Repository navigation
Expand file tree
/
Copy pathSetOpenFloorModeIT.java
More file actions
233 lines (215 loc) · 8.46 KB
/
Copy pathSetOpenFloorModeIT.java
File metadata and controls
233 lines (215 loc) · 8.46 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
package servlets.admin.config;
import static org.junit.jupiter.api.Assertions.fail;
import jakarta.servlet.ServletException;
import java.io.IOException;
import java.sql.SQLException;
import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;
import org.junit.jupiter.api.BeforeAll;
import org.junit.jupiter.api.BeforeEach;
import org.junit.jupiter.api.Test;
import org.springframework.mock.web.MockHttpServletRequest;
import org.springframework.mock.web.MockHttpServletResponse;
import org.springframework.mock.web.MockServletConfig;
import testUtils.TestProperties;
import utils.ModulePlan;
public class SetOpenFloorModeIT {
private static final Logger log = LogManager.getLogger(SetOpenFloorModeIT.class);
private static String applicationRoot = new String();
private static String lang = "en_GB";
private MockHttpServletRequest request;
private MockHttpServletResponse response;
/** Creates DB or Restores DB to Factory Defaults before running tests */
@BeforeAll
public static void resetDatabase() throws IOException, SQLException {
TestProperties.setTestPropertiesFileDirectory(log);
TestProperties.createMysqlResource();
TestProperties.ensureSchemaReady(log);
TestProperties.reseedTestData();
}
@BeforeEach
public void setUp() {
request = new MockHttpServletRequest();
response = new MockHttpServletResponse();
// Set Module Plan to CTF Floor
ModulePlan.setIncrementalFloor();
if (!ModulePlan.isIncrementalFloor()) {
String message = "Unable to Set floor plan to CTF";
log.fatal(message);
fail(message);
}
}
/**
* Method to Simulate the interaction with the Set Open Floor Mode Servlet
*
* @param moduleId The ID of the Module to Search For
* @param csrfToken The CSRF Token of the User
* @return The Content of the Response (Which is supposed to be the location of the module)
* @throws ServletException
* @throws IOException
* @throws Exception
*/
public String doThePost(String csrfToken) throws ServletException, IOException {
String servletClassName = "SetOpenFloorMode";
int expectedResponseCode = 302;
log.debug("Creating " + servletClassName + " Servlet Instance");
SetOpenFloorMode servlet = new SetOpenFloorMode();
servlet.init(new MockServletConfig(servletClassName));
// Adding Correct CSRF Token (Token Submitted)
request.addParameter("csrfToken", csrfToken);
log.debug("Running doPost");
servlet.doPost(request, response);
if (response.getStatus() != expectedResponseCode) {
fail(
servletClassName
+ " Servlet Returned "
+ response.getStatus()
+ " Code. "
+ expectedResponseCode
+ " Expected");
} else {
log.debug(expectedResponseCode + " Detected");
log.debug(
"Servlet Successful, returning response retrieved: " + response.getContentAsString());
return (response.getContentAsString());
}
return null;
}
/** This test checks that non admin users get access errors when Setting Open Floor Mode */
@Test
public void testUserEnableOpenFloorMode() {
String userName = "configUserTester";
String password = userName;
// Verify / Create user in DB
try {
TestProperties.verifyTestUser(log, applicationRoot, userName, password);
// Sign in as Normal User
log.debug("Signing in as User Through LoginServlet");
TestProperties.loginDoPost(log, request, response, userName, userName, null, lang);
log.debug("Login Servlet Complete, Getting CSRF Token");
if (response.getCookie("token") == null) {
fail("No CSRF Token Was Returned from Login Servlet");
}
String csrfToken = response.getCookie("token").getValue();
if (csrfToken.isEmpty()) {
String message = new String("No CSRF token returned from Login Servlet");
log.fatal(message);
fail(message);
} else {
// Add Cookies from Response to outgoing request
request.setCookies(response.getCookies());
String responseBody = doThePost(csrfToken);
if (responseBody.isEmpty()) {
log.debug("Expected Empty Result Received");
if (ModulePlan.isOpenFloor()) {
String message =
"Floor Plan Changed to Open Floor after what should have been a failed request";
log.fatal(message);
fail(message);
}
} else {
String message = "Normal user did not get error when performing admin function";
log.fatal(message);
fail(message);
}
}
} catch (Exception e) {
log.fatal("Could not Complete: " + e.toString());
fail("Exception Caught: " + e.toString());
}
}
/** This test checks that admin users can enable open floor mode */
@Test
public void testAdminSetOpenFloorMode() {
String userName = "configAdminTester";
String password = userName;
// Verify / Create user in DB
try {
TestProperties.verifyTestAdmin(log, applicationRoot, userName, password);
// Sign in as Admin User
log.debug("Signing in as User Through LoginServlet");
TestProperties.loginDoPost(log, request, response, userName, userName, null, lang);
log.debug("Login Servlet Complete, Getting CSRF Token");
if (response.getCookie("token") == null) {
fail("No CSRF Token Was Returned from Login Servlet");
}
String csrfToken = response.getCookie("token").getValue();
if (csrfToken.isEmpty()) {
String message = new String("No CSRF token returned from Login Servlet");
log.fatal(message);
fail(message);
} else {
// Add Cookies from Response to outgoing request
request.setCookies(response.getCookies());
String responseBody = doThePost(csrfToken);
if (responseBody.contains("Open Floor Plan Enabled")) {
log.debug("OpenFloor Mode enabled");
if (!ModulePlan.isOpenFloor()) {
String message = "Open Floor Mode was not actually Enabled";
log.fatal(message);
fail(message);
} else if (ModulePlan.isIncrementalFloor()) {
String message = "ModulePlan still returning possitive for CTF Mode Check";
log.fatal(message);
fail(message);
}
} else {
String message = "Admin was unable to enable OpenFloor mode";
log.fatal(message);
fail(message);
}
}
} catch (Exception e) {
log.fatal("Could not Complete: " + e.toString());
fail("Exception Caught: " + e.toString());
}
}
@Test
public void testCsrf() {
String userName = "configAdminTester";
String password = userName;
// Verify / Create user in DB
try {
TestProperties.verifyTestAdmin(log, applicationRoot, userName, password);
// Sign in as Admin User
log.debug("Signing in as User Through LoginServlet");
TestProperties.loginDoPost(log, request, response, userName, userName, null, lang);
log.debug("Login Servlet Complete, Getting CSRF Token");
if (response.getCookie("token") == null) {
fail("No CSRF Token Was Returned from Login Servlet");
}
String csrfToken = response.getCookie("token").getValue();
if (csrfToken.isEmpty()) {
String message = new String("No CSRF token returned from Login Servlet");
log.fatal(message);
fail(message);
} else {
// Add Cookies from Response to outgoing request
request.setCookies(response.getCookies());
String responseBody = doThePost("wrongToken");
if (responseBody.contains("Error Occurred")) {
log.debug("CSRF Error Occurred");
if (ModulePlan.isOpenFloor()) {
String message =
"OpenFloor Mode was enabled after what should have been a failed request";
log.fatal(message);
fail(message);
} else if (!ModulePlan.isIncrementalFloor()) {
String message =
"ModulePlan no longer returning possitive for CTF Floor Check after what should"
+ " have been a failed request";
log.fatal(message);
fail(message);
}
} else {
String message = "Registration Availability Update Failure";
log.fatal(message);
fail(message);
}
}
} catch (Exception e) {
log.fatal("Could not Complete: " + e.toString());
fail("Exception Caught: " + e.toString());
}
}
}