org.mitre.oauth2.service.impl.TestBlacklistAwareRedirectResolver クラス

org.mitre.oauth2.service.impl.TestBlacklistAwareRedirectResolver 連携図

公開メンバ関数
void	setUp () throws Exception
void	testResolveRedirect_safe ()
void	testResolveRedirect_blacklisted ()
void	testRedirectMatches_default ()
void	testRedirectMatches_nonstrict ()
void	testHeartMode ()

非公開変数類
BlacklistedSiteService	blacklistService
ClientDetails	client
ConfigurationPropertiesBean	config
BlacklistAwareRedirectResolver	resolver
String	blacklistedUri = "https://evil.example.com/"
String	goodUri = "https://good.example.com/"
String	pathUri = "https://good.example.com/with/path"

詳解

著者

jricher

関数詳解

setUp()

void org.mitre.oauth2.service.impl.TestBlacklistAwareRedirectResolver.setUp ( ) throws Exception

inline

例外

java.lang.Exception

                                             {

                when(blacklistService.isBlacklisted(anyString())).thenReturn(false);
                when(blacklistService.isBlacklisted(blacklistedUri)).thenReturn(true);

                when(client.getAuthorizedGrantTypes()).thenReturn(ImmutableSet.of("authorization_code"));
                when(client.getRegisteredRedirectUri()).thenReturn(ImmutableSet.of(goodUri, blacklistedUri));

                when(config.isHeartMode()).thenReturn(false);
        }

testHeartMode()

void org.mitre.oauth2.service.impl.TestBlacklistAwareRedirectResolver.testHeartMode ( )

inline

                                    {
                when(config.isHeartMode()).thenReturn(true);

                // this is not an exact match
                boolean res1 = resolver.redirectMatches(pathUri, goodUri);

                assertThat(res1, is(false));

                // this is an exact match
                boolean res2 = resolver.redirectMatches(goodUri, goodUri);

                assertThat(res2, is(true));
        }

testRedirectMatches_default()

void org.mitre.oauth2.service.impl.TestBlacklistAwareRedirectResolver.testRedirectMatches_default ( )

inline

                                                  {

                // this is not an exact match
                boolean res1 = resolver.redirectMatches(pathUri, goodUri);

                assertThat(res1, is(false));

                // this is an exact match
                boolean res2 = resolver.redirectMatches(goodUri, goodUri);

                assertThat(res2, is(true));

        }

testRedirectMatches_nonstrict()

void org.mitre.oauth2.service.impl.TestBlacklistAwareRedirectResolver.testRedirectMatches_nonstrict ( )

inline

                                                    {

                // set the resolver to non-strict match mode
                resolver.setStrictMatch(false);
                
                // this is not an exact match (but that's OK)
                boolean res1 = resolver.redirectMatches(pathUri, goodUri);

                assertThat(res1, is(true));

                // this is an exact match
                boolean res2 = resolver.redirectMatches(goodUri, goodUri);

                assertThat(res2, is(true));

        }

testResolveRedirect_blacklisted()

void org.mitre.oauth2.service.impl.TestBlacklistAwareRedirectResolver.testResolveRedirect_blacklisted ( )

inline

                                                      {

                // this should fail with an error
                resolver.resolveRedirect(blacklistedUri, client);

        }

testResolveRedirect_safe()

void org.mitre.oauth2.service.impl.TestBlacklistAwareRedirectResolver.testResolveRedirect_safe ( )

inline

                                               {

                // default uses prefix matching, the first one should work fine

                String res1 = resolver.resolveRedirect(goodUri, client);

                assertThat(res1, is(equalTo(goodUri)));
                
                // set the resolver to non-strict and test the path-based redirect resolution
                
                resolver.setStrictMatch(false);

                String res2 = resolver.resolveRedirect(pathUri, client);

                assertThat(res2, is(equalTo(pathUri)));


        }

メンバ詳解

blacklistedUri

String org.mitre.oauth2.service.impl.TestBlacklistAwareRedirectResolver.blacklistedUri = "https://evil.example.com/"

private

blacklistService

BlacklistedSiteService org.mitre.oauth2.service.impl.TestBlacklistAwareRedirectResolver.blacklistService

private

client

ClientDetails org.mitre.oauth2.service.impl.TestBlacklistAwareRedirectResolver.client

private

config

ConfigurationPropertiesBean org.mitre.oauth2.service.impl.TestBlacklistAwareRedirectResolver.config

private

goodUri

String org.mitre.oauth2.service.impl.TestBlacklistAwareRedirectResolver.goodUri = "https://good.example.com/"

private

pathUri

String org.mitre.oauth2.service.impl.TestBlacklistAwareRedirectResolver.pathUri = "https://good.example.com/with/path"

private

resolver

BlacklistAwareRedirectResolver org.mitre.oauth2.service.impl.TestBlacklistAwareRedirectResolver.resolver

private

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/mitreid-connect/src/openid-connect-server/src/test/java/org/mitre/oauth2/service/impl/TestBlacklistAwareRedirectResolver.java