Comment passer l'authentification dans le cas de test de ressort

Question

J'utilise spring boot 1.5.6 avec OAuth 2.0. Le problème est que lorsque je cours en dessous du cas de test, j'obtiens une exception de pointeur Null en-dessous de la ligne pour l'objet d'authentification.

System.out.println(authentication.getName()); 

classe Test

@RunWith(SpringRunner.class) 
@SpringBootTest(classes = WebApp.class, webEnvironment = SpringBootTest.WebEnvironment.RANDOM_PORT) 
@TestPropertySource(locations = "classpath:test-application.properties") 
public class ProfileControllerTest { 

...... 
...... 

    @Before 
     public void setup() { 
     this.mockMvc = MockMvcBuilders.standaloneSetup(userController).build(); 
     ........... 
     ......... 
     } 

     @Test 
     public void profileTest() throws Exception { 
     String userId = "12345678"; 

     mockMvc.perform(get("user/" + userId + "/profile")) 
     .andExpect(status().isOk()) 
      .andExpect(content().contentType(MediaType.APPLICATION_JSON_UTF8)); 
     } 
} 

Rest Controller

@RequestMapping(value = "user/{userId}/profile", 
     method = RequestMethod.GET, produces = MediaType.APPLICATION_JSON_VALUE) 
    public ResponseEntity<Map<String, Object>> getProfile(
     @PathVariable(value = "userId", required = true) String userId, 
     HttpServletRequest request, Authentication authentication) { 
     System.out.println(authentication.getName()); 
    } 

Configuration de la sécurité

@Configuration 
@EnableOAuth2Sso 
@EnableGlobalMethodSecurity(securedEnabled = true) 
public class WebAppSecurityConfig extends WebSecurityConfigurerAdapter { 

    private static final String OAUTH_COOKIE = "OAUTH-ACCESS-TOKEN"; 

    private UserService userService; 
    private OAuth2TokenAuthenticationFilter ssoFilter; 
    private JwtAccessTokenConverter accessTokenConverter; 

    /** 
    * WebAppSecurity overloaded constructor. 
    */ 
    public WebAppSecurityConfig(UserService userService, 
     OAuth2TokenAuthenticationFilter ssoFilter, 
     JwtAccessTokenConverter accessTokenConverter) { 
    this.userService = userService; 
    this.ssoFilter = ssoFilter; 
    this.accessTokenConverter = accessTokenConverter; 
    } 

    @Override 
    protected void configure(HttpSecurity http) throws Exception { 
    http.anonymous() 
     .disable() 
     .authorizeRequests() 
     .antMatchers("/logout-success") 
     .permitAll() 
     .anyRequest() 
     .authenticated() 
     .and() 
     .csrf() 
     .csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse()) 
     .and() 
     .addFilterAfter(ssoFilter, 
      AbstractPreAuthenticatedProcessingFilter.class).logout() 
     .logoutUrl("/logout").logoutSuccessUrl("/logout-success").permitAll() 
     .deleteCookies(OAUTH_COOKIE); 
    } 

    @Autowired 
    @Override 
    protected void configure(AuthenticationManagerBuilder auth) throws Exception { 
    auth.userDetailsService(userDetailsService()); 
    configure((DefaultAccessTokenConverter) accessTokenConverter 
     .getAccessTokenConverter()); 
    } 

    protected void configure(DefaultAccessTokenConverter accessTokenConverter) { 
    DefaultUserAuthenticationConverter userTokenConverter = 
     new DefaultUserAuthenticationConverter(); 
    userTokenConverter.setUserDetailsService(userDetailsService()); 
    accessTokenConverter.setUserTokenConverter(userTokenConverter); 
    } 

    @Override 
    protected UserDetailsService userDetailsService() { 
    return userService; 
    } 

Comment passer l'objet d'authentification dans le cas de test ci-dessus?

Answer 1

Vous pouvez utiliser l'annotation @WithMockUser lors de votre test.

Par exemple:

@Test 
    @WithMockUser(username = "admin", roles = { "ADMIN" }) 
    public void profileTest() throws Exception { 
    String userId = "12345678"; 

    mockMvc.perform(get("user/" + userId + "/profile")) 
    .andExpect(status().isOk()) 
     .andExpect(content().contentType(MediaType.APPLICATION_JSON_UTF8)); 
    } 

En supposant que vous avez ressort de sécurité configuré et activé pour le point final "user/" + userId + "/profile" alors System.out.println(authentication.getName()); dans votre contrôleur imprimera: admin.

Plus de détails dans le Spring Securty docs.