<%# Copyright 2013-2020 the original author or authors from the JHipster project. This file is part of the JHipster project, see https://jhipster.github.io/ for more information. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at https://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. -%> package <%= packageName %>.security.oauth2; import com.fasterxml.jackson.databind.ObjectMapper; import com.fasterxml.jackson.databind.node.ObjectNode; import <%= packageName %>.security.AuthoritiesConstants; import <%= packageName %>.security.SecurityUtils; import <%= packageName %>.IntegrationTest; import org.junit.jupiter.api.BeforeEach; import org.junit.jupiter.api.Test; import org.mockito.ArgumentMatchers; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.boot.test.mock.mockito.MockBean; import org.springframework.http.HttpEntity; import org.springframework.http.HttpMethod; import org.springframework.http.ResponseEntity; import org.springframework.security.oauth2.client.registration.ClientRegistrationRepository; import org.springframework.web.client.RestTemplate; import java.util.Arrays; import java.util.HashMap; import java.util.Map; import static org.assertj.core.api.Assertions.assertThat; import static org.assertj.core.api.Assertions.assertThatCode; import static org.mockito.ArgumentMatchers.any; import static org.mockito.ArgumentMatchers.eq; import static org.mockito.Mockito.when; @IntegrationTest class CustomClaimConverterIT { private static final String USERNAME = "admin"; private static final String NAME = "John"; private static final String FAMILY_NAME = "Doe"; private final ObjectMapper mapper = new ObjectMapper(); @MockBean private RestTemplate restTemplate; @Autowired private ClientRegistrationRepository clientRegistrationRepository; private CustomClaimConverter customClaimConverter; @BeforeEach public void initTest() { customClaimConverter = new CustomClaimConverter(clientRegistrationRepository.findByRegistrationId("oidc"), restTemplate); } private void mockHttpGetUserInfo(ObjectNode userInfo) { when( restTemplate.exchange( eq("https://api.jhipster.org/user"), eq(HttpMethod.GET), any(HttpEntity.class), ArgumentMatchers.>any() ) ) .thenReturn(ResponseEntity.ok(userInfo)); } @Test void testConvert() { // GIVEN Map claims = new HashMap<>(); claims.put("sub", "123"); // AND ObjectNode user = mapper.createObjectNode(); user.put("preferred_username", USERNAME); user.put("given_name", NAME); user.put("family_name", FAMILY_NAME); user.putArray("groups").add(AuthoritiesConstants.ADMIN).add(AuthoritiesConstants.USER); mockHttpGetUserInfo(user); // WHEN Map convertedClaims = customClaimConverter.convert(claims); // THEN assertThat(convertedClaims) .containsEntry("sub", "123") .containsEntry("preferred_username", USERNAME) .containsEntry("given_name", NAME) .containsEntry("family_name", FAMILY_NAME) .containsEntry("groups", Arrays.asList(AuthoritiesConstants.ADMIN, AuthoritiesConstants.USER)); } @Test void testConvert_withoutGroups() { // GIVEN Map claims = new HashMap<>(); claims.put("sub", "123"); // AND ObjectNode user = mapper.createObjectNode(); user.put("preferred_username", USERNAME); user.put("given_name", NAME); user.put("family_name", FAMILY_NAME); mockHttpGetUserInfo(user); // WHEN assertThatCode(() -> customClaimConverter.convert(claims)).doesNotThrowAnyException(); } @Test void testConvert_withNamespacedRoles() { // GIVEN Map claims = new HashMap<>(); claims.put("sub", "123"); // AND ObjectNode user = mapper.createObjectNode(); user.put("preferred_username", USERNAME); user.put("given_name", NAME); user.put("family_name", FAMILY_NAME); user.putArray(SecurityUtils.CLAIMS_NAMESPACE + "roles").add(AuthoritiesConstants.ADMIN).add(AuthoritiesConstants.USER); mockHttpGetUserInfo(user); // WHEN Map convertedClaims = customClaimConverter.convert(claims); // THEN assertThat(convertedClaims) .containsEntry("sub", "123") .containsEntry("preferred_username", USERNAME) .containsEntry("given_name", NAME) .containsEntry("family_name", FAMILY_NAME) .containsEntry("roles", Arrays.asList(AuthoritiesConstants.ADMIN, AuthoritiesConstants.USER)); } @Test void testConvert_withoutFirstAndLastName() { // GIVEN Map claims = new HashMap<>(); claims.put("sub", "123"); // AND ObjectNode user = mapper.createObjectNode(); user.put("preferred_username", USERNAME); mockHttpGetUserInfo(user); assertThatCode(() -> { Map convertedClaims = customClaimConverter.convert(claims); assertThat(convertedClaims) .containsEntry("preferred_username", USERNAME) .doesNotContainKeys("given_name", "family_name"); }).doesNotThrowAnyException(); } }