Jetty example source code file (TestJAASUserRealm.java)

This example Jetty source code file (TestJAASUserRealm.java) is included in the DevDaily.com "Java Source Code Warehouse" project. The intent of this project is to help you "Learn Java by Example" ^TM.

Java - Jetty tags/keywords

embeddeddatasource, exception, exception, file, io, jaasuserprincipal, jaasuserrealm, jaasuserrealm, jdbc, naming, printwriter, properties, request, request, sql, statement, string, string, util

The Jetty TestJAASUserRealm.java source code

// ========================================================================
// $Id: TestJAASUserRealm.java 778 2006-08-15 08:31:20Z janb $
// Copyright 2003-2004 Mort Bay Consulting Pty. Ltd.
// ------------------------------------------------------------------------
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at 
// http://www.apache.org/licenses/LICENSE-2.0
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
// ========================================================================

package org.mortbay.jetty.plus.jaas;

import java.io.BufferedReader;
import java.io.File;
import java.io.FileOutputStream;
import java.io.FileReader;
import java.io.FileWriter;
import java.io.PrintWriter;
import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.Statement;
import java.util.Properties;
import java.util.Random;

import javax.naming.Context;
import javax.naming.InitialContext;

import junit.framework.Test;
import junit.framework.TestCase;
import junit.framework.TestSuite;

import org.apache.derby.jdbc.EmbeddedDataSource;
import org.mortbay.jetty.Request;


/* ---------------------------------------------------- */
/** TestJAASUserRealm
 * <p> Test JAAS in Jetty - relies on the JDBCUserRealm.
 *
 * <p>
Notes
 * <p>
 *
 * <p>
Usage
 * <pre>
 */
/*
 * </pre>
 *
 * @see
 * @version 1.0 Mon Apr 28 2003
 * @author Jan Bartel (janb)
 */
public class TestJAASUserRealm extends TestCase

{
    private static boolean setupDone = false;
    private Random random = new Random();
   
    
    public TestJAASUserRealm(String name)
    throws Exception
    {
        super (name);
        
     
    }

    public static Test suite()
    {
        return new TestSuite(TestJAASUserRealm.class);
    }

    public void setUp ()
    throws Exception
    {
        if (setupDone)
            return;
        
        
        //set up the properties 
        File propsFile = File.createTempFile("props", null);
        propsFile.deleteOnExit();
        Properties props = new Properties ();
        props.put("user", "user,user,pleb");
        FileOutputStream fout=new FileOutputStream(propsFile);
        props.store(fout, "");
        fout.close();

        
 
        
        //set up config
        File configFile = File.createTempFile ("loginConf", null);
        configFile.deleteOnExit();
        PrintWriter writer = new PrintWriter(new FileWriter(configFile));
        writer.println ("props {");
        writer.println ("org.mortbay.jetty.plus.jaas.spi.PropertyFileLoginModule required");     
        writer.println ("debug=\"true\"");
        writer.println ("file=\""+propsFile.getCanonicalPath().replace('\\','/') +"\";");
        writer.println ("};");
        writer.println ("ds {");
        writer.println ("org.mortbay.jetty.plus.jaas.spi.DataSourceLoginModule required");
        writer.println ("debug=\"true\"");
        writer.println ("dbJNDIName=\"ds\"");
        writer.println ("userTable=\"myusers\"");
        writer.println ("userField=\"myuser\"");
        writer.println ("credentialField=\"mypassword\"");
        writer.println ("userRoleTable=\"myuserroles\"");
        writer.println ("userRoleUserField=\"myuser\"");
        writer.println ("userRoleRoleField=\"myrole\";");
        writer.println ("};");
        writer.flush();
        writer.close();
        
        BufferedReader reader = new BufferedReader(new FileReader(configFile));
        String s = "";
        for (s = reader.readLine(); (s != null); s = reader.readLine())
        {
            System.out.println (s);
        }
        
        //create a login module config file
        System.setProperty ("java.security.auth.login.config", configFile.toURL().toExternalForm());
        setupDone = true;
    }

    
    public void testItDataSource ()
    throws Exception
    {
        String tmpDir = System.getProperty("java.io.tmpdir")+System.getProperty("file.separator");
        System.setProperty("derby.system.home", tmpDir);
        String dbname = "derby-"+(int)(random.nextDouble()*10000);
        
        EmbeddedDataSource eds = new EmbeddedDataSource();
        
        try
        {
            //make the java:comp/env
            InitialContext ic = new InitialContext();
            Context comp = (Context)ic.lookup("java:comp");
            Context env = comp.createSubcontext ("env");
            
            //make a DataSource    
            eds.setDatabaseName(dbname);          
            eds.setCreateDatabase("create");
            
                        
            env.createSubcontext("jdbc");
            env.bind("ds", eds);
            
            
            Connection connection = eds.getConnection();
          
            
            //create tables
            String sql = "create table myusers (myuser varchar(32) PRIMARY KEY, mypassword varchar(32))";
            Statement createStatement = connection.createStatement();
            createStatement.executeUpdate (sql);
            
            sql = " create table myuserroles (myuser varchar(32), myrole varchar(32))";
            createStatement.executeUpdate (sql);
            createStatement.close();
            
            //insert test users and roles
            sql = "insert into myusers (myuser, mypassword) values (?, ?)";
            
            PreparedStatement statement = connection.prepareStatement(sql);
            statement.setString (1, "me");
            statement.setString (2, "me");
            
            statement.executeUpdate();
            sql = "insert into myuserroles (myuser, myrole) values ( ? , ? )";
            statement = connection.prepareStatement (sql);
            statement.setString (1, "me");
            statement.setString (2, "roleA");
            statement.executeUpdate();
            
            statement.setString(1, "me");
            statement.setString(2, "roleB");
            statement.executeUpdate();
            
            statement.close();
            connection.close();
            
            
            //create a JAASUserRealm
            JAASUserRealm realm = new JAASUserRealm ("testRealm");
            
            realm.setLoginModuleName ("ds");
            
            
            JAASUserPrincipal userPrincipal = (JAASUserPrincipal)realm.authenticate ("me", "blah",(Request)null);
            assertNull (userPrincipal);
            
            userPrincipal = (JAASUserPrincipal)realm.authenticate ("me", "me", (Request)null);
            
            assertNotNull (userPrincipal);
            assertNotNull (userPrincipal.getName());
            assertTrue (userPrincipal.getName().equals("me"));
            
            assertTrue (userPrincipal.isUserInRole("roleA"));
            assertTrue (userPrincipal.isUserInRole("roleB"));
            assertTrue (!userPrincipal.isUserInRole("roleC"));
            
            realm.pushRole (userPrincipal, "roleC");
            assertTrue (userPrincipal.isUserInRole("roleC"));
            assertTrue (!userPrincipal.isUserInRole("roleA"));
            assertTrue (!userPrincipal.isUserInRole("roleB"));
            
            realm.pushRole (userPrincipal, "roleD");
            assertTrue (userPrincipal.isUserInRole("roleD"));
            assertTrue (!userPrincipal.isUserInRole("roleC"));
            assertTrue (!userPrincipal.isUserInRole("roleA"));
            assertTrue (!userPrincipal.isUserInRole("roleB"));
            
            realm.popRole(userPrincipal);
            assertTrue (userPrincipal.isUserInRole("roleC"));
            assertTrue (!userPrincipal.isUserInRole("roleA"));
            assertTrue (!userPrincipal.isUserInRole("roleB"));
            
            realm.popRole(userPrincipal);
            assertTrue (!userPrincipal.isUserInRole("roleC"));
            assertTrue (userPrincipal.isUserInRole("roleA"));
            
            realm.disassociate(userPrincipal);
        }
        finally
        {
            try
            {
                Connection c = eds.getConnection();
                Statement s = c.createStatement();
                s.executeUpdate("drop table myusers");
                s.executeUpdate("drop table myuserroles");
                s.close();
                c.close();
            }
            catch (Exception e)
            {
                e.printStackTrace();
            }
        }
    }

    
    
    public void testItPropertyFile ()
        throws Exception
    {
        //create a JAASUserRealm
        JAASUserRealm realm = new JAASUserRealm ("props");
        realm.setLoginModuleName ("props");

        JAASUserPrincipal userPrincipal = (JAASUserPrincipal)realm.authenticate ("user", "wrong",(Request)null);
        assertNull (userPrincipal);
        
        userPrincipal = (JAASUserPrincipal)realm.authenticate ("user", "user", (Request)null);

        assertNotNull (userPrincipal);
        assertTrue (userPrincipal.getName().equals("user"));

        assertTrue (userPrincipal.isUserInRole("pleb"));
        assertTrue (userPrincipal.isUserInRole("user"));
        assertTrue (!userPrincipal.isUserInRole("other"));       
       
        realm.disassociate (userPrincipal);  
    }

    public void tearDown ()
        throws Exception
    {
       
    }
    
    
}