feature[ats_ATS64258]: Add OAuth2 JDBC storage

Change-Id: Ib1fd2a5a463fc01b15817985c174a541879e95e2

2 files changed, 227 insertions, 1 deletions

diff --git a/plugins/org.eclipse.osee.orcs.account.admin.test/src/org/eclipse/osee/orcs/account/admin/integration/JdbcJaxRsOAuthStorageTest.java b/plugins/org.eclipse.osee.orcs.account.admin.test/src/org/eclipse/osee/orcs/account/admin/integration/JdbcJaxRsOAuthStorageTest.java
new file mode 100644
index 00000000000..f3ce2cd8b62
--- /dev/null
+++ b/plugins/org.eclipse.osee.orcs.account.admin.test/src/org/eclipse/osee/orcs/account/admin/integration/JdbcJaxRsOAuthStorageTest.java
@@ -0,0 +1,226 @@
+/*******************************************************************************
+ * Copyright (c) 2013 Boeing.
+ * All rights reserved. This program and the accompanying materials
+ * are made available under the terms of the Eclipse Public License v1.0
+ * which accompanies this distribution, and is available at
+ * http://www.eclipse.org/legal/epl-v10.html
+ *
+ * Contributors:
+ *     Boeing - initial API and implementation
+ *******************************************************************************/
+package org.eclipse.osee.orcs.account.admin.integration;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertNull;
+import static org.mockito.Mockito.when;
+import static org.mockito.MockitoAnnotations.initMocks;
+import java.util.Arrays;
+import java.util.List;
+import org.eclipse.osee.jaxrs.server.security.JaxRsOAuthStorage;
+import org.eclipse.osee.jaxrs.server.security.OAuthCodeGrant;
+import org.eclipse.osee.jaxrs.server.security.OAuthToken;
+import org.eclipse.osee.jaxrs.server.security.OAuthTokenType;
+import org.eclipse.osee.orcs.account.admin.internal.oauth.JdbcJaxRsOAuthStorage;
+import org.eclipse.osee.orcs.db.mock.OsgiService;
+import org.junit.Before;
+import org.junit.Rule;
+import org.junit.Test;
+import org.junit.rules.ExpectedException;
+import org.junit.rules.TestRule;
+import org.mockito.Mock;
+
+/**
+ * Test Case for {@link JdbcJaxRsOAuthStorage}
+ * 
+ * @author Roberto E. Escobar
+ */
+public class JdbcJaxRsOAuthStorageTest {
+
+   private static final String AUTH_CODE_1 = "auth-code-1";
+
+   public static final long CODE_UUID = 5679L;
+   public static final long CLIENT_ID = 912371L;
+   public static final long SUBJECT_ID = 876523L;
+   public static final long ISSUED_AT = 1231L;
+   public static final long EXPIRES_IN = 9876L;
+
+   public static final String REDIRECT_URI = "http://my.redirect.com/callback";
+   public static final String AUDIENCE = "audience-1";
+   public static final List<String> APPROVED_SCOPES = Arrays.asList("a-scope", "b-scope", "c-scope");
+   public static final String CLIENT_CODE_VERIFIER = "client-code-verifier-1";
+
+   public static final long AT_UUID = 612319L;
+   private static final String AT_KEY_1 = "at-key-1";
+   private static final String AT_TOKEN_TYPE_1 = "token-type-1";
+   private static final String AT_GRANT_TYPE_1 = "grant-type-1";
+   private static final OAuthTokenType AT_TYPE_1 = OAuthTokenType.BEARER_TOKEN;
+
+   public static final long RT_UUID = 3219L;
+   private static final String RT_KEY_1 = "rt-key-1";
+   private static final String RT_TOKEN_TYPE_1 = "rt-type-1";
+   private static final String RT_GRANT_TYPE_1 = "rt-grant-type-1";
+   private static final OAuthTokenType RT_TYPE_1 = OAuthTokenType.REFRESH_TOKEN;
+
+   @Rule
+   public TestRule osgi = OrcsIntegrationRule.integrationRule(this, "osee.demo.hsql");
+
+   @Rule
+   public ExpectedException thrown = ExpectedException.none();
+
+   @OsgiService
+   private JaxRsOAuthStorage storage;
+
+   // @formatter:off
+   @Mock private OAuthCodeGrant authCode;
+   @Mock private OAuthToken accessToken;
+   @Mock private OAuthToken refreshToken;
+   // @formatter:on
+
+   @Before
+   public void testSetup() {
+      initMocks(this);
+
+      when(authCode.getUuid()).thenReturn(CODE_UUID);
+      when(authCode.getClientId()).thenReturn(CLIENT_ID);
+      when(authCode.getSubjectId()).thenReturn(SUBJECT_ID);
+      when(authCode.getIssuedAt()).thenReturn(ISSUED_AT);
+      when(authCode.getExpiresIn()).thenReturn(EXPIRES_IN);
+      when(authCode.getCode()).thenReturn(AUTH_CODE_1);
+      when(authCode.getRedirectUri()).thenReturn(REDIRECT_URI);
+      when(authCode.getAudience()).thenReturn(AUDIENCE);
+      when(authCode.getApprovedScopes()).thenReturn(APPROVED_SCOPES);
+      when(authCode.getClientCodeVerifier()).thenReturn(CLIENT_CODE_VERIFIER);
+
+      when(accessToken.getUuid()).thenReturn(AT_UUID);
+      when(accessToken.getClientId()).thenReturn(CLIENT_ID);
+      when(accessToken.getSubjectId()).thenReturn(SUBJECT_ID);
+      when(accessToken.getIssuedAt()).thenReturn(ISSUED_AT);
+      when(accessToken.getExpiresIn()).thenReturn(EXPIRES_IN);
+      when(accessToken.getTokenKey()).thenReturn(AT_KEY_1);
+      when(accessToken.getTokenType()).thenReturn(AT_TOKEN_TYPE_1);
+      when(accessToken.getType()).thenReturn(AT_TYPE_1);
+      when(accessToken.getGrantType()).thenReturn(AT_GRANT_TYPE_1);
+      when(accessToken.getAudience()).thenReturn(AUDIENCE);
+
+      when(refreshToken.getUuid()).thenReturn(RT_UUID);
+      when(refreshToken.getClientId()).thenReturn(CLIENT_ID);
+      when(refreshToken.getSubjectId()).thenReturn(SUBJECT_ID);
+      when(refreshToken.getIssuedAt()).thenReturn(ISSUED_AT);
+      when(refreshToken.getExpiresIn()).thenReturn(EXPIRES_IN);
+      when(refreshToken.getTokenKey()).thenReturn(RT_KEY_1);
+      when(refreshToken.getTokenType()).thenReturn(RT_TOKEN_TYPE_1);
+      when(refreshToken.getType()).thenReturn(RT_TYPE_1);
+      when(refreshToken.getGrantType()).thenReturn(RT_GRANT_TYPE_1);
+      when(refreshToken.getAudience()).thenReturn(AUDIENCE);
+   }
+
+   @Test
+   public void testAuthCode() {
+      OAuthCodeGrant actual = storage.getCodeGrant(AUTH_CODE_1);
+      assertNull(actual);
+
+      storage.storeCodeGrant(authCode);
+
+      actual = storage.getCodeGrant(AUTH_CODE_1);
+
+      assertEquals(CODE_UUID, actual.getUuid());
+      assertEquals(CLIENT_ID, actual.getClientId());
+      assertEquals(SUBJECT_ID, actual.getSubjectId());
+      assertEquals(ISSUED_AT, actual.getIssuedAt());
+      assertEquals(EXPIRES_IN, actual.getExpiresIn());
+      assertEquals(AUTH_CODE_1, actual.getCode());
+      assertEquals(REDIRECT_URI, actual.getRedirectUri());
+      assertEquals(AUDIENCE, actual.getAudience());
+      assertEquals(APPROVED_SCOPES, actual.getApprovedScopes());
+      assertEquals(CLIENT_CODE_VERIFIER, actual.getClientCodeVerifier());
+
+      storage.removeCodeGrant(authCode);
+
+      actual = storage.getCodeGrant(AUTH_CODE_1);
+      assertNull(actual);
+   }
+
+   @Test
+   public void testAccessToken() {
+      storage.storeToken(accessToken);
+
+      OAuthToken actual = storage.getPreauthorizedToken(CLIENT_ID, SUBJECT_ID, AT_GRANT_TYPE_1);
+
+      assertEquals(AT_UUID, actual.getUuid());
+      assertEquals(CLIENT_ID, actual.getClientId());
+      assertEquals(SUBJECT_ID, actual.getSubjectId());
+      assertEquals(ISSUED_AT, actual.getIssuedAt());
+      assertEquals(EXPIRES_IN, actual.getExpiresIn());
+      assertEquals(AT_KEY_1, actual.getTokenKey());
+      assertEquals(AT_TOKEN_TYPE_1, actual.getTokenType());
+      assertEquals(AT_TYPE_1, actual.getType());
+      assertEquals(AT_GRANT_TYPE_1, actual.getGrantType());
+      assertEquals(AUDIENCE, actual.getAudience());
+      assertNull(actual.getRefreshToken());
+
+      storage.removeTokenByKey(AT_KEY_1);
+
+      actual = storage.getPreauthorizedToken(CLIENT_ID, SUBJECT_ID, AT_GRANT_TYPE_1);
+      assertNull(actual);
+   }
+
+   @Test
+   public void testAccessTokenWithRefreshToken() {
+      storage.storeToken(accessToken, refreshToken);
+      storage.relateTokens(refreshToken, accessToken);
+
+      OAuthToken token1 = storage.getPreauthorizedToken(CLIENT_ID, SUBJECT_ID, AT_GRANT_TYPE_1);
+
+      assertEquals(AT_UUID, token1.getUuid());
+      assertEquals(CLIENT_ID, token1.getClientId());
+      assertEquals(SUBJECT_ID, token1.getSubjectId());
+      assertEquals(ISSUED_AT, token1.getIssuedAt());
+      assertEquals(EXPIRES_IN, token1.getExpiresIn());
+      assertEquals(AT_KEY_1, token1.getTokenKey());
+      assertEquals(AT_TOKEN_TYPE_1, token1.getTokenType());
+      assertEquals(AT_TYPE_1, token1.getType());
+      assertEquals(AT_GRANT_TYPE_1, token1.getGrantType());
+      assertEquals(AUDIENCE, token1.getAudience());
+      assertEquals(RT_KEY_1, token1.getRefreshToken());
+
+      OAuthToken refresh = storage.getPreauthorizedToken(CLIENT_ID, SUBJECT_ID, RT_GRANT_TYPE_1);
+
+      assertEquals(RT_UUID, refresh.getUuid());
+      assertEquals(CLIENT_ID, refresh.getClientId());
+      assertEquals(SUBJECT_ID, refresh.getSubjectId());
+      assertEquals(ISSUED_AT, refresh.getIssuedAt());
+      assertEquals(EXPIRES_IN, refresh.getExpiresIn());
+      assertEquals(RT_KEY_1, refresh.getTokenKey());
+      assertEquals(RT_TOKEN_TYPE_1, refresh.getTokenType());
+      assertEquals(RT_TYPE_1, refresh.getType());
+      assertEquals(RT_GRANT_TYPE_1, refresh.getGrantType());
+      assertEquals(AUDIENCE, refresh.getAudience());
+      assertNull(refresh.getRefreshToken());
+
+      Iterable<OAuthToken> tokens = storage.getAccessTokensByRefreshToken(RT_KEY_1);
+      OAuthToken token2 = tokens.iterator().next();
+
+      assertEquals(AT_UUID, token2.getUuid());
+      assertEquals(CLIENT_ID, token2.getClientId());
+      assertEquals(SUBJECT_ID, token2.getSubjectId());
+      assertEquals(ISSUED_AT, token2.getIssuedAt());
+      assertEquals(EXPIRES_IN, token2.getExpiresIn());
+      assertEquals(AT_KEY_1, token2.getTokenKey());
+      assertEquals(AT_TOKEN_TYPE_1, token2.getTokenType());
+      assertEquals(AT_TYPE_1, token2.getType());
+      assertEquals(AT_GRANT_TYPE_1, token2.getGrantType());
+      assertEquals(AUDIENCE, token2.getAudience());
+      assertEquals(RT_KEY_1, token2.getRefreshToken());
+
+      storage.removeToken(tokens);
+
+      token1 = storage.getPreauthorizedToken(CLIENT_ID, SUBJECT_ID, AT_GRANT_TYPE_1);
+      assertNull(token1);
+
+      storage.removeTokenByKey(RT_KEY_1);
+
+      refresh = storage.getPreauthorizedToken(CLIENT_ID, SUBJECT_ID, RT_GRANT_TYPE_1);
+      assertNull(refresh);
+
+   }
+}
diff --git a/plugins/org.eclipse.osee.orcs.account.admin.test/src/org/eclipse/osee/orcs/account/admin/integration/OsgiIntegrationTestSuite.java b/plugins/org.eclipse.osee.orcs.account.admin.test/src/org/eclipse/osee/orcs/account/admin/integration/OsgiIntegrationTestSuite.java
index 2641093105b..a95d625490b 100644
--- a/plugins/org.eclipse.osee.orcs.account.admin.test/src/org/eclipse/osee/orcs/account/admin/integration/OsgiIntegrationTestSuite.java
+++ b/plugins/org.eclipse.osee.orcs.account.admin.test/src/org/eclipse/osee/orcs/account/admin/integration/OsgiIntegrationTestSuite.java
@@ -17,7 +17,7 @@ import org.junit.runners.Suite;
  * @author Roberto E. Escobar
  */
 @RunWith(Suite.class)
-@Suite.SuiteClasses({OrcsAccountStorageTest.class, OrcsSubscriptionStorageTest.class})
+@Suite.SuiteClasses({JdbcJaxRsOAuthStorageTest.class, OrcsAccountStorageTest.class, OrcsSubscriptionStorageTest.class})
 public class OsgiIntegrationTestSuite {
    // Test Suite
 }