|
|
|
|
@ -0,0 +1,330 @@
|
|
|
|
|
package cn.iocoder.yudao.module.system.controller.admin.oauth2;
|
|
|
|
|
|
|
|
|
|
import cn.hutool.core.collection.ListUtil;
|
|
|
|
|
import cn.hutool.core.map.MapUtil;
|
|
|
|
|
import cn.iocoder.yudao.framework.common.core.KeyValue;
|
|
|
|
|
import cn.iocoder.yudao.framework.common.enums.UserTypeEnum;
|
|
|
|
|
import cn.iocoder.yudao.framework.common.exception.ErrorCode;
|
|
|
|
|
import cn.iocoder.yudao.framework.common.pojo.CommonResult;
|
|
|
|
|
import cn.iocoder.yudao.framework.common.util.collection.SetUtils;
|
|
|
|
|
import cn.iocoder.yudao.framework.test.core.ut.BaseMockitoUnitTest;
|
|
|
|
|
import cn.iocoder.yudao.module.system.controller.admin.oauth2.vo.open.OAuth2OpenAccessTokenRespVO;
|
|
|
|
|
import cn.iocoder.yudao.module.system.controller.admin.oauth2.vo.open.OAuth2OpenAuthorizeInfoRespVO;
|
|
|
|
|
import cn.iocoder.yudao.module.system.controller.admin.oauth2.vo.open.OAuth2OpenCheckTokenRespVO;
|
|
|
|
|
import cn.iocoder.yudao.module.system.dal.dataobject.oauth2.OAuth2AccessTokenDO;
|
|
|
|
|
import cn.iocoder.yudao.module.system.dal.dataobject.oauth2.OAuth2ApproveDO;
|
|
|
|
|
import cn.iocoder.yudao.module.system.dal.dataobject.oauth2.OAuth2ClientDO;
|
|
|
|
|
import cn.iocoder.yudao.module.system.enums.auth.OAuth2GrantTypeEnum;
|
|
|
|
|
import cn.iocoder.yudao.module.system.service.oauth2.OAuth2ApproveService;
|
|
|
|
|
import cn.iocoder.yudao.module.system.service.oauth2.OAuth2ClientService;
|
|
|
|
|
import cn.iocoder.yudao.module.system.service.oauth2.OAuth2GrantService;
|
|
|
|
|
import cn.iocoder.yudao.module.system.service.oauth2.OAuth2TokenService;
|
|
|
|
|
import org.assertj.core.util.Lists;
|
|
|
|
|
import org.junit.jupiter.api.Test;
|
|
|
|
|
import org.mockito.InjectMocks;
|
|
|
|
|
import org.mockito.Mock;
|
|
|
|
|
|
|
|
|
|
import javax.servlet.http.HttpServletRequest;
|
|
|
|
|
import java.time.Duration;
|
|
|
|
|
import java.util.ArrayList;
|
|
|
|
|
import java.util.Date;
|
|
|
|
|
import java.util.LinkedHashMap;
|
|
|
|
|
import java.util.List;
|
|
|
|
|
|
|
|
|
|
import static cn.iocoder.yudao.framework.common.util.collection.SetUtils.asSet;
|
|
|
|
|
import static cn.iocoder.yudao.framework.common.util.date.DateUtils.addTime;
|
|
|
|
|
import static cn.iocoder.yudao.framework.test.core.util.AssertUtils.assertPojoEquals;
|
|
|
|
|
import static cn.iocoder.yudao.framework.test.core.util.AssertUtils.assertServiceException;
|
|
|
|
|
import static cn.iocoder.yudao.framework.test.core.util.RandomUtils.randomPojo;
|
|
|
|
|
import static cn.iocoder.yudao.framework.test.core.util.RandomUtils.randomString;
|
|
|
|
|
import static java.util.Arrays.asList;
|
|
|
|
|
import static org.junit.jupiter.api.Assertions.*;
|
|
|
|
|
import static org.mockito.ArgumentMatchers.eq;
|
|
|
|
|
import static org.mockito.ArgumentMatchers.isNull;
|
|
|
|
|
import static org.mockito.Mockito.mock;
|
|
|
|
|
import static org.mockito.Mockito.when;
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* {@link OAuth2OpenController} 的单元测试
|
|
|
|
|
*
|
|
|
|
|
* @author 芋道源码
|
|
|
|
|
*/
|
|
|
|
|
public class OAuth2OpenControllerTest extends BaseMockitoUnitTest {
|
|
|
|
|
|
|
|
|
|
@InjectMocks
|
|
|
|
|
private OAuth2OpenController oauth2OpenController;
|
|
|
|
|
|
|
|
|
|
@Mock
|
|
|
|
|
private OAuth2GrantService oauth2GrantService;
|
|
|
|
|
@Mock
|
|
|
|
|
private OAuth2ClientService oauth2ClientService;
|
|
|
|
|
@Mock
|
|
|
|
|
private OAuth2ApproveService oauth2ApproveService;
|
|
|
|
|
@Mock
|
|
|
|
|
private OAuth2TokenService oauth2TokenService;
|
|
|
|
|
|
|
|
|
|
@Test
|
|
|
|
|
public void testPostAccessToken_authorizationCode() {
|
|
|
|
|
// 准备参数
|
|
|
|
|
String granType = OAuth2GrantTypeEnum.AUTHORIZATION_CODE.getGrantType();
|
|
|
|
|
String code = randomString();
|
|
|
|
|
String redirectUri = randomString();
|
|
|
|
|
String state = randomString();
|
|
|
|
|
HttpServletRequest request = mockRequest("test_client_id", "test_client_secret");
|
|
|
|
|
// mock 方法（client）
|
|
|
|
|
OAuth2ClientDO client = randomPojo(OAuth2ClientDO.class).setClientId("test_client_id");
|
|
|
|
|
when(oauth2ClientService.validOAuthClientFromCache(eq("test_client_id"), eq("test_client_secret"), eq(granType), eq(new ArrayList<>()), eq(redirectUri))).thenReturn(client);
|
|
|
|
|
|
|
|
|
|
// mock 方法（访问令牌）
|
|
|
|
|
OAuth2AccessTokenDO accessTokenDO = randomPojo(OAuth2AccessTokenDO.class)
|
|
|
|
|
.setExpiresTime(addTime(Duration.ofMillis(30010L))); // 多给 10 毫秒，保证可执行完
|
|
|
|
|
when(oauth2GrantService.grantAuthorizationCodeForAccessToken(eq("test_client_id"),
|
|
|
|
|
eq(code), eq(redirectUri), eq(state))).thenReturn(accessTokenDO);
|
|
|
|
|
|
|
|
|
|
// 调用
|
|
|
|
|
CommonResult<OAuth2OpenAccessTokenRespVO> result = oauth2OpenController.postAccessToken(request, granType,
|
|
|
|
|
code, redirectUri, state, null, null, null, null);
|
|
|
|
|
// 断言
|
|
|
|
|
assertEquals(0, result.getCode());
|
|
|
|
|
assertPojoEquals(accessTokenDO, result.getData());
|
|
|
|
|
assertEquals(30L, result.getData().getExpiresIn()); // 执行过程会过去几毫秒
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
@Test
|
|
|
|
|
public void testPostAccessToken_password() {
|
|
|
|
|
// 准备参数
|
|
|
|
|
String granType = OAuth2GrantTypeEnum.PASSWORD.getGrantType();
|
|
|
|
|
String username = randomString();
|
|
|
|
|
String password = randomString();
|
|
|
|
|
String scope = "write read";
|
|
|
|
|
HttpServletRequest request = mockRequest("test_client_id", "test_client_secret");
|
|
|
|
|
// mock 方法（client）
|
|
|
|
|
OAuth2ClientDO client = randomPojo(OAuth2ClientDO.class).setClientId("test_client_id");
|
|
|
|
|
when(oauth2ClientService.validOAuthClientFromCache(eq("test_client_id"), eq("test_client_secret"),
|
|
|
|
|
eq(granType), eq(Lists.newArrayList("write", "read")), isNull())).thenReturn(client);
|
|
|
|
|
|
|
|
|
|
// mock 方法（访问令牌）
|
|
|
|
|
OAuth2AccessTokenDO accessTokenDO = randomPojo(OAuth2AccessTokenDO.class)
|
|
|
|
|
.setExpiresTime(addTime(Duration.ofMillis(30010L))); // 多给 10 毫秒，保证可执行完
|
|
|
|
|
when(oauth2GrantService.grantPassword(eq(username), eq(password), eq("test_client_id"),
|
|
|
|
|
eq(Lists.newArrayList("write", "read")))).thenReturn(accessTokenDO);
|
|
|
|
|
|
|
|
|
|
// 调用
|
|
|
|
|
CommonResult<OAuth2OpenAccessTokenRespVO> result = oauth2OpenController.postAccessToken(request, granType,
|
|
|
|
|
null, null, null, username, password, scope, null);
|
|
|
|
|
// 断言
|
|
|
|
|
assertEquals(0, result.getCode());
|
|
|
|
|
assertPojoEquals(accessTokenDO, result.getData());
|
|
|
|
|
assertEquals(30L, result.getData().getExpiresIn()); // 执行过程会过去几毫秒
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
@Test
|
|
|
|
|
public void testPostAccessToken_refreshToken() {
|
|
|
|
|
// 准备参数
|
|
|
|
|
String granType = OAuth2GrantTypeEnum.REFRESH_TOKEN.getGrantType();
|
|
|
|
|
String refreshToken = randomString();
|
|
|
|
|
String password = randomString();
|
|
|
|
|
HttpServletRequest request = mockRequest("test_client_id", "test_client_secret");
|
|
|
|
|
// mock 方法（client）
|
|
|
|
|
OAuth2ClientDO client = randomPojo(OAuth2ClientDO.class).setClientId("test_client_id");
|
|
|
|
|
when(oauth2ClientService.validOAuthClientFromCache(eq("test_client_id"), eq("test_client_secret"),
|
|
|
|
|
eq(granType), eq(Lists.newArrayList()), isNull())).thenReturn(client);
|
|
|
|
|
|
|
|
|
|
// mock 方法（访问令牌）
|
|
|
|
|
OAuth2AccessTokenDO accessTokenDO = randomPojo(OAuth2AccessTokenDO.class)
|
|
|
|
|
.setExpiresTime(addTime(Duration.ofMillis(30010L))); // 多给 10 毫秒，保证可执行完
|
|
|
|
|
when(oauth2GrantService.grantRefreshToken(eq(refreshToken), eq("test_client_id"))).thenReturn(accessTokenDO);
|
|
|
|
|
|
|
|
|
|
// 调用
|
|
|
|
|
CommonResult<OAuth2OpenAccessTokenRespVO> result = oauth2OpenController.postAccessToken(request, granType,
|
|
|
|
|
null, null, null, null, password, null, refreshToken);
|
|
|
|
|
// 断言
|
|
|
|
|
assertEquals(0, result.getCode());
|
|
|
|
|
assertPojoEquals(accessTokenDO, result.getData());
|
|
|
|
|
assertEquals(30L, result.getData().getExpiresIn()); // 执行过程会过去几毫秒
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
@Test
|
|
|
|
|
public void testPostAccessToken_implicit() {
|
|
|
|
|
// 调用，并断言
|
|
|
|
|
assertServiceException(() -> oauth2OpenController.postAccessToken(null,
|
|
|
|
|
OAuth2GrantTypeEnum.IMPLICIT.getGrantType(), null, null, null,
|
|
|
|
|
null, null, null, null),
|
|
|
|
|
new ErrorCode(400, "Token 接口不支持 implicit 授权模式"));
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
@Test
|
|
|
|
|
public void testRevokeToken() {
|
|
|
|
|
// 准备参数
|
|
|
|
|
HttpServletRequest request = mockRequest("demo_client_id", "demo_client_secret");
|
|
|
|
|
String token = randomString();
|
|
|
|
|
// mock 方法（client）
|
|
|
|
|
OAuth2ClientDO client = randomPojo(OAuth2ClientDO.class).setClientId("demo_client_id");
|
|
|
|
|
when(oauth2ClientService.validOAuthClientFromCache(eq("demo_client_id"),
|
|
|
|
|
eq("demo_client_secret"), isNull(), isNull(), isNull())).thenReturn(client);
|
|
|
|
|
// mock 方法（移除）
|
|
|
|
|
when(oauth2GrantService.revokeToken(eq("demo_client_id"), eq(token))).thenReturn(true);
|
|
|
|
|
|
|
|
|
|
// 调用
|
|
|
|
|
CommonResult<Boolean> result = oauth2OpenController.revokeToken(request, token);
|
|
|
|
|
// 断言
|
|
|
|
|
assertEquals(0, result.getCode());
|
|
|
|
|
assertTrue(result.getData());
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
@Test
|
|
|
|
|
public void testCheckToken() {
|
|
|
|
|
// 准备参数
|
|
|
|
|
HttpServletRequest request = mockRequest("demo_client_id", "demo_client_secret");
|
|
|
|
|
String token = randomString();
|
|
|
|
|
// mock 方法
|
|
|
|
|
OAuth2AccessTokenDO accessTokenDO = randomPojo(OAuth2AccessTokenDO.class).setUserType(UserTypeEnum.ADMIN.getValue()).setExpiresTime(new Date(1653485731195L));
|
|
|
|
|
when(oauth2TokenService.checkAccessToken(eq(token))).thenReturn(accessTokenDO);
|
|
|
|
|
|
|
|
|
|
// 调用
|
|
|
|
|
CommonResult<OAuth2OpenCheckTokenRespVO> result = oauth2OpenController.checkToken(request, token);
|
|
|
|
|
// 断言
|
|
|
|
|
assertEquals(0, result.getCode());
|
|
|
|
|
assertPojoEquals(accessTokenDO, result.getData());
|
|
|
|
|
assertEquals(1653485731L, result.getData().getExp()); // 执行过程会过去几毫秒
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
@Test
|
|
|
|
|
public void testAuthorize() {
|
|
|
|
|
// 准备参数
|
|
|
|
|
String clientId = randomString();
|
|
|
|
|
// mock 方法（client）
|
|
|
|
|
OAuth2ClientDO client = randomPojo(OAuth2ClientDO.class).setClientId("demo_client_id").setScopes(ListUtil.toList("read", "write", "all"));
|
|
|
|
|
when(oauth2ClientService.validOAuthClientFromCache(eq(clientId))).thenReturn(client);
|
|
|
|
|
// mock 方法（approve）
|
|
|
|
|
List<OAuth2ApproveDO> approves = asList(
|
|
|
|
|
randomPojo(OAuth2ApproveDO.class).setScope("read").setApproved(true),
|
|
|
|
|
randomPojo(OAuth2ApproveDO.class).setScope("write").setApproved(false));
|
|
|
|
|
when(oauth2ApproveService.getApproveList(isNull(), eq(UserTypeEnum.ADMIN.getValue()), eq(clientId))).thenReturn(approves);
|
|
|
|
|
|
|
|
|
|
// 调用
|
|
|
|
|
CommonResult<OAuth2OpenAuthorizeInfoRespVO> result = oauth2OpenController.authorize(clientId);
|
|
|
|
|
// 断言
|
|
|
|
|
assertEquals(0, result.getCode());
|
|
|
|
|
assertPojoEquals(client, result.getData().getClient());
|
|
|
|
|
assertEquals(new KeyValue<>("read", true), result.getData().getScopes().get(0));
|
|
|
|
|
assertEquals(new KeyValue<>("write", false), result.getData().getScopes().get(1));
|
|
|
|
|
assertEquals(new KeyValue<>("all", false), result.getData().getScopes().get(2));
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
@Test
|
|
|
|
|
public void testApproveOrDeny_grantTypeError() {
|
|
|
|
|
// 调用，并断言
|
|
|
|
|
assertServiceException(() -> oauth2OpenController.approveOrDeny(randomString(), null,
|
|
|
|
|
null, null, null, null),
|
|
|
|
|
new ErrorCode(400, "response_type 参数值只允许 code 和 token"));
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
@Test // autoApprove = true，但是不通过
|
|
|
|
|
public void testApproveOrDeny_autoApproveNo() {
|
|
|
|
|
// 准备参数
|
|
|
|
|
String responseType = "code";
|
|
|
|
|
String clientId = randomString();
|
|
|
|
|
String scope = "{\"read\": true, \"write\": false}";
|
|
|
|
|
String redirectUri = randomString();
|
|
|
|
|
String state = randomString();
|
|
|
|
|
// mock 方法
|
|
|
|
|
OAuth2ClientDO client = randomPojo(OAuth2ClientDO.class);
|
|
|
|
|
when(oauth2ClientService.validOAuthClientFromCache(eq(clientId), isNull(), eq("authorization_code"),
|
|
|
|
|
eq(asSet("read", "write")), eq(redirectUri))).thenReturn(client);
|
|
|
|
|
|
|
|
|
|
// 调用
|
|
|
|
|
CommonResult<String> result = oauth2OpenController.approveOrDeny(responseType, clientId,
|
|
|
|
|
scope, redirectUri, true, state);
|
|
|
|
|
// 断言
|
|
|
|
|
assertEquals(0, result.getCode());
|
|
|
|
|
assertNull(result.getData());
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
@Test // autoApprove = false，但是不通过
|
|
|
|
|
public void testApproveOrDeny_ApproveNo() {
|
|
|
|
|
// 准备参数
|
|
|
|
|
String responseType = "token";
|
|
|
|
|
String clientId = randomString();
|
|
|
|
|
String scope = "{\"read\": true, \"write\": false}";
|
|
|
|
|
String redirectUri = "https://www.iocoder.cn";
|
|
|
|
|
String state = "test";
|
|
|
|
|
// mock 方法
|
|
|
|
|
OAuth2ClientDO client = randomPojo(OAuth2ClientDO.class);
|
|
|
|
|
when(oauth2ClientService.validOAuthClientFromCache(eq(clientId), isNull(), eq("implicit"),
|
|
|
|
|
eq(asSet("read", "write")), eq(redirectUri))).thenReturn(client);
|
|
|
|
|
|
|
|
|
|
// 调用
|
|
|
|
|
CommonResult<String> result = oauth2OpenController.approveOrDeny(responseType, clientId,
|
|
|
|
|
scope, redirectUri, false, state);
|
|
|
|
|
// 断言
|
|
|
|
|
assertEquals(0, result.getCode());
|
|
|
|
|
assertEquals("https://www.iocoder.cn#error=access_denied&error_description=User%20denied%20access&state=test", result.getData());
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
@Test // autoApprove = true，通过 + token
|
|
|
|
|
public void testApproveOrDeny_autoApproveWithToken() {
|
|
|
|
|
// 准备参数
|
|
|
|
|
String responseType = "token";
|
|
|
|
|
String clientId = randomString();
|
|
|
|
|
String scope = "{\"read\": true, \"write\": false}";
|
|
|
|
|
String redirectUri = "https://www.iocoder.cn";
|
|
|
|
|
String state = "test";
|
|
|
|
|
// mock 方法（client)
|
|
|
|
|
OAuth2ClientDO client = randomPojo(OAuth2ClientDO.class).setClientId(clientId).setAdditionalInformation(null);
|
|
|
|
|
when(oauth2ClientService.validOAuthClientFromCache(eq(clientId), isNull(), eq("implicit"),
|
|
|
|
|
eq(asSet("read", "write")), eq(redirectUri))).thenReturn(client);
|
|
|
|
|
// mock 方法（场景一）
|
|
|
|
|
when(oauth2ApproveService.checkForPreApproval(isNull(), eq(UserTypeEnum.ADMIN.getValue()),
|
|
|
|
|
eq(clientId), eq(SetUtils.asSet("read", "write")))).thenReturn(true);
|
|
|
|
|
// mock 方法（访问令牌）
|
|
|
|
|
OAuth2AccessTokenDO accessTokenDO = randomPojo(OAuth2AccessTokenDO.class)
|
|
|
|
|
.setAccessToken("test_access_token").setExpiresTime(addTime(Duration.ofMillis(30010L)));
|
|
|
|
|
when(oauth2GrantService.grantImplicit(isNull(), eq(UserTypeEnum.ADMIN.getValue()),
|
|
|
|
|
eq(clientId), eq(ListUtil.toList("read")))).thenReturn(accessTokenDO);
|
|
|
|
|
|
|
|
|
|
// 调用
|
|
|
|
|
CommonResult<String> result = oauth2OpenController.approveOrDeny(responseType, clientId,
|
|
|
|
|
scope, redirectUri, true, state);
|
|
|
|
|
// 断言
|
|
|
|
|
assertEquals(0, result.getCode());
|
|
|
|
|
assertEquals("https://www.iocoder.cn#access_token=test_access_token&token_type=bearer&state=test&expires_in=30&scope=read", result.getData());
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
@Test // autoApprove = false，通过 + code
|
|
|
|
|
public void testApproveOrDeny_approveWithCode() {
|
|
|
|
|
// 准备参数
|
|
|
|
|
String responseType = "code";
|
|
|
|
|
String clientId = randomString();
|
|
|
|
|
String scope = "{\"read\": true, \"write\": false}";
|
|
|
|
|
String redirectUri = "https://www.iocoder.cn";
|
|
|
|
|
String state = "test";
|
|
|
|
|
// mock 方法（client)
|
|
|
|
|
OAuth2ClientDO client = randomPojo(OAuth2ClientDO.class).setClientId(clientId).setAdditionalInformation(null);
|
|
|
|
|
when(oauth2ClientService.validOAuthClientFromCache(eq(clientId), isNull(), eq("authorization_code"),
|
|
|
|
|
eq(asSet("read", "write")), eq(redirectUri))).thenReturn(client);
|
|
|
|
|
// mock 方法（场景二）
|
|
|
|
|
when(oauth2ApproveService.updateAfterApproval(isNull(), eq(UserTypeEnum.ADMIN.getValue()), eq(clientId),
|
|
|
|
|
eq(MapUtil.builder(new LinkedHashMap<String, Boolean>()).put("read", true).put("write", false).build())))
|
|
|
|
|
.thenReturn(true);
|
|
|
|
|
// mock 方法（访问令牌）
|
|
|
|
|
String authorizationCode = "test_code";
|
|
|
|
|
when(oauth2GrantService.grantAuthorizationCodeForCode(isNull(), eq(UserTypeEnum.ADMIN.getValue()),
|
|
|
|
|
eq(clientId), eq(ListUtil.toList("read")), eq(redirectUri), eq(state))).thenReturn(authorizationCode);
|
|
|
|
|
|
|
|
|
|
// 调用
|
|
|
|
|
CommonResult<String> result = oauth2OpenController.approveOrDeny(responseType, clientId,
|
|
|
|
|
scope, redirectUri, false, state);
|
|
|
|
|
// 断言
|
|
|
|
|
assertEquals(0, result.getCode());
|
|
|
|
|
assertEquals("https://www.iocoder.cn?code=test_code&state=test", result.getData());
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
private HttpServletRequest mockRequest(String clientId, String secret) {
|
|
|
|
|
HttpServletRequest request = mock(HttpServletRequest.class);
|
|
|
|
|
when(request.getParameter(eq("client_id"))).thenReturn(clientId);
|
|
|
|
|
when(request.getParameter(eq("client_secret"))).thenReturn(secret);
|
|
|
|
|
return request;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
}
|
YunaiV
4 years ago