull(tokenResponse.getErrorDescription());
458  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
Definition: RegisterResponse.java:34
T getErrorType()
Definition: BaseResponseWithErrors.java:48
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
static void showClient(BaseClient client)
Definition: BaseTest.java:775
CLIENT_SECRET_POST
Definition: AuthenticationMethod.java:24
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
void setAuthPassword(String authPassword)
Definition: BaseRequest.java:70
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: TokenErrorResponseType.java:14
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
Definition: RegisterRequest.java:37
INVALID_CLIENT
Definition: TokenErrorResponseType.java:32
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getErrorDescription()
Definition: BaseResponseWithErrors.java:40
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ createDeployment()

static Archive<?> org.xdi.oxauth.ConfigurableTest.createDeployment ( )
inlinestaticinherited
40  {
41  return Deployments.createDeployment();
42  }

◆ createHttpClient() [1/2]

static DefaultHttpClient org.xdi.oxauth.BaseTest.createHttpClient ( )
inlinestaticinherited
794  {
795  return createHttpClient(HostnameVerifierType.DEFAULT);
796  }
static DefaultHttpClient createHttpClient()
Definition: BaseTest.java:794

◆ createHttpClient() [2/2]

static DefaultHttpClient org.xdi.oxauth.BaseTest.createHttpClient ( HostnameVerifierType  p_verifierType)
inlinestaticinherited
798  {
799  if (p_verifierType != null && p_verifierType != HostnameVerifierType.DEFAULT) {
800  switch (p_verifierType) {
801  case ALLOW_ALL:
802  HostnameVerifier hostnameVerifier = org.apache.http.conn.ssl.SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER;
803 
804  DefaultHttpClient client = new DefaultHttpClient();
805 
806  SchemeRegistry registry = new SchemeRegistry();
807  SSLSocketFactory socketFactory = SSLSocketFactory.getSocketFactory();
808  socketFactory.setHostnameVerifier((X509HostnameVerifier) hostnameVerifier);
809  registry.register(new Scheme("https", socketFactory, 443));
810  SingleClientConnManager mgr = new SingleClientConnManager(client.getParams(), registry);
811 
812  // Set verifier
813  HttpsURLConnection.setDefaultHostnameVerifier(hostnameVerifier);
814  return new DefaultHttpClient(mgr, client.getParams());
815  case DEFAULT:
816  return new DefaultHttpClient();
817  }
818  }
819  return new DefaultHttpClient();
820  }

◆ createHttpClientTrustAll()

static HttpClient org.xdi.oxauth.BaseTest.createHttpClientTrustAll ( ) throws NoSuchAlgorithmException, KeyManagementException, KeyStoreException, UnrecoverableKeyException
inlinestaticinherited
833  {
834  SSLSocketFactory sf = new SSLSocketFactory(new TrustStrategy() {
835  @Override
836  public boolean isTrusted(X509Certificate[] chain, String authType) throws CertificateException {
837  return true;
838  }
839  }, new AllowAllHostnameVerifier());
840 
841  SchemeRegistry registry = new SchemeRegistry();
842  registry.register(new Scheme("http", 80, PlainSocketFactory.getSocketFactory()));
843  registry.register(new Scheme("https", 443, sf));
844  ClientConnectionManager ccm = new PoolingClientConnectionManager(registry);
845  return new DefaultHttpClient(ccm);
846  }

◆ defaultAuthenticationMethod()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.defaultAuthenticationMethod ( final String  redirectUris,
final String  sectorIdentifierUri 
) throws Exception
inline
35  {
36  showTitle("defaultAuthenticationMethod");
37 
38  List<String> scopes = Arrays.asList("clientinfo");
39  List<GrantType> grantTypes = Arrays.asList(
41  );
42 
43  // 1. Register client
44  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
45  StringUtils.spaceSeparatedToList(redirectUris));
46  registerRequest.setScope(scopes);
47  registerRequest.setGrantTypes(grantTypes);
48  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
49 
51  registerClient.setRequest(registerRequest);
52  RegisterResponse registerResponse = registerClient.exec();
53 
54  showClient(registerClient);
55  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
56  assertNotNull(registerResponse.getClientId());
57  assertNotNull(registerResponse.getClientSecret());
58  assertNotNull(registerResponse.getRegistrationAccessToken());
59  assertNotNull(registerResponse.getClientIdIssuedAt());
60  assertNotNull(registerResponse.getClientSecretExpiresAt());
61 
62  String clientId = registerResponse.getClientId();
63  String clientSecret = registerResponse.getClientSecret();
64 
65  // 2. Request Client Credentials Grant
67  tokenRequest.setScope("clientinfo");
68  tokenRequest.setAuthUsername(clientId);
69  tokenRequest.setAuthPassword(clientSecret);
70 
71  TokenClient tokenClient = new TokenClient(tokenEndpoint);
72  tokenClient.setRequest(tokenRequest);
73  TokenResponse tokenResponse = tokenClient.exec();
74 
75  showClient(tokenClient);
76  assertEquals(tokenResponse.getStatus(), 200, "Unexpected response code: " + tokenResponse.getStatus());
77  assertNotNull(tokenResponse.getEntity());
78  assertNotNull(tokenResponse.getAccessToken());
79  assertNotNull(tokenResponse.getTokenType());
80  assertNotNull(tokenResponse.getScope());
81  assertNull(tokenResponse.getRefreshToken());
82 
83  String accessToken = tokenResponse.getAccessToken();
84 
85  // 3. Request client info
87  ClientInfoResponse clientInfoResponse = clientInfoClient.execClientInfo(accessToken);
88 
89  showClient(clientInfoClient);
90  assertEquals(clientInfoResponse.getStatus(), 200, "Unexpected response code: " + clientInfoResponse.getStatus());
91  assertNotNull(clientInfoResponse.getClaim("displayName"), "Unexpected result: displayName not found");
92  assertNotNull(clientInfoResponse.getClaim("inum"), "Unexpected result: inum not found");
93  }
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
String clientInfoEndpoint
Definition: BaseTest.java:77
String getScope()
Definition: TokenResponse.java:163
Definition: RegisterResponse.java:34
void setGrantTypes(List< GrantType > grantTypes)
Definition: RegisterRequest.java:290
TokenType getTokenType()
Definition: TokenResponse.java:107
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
void setAuthPassword(String authPassword)
Definition: BaseRequest.java:70
ClientInfoResponse execClientInfo(String accessToken)
Definition: ClientInfoClient.java:61
String getAccessToken()
Definition: TokenResponse.java:89
Definition: ClientInfoClient.java:31
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: ClientInfoResponse.java:20
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
Definition: RegisterRequest.java:37
int getStatus()
Definition: BaseResponse.java:49
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
String getRefreshToken()
Definition: TokenResponse.java:144
List< String > getClaim(String claimName)
Definition: ClientInfoResponse.java:109
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ defaultAuthenticationMethodFail()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.defaultAuthenticationMethodFail ( final String  redirectUris,
final String  sectorIdentifierUri 
) throws Exception
inline
97  {
98  showTitle("defaultAuthenticationMethodFail");
99 
100  List<String> scopes = Arrays.asList("clientinfo");
101 
102  // 1. Register client
103  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
104  StringUtils.spaceSeparatedToList(redirectUris));
105  registerRequest.setScope(scopes);
106  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
107 
108  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
109  registerClient.setRequest(registerRequest);
110  RegisterResponse registerResponse = registerClient.exec();
111 
112  showClient(registerClient);
113  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
114  assertNotNull(registerResponse.getClientId());
115  assertNotNull(registerResponse.getClientSecret());
116  assertNotNull(registerResponse.getRegistrationAccessToken());
117  assertNotNull(registerResponse.getClientIdIssuedAt());
118  assertNotNull(registerResponse.getClientSecretExpiresAt());
119 
120  String clientId = registerResponse.getClientId();
121 
122  // 2. Request Client Credentials Grant
124  tokenRequest.setScope("clientinfo");
125  tokenRequest.setAuthUsername(clientId);
126  tokenRequest.setAuthPassword("INVALID_CLIENT_SECRET");
127 
128  TokenClient tokenClient = new TokenClient(tokenEndpoint);
129  tokenClient.setRequest(tokenRequest);
130  TokenResponse tokenResponse = tokenClient.exec();
131 
132  showClient(tokenClient);
133  assertEquals(tokenResponse.getStatus(), 401, "Unexpected response code: " + tokenResponse.getStatus());
134  assertNotNull(tokenResponse.getErrorType());
135  assertEquals(tokenResponse.getErrorType(), TokenErrorResponseType.INVALID_CLIENT);
136  assertNotNull(tokenResponse.getErrorDescription());
137  }
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
Definition: RegisterResponse.java:34
T getErrorType()
Definition: BaseResponseWithErrors.java:48
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
void setAuthPassword(String authPassword)
Definition: BaseRequest.java:70
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: TokenErrorResponseType.java:14
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
Definition: RegisterRequest.java:37
INVALID_CLIENT
Definition: TokenErrorResponseType.java:32
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
String getErrorDescription()
Definition: BaseResponseWithErrors.java:40
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ discovery()

void org.xdi.oxauth.BaseTest.discovery ( ITestContext  context) throws Exception
inlineinherited
670  {
671  // Load Form Interaction
672  loginFormUsername = context.getCurrentXmlTest().getParameter("loginFormUsername");
673  loginFormPassword = context.getCurrentXmlTest().getParameter("loginFormPassword");
674  loginFormLoginButton = context.getCurrentXmlTest().getParameter("loginFormLoginButton");
675  authorizeFormAllowButton = context.getCurrentXmlTest().getParameter("authorizeFormAllowButton");
676  authorizeFormDoNotAllowButton = context.getCurrentXmlTest().getParameter("authorizeFormDoNotAllowButton");
677 
678  String resource = context.getCurrentXmlTest().getParameter("swdResource");
679 
680  if (StringUtils.isNotBlank(resource)) {
681 
682  showTitle("OpenID Connect Discovery");
683 
684  OpenIdConnectDiscoveryClient openIdConnectDiscoveryClient = new OpenIdConnectDiscoveryClient(resource);
685  OpenIdConnectDiscoveryResponse openIdConnectDiscoveryResponse = openIdConnectDiscoveryClient.exec(clientExecutor(true));
686 
687  showClient(openIdConnectDiscoveryClient);
688  assertEquals(openIdConnectDiscoveryResponse.getStatus(), 200, "Unexpected response code");
689  assertNotNull(openIdConnectDiscoveryResponse.getSubject());
690  assertTrue(openIdConnectDiscoveryResponse.getLinks().size() > 0);
691 
692  configurationEndpoint = openIdConnectDiscoveryResponse.getLinks().get(0).getHref() +
693  "/.well-known/openid-configuration";
694 
695  System.out.println("OpenID Connect Configuration");
696 
697  OpenIdConfigurationClient client = new OpenIdConfigurationClient(configurationEndpoint);
698  client.setExecutor(clientExecutor(true));
700 
701  showClient(client);
702  assertEquals(response.getStatus(), 200, "Unexpected response code");
703  assertNotNull(response.getIssuer(), "The issuer is null");
704  assertNotNull(response.getAuthorizationEndpoint(), "The authorizationEndpoint is null");
705  assertNotNull(response.getTokenEndpoint(), "The tokenEndpoint is null");
706  assertNotNull(response.getUserInfoEndpoint(), "The userInfoEndPoint is null");
707  assertNotNull(response.getJwksUri(), "The jwksUri is null");
708  assertNotNull(response.getRegistrationEndpoint(), "The registrationEndpoint is null");
709 
710  assertTrue(response.getScopesSupported().size() > 0, "The scopesSupported is empty");
711  assertTrue(response.getScopeToClaimsMapping().size() > 0, "The scope to claims mapping is empty");
712  assertTrue(response.getResponseTypesSupported().size() > 0, "The responseTypesSupported is empty");
713  assertTrue(response.getGrantTypesSupported().size() > 0, "The grantTypesSupported is empty");
714  assertTrue(response.getAcrValuesSupported().size() >= 0, "The acrValuesSupported is empty");
715  assertTrue(response.getSubjectTypesSupported().size() > 0, "The subjectTypesSupported is empty");
716  assertTrue(response.getIdTokenSigningAlgValuesSupported().size() > 0, "The idTokenSigningAlgValuesSupported is empty");
717  assertTrue(response.getRequestObjectSigningAlgValuesSupported().size() > 0, "The requestObjectSigningAlgValuesSupported is empty");
718  assertTrue(response.getTokenEndpointAuthMethodsSupported().size() > 0, "The tokenEndpointAuthMethodsSupported is empty");
719  assertTrue(response.getClaimsSupported().size() > 0, "The claimsSupported is empty");
720 
722  tokenEndpoint = response.getTokenEndpoint();
727  jwksUri = response.getJwksUri();
732  gluuConfigurationEndpoint = determineGluuConfigurationEndpoint(openIdConnectDiscoveryResponse.getLinks().get(0).getHref());
733  } else {
734  showTitle("Loading configuration endpoints from properties file");
735 
736  authorizationEndpoint = context.getCurrentXmlTest().getParameter("authorizationEndpoint");
737  tokenEndpoint = context.getCurrentXmlTest().getParameter("tokenEndpoint");
738  userInfoEndpoint = context.getCurrentXmlTest().getParameter("userInfoEndpoint");
739  clientInfoEndpoint = context.getCurrentXmlTest().getParameter("clientInfoEndpoint");
740  checkSessionIFrame = context.getCurrentXmlTest().getParameter("checkSessionIFrame");
741  endSessionEndpoint = context.getCurrentXmlTest().getParameter("endSessionEndpoint");
742  jwksUri = context.getCurrentXmlTest().getParameter("jwksUri");
743  registrationEndpoint = context.getCurrentXmlTest().getParameter("registrationEndpoint");
744  configurationEndpoint = context.getCurrentXmlTest().getParameter("configurationEndpoint");
745  idGenEndpoint = context.getCurrentXmlTest().getParameter("idGenEndpoint");
746  introspectionEndpoint = context.getCurrentXmlTest().getParameter("introspectionEndpoint");
747  scopeToClaimsMapping = new HashMap<String, List<String>>();
748  }
749 
751  }
String registrationEndpoint
Definition: BaseTest.java:81
String getIntrospectionEndpoint()
Definition: OpenIdConfigurationResponse.java:343
List< String > getTokenEndpointAuthMethodsSupported()
Definition: OpenIdConfigurationResponse.java:642
String determineAuthorizationPageEndpoint(String authorizationEndpoint)
Definition: BaseTest.java:753
String jwksUri
Definition: BaseTest.java:80
String getRegistrationEndpoint()
Definition: OpenIdConfigurationResponse.java:310
String clientInfoEndpoint
Definition: BaseTest.java:77
String getCheckSessionIFrame()
Definition: OpenIdConfigurationResponse.java:248
String authorizationPageEndpoint
Definition: BaseTest.java:73
String idGenEndpoint
Definition: BaseTest.java:83
String getIdGenerationEndpoint()
Definition: OpenIdConfigurationResponse.java:327
static void showClient(BaseClient client)
Definition: BaseTest.java:775
List< String > getRequestObjectSigningAlgValuesSupported()
Definition: OpenIdConfigurationResponse.java:579
String loginFormUsername
Definition: BaseTest.java:88
String loginFormPassword
Definition: BaseTest.java:89
String configurationEndpoint
Definition: BaseTest.java:82
List< String > getSubjectTypesSupported()
Definition: OpenIdConfigurationResponse.java:438
String getEndSessionEndpoint()
Definition: OpenIdConfigurationResponse.java:268
String tokenEndpoint
Definition: BaseTest.java:75
String authorizeFormDoNotAllowButton
Definition: BaseTest.java:92
List< String > getAcrValuesSupported()
Definition: OpenIdConfigurationResponse.java:418
String getClientInfoEndpoint()
Definition: OpenIdConfigurationResponse.java:228
List< String > getGrantTypesSupported()
Definition: OpenIdConfigurationResponse.java:398
String checkSessionIFrame
Definition: BaseTest.java:78
void setExecutor(ClientExecutor executor)
Definition: BaseClient.java:84
OpenIdConfigurationResponse execOpenIdConfiguration()
Definition: OpenIdConfigurationClient.java:47
String loginFormLoginButton
Definition: BaseTest.java:90
String gluuConfigurationEndpoint
Definition: BaseTest.java:74
Map< String, List< String > > getScopeToClaimsMapping()
Definition: OpenIdConfigurationResponse.java:136
String getJwksUri()
Definition: OpenIdConfigurationResponse.java:289
String getTokenEndpoint()
Definition: OpenIdConfigurationResponse.java:192
List< String > getIdTokenSigningAlgValuesSupported()
Definition: OpenIdConfigurationResponse.java:519
Definition: OpenIdConnectDiscoveryClient.java:29
String introspectionEndpoint
Definition: BaseTest.java:84
void showTitle(String title)
Definition: BaseTest.java:761
List< String > getResponseTypesSupported()
Definition: OpenIdConfigurationResponse.java:378
String endSessionEndpoint
Definition: BaseTest.java:79
String getSubject()
Definition: OpenIdConnectDiscoveryResponse.java:32
List< String > getScopesSupported()
Definition: OpenIdConfigurationResponse.java:360
String determineGluuConfigurationEndpoint(String host)
Definition: BaseTest.java:757
OpenIdConnectDiscoveryResponse exec()
Definition: OpenIdConnectDiscoveryClient.java:47
String getAuthorizationEndpoint()
Definition: OpenIdConfigurationResponse.java:174
String userInfoEndpoint
Definition: BaseTest.java:76
Definition: OpenIdConfigurationClient.java:27
int getStatus()
Definition: BaseResponse.java:49
List< WebFingerLink > getLinks()
Definition: OpenIdConnectDiscoveryResponse.java:40
List< String > getClaimsSupported()
Definition: OpenIdConfigurationResponse.java:728
Definition: OpenIdConnectDiscoveryResponse.java:17
String authorizationEndpoint
Definition: BaseTest.java:72
String getUserInfoEndpoint()
Definition: OpenIdConfigurationResponse.java:210
Definition: OpenIdConfigurationResponse.java:26
static ClientExecutor clientExecutor()
Definition: BaseTest.java:822
Map< String, List< String > > scopeToClaimsMapping
Definition: BaseTest.java:85
String authorizeFormAllowButton
Definition: BaseTest.java:91
String getIssuer()
Definition: OpenIdConfigurationResponse.java:156

◆ fails()

static void org.xdi.oxauth.BaseTest.fails ( Throwable  e)
inlinestaticinherited
50  {
51  Assert.fail(e.getMessage(), e);
52  }

◆ getAuthorizationEndpoint()

String org.xdi.oxauth.BaseTest.getAuthorizationEndpoint ( )
inlineinherited
134  {
135  return authorizationEndpoint;
136  }
String authorizationEndpoint
Definition: BaseTest.java:72

◆ getCheckSessionIFrame()

String org.xdi.oxauth.BaseTest.getCheckSessionIFrame ( )
inlineinherited
166  {
167  return checkSessionIFrame;
168  }
String checkSessionIFrame
Definition: BaseTest.java:78

◆ getClientInfoEndpoint()

String org.xdi.oxauth.BaseTest.getClientInfoEndpoint ( )
inlineinherited
158  {
159  return clientInfoEndpoint;
160  }
String clientInfoEndpoint
Definition: BaseTest.java:77

◆ getConfigurationEndpoint()

String org.xdi.oxauth.BaseTest.getConfigurationEndpoint ( )
inlineinherited
222  {
223  return configurationEndpoint;
224  }
String configurationEndpoint
Definition: BaseTest.java:82

◆ getDriver()

WebDriver org.xdi.oxauth.BaseTest.getDriver ( )
inlineinherited
126  {
127  return driver;
128  }
WebDriver driver
Definition: BaseTest.java:70

◆ getEndSessionEndpoint()

String org.xdi.oxauth.BaseTest.getEndSessionEndpoint ( )
inlineinherited
174  {
175  return endSessionEndpoint;
176  }
String endSessionEndpoint
Definition: BaseTest.java:79

◆ getIdGenEndpoint()

String org.xdi.oxauth.BaseTest.getIdGenEndpoint ( )
inlineinherited
214  {
215  return idGenEndpoint;
216  }
String idGenEndpoint
Definition: BaseTest.java:83

◆ getIntrospectionEndpoint()

String org.xdi.oxauth.BaseTest.getIntrospectionEndpoint ( )
inlineinherited
198  {
199  return introspectionEndpoint;
200  }
String introspectionEndpoint
Definition: BaseTest.java:84

◆ getJwksUri()

String org.xdi.oxauth.BaseTest.getJwksUri ( )
inlineinherited
182  {
183  return jwksUri;
184  }
String jwksUri
Definition: BaseTest.java:80

◆ getRegistrationEndpoint()

String org.xdi.oxauth.BaseTest.getRegistrationEndpoint ( )
inlineinherited
190  {
191  return registrationEndpoint;
192  }
String registrationEndpoint
Definition: BaseTest.java:81

◆ getScopeToClaimsMapping()

Map<String, List<String> > org.xdi.oxauth.BaseTest.getScopeToClaimsMapping ( )
inlineinherited
206  {
207  return scopeToClaimsMapping;
208  }
Map< String, List< String > > scopeToClaimsMapping
Definition: BaseTest.java:85

◆ getTokenEndpoint()

String org.xdi.oxauth.BaseTest.getTokenEndpoint ( )
inlineinherited
142  {
143  return tokenEndpoint;
144  }
String tokenEndpoint
Definition: BaseTest.java:75

◆ getUserInfoEndpoint()

String org.xdi.oxauth.BaseTest.getUserInfoEndpoint ( )
inlineinherited
150  {
151  return userInfoEndpoint;
152  }
String userInfoEndpoint
Definition: BaseTest.java:76

◆ initTestSuite()

void org.xdi.oxauth.BaseTest.initTestSuite ( ITestContext  context) throws FileNotFoundException, IOException
inlineinherited
95  {
96  SecurityProviderUtility.installBCProvider();
97 
98  Reporter.log("Invoked init test suite method \n", true);
99 
100  String propertiesFile = context.getCurrentXmlTest().getParameter("propertiesFile");
101  if (StringHelper.isEmpty(propertiesFile)) {
102  propertiesFile = "target/test-classes/testng.properties";
103  //propertiesFile = "U:\\own\\project\\git\\oxAuth\\Client\\src\\test\\resources\\testng_yuriy.properties";
104  //propertiesFile = "/Users/JAVIER/IdeaProjects/oxAuth/Client/target/test-classes/testng.properties";
105  }
106 
107  FileInputStream conf = new FileInputStream(propertiesFile);
108  Properties prop = new Properties();
109  prop.load(conf);
110 
111  Map<String, String> parameters = new HashMap<String, String>();
112  for (Entry<Object, Object> entry : prop.entrySet()) {
113  Object key = entry.getKey();
114  Object value = entry.getValue();
115 
116  if (StringHelper.isEmptyString(key) || StringHelper.isEmptyString(value)) {
117  continue;
118  }
119  parameters.put(key.toString(), value.toString());
120  }
121 
122  // Overrided test paramters
123  context.getSuite().getXmlSuite().setParameters(parameters);
124  }

◆ output()

static void org.xdi.oxauth.BaseTest.output ( String  p_msg)
inlinestaticinherited
54  {
55  System.out.println(p_msg);
56  }

◆ privateKeyJwtAuthenticationMethodES256()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodES256 ( final String  redirectUris,
final String  clientJwksUri,
final String  keyId,
final String  dnName,
final String  keyStoreFile,
final String  keyStoreSecret,
final String  sectorIdentifierUri 
) throws Exception
inline
1200  {
1201  showTitle("privateKeyJwtAuthenticationMethodES256");
1202 
1203  List<String> scopes = Arrays.asList("clientinfo");
1204  List<GrantType> grantTypes = Arrays.asList(
1206  );
1207 
1208  // 1. Register client
1209  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
1210  StringUtils.spaceSeparatedToList(redirectUris));
1211  registerRequest.setScope(scopes);
1212  registerRequest.setGrantTypes(grantTypes);
1214  registerRequest.setJwksUri(clientJwksUri);
1215  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
1216 
1217  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
1218  registerClient.setRequest(registerRequest);
1219  RegisterResponse registerResponse = registerClient.exec();
1220 
1221  showClient(registerClient);
1222  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
1223  assertNotNull(registerResponse.getClientId());
1224  assertNotNull(registerResponse.getClientSecret());
1225  assertNotNull(registerResponse.getRegistrationAccessToken());
1226  assertNotNull(registerResponse.getClientIdIssuedAt());
1227  assertNotNull(registerResponse.getClientSecretExpiresAt());
1228 
1229  String clientId = registerResponse.getClientId();
1230 
1231  // 2. Request Client Credentials Grant
1232  OxAuthCryptoProvider cryptoProvider = new OxAuthCryptoProvider(keyStoreFile, keyStoreSecret, dnName);
1233 
1235  tokenRequest.setScope("clientinfo");
1236  tokenRequest.setAuthUsername(clientId);
1238  tokenRequest.setAlgorithm(SignatureAlgorithm.ES256);
1239  tokenRequest.setCryptoProvider(cryptoProvider);
1240  tokenRequest.setKeyId(keyId);
1241  tokenRequest.setAudience(tokenEndpoint);
1242 
1243  TokenClient tokenClient = new TokenClient(tokenEndpoint);
1244  tokenClient.setRequest(tokenRequest);
1245  TokenResponse tokenResponse = tokenClient.exec();
1246 
1247  showClient(tokenClient);
1248  assertEquals(tokenResponse.getStatus(), 200, "Unexpected response code: " + tokenResponse.getStatus());
1249  assertNotNull(tokenResponse.getEntity());
1250  assertNotNull(tokenResponse.getAccessToken());
1251  assertNotNull(tokenResponse.getTokenType());
1252  assertNotNull(tokenResponse.getScope());
1253  assertNull(tokenResponse.getRefreshToken());
1254 
1255  String accessToken = tokenResponse.getAccessToken();
1256 
1257  // 3. Request client info
1258  ClientInfoClient clientInfoClient = new ClientInfoClient(clientInfoEndpoint);
1259  ClientInfoResponse clientInfoResponse = clientInfoClient.execClientInfo(accessToken);
1260 
1261  showClient(clientInfoClient);
1262  assertEquals(clientInfoResponse.getStatus(), 200, "Unexpected response code: " + clientInfoResponse.getStatus());
1263  assertNotNull(clientInfoResponse.getClaim("displayName"), "Unexpected result: displayName not found");
1264  assertNotNull(clientInfoResponse.getClaim("inum"), "Unexpected result: inum not found");
1265  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
void setKeyId(String keyId)
Definition: TokenRequest.java:303
void setCryptoProvider(AbstractCryptoProvider cryptoProvider)
Definition: TokenRequest.java:295
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
String clientInfoEndpoint
Definition: BaseTest.java:77
String getScope()
Definition: TokenResponse.java:163
Definition: RegisterResponse.java:34
void setAudience(String audience)
Definition: TokenRequest.java:273
void setGrantTypes(List< GrantType > grantTypes)
Definition: RegisterRequest.java:290
TokenType getTokenType()
Definition: TokenResponse.java:107
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
ES256
Definition: SignatureAlgorithm.java:29
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
void setJwksUri(String jwksUri)
Definition: RegisterRequest.java:454
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
ClientInfoResponse execClientInfo(String accessToken)
Definition: ClientInfoClient.java:61
String getAccessToken()
Definition: TokenResponse.java:89
Definition: ClientInfoClient.java:31
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: ClientInfoResponse.java:20
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
PRIVATE_KEY_JWT
Definition: AuthenticationMethod.java:37
Definition: RegisterRequest.java:37
void setAlgorithm(SignatureAlgorithm algorithm)
Definition: TokenRequest.java:277
int getStatus()
Definition: BaseResponse.java:49
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getRefreshToken()
Definition: TokenResponse.java:144
Definition: OxAuthCryptoProvider.java:62
List< String > getClaim(String claimName)
Definition: ClientInfoResponse.java:109
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ privateKeyJwtAuthenticationMethodES256Fail()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodES256Fail ( final String  redirectUris,
final String  clientJwksUri,
final String  dnName,
final String  keyStoreFile,
final String  keyStoreSecret,
final String  sectorIdentifierUri 
) throws Exception
inline
1271  {
1272  showTitle("privateKeyJwtAuthenticationMethodES256Fail");
1273 
1274  List<String> scopes = Arrays.asList("clientinfo");
1275 
1276  // 1. Register client
1277  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
1278  StringUtils.spaceSeparatedToList(redirectUris));
1279  registerRequest.setScope(scopes);
1281  registerRequest.setJwksUri(clientJwksUri);
1282  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
1283 
1284  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
1285  registerClient.setRequest(registerRequest);
1286  RegisterResponse registerResponse = registerClient.exec();
1287 
1288  showClient(registerClient);
1289  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
1290  assertNotNull(registerResponse.getClientId());
1291  assertNotNull(registerResponse.getClientSecret());
1292  assertNotNull(registerResponse.getRegistrationAccessToken());
1293  assertNotNull(registerResponse.getClientIdIssuedAt());
1294  assertNotNull(registerResponse.getClientSecretExpiresAt());
1295 
1296  String clientId = registerResponse.getClientId();
1297 
1298  // 2. Request Client Credentials Grant
1299  OxAuthCryptoProvider cryptoProvider = new OxAuthCryptoProvider(keyStoreFile, keyStoreSecret, dnName);
1300 
1302  tokenRequest.setScope("clientinfo");
1303  tokenRequest.setAuthUsername(clientId);
1305  tokenRequest.setAlgorithm(SignatureAlgorithm.ES256);
1306  tokenRequest.setCryptoProvider(cryptoProvider);
1307  tokenRequest.setKeyId("ES256SIG_INVALID_KEYID");
1308  tokenRequest.setAudience(tokenEndpoint);
1309 
1310  TokenClient tokenClient = new TokenClient(tokenEndpoint);
1311  tokenClient.setRequest(tokenRequest);
1312  TokenResponse tokenResponse = tokenClient.exec();
1313 
1314  showClient(tokenClient);
1315  assertEquals(tokenResponse.getStatus(), 401, "Unexpected response code: " + tokenResponse.getStatus());
1316  assertNotNull(tokenResponse.getErrorType());
1317  assertEquals(tokenResponse.getErrorType(), TokenErrorResponseType.INVALID_CLIENT);
1318  assertNotNull(tokenResponse.getErrorDescription());
1319  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
void setKeyId(String keyId)
Definition: TokenRequest.java:303
void setCryptoProvider(AbstractCryptoProvider cryptoProvider)
Definition: TokenRequest.java:295
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
Definition: RegisterResponse.java:34
void setAudience(String audience)
Definition: TokenRequest.java:273
T getErrorType()
Definition: BaseResponseWithErrors.java:48
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
ES256
Definition: SignatureAlgorithm.java:29
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
void setJwksUri(String jwksUri)
Definition: RegisterRequest.java:454
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: TokenErrorResponseType.java:14
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
PRIVATE_KEY_JWT
Definition: AuthenticationMethod.java:37
Definition: RegisterRequest.java:37
void setAlgorithm(SignatureAlgorithm algorithm)
Definition: TokenRequest.java:277
INVALID_CLIENT
Definition: TokenErrorResponseType.java:32
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getErrorDescription()
Definition: BaseResponseWithErrors.java:40
Definition: OxAuthCryptoProvider.java:62
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ privateKeyJwtAuthenticationMethodES384()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodES384 ( final String  redirectUris,
final String  clientJwksUri,
final String  keyId,
final String  dnName,
final String  keyStoreFile,
final String  keyStoreSecret,
final String  sectorIdentifierUri 
) throws Exception
inline
1325  {
1326  showTitle("privateKeyJwtAuthenticationMethodES384");
1327 
1328  List<String> scopes = Arrays.asList("clientinfo");
1329  List<GrantType> grantTypes = Arrays.asList(
1331  );
1332 
1333  // 1. Register client
1334  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
1335  StringUtils.spaceSeparatedToList(redirectUris));
1336  registerRequest.setScope(scopes);
1337  registerRequest.setGrantTypes(grantTypes);
1339  registerRequest.setJwksUri(clientJwksUri);
1340  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
1341 
1342  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
1343  registerClient.setRequest(registerRequest);
1344  RegisterResponse registerResponse = registerClient.exec();
1345 
1346  showClient(registerClient);
1347  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
1348  assertNotNull(registerResponse.getClientId());
1349  assertNotNull(registerResponse.getClientSecret());
1350  assertNotNull(registerResponse.getRegistrationAccessToken());
1351  assertNotNull(registerResponse.getClientIdIssuedAt());
1352  assertNotNull(registerResponse.getClientSecretExpiresAt());
1353 
1354  String clientId = registerResponse.getClientId();
1355 
1356  // 2. Request Client Credentials Grant
1357  OxAuthCryptoProvider cryptoProvider = new OxAuthCryptoProvider(keyStoreFile, keyStoreSecret, dnName);
1358 
1360  tokenRequest.setScope("clientinfo");
1361  tokenRequest.setAuthUsername(clientId);
1363  tokenRequest.setAlgorithm(SignatureAlgorithm.ES384);
1364  tokenRequest.setCryptoProvider(cryptoProvider);
1365  tokenRequest.setKeyId(keyId);
1366  tokenRequest.setAudience(tokenEndpoint);
1367 
1368  TokenClient tokenClient = new TokenClient(tokenEndpoint);
1369  tokenClient.setRequest(tokenRequest);
1370  TokenResponse tokenResponse = tokenClient.exec();
1371 
1372  showClient(tokenClient);
1373  assertEquals(tokenResponse.getStatus(), 200, "Unexpected response code: " + tokenResponse.getStatus());
1374  assertNotNull(tokenResponse.getEntity());
1375  assertNotNull(tokenResponse.getAccessToken());
1376  assertNotNull(tokenResponse.getTokenType());
1377  assertNotNull(tokenResponse.getScope());
1378  assertNull(tokenResponse.getRefreshToken());
1379 
1380  String accessToken = tokenResponse.getAccessToken();
1381 
1382  // 3. Request client info
1383  ClientInfoClient clientInfoClient = new ClientInfoClient(clientInfoEndpoint);
1384  ClientInfoResponse clientInfoResponse = clientInfoClient.execClientInfo(accessToken);
1385 
1386  showClient(clientInfoClient);
1387  assertEquals(clientInfoResponse.getStatus(), 200, "Unexpected response code: " + clientInfoResponse.getStatus());
1388  assertNotNull(clientInfoResponse.getClaim("displayName"), "Unexpected result: displayName not found");
1389  assertNotNull(clientInfoResponse.getClaim("inum"), "Unexpected result: inum not found");
1390  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
void setKeyId(String keyId)
Definition: TokenRequest.java:303
void setCryptoProvider(AbstractCryptoProvider cryptoProvider)
Definition: TokenRequest.java:295
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
String clientInfoEndpoint
Definition: BaseTest.java:77
String getScope()
Definition: TokenResponse.java:163
Definition: RegisterResponse.java:34
void setAudience(String audience)
Definition: TokenRequest.java:273
void setGrantTypes(List< GrantType > grantTypes)
Definition: RegisterRequest.java:290
TokenType getTokenType()
Definition: TokenResponse.java:107
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
void setJwksUri(String jwksUri)
Definition: RegisterRequest.java:454
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
ClientInfoResponse execClientInfo(String accessToken)
Definition: ClientInfoClient.java:61
ES384
Definition: SignatureAlgorithm.java:30
String getAccessToken()
Definition: TokenResponse.java:89
Definition: ClientInfoClient.java:31
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: ClientInfoResponse.java:20
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
PRIVATE_KEY_JWT
Definition: AuthenticationMethod.java:37
Definition: RegisterRequest.java:37
void setAlgorithm(SignatureAlgorithm algorithm)
Definition: TokenRequest.java:277
int getStatus()
Definition: BaseResponse.java:49
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getRefreshToken()
Definition: TokenResponse.java:144
Definition: OxAuthCryptoProvider.java:62
List< String > getClaim(String claimName)
Definition: ClientInfoResponse.java:109
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ privateKeyJwtAuthenticationMethodES384Fail()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodES384Fail ( final String  redirectUris,
final String  clientJwksUri,
final String  dnName,
final String  keyStoreFile,
final String  keyStoreSecret,
final String  sectorIdentifierUri 
) throws Exception
inline
1396  {
1397  showTitle("privateKeyJwtAuthenticationMethodES384Fail");
1398 
1399  List<String> scopes = Arrays.asList("clientinfo");
1400 
1401  // 1. Register client
1402  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
1403  StringUtils.spaceSeparatedToList(redirectUris));
1404  registerRequest.setScope(scopes);
1406  registerRequest.setJwksUri(clientJwksUri);
1407  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
1408 
1409  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
1410  registerClient.setRequest(registerRequest);
1411  RegisterResponse registerResponse = registerClient.exec();
1412 
1413  showClient(registerClient);
1414  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
1415  assertNotNull(registerResponse.getClientId());
1416  assertNotNull(registerResponse.getClientSecret());
1417  assertNotNull(registerResponse.getRegistrationAccessToken());
1418  assertNotNull(registerResponse.getClientIdIssuedAt());
1419  assertNotNull(registerResponse.getClientSecretExpiresAt());
1420 
1421  String clientId = registerResponse.getClientId();
1422 
1423  // 2. Request Client Credentials Grant
1424  OxAuthCryptoProvider cryptoProvider = new OxAuthCryptoProvider(keyStoreFile, keyStoreSecret, dnName);
1425 
1427  tokenRequest.setScope("clientinfo");
1428  tokenRequest.setAuthUsername(clientId);
1430  tokenRequest.setAlgorithm(SignatureAlgorithm.ES384);
1431  tokenRequest.setCryptoProvider(cryptoProvider);
1432  tokenRequest.setKeyId("ES384SIG_INVALID_KEYID");
1433  tokenRequest.setAudience(tokenEndpoint);
1434 
1435  TokenClient tokenClient = new TokenClient(tokenEndpoint);
1436  tokenClient.setRequest(tokenRequest);
1437  TokenResponse tokenResponse = tokenClient.exec();
1438 
1439  showClient(tokenClient);
1440  assertEquals(tokenResponse.getStatus(), 401, "Unexpected response code: " + tokenResponse.getStatus());
1441  assertNotNull(tokenResponse.getErrorType());
1442  assertEquals(tokenResponse.getErrorType(), TokenErrorResponseType.INVALID_CLIENT);
1443  assertNotNull(tokenResponse.getErrorDescription());
1444  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
void setKeyId(String keyId)
Definition: TokenRequest.java:303
void setCryptoProvider(AbstractCryptoProvider cryptoProvider)
Definition: TokenRequest.java:295
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
Definition: RegisterResponse.java:34
void setAudience(String audience)
Definition: TokenRequest.java:273
T getErrorType()
Definition: BaseResponseWithErrors.java:48
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
void setJwksUri(String jwksUri)
Definition: RegisterRequest.java:454
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
ES384
Definition: SignatureAlgorithm.java:30
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: TokenErrorResponseType.java:14
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
PRIVATE_KEY_JWT
Definition: AuthenticationMethod.java:37
Definition: RegisterRequest.java:37
void setAlgorithm(SignatureAlgorithm algorithm)
Definition: TokenRequest.java:277
INVALID_CLIENT
Definition: TokenErrorResponseType.java:32
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getErrorDescription()
Definition: BaseResponseWithErrors.java:40
Definition: OxAuthCryptoProvider.java:62
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ privateKeyJwtAuthenticationMethodES512()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodES512 ( final String  redirectUris,
final String  clientJwksUri,
final String  keyId,
final String  dnName,
final String  keyStoreFile,
final String  keyStoreSecret,
final String  sectorIdentifierUri 
) throws Exception
inline
1450  {
1451  showTitle("privateKeyJwtAuthenticationMethodES512");
1452 
1453  List<String> scopes = Arrays.asList("clientinfo");
1454  List<GrantType> grantTypes = Arrays.asList(
1456  );
1457 
1458  // 1. Register client
1459  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
1460  StringUtils.spaceSeparatedToList(redirectUris));
1461  registerRequest.setScope(scopes);
1462  registerRequest.setGrantTypes(grantTypes);
1464  registerRequest.setJwksUri(clientJwksUri);
1465  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
1466 
1467  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
1468  registerClient.setRequest(registerRequest);
1469  RegisterResponse registerResponse = registerClient.exec();
1470 
1471  showClient(registerClient);
1472  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
1473  assertNotNull(registerResponse.getClientId());
1474  assertNotNull(registerResponse.getClientSecret());
1475  assertNotNull(registerResponse.getRegistrationAccessToken());
1476  assertNotNull(registerResponse.getClientIdIssuedAt());
1477  assertNotNull(registerResponse.getClientSecretExpiresAt());
1478 
1479  String clientId = registerResponse.getClientId();
1480 
1481  // 2. Request Client Credentials Grant
1482  OxAuthCryptoProvider cryptoProvider = new OxAuthCryptoProvider(keyStoreFile, keyStoreSecret, dnName);
1483 
1485  tokenRequest.setScope("clientinfo");
1486  tokenRequest.setAuthUsername(clientId);
1488  tokenRequest.setAlgorithm(SignatureAlgorithm.ES512);
1489  tokenRequest.setCryptoProvider(cryptoProvider);
1490  tokenRequest.setKeyId(keyId);
1491  tokenRequest.setAudience(tokenEndpoint);
1492 
1493  TokenClient tokenClient = new TokenClient(tokenEndpoint);
1494  tokenClient.setRequest(tokenRequest);
1495  TokenResponse tokenResponse = tokenClient.exec();
1496 
1497  showClient(tokenClient);
1498  assertEquals(tokenResponse.getStatus(), 200, "Unexpected response code: " + tokenResponse.getStatus());
1499  assertNotNull(tokenResponse.getEntity());
1500  assertNotNull(tokenResponse.getAccessToken());
1501  assertNotNull(tokenResponse.getTokenType());
1502  assertNotNull(tokenResponse.getScope());
1503  assertNull(tokenResponse.getRefreshToken());
1504 
1505  String accessToken = tokenResponse.getAccessToken();
1506 
1507  // 3. Request client info
1508  ClientInfoClient clientInfoClient = new ClientInfoClient(clientInfoEndpoint);
1509  ClientInfoResponse clientInfoResponse = clientInfoClient.execClientInfo(accessToken);
1510 
1511  showClient(clientInfoClient);
1512  assertEquals(clientInfoResponse.getStatus(), 200, "Unexpected response code: " + clientInfoResponse.getStatus());
1513  assertNotNull(clientInfoResponse.getClaim("displayName"), "Unexpected result: displayName not found");
1514  assertNotNull(clientInfoResponse.getClaim("inum"), "Unexpected result: inum not found");
1515  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
void setKeyId(String keyId)
Definition: TokenRequest.java:303
ES512
Definition: SignatureAlgorithm.java:31
void setCryptoProvider(AbstractCryptoProvider cryptoProvider)
Definition: TokenRequest.java:295
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
String clientInfoEndpoint
Definition: BaseTest.java:77
String getScope()
Definition: TokenResponse.java:163
Definition: RegisterResponse.java:34
void setAudience(String audience)
Definition: TokenRequest.java:273
void setGrantTypes(List< GrantType > grantTypes)
Definition: RegisterRequest.java:290
TokenType getTokenType()
Definition: TokenResponse.java:107
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
void setJwksUri(String jwksUri)
Definition: RegisterRequest.java:454
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
ClientInfoResponse execClientInfo(String accessToken)
Definition: ClientInfoClient.java:61
String getAccessToken()
Definition: TokenResponse.java:89
Definition: ClientInfoClient.java:31
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: ClientInfoResponse.java:20
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
PRIVATE_KEY_JWT
Definition: AuthenticationMethod.java:37
Definition: RegisterRequest.java:37
void setAlgorithm(SignatureAlgorithm algorithm)
Definition: TokenRequest.java:277
int getStatus()
Definition: BaseResponse.java:49
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getRefreshToken()
Definition: TokenResponse.java:144
Definition: OxAuthCryptoProvider.java:62
List< String > getClaim(String claimName)
Definition: ClientInfoResponse.java:109
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ privateKeyJwtAuthenticationMethodES512Fail()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodES512Fail ( final String  redirectUris,
final String  clientJwksUri,
final String  dnName,
final String  keyStoreFile,
final String  keyStoreSecret,
final String  sectorIdentifierUri 
) throws Exception
inline
1521  {
1522  showTitle("privateKeyJwtAuthenticationMethodES512Fail");
1523 
1524  List<String> scopes = Arrays.asList("clientinfo");
1525 
1526  // 1. Register client
1527  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
1528  StringUtils.spaceSeparatedToList(redirectUris));
1529  registerRequest.setScope(scopes);
1531  registerRequest.setJwksUri(clientJwksUri);
1532  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
1533 
1534  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
1535  registerClient.setRequest(registerRequest);
1536  RegisterResponse registerResponse = registerClient.exec();
1537 
1538  showClient(registerClient);
1539  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
1540  assertNotNull(registerResponse.getClientId());
1541  assertNotNull(registerResponse.getClientSecret());
1542  assertNotNull(registerResponse.getRegistrationAccessToken());
1543  assertNotNull(registerResponse.getClientIdIssuedAt());
1544  assertNotNull(registerResponse.getClientSecretExpiresAt());
1545 
1546  String clientId = registerResponse.getClientId();
1547 
1548  // 2. Request Client Credentials Grant
1549  OxAuthCryptoProvider cryptoProvider = new OxAuthCryptoProvider(keyStoreFile, keyStoreSecret, dnName);
1550 
1552  tokenRequest.setScope("clientinfo");
1553  tokenRequest.setAuthUsername(clientId);
1555  tokenRequest.setAlgorithm(SignatureAlgorithm.ES512);
1556  tokenRequest.setCryptoProvider(cryptoProvider);
1557  tokenRequest.setKeyId("ES512SIG_INVALID_KEYID");
1558  tokenRequest.setAudience(tokenEndpoint);
1559 
1560  TokenClient tokenClient = new TokenClient(tokenEndpoint);
1561  tokenClient.setRequest(tokenRequest);
1562  TokenResponse tokenResponse = tokenClient.exec();
1563 
1564  showClient(tokenClient);
1565  assertEquals(tokenResponse.getStatus(), 401, "Unexpected response code: " + tokenResponse.getStatus());
1566  assertNotNull(tokenResponse.getErrorType());
1567  assertEquals(tokenResponse.getErrorType(), TokenErrorResponseType.INVALID_CLIENT);
1568  assertNotNull(tokenResponse.getErrorDescription());
1569  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
void setKeyId(String keyId)
Definition: TokenRequest.java:303
ES512
Definition: SignatureAlgorithm.java:31
void setCryptoProvider(AbstractCryptoProvider cryptoProvider)
Definition: TokenRequest.java:295
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
Definition: RegisterResponse.java:34
void setAudience(String audience)
Definition: TokenRequest.java:273
T getErrorType()
Definition: BaseResponseWithErrors.java:48
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
void setJwksUri(String jwksUri)
Definition: RegisterRequest.java:454
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: TokenErrorResponseType.java:14
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
PRIVATE_KEY_JWT
Definition: AuthenticationMethod.java:37
Definition: RegisterRequest.java:37
void setAlgorithm(SignatureAlgorithm algorithm)
Definition: TokenRequest.java:277
INVALID_CLIENT
Definition: TokenErrorResponseType.java:32
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getErrorDescription()
Definition: BaseResponseWithErrors.java:40
Definition: OxAuthCryptoProvider.java:62
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ privateKeyJwtAuthenticationMethodRS256()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodRS256 ( final String  redirectUris,
final String  clientJwksUri,
final String  keyId,
final String  dnName,
final String  keyStoreFile,
final String  keyStoreSecret,
final String  sectorIdentifierUri 
) throws Exception
inline
825  {
826  showTitle("privateKeyJwtAuthenticationMethodRS256");
827 
828  List<String> scopes = Arrays.asList("clientinfo");
829  List<GrantType> grantTypes = Arrays.asList(
831  );
832 
833  // 1. Register client
834  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
835  StringUtils.spaceSeparatedToList(redirectUris));
836  registerRequest.setScope(scopes);
837  registerRequest.setGrantTypes(grantTypes);
839  registerRequest.setJwksUri(clientJwksUri);
840  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
841 
842  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
843  registerClient.setRequest(registerRequest);
844  RegisterResponse registerResponse = registerClient.exec();
845 
846  showClient(registerClient);
847  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
848  assertNotNull(registerResponse.getClientId());
849  assertNotNull(registerResponse.getClientSecret());
850  assertNotNull(registerResponse.getRegistrationAccessToken());
851  assertNotNull(registerResponse.getClientIdIssuedAt());
852  assertNotNull(registerResponse.getClientSecretExpiresAt());
853 
854  String clientId = registerResponse.getClientId();
855 
856  // 2. Request Client Credentials Grant
857  OxAuthCryptoProvider cryptoProvider = new OxAuthCryptoProvider(keyStoreFile, keyStoreSecret, dnName);
858 
860  tokenRequest.setScope("clientinfo");
861  tokenRequest.setAuthUsername(clientId);
863  tokenRequest.setAlgorithm(SignatureAlgorithm.RS256);
864  tokenRequest.setCryptoProvider(cryptoProvider);
865  tokenRequest.setKeyId(keyId);
866  tokenRequest.setAudience(tokenEndpoint);
867 
868  TokenClient tokenClient = new TokenClient(tokenEndpoint);
869  tokenClient.setRequest(tokenRequest);
870  TokenResponse tokenResponse = tokenClient.exec();
871 
872  showClient(tokenClient);
873  assertEquals(tokenResponse.getStatus(), 200, "Unexpected response code: " + tokenResponse.getStatus());
874  assertNotNull(tokenResponse.getEntity());
875  assertNotNull(tokenResponse.getAccessToken());
876  assertNotNull(tokenResponse.getTokenType());
877  assertNotNull(tokenResponse.getScope());
878  assertNull(tokenResponse.getRefreshToken());
879 
880  String accessToken = tokenResponse.getAccessToken();
881 
882  // 3. Request client info
883  ClientInfoClient clientInfoClient = new ClientInfoClient(clientInfoEndpoint);
884  ClientInfoResponse clientInfoResponse = clientInfoClient.execClientInfo(accessToken);
885 
886  showClient(clientInfoClient);
887  assertEquals(clientInfoResponse.getStatus(), 200, "Unexpected response code: " + clientInfoResponse.getStatus());
888  assertNotNull(clientInfoResponse.getClaim("displayName"), "Unexpected result: displayName not found");
889  assertNotNull(clientInfoResponse.getClaim("inum"), "Unexpected result: inum not found");
890  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
void setKeyId(String keyId)
Definition: TokenRequest.java:303
void setCryptoProvider(AbstractCryptoProvider cryptoProvider)
Definition: TokenRequest.java:295
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
String clientInfoEndpoint
Definition: BaseTest.java:77
String getScope()
Definition: TokenResponse.java:163
Definition: RegisterResponse.java:34
void setAudience(String audience)
Definition: TokenRequest.java:273
void setGrantTypes(List< GrantType > grantTypes)
Definition: RegisterRequest.java:290
TokenType getTokenType()
Definition: TokenResponse.java:107
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
void setJwksUri(String jwksUri)
Definition: RegisterRequest.java:454
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
ClientInfoResponse execClientInfo(String accessToken)
Definition: ClientInfoClient.java:61
String getAccessToken()
Definition: TokenResponse.java:89
Definition: ClientInfoClient.java:31
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
RS256
Definition: SignatureAlgorithm.java:26
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: ClientInfoResponse.java:20
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
PRIVATE_KEY_JWT
Definition: AuthenticationMethod.java:37
Definition: RegisterRequest.java:37
void setAlgorithm(SignatureAlgorithm algorithm)
Definition: TokenRequest.java:277
int getStatus()
Definition: BaseResponse.java:49
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getRefreshToken()
Definition: TokenResponse.java:144
Definition: OxAuthCryptoProvider.java:62
List< String > getClaim(String claimName)
Definition: ClientInfoResponse.java:109
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ privateKeyJwtAuthenticationMethodRS256Fail()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodRS256Fail ( final String  redirectUris,
final String  clientJwksUri,
final String  dnName,
final String  keyStoreFile,
final String  keyStoreSecret,
final String  sectorIdentifierUri 
) throws Exception
inline
896  {
897  showTitle("privateKeyJwtAuthenticationMethodRS256Fail");
898 
899  List<String> scopes = Arrays.asList("clientinfo");
900 
901  // 1. Register client
902  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
903  StringUtils.spaceSeparatedToList(redirectUris));
904  registerRequest.setScope(scopes);
906  registerRequest.setJwksUri(clientJwksUri);
907  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
908 
909  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
910  registerClient.setRequest(registerRequest);
911  RegisterResponse registerResponse = registerClient.exec();
912 
913  showClient(registerClient);
914  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
915  assertNotNull(registerResponse.getClientId());
916  assertNotNull(registerResponse.getClientSecret());
917  assertNotNull(registerResponse.getRegistrationAccessToken());
918  assertNotNull(registerResponse.getClientIdIssuedAt());
919  assertNotNull(registerResponse.getClientSecretExpiresAt());
920 
921  String clientId = registerResponse.getClientId();
922 
923  // 2. Request Client Credentials Grant
924  OxAuthCryptoProvider cryptoProvider = new OxAuthCryptoProvider(keyStoreFile, keyStoreSecret, dnName);
925 
927  tokenRequest.setScope("clientinfo");
928  tokenRequest.setAuthUsername(clientId);
930  tokenRequest.setAlgorithm(SignatureAlgorithm.RS256);
931  tokenRequest.setCryptoProvider(cryptoProvider);
932  tokenRequest.setKeyId("RS256SIG_INVALID_KEYID");
933  tokenRequest.setAudience(tokenEndpoint);
934 
935  TokenClient tokenClient = new TokenClient(tokenEndpoint);
936  tokenClient.setRequest(tokenRequest);
937  TokenResponse tokenResponse = tokenClient.exec();
938 
939  showClient(tokenClient);
940  assertEquals(tokenResponse.getStatus(), 401, "Unexpected response code: " + tokenResponse.getStatus());
941  assertNotNull(tokenResponse.getErrorType());
942  assertEquals(tokenResponse.getErrorType(), TokenErrorResponseType.INVALID_CLIENT);
943  assertNotNull(tokenResponse.getErrorDescription());
944  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
void setKeyId(String keyId)
Definition: TokenRequest.java:303
void setCryptoProvider(AbstractCryptoProvider cryptoProvider)
Definition: TokenRequest.java:295
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
Definition: RegisterResponse.java:34
void setAudience(String audience)
Definition: TokenRequest.java:273
T getErrorType()
Definition: BaseResponseWithErrors.java:48
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
void setJwksUri(String jwksUri)
Definition: RegisterRequest.java:454
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
RS256
Definition: SignatureAlgorithm.java:26
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: TokenErrorResponseType.java:14
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
PRIVATE_KEY_JWT
Definition: AuthenticationMethod.java:37
Definition: RegisterRequest.java:37
void setAlgorithm(SignatureAlgorithm algorithm)
Definition: TokenRequest.java:277
INVALID_CLIENT
Definition: TokenErrorResponseType.java:32
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getErrorDescription()
Definition: BaseResponseWithErrors.java:40
Definition: OxAuthCryptoProvider.java:62
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ privateKeyJwtAuthenticationMethodRS384()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodRS384 ( final String  redirectUris,
final String  clientJwksUri,
final String  keyId,
final String  dnName,
final String  keyStoreFile,
final String  keyStoreSecret,
final String  sectorIdentifierUri 
) throws Exception
inline
950  {
951  showTitle("privateKeyJwtAuthenticationMethodRS384");
952 
953  List<String> scopes = Arrays.asList("clientinfo");
954  List<GrantType> grantTypes = Arrays.asList(
956  );
957 
958  // 1. Register client
959  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
960  StringUtils.spaceSeparatedToList(redirectUris));
961  registerRequest.setScope(scopes);
962  registerRequest.setGrantTypes(grantTypes);
964  registerRequest.setJwksUri(clientJwksUri);
965  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
966 
967  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
968  registerClient.setRequest(registerRequest);
969  RegisterResponse registerResponse = registerClient.exec();
970 
971  showClient(registerClient);
972  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
973  assertNotNull(registerResponse.getClientId());
974  assertNotNull(registerResponse.getClientSecret());
975  assertNotNull(registerResponse.getRegistrationAccessToken());
976  assertNotNull(registerResponse.getClientIdIssuedAt());
977  assertNotNull(registerResponse.getClientSecretExpiresAt());
978 
979  String clientId = registerResponse.getClientId();
980 
981  // 2. Request Client Credentials Grant
982  OxAuthCryptoProvider cryptoProvider = new OxAuthCryptoProvider(keyStoreFile, keyStoreSecret, dnName);
983 
985  tokenRequest.setScope("clientinfo");
986  tokenRequest.setAuthUsername(clientId);
988  tokenRequest.setAlgorithm(SignatureAlgorithm.RS384);
989  tokenRequest.setCryptoProvider(cryptoProvider);
990  tokenRequest.setKeyId(keyId);
991  tokenRequest.setAudience(tokenEndpoint);
992 
993  TokenClient tokenClient = new TokenClient(tokenEndpoint);
994  tokenClient.setRequest(tokenRequest);
995  TokenResponse tokenResponse = tokenClient.exec();
996 
997  showClient(tokenClient);
998  assertEquals(tokenResponse.getStatus(), 200, "Unexpected response code: " + tokenResponse.getStatus());
999  assertNotNull(tokenResponse.getEntity());
1000  assertNotNull(tokenResponse.getAccessToken());
1001  assertNotNull(tokenResponse.getTokenType());
1002  assertNotNull(tokenResponse.getScope());
1003  assertNull(tokenResponse.getRefreshToken());
1004 
1005  String accessToken = tokenResponse.getAccessToken();
1006 
1007  // 3. Request client info
1008  ClientInfoClient clientInfoClient = new ClientInfoClient(clientInfoEndpoint);
1009  ClientInfoResponse clientInfoResponse = clientInfoClient.execClientInfo(accessToken);
1010 
1011  showClient(clientInfoClient);
1012  assertEquals(clientInfoResponse.getStatus(), 200, "Unexpected response code: " + clientInfoResponse.getStatus());
1013  assertNotNull(clientInfoResponse.getClaim("displayName"), "Unexpected result: displayName not found");
1014  assertNotNull(clientInfoResponse.getClaim("inum"), "Unexpected result: inum not found");
1015  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
void setKeyId(String keyId)
Definition: TokenRequest.java:303
void setCryptoProvider(AbstractCryptoProvider cryptoProvider)
Definition: TokenRequest.java:295
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
String clientInfoEndpoint
Definition: BaseTest.java:77
String getScope()
Definition: TokenResponse.java:163
RS384
Definition: SignatureAlgorithm.java:27
Definition: RegisterResponse.java:34
void setAudience(String audience)
Definition: TokenRequest.java:273
void setGrantTypes(List< GrantType > grantTypes)
Definition: RegisterRequest.java:290
TokenType getTokenType()
Definition: TokenResponse.java:107
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
void setJwksUri(String jwksUri)
Definition: RegisterRequest.java:454
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
ClientInfoResponse execClientInfo(String accessToken)
Definition: ClientInfoClient.java:61
String getAccessToken()
Definition: TokenResponse.java:89
Definition: ClientInfoClient.java:31
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: ClientInfoResponse.java:20
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
PRIVATE_KEY_JWT
Definition: AuthenticationMethod.java:37
Definition: RegisterRequest.java:37
void setAlgorithm(SignatureAlgorithm algorithm)
Definition: TokenRequest.java:277
int getStatus()
Definition: BaseResponse.java:49
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getRefreshToken()
Definition: TokenResponse.java:144
Definition: OxAuthCryptoProvider.java:62
List< String > getClaim(String claimName)
Definition: ClientInfoResponse.java:109
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ privateKeyJwtAuthenticationMethodRS384Fail()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodRS384Fail ( final String  redirectUris,
final String  clientJwksUri,
final String  dnName,
final String  keyStoreFile,
final String  keyStoreSecret,
final String  sectorIdentifierUri 
) throws Exception
inline
1021  {
1022  showTitle("privateKeyJwtAuthenticationMethodRS384Fail");
1023 
1024  List<String> scopes = Arrays.asList("clientinfo");
1025 
1026  // 1. Register client
1027  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
1028  StringUtils.spaceSeparatedToList(redirectUris));
1029  registerRequest.setScope(scopes);
1031  registerRequest.setJwksUri(clientJwksUri);
1032  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
1033 
1034  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
1035  registerClient.setRequest(registerRequest);
1036  RegisterResponse registerResponse = registerClient.exec();
1037 
1038  showClient(registerClient);
1039  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
1040  assertNotNull(registerResponse.getClientId());
1041  assertNotNull(registerResponse.getClientSecret());
1042  assertNotNull(registerResponse.getRegistrationAccessToken());
1043  assertNotNull(registerResponse.getClientIdIssuedAt());
1044  assertNotNull(registerResponse.getClientSecretExpiresAt());
1045 
1046  String clientId = registerResponse.getClientId();
1047 
1048  // 2. Request Client Credentials Grant
1049  OxAuthCryptoProvider cryptoProvider = new OxAuthCryptoProvider(keyStoreFile, keyStoreSecret, dnName);
1050 
1052  tokenRequest.setScope("clientinfo");
1053  tokenRequest.setAuthUsername(clientId);
1055  tokenRequest.setAlgorithm(SignatureAlgorithm.RS384);
1056  tokenRequest.setCryptoProvider(cryptoProvider);
1057  tokenRequest.setKeyId("RS384SIG_INVALID_KEYID");
1058  tokenRequest.setAudience(tokenEndpoint);
1059 
1060  TokenClient tokenClient = new TokenClient(tokenEndpoint);
1061  tokenClient.setRequest(tokenRequest);
1062  TokenResponse tokenResponse = tokenClient.exec();
1063 
1064  showClient(tokenClient);
1065  assertEquals(tokenResponse.getStatus(), 401, "Unexpected response code: " + tokenResponse.getStatus());
1066  assertNotNull(tokenResponse.getErrorType());
1067  assertEquals(tokenResponse.getErrorType(), TokenErrorResponseType.INVALID_CLIENT);
1068  assertNotNull(tokenResponse.getErrorDescription());
1069  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
void setKeyId(String keyId)
Definition: TokenRequest.java:303
void setCryptoProvider(AbstractCryptoProvider cryptoProvider)
Definition: TokenRequest.java:295
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
RS384
Definition: SignatureAlgorithm.java:27
Definition: RegisterResponse.java:34
void setAudience(String audience)
Definition: TokenRequest.java:273
T getErrorType()
Definition: BaseResponseWithErrors.java:48
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
void setJwksUri(String jwksUri)
Definition: RegisterRequest.java:454
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: TokenErrorResponseType.java:14
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
PRIVATE_KEY_JWT
Definition: AuthenticationMethod.java:37
Definition: RegisterRequest.java:37
void setAlgorithm(SignatureAlgorithm algorithm)
Definition: TokenRequest.java:277
INVALID_CLIENT
Definition: TokenErrorResponseType.java:32
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getErrorDescription()
Definition: BaseResponseWithErrors.java:40
Definition: OxAuthCryptoProvider.java:62
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ privateKeyJwtAuthenticationMethodRS512()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodRS512 ( final String  redirectUris,
final String  clientJwksUri,
final String  keyId,
final String  dnName,
final String  keyStoreFile,
final String  keyStoreSecret,
final String  sectorIdentifierUri 
) throws Exception
inline
1075  {
1076  showTitle("privateKeyJwtAuthenticationMethodRS512");
1077 
1078  List<String> scopes = Arrays.asList("clientinfo");
1079  List<GrantType> grantTypes = Arrays.asList(
1081  );
1082 
1083  // 1. Register client
1084  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
1085  StringUtils.spaceSeparatedToList(redirectUris));
1086  registerRequest.setScope(scopes);
1087  registerRequest.setGrantTypes(grantTypes);
1089  registerRequest.setJwksUri(clientJwksUri);
1090  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
1091 
1092  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
1093  registerClient.setRequest(registerRequest);
1094  RegisterResponse registerResponse = registerClient.exec();
1095 
1096  showClient(registerClient);
1097  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
1098  assertNotNull(registerResponse.getClientId());
1099  assertNotNull(registerResponse.getClientSecret());
1100  assertNotNull(registerResponse.getRegistrationAccessToken());
1101  assertNotNull(registerResponse.getClientIdIssuedAt());
1102  assertNotNull(registerResponse.getClientSecretExpiresAt());
1103 
1104  String clientId = registerResponse.getClientId();
1105 
1106  // 2. Request Client Credentials Grant
1107  OxAuthCryptoProvider cryptoProvider = new OxAuthCryptoProvider(keyStoreFile, keyStoreSecret, dnName);
1108 
1110  tokenRequest.setScope("clientinfo");
1111  tokenRequest.setAuthUsername(clientId);
1113  tokenRequest.setAlgorithm(SignatureAlgorithm.RS512);
1114  tokenRequest.setCryptoProvider(cryptoProvider);
1115  tokenRequest.setKeyId(keyId);
1116  tokenRequest.setAudience(tokenEndpoint);
1117 
1118  TokenClient tokenClient = new TokenClient(tokenEndpoint);
1119  tokenClient.setRequest(tokenRequest);
1120  TokenResponse tokenResponse = tokenClient.exec();
1121 
1122  showClient(tokenClient);
1123  assertEquals(tokenResponse.getStatus(), 200, "Unexpected response code: " + tokenResponse.getStatus());
1124  assertNotNull(tokenResponse.getEntity());
1125  assertNotNull(tokenResponse.getAccessToken());
1126  assertNotNull(tokenResponse.getTokenType());
1127  assertNotNull(tokenResponse.getScope());
1128  assertNull(tokenResponse.getRefreshToken());
1129 
1130  String accessToken = tokenResponse.getAccessToken();
1131 
1132  // 3. Request client info
1133  ClientInfoClient clientInfoClient = new ClientInfoClient(clientInfoEndpoint);
1134  ClientInfoResponse clientInfoResponse = clientInfoClient.execClientInfo(accessToken);
1135 
1136  showClient(clientInfoClient);
1137  assertEquals(clientInfoResponse.getStatus(), 200, "Unexpected response code: " + clientInfoResponse.getStatus());
1138  assertNotNull(clientInfoResponse.getClaim("displayName"), "Unexpected result: displayName not found");
1139  assertNotNull(clientInfoResponse.getClaim("inum"), "Unexpected result: inum not found");
1140  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
void setKeyId(String keyId)
Definition: TokenRequest.java:303
void setCryptoProvider(AbstractCryptoProvider cryptoProvider)
Definition: TokenRequest.java:295
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
String clientInfoEndpoint
Definition: BaseTest.java:77
String getScope()
Definition: TokenResponse.java:163
Definition: RegisterResponse.java:34
void setAudience(String audience)
Definition: TokenRequest.java:273
void setGrantTypes(List< GrantType > grantTypes)
Definition: RegisterRequest.java:290
TokenType getTokenType()
Definition: TokenResponse.java:107
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
void setJwksUri(String jwksUri)
Definition: RegisterRequest.java:454
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
ClientInfoResponse execClientInfo(String accessToken)
Definition: ClientInfoClient.java:61
String getAccessToken()
Definition: TokenResponse.java:89
Definition: ClientInfoClient.java:31
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: ClientInfoResponse.java:20
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
PRIVATE_KEY_JWT
Definition: AuthenticationMethod.java:37
Definition: RegisterRequest.java:37
RS512
Definition: SignatureAlgorithm.java:28
void setAlgorithm(SignatureAlgorithm algorithm)
Definition: TokenRequest.java:277
int getStatus()
Definition: BaseResponse.java:49
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getRefreshToken()
Definition: TokenResponse.java:144
Definition: OxAuthCryptoProvider.java:62
List< String > getClaim(String claimName)
Definition: ClientInfoResponse.java:109
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ privateKeyJwtAuthenticationMethodRS512Fail()

void org.xdi.oxauth.ws.rs.ClientCredentialsGrantHttpTest.privateKeyJwtAuthenticationMethodRS512Fail ( final String  redirectUris,
final String  clientJwksUri,
final String  dnName,
final String  keyStoreFile,
final String  keyStoreSecret,
final String  sectorIdentifierUri 
) throws Exception
inline
1146  {
1147  showTitle("privateKeyJwtAuthenticationMethodRS512Fail");
1148 
1149  List<String> scopes = Arrays.asList("clientinfo");
1150 
1151  // 1. Register client
1152  RegisterRequest registerRequest = new RegisterRequest(ApplicationType.WEB, "oxAuth test app",
1153  StringUtils.spaceSeparatedToList(redirectUris));
1154  registerRequest.setScope(scopes);
1156  registerRequest.setJwksUri(clientJwksUri);
1157  registerRequest.setSectorIdentifierUri(sectorIdentifierUri);
1158 
1159  RegisterClient registerClient = new RegisterClient(registrationEndpoint);
1160  registerClient.setRequest(registerRequest);
1161  RegisterResponse registerResponse = registerClient.exec();
1162 
1163  showClient(registerClient);
1164  assertEquals(registerResponse.getStatus(), 200, "Unexpected response code: " + registerResponse.getEntity());
1165  assertNotNull(registerResponse.getClientId());
1166  assertNotNull(registerResponse.getClientSecret());
1167  assertNotNull(registerResponse.getRegistrationAccessToken());
1168  assertNotNull(registerResponse.getClientIdIssuedAt());
1169  assertNotNull(registerResponse.getClientSecretExpiresAt());
1170 
1171  String clientId = registerResponse.getClientId();
1172 
1173  // 2. Request Client Credentials Grant
1174  OxAuthCryptoProvider cryptoProvider = new OxAuthCryptoProvider(keyStoreFile, keyStoreSecret, dnName);
1175 
1177  tokenRequest.setScope("clientinfo");
1178  tokenRequest.setAuthUsername(clientId);
1180  tokenRequest.setAlgorithm(SignatureAlgorithm.RS512);
1181  tokenRequest.setCryptoProvider(cryptoProvider);
1182  tokenRequest.setKeyId("RS512SIG_INVALID_KEYID");
1183  tokenRequest.setAudience(tokenEndpoint);
1184 
1185  TokenClient tokenClient = new TokenClient(tokenEndpoint);
1186  tokenClient.setRequest(tokenRequest);
1187  TokenResponse tokenResponse = tokenClient.exec();
1188 
1189  showClient(tokenClient);
1190  assertEquals(tokenResponse.getStatus(), 401, "Unexpected response code: " + tokenResponse.getStatus());
1191  assertNotNull(tokenResponse.getErrorType());
1192  assertEquals(tokenResponse.getErrorType(), TokenErrorResponseType.INVALID_CLIENT);
1193  assertNotNull(tokenResponse.getErrorDescription());
1194  }
void setTokenEndpointAuthMethod(AuthenticationMethod tokenEndpointAuthMethod)
Definition: RegisterRequest.java:722
String registrationEndpoint
Definition: BaseTest.java:81
Definition: RegisterClient.java:34
void setScope(String scope)
Definition: TokenRequest.java:233
void setKeyId(String keyId)
Definition: TokenRequest.java:303
void setCryptoProvider(AbstractCryptoProvider cryptoProvider)
Definition: TokenRequest.java:295
Definition: TokenClient.java:24
void setAuthUsername(String authUsername)
Definition: BaseRequest.java:62
Definition: RegisterResponse.java:34
void setAudience(String audience)
Definition: TokenRequest.java:273
T getErrorType()
Definition: BaseResponseWithErrors.java:48
void setSectorIdentifierUri(String sectorIdentifierUri)
Definition: RegisterRequest.java:504
Definition: SignatureAlgorithm.java:20
static void showClient(BaseClient client)
Definition: BaseTest.java:775
Definition: GrantType.java:23
String tokenEndpoint
Definition: BaseTest.java:75
Definition: TokenRequest.java:34
void setJwksUri(String jwksUri)
Definition: RegisterRequest.java:454
Date getClientSecretExpiresAt()
Definition: RegisterResponse.java:205
RegisterResponse exec()
Definition: RegisterClient.java:76
String getClientSecret()
Definition: RegisterResponse.java:160
WEB
Definition: ApplicationType.java:28
CLIENT_CREDENTIALS
Definition: GrantType.java:64
Definition: TokenResponse.java:22
String getClientId()
Definition: RegisterResponse.java:142
TokenResponse exec()
Definition: TokenClient.java:218
void setScope(List< String > scope)
Definition: RegisterRequest.java:895
Definition: TokenErrorResponseType.java:14
void showTitle(String title)
Definition: BaseTest.java:761
void setRequest(T request)
Definition: BaseClient.java:68
void setAuthenticationMethod(AuthenticationMethod authenticationMethod)
Definition: BaseRequest.java:78
PRIVATE_KEY_JWT
Definition: AuthenticationMethod.java:37
Definition: RegisterRequest.java:37
RS512
Definition: SignatureAlgorithm.java:28
void setAlgorithm(SignatureAlgorithm algorithm)
Definition: TokenRequest.java:277
INVALID_CLIENT
Definition: TokenErrorResponseType.java:32
Definition: ApplicationType.java:12
Date getClientIdIssuedAt()
Definition: RegisterResponse.java:189
Definition: AuthenticationMethod.java:12
String getErrorDescription()
Definition: BaseResponseWithErrors.java:40
Definition: OxAuthCryptoProvider.java:62
String getRegistrationAccessToken()
Definition: RegisterResponse.java:173

◆ setAuthorizationEndpoint()

void org.xdi.oxauth.BaseTest.setAuthorizationEndpoint ( String  authorizationEndpoint)
inlineinherited
138  {
140  }
String authorizationEndpoint
Definition: BaseTest.java:72

◆ setCheckSessionIFrame()

void org.xdi.oxauth.BaseTest.setCheckSessionIFrame ( String  checkSessionIFrame)
inlineinherited
170  {
172  }
String checkSessionIFrame
Definition: BaseTest.java:78

◆ setClientInfoEndpoint()

void org.xdi.oxauth.BaseTest.setClientInfoEndpoint ( String  clientInfoEndpoint)
inlineinherited
162  {
164  }
String clientInfoEndpoint
Definition: BaseTest.java:77

◆ setConfigurationEndpoint()

void org.xdi.oxauth.BaseTest.setConfigurationEndpoint ( String  configurationEndpoint)
inlineinherited
226  {
228  }
String configurationEndpoint
Definition: BaseTest.java:82

◆ setDriver()

void org.xdi.oxauth.BaseTest.setDriver ( WebDriver  driver)
inlineinherited
130  {
131  this.driver = driver;
132  }
WebDriver driver
Definition: BaseTest.java:70

◆ setEndSessionEndpoint()

void org.xdi.oxauth.BaseTest.setEndSessionEndpoint ( String  endSessionEndpoint)
inlineinherited
178  {
180  }
String endSessionEndpoint
Definition: BaseTest.java:79

◆ setIdGenEndpoint()

void org.xdi.oxauth.BaseTest.setIdGenEndpoint ( String  p_idGenEndpoint)
inlineinherited
218  {
219  idGenEndpoint = p_idGenEndpoint;
220  }
String idGenEndpoint
Definition: BaseTest.java:83

◆ setIntrospectionEndpoint()

void org.xdi.oxauth.BaseTest.setIntrospectionEndpoint ( String  p_introspectionEndpoint)
inlineinherited
202  {
203  introspectionEndpoint = p_introspectionEndpoint;
204  }
String introspectionEndpoint
Definition: BaseTest.java:84

◆ setJwksUri()

void org.xdi.oxauth.BaseTest.setJwksUri ( String  jwksUri)
inlineinherited
186  {
187  this.jwksUri = jwksUri;
188  }
String jwksUri
Definition: BaseTest.java:80

◆ setRegistrationEndpoint()

void org.xdi.oxauth.BaseTest.setRegistrationEndpoint ( String  registrationEndpoint)
inlineinherited
194  {
196  }
String registrationEndpoint
Definition: BaseTest.java:81

◆ setScopeToClaimsMapping()

void org.xdi.oxauth.BaseTest.setScopeToClaimsMapping ( Map< String, List< String >>  p_scopeToClaimsMapping)
inlineinherited
210  {
211  scopeToClaimsMapping = p_scopeToClaimsMapping;
212  }
Map< String, List< String > > scopeToClaimsMapping
Definition: BaseTest.java:85

◆ setTokenEndpoint()

void org.xdi.oxauth.BaseTest.setTokenEndpoint ( String  tokenEndpoint)
inlineinherited
146  {
148  }
String tokenEndpoint
Definition: BaseTest.java:75

◆ setUserInfoEndpoint()

void org.xdi.oxauth.BaseTest.setUserInfoEndpoint ( String  userInfoEndpoint)
inlineinherited
154  {
156  }
String userInfoEndpoint
Definition: BaseTest.java:76

◆ showClient() [1/2]

static void org.xdi.oxauth.BaseTest.showClient ( BaseClient  client)
inlinestaticinherited
775  {
776  ClientUtils.showClient(client);
777  }
Definition: ClientUtils.java:17
static void showClient(BaseClient client)
Definition: ClientUtils.java:21

◆ showClient() [2/2]

static void org.xdi.oxauth.BaseTest.showClient ( BaseClient  client,
CookieStore  cookieStore 
)
inlinestaticinherited
779  {
780  ClientUtils.showClient(client, cookieStore);
781  }
Definition: ClientUtils.java:17
static void showClient(BaseClient client)
Definition: ClientUtils.java:21

◆ showClientUserAgent()

static void org.xdi.oxauth.BaseTest.showClientUserAgent ( BaseClient  client)
inlinestaticinherited
783  {
785  }
Definition: ClientUtils.java:17
static void showClientUserAgent(BaseClient client)
Definition: ClientUtils.java:35

◆ showEntity()

void org.xdi.oxauth.BaseTest.showEntity ( String  entity)
inlineinherited
769  {
770  if (entity != null) {
771  System.out.println("Entity: " + entity.replace("\\n", "\n"));
772  }
773  }

◆ showResponse() [1/2]

void org.xdi.oxauth.BaseTest.showResponse ( String  title,
Response  response 
)
inlineinherited
30  {
31  showResponse(title, response, null);
32  }
void showResponse(String title, Response response)
Definition: BaseTest.java:30

◆ showResponse() [2/2]

static void org.xdi.oxauth.BaseTest.showResponse ( String  title,
Response  response,
Object  entity 
)
inlinestaticinherited
34  {
35  System.out.println(" ");
36  System.out.println("RESPONSE FOR: " + title);
37  System.out.println(response.getStatus());
38  for (Entry<String, List<Object>> headers : response.getHeaders().entrySet()) {
39  String headerName = headers.getKey();
40  System.out.println(headerName + ": " + headers.getValue());
41  }
42 
43  if (entity != null) {
44  System.out.println(entity.toString().replace("\\n", "\n"));
45  }
46  System.out.println(" ");
47  System.out.println("Status message: " + response.getStatus());
48  }

◆ showTitle() [1/2]

void org.xdi.oxauth.BaseTest.showTitle ( String  title)
inlineinherited
22  {
23  title = "TEST: " + title;
24 
25  System.out.println("#######################################################");
26  System.out.println(title);
27  System.out.println("#######################################################");
28  }

◆ showTitle() [2/2]

void org.xdi.oxauth.BaseTest.showTitle ( String  title)
inlineinherited
761  {
762  title = "TEST: " + title;
763 
764  System.out.println("#######################################################");
765  System.out.println(title);
766  System.out.println("#######################################################");
767  }

◆ startSelenium()

void org.xdi.oxauth.BaseTest.startSelenium ( )
inlineinherited
230  {
231  //System.setProperty("webdriver.chrome.driver", "/Users/JAVIER/tmp/chromedriver");
232  //driver = new ChromeDriver();
233 
234  //driver = new SafariDriver();
235 
236  //driver = new FirefoxDriver();
237 
238  //driver = new InternetExplorerDriver();
239 
240  driver = new HtmlUnitDriver(true);
241  }
WebDriver driver
Definition: BaseTest.java:70

◆ stopSelenium()

void org.xdi.oxauth.BaseTest.stopSelenium ( )
inlineinherited
243  {
244 // driver.close();
245  driver.quit();
246  }
WebDriver driver
Definition: BaseTest.java:70

◆ waitForResourceOwnerAndGrantLoginForm() [1/2]

String org.xdi.oxauth.BaseTest.waitForResourceOwnerAndGrantLoginForm ( String  authorizeUrl,
AuthorizationRequest  authorizationRequest,
boolean  cleanupCookies 
)
inlineinherited

Try to open login form (via the user-agent)

617  {
618  String authorizationRequestUrl = authorizeUrl + "?" + authorizationRequest.getQueryString();
619 
620  AuthorizeClient authorizeClient = new AuthorizeClient(authorizeUrl);
621  authorizeClient.setRequest(authorizationRequest);
622 
623  System.out.println("waitForResourceOwnerAndGrantLoginForm: authorizationRequestUrl:" + authorizationRequestUrl);
624  startSelenium();
625  if (cleanupCookies) {
626  System.out.println("waitForResourceOwnerAndGrantLoginForm: Cleaning cookies");
628  }
629  driver.navigate().to(authorizationRequestUrl);
630 
631  WebElement usernameElement = driver.findElement(By.name(loginFormUsername));
632  WebElement passwordElement = driver.findElement(By.name(loginFormPassword));
633  WebElement loginButton = driver.findElement(By.name(loginFormLoginButton));
634 
635  if ((usernameElement == null) || (passwordElement == null) || (loginButton == null)) {
636  return null;
637  }
638 
639  Cookie sessionStateCookie = driver.manage().getCookieNamed("session_state");
640  String sessionState = null;
641  if (sessionStateCookie != null) {
642  sessionState = sessionStateCookie.getValue();
643  }
644  System.out.println("waitForResourceOwnerAndGrantLoginForm: sessionState:" + sessionState);
645 
646  stopSelenium();
647 
648  showClientUserAgent(authorizeClient);
649 
650  return sessionState;
651  }
String loginFormUsername
Definition: BaseTest.java:88
String loginFormPassword
Definition: BaseTest.java:89
void deleteAllCookies()
Definition: BaseTest.java:661
void stopSelenium()
Definition: BaseTest.java:243
Definition: AuthorizeClient.java:29
void startSelenium()
Definition: BaseTest.java:230
String loginFormLoginButton
Definition: BaseTest.java:90
void setRequest(T request)
Definition: BaseClient.java:68
WebDriver driver
Definition: BaseTest.java:70
String getQueryString()
Definition: AuthorizationRequest.java:486
static void showClientUserAgent(BaseClient client)
Definition: BaseTest.java:783

◆ waitForResourceOwnerAndGrantLoginForm() [2/2]

String org.xdi.oxauth.BaseTest.waitForResourceOwnerAndGrantLoginForm ( String  authorizeUrl,
AuthorizationRequest  authorizationRequest 
)
inlineinherited

Try to open login form (via the user-agent)

657  {
658  return waitForResourceOwnerAndGrantLoginForm(authorizeUrl, authorizationRequest, true);
659  }
String waitForResourceOwnerAndGrantLoginForm(String authorizeUrl, AuthorizationRequest authorizationRequest, boolean cleanupCookies)
Definition: BaseTest.java:616

メンバ詳解

◆ authorizationEndpoint

String org.xdi.oxauth.BaseTest.authorizationEndpoint
protectedinherited

◆ authorizationPageEndpoint

String org.xdi.oxauth.BaseTest.authorizationPageEndpoint
protectedinherited

◆ checkSessionIFrame

String org.xdi.oxauth.BaseTest.checkSessionIFrame
protectedinherited

◆ clientInfoEndpoint

String org.xdi.oxauth.BaseTest.clientInfoEndpoint
protectedinherited

◆ configurationEndpoint

String org.xdi.oxauth.BaseTest.configurationEndpoint
protectedinherited

◆ driver

WebDriver org.xdi.oxauth.BaseTest.driver
protectedinherited

◆ endSessionEndpoint

String org.xdi.oxauth.BaseTest.endSessionEndpoint
protectedinherited

◆ gluuConfigurationEndpoint

String org.xdi.oxauth.BaseTest.gluuConfigurationEndpoint
protectedinherited

◆ idGenEndpoint

String org.xdi.oxauth.BaseTest.idGenEndpoint
protectedinherited

◆ introspectionEndpoint

String org.xdi.oxauth.BaseTest.introspectionEndpoint
protectedinherited

◆ jwksUri

String org.xdi.oxauth.BaseTest.jwksUri
protectedinherited

◆ registrationEndpoint

String org.xdi.oxauth.BaseTest.registrationEndpoint
protectedinherited

◆ scopeToClaimsMapping

Map<String, List<String> > org.xdi.oxauth.BaseTest.scopeToClaimsMapping
protectedinherited

◆ testData

FileConfiguration org.xdi.oxauth.ConfigurableTest.testData
staticinherited

◆ tokenEndpoint

String org.xdi.oxauth.BaseTest.tokenEndpoint
protectedinherited

◆ userInfoEndpoint

String org.xdi.oxauth.BaseTest.userInfoEndpoint
protectedinherited

このクラス詳解は次のファイルから抽出されました: