pmproducer/src/test/java/org/oran/pmproducer/oauth2/OAuthKafkaAuthenticateLoginCallbackHandlerTest.java

   1 /*-
   2  * ========================LICENSE_START=================================
   3  * O-RAN-SC
   4  * %%
   5  * Copyright (C) 2023 Nordix Foundation
   6  * %%
   7  * Licensed under the Apache License, Version 2.0 (the "License");
   8  * you may not use this file except in compliance with the License.
   9  * You may obtain a copy of the License at
  10  *
  11  *      http://www.apache.org/licenses/LICENSE-2.0
  12  *
  13  * Unless required by applicable law or agreed to in writing, software
  14  * distributed under the License is distributed on an "AS IS" BASIS,
  15  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  16  * See the License for the specific language governing permissions and
  17  * limitations under the License.
  18  * ========================LICENSE_END===================================
  19  */
  20
  21 package org.oran.pmproducer.oauth2;
  22
  23 import static org.junit.jupiter.api.Assertions.assertFalse;
  24 import static org.junit.jupiter.api.Assertions.assertThrows;
  25 import static org.junit.jupiter.api.Assertions.assertTrue;
  26 import static org.mockito.ArgumentMatchers.any;
  27 import static org.mockito.Mockito.mock;
  28 import static org.mockito.Mockito.verify;
  29 import static org.mockito.Mockito.when;
  30
  31 import java.io.IOException;
  32 import java.util.Collections;
  33 import java.util.HashMap;
  34 import java.util.List;
  35 import javax.security.auth.callback.Callback;
  36 import javax.security.auth.callback.UnsupportedCallbackException;
  37 import javax.security.auth.login.AppConfigurationEntry;
  38 import org.apache.kafka.common.security.auth.SaslExtensionsCallback;
  39 import org.apache.kafka.common.security.oauthbearer.OAuthBearerLoginModule;
  40 import org.apache.kafka.common.security.oauthbearer.OAuthBearerTokenCallback;
  41 import org.junit.jupiter.api.BeforeEach;
  42 import org.junit.jupiter.api.Test;
  43 import org.mockito.Mockito;
  44
  45 class OAuthKafkaAuthenticateLoginCallbackHandlerTest {
  46
  47     private OAuthKafkaAuthenticateLoginCallbackHandler callbackHandler;
  48
  49     @BeforeEach
  50     void setUp() {
  51         callbackHandler = new OAuthKafkaAuthenticateLoginCallbackHandler();
  52     }
  53
  54     @Test
  55     void testConfigureWithValidSaslMechanismAndConfigEntry() {
  56         String saslMechanism = OAuthBearerLoginModule.OAUTHBEARER_MECHANISM;
  57         List<AppConfigurationEntry> jaasConfigEntries = Collections.singletonList(Mockito.mock(AppConfigurationEntry.class));
  58
  59         callbackHandler.configure(new HashMap<>(), saslMechanism, jaasConfigEntries);
  60
  61         assertTrue(callbackHandler.isConfigured());
  62     }
  63
  64     @SuppressWarnings("java:S5778")
  65     @Test
  66     void testConfigureWithInvalidSaslMechanism() {
  67         String invalidSaslMechanism = "InvalidMechanism";
  68         List<AppConfigurationEntry> jaasConfigEntries = Collections.singletonList(Mockito.mock(AppConfigurationEntry.class));
  69
  70         assertThrows(IllegalArgumentException.class, () -> callbackHandler.configure(new HashMap<>(), invalidSaslMechanism, jaasConfigEntries));
  71
  72         assertFalse(callbackHandler.isConfigured());
  73     }
  74
  75     @SuppressWarnings("java:S5778")
  76     @Test
  77     void testConfigureWithEmptyJaasConfigEntries() {
  78         String saslMechanism = OAuthBearerLoginModule.OAUTHBEARER_MECHANISM;
  79         List<AppConfigurationEntry> emptyJaasConfigEntries = Collections.emptyList();
  80
  81         assertThrows(IllegalArgumentException.class, () -> callbackHandler.configure(new HashMap<>(), saslMechanism, emptyJaasConfigEntries));
  82
  83         assertFalse(callbackHandler.isConfigured());
  84     }
  85
  86     @Test
  87     void testHandleSaslExtensionsCallback() throws IOException, UnsupportedCallbackException {
  88         String saslMechanism = OAuthBearerLoginModule.OAUTHBEARER_MECHANISM;
  89         List<AppConfigurationEntry> jaasConfigEntries = Collections.singletonList(Mockito.mock(AppConfigurationEntry.class));
  90
  91         callbackHandler.configure(new HashMap<>(), saslMechanism, jaasConfigEntries);
  92         SaslExtensionsCallback callback = mock(SaslExtensionsCallback.class);
  93
  94         callbackHandler.handle(new Callback[]{callback});
  95         verify(callback).extensions(any());
  96     }
  97
  98     @Test
  99     void testHandleUnsupportedCallback() {
 100         Callback unsupportedCallback = mock(Callback.class);
 101         String saslMechanism = OAuthBearerLoginModule.OAUTHBEARER_MECHANISM;
 102         List<AppConfigurationEntry> jaasConfigEntries = Collections.singletonList(Mockito.mock(AppConfigurationEntry.class));
 103
 104         callbackHandler.configure(new HashMap<>(), saslMechanism, jaasConfigEntries);
 105         assertThrows(UnsupportedCallbackException.class, () -> callbackHandler.handle(new Callback[]{unsupportedCallback}));
 106     }
 107
 108     @Test
 109     void testHandleOAuthBearerTokenCallback() throws IOException, UnsupportedCallbackException {
 110
 111         String saslMechanism = OAuthBearerLoginModule.OAUTHBEARER_MECHANISM;
 112         List<AppConfigurationEntry> jaasConfigEntries = Collections.singletonList(Mockito.mock(AppConfigurationEntry.class));
 113         String validJwt = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c";
 114
 115         callbackHandler.configure(new HashMap<>(), saslMechanism, jaasConfigEntries);
 116
 117         OAuthBearerTokenCallback oauthBearerTokenCallback = Mockito.mock(OAuthBearerTokenCallback.class);
 118         SecurityContext securityContextMock = Mockito.mock(SecurityContext.class);
 119         when(oauthBearerTokenCallback.token()).thenReturn(null); // Ensure the callback has no token initially
 120         when(oauthBearerTokenCallback.token()).thenAnswer(invocation -> {
 121             return OAuthBearerTokenJwt.create(validJwt);
 122         });
 123
 124         when(securityContextMock.getBearerAuthToken()).thenReturn(validJwt);
 125         callbackHandler.handle(new Callback[]{oauthBearerTokenCallback});
 126         verify(oauthBearerTokenCallback).token();
 127     }
 128 }
 129