KEYCLOAK-8379 Migrate ModelClass: AuthenticationSessionProviderTest
This commit is contained in:
Martin Bartos RH
Marek Posolda
parent
93965512c5
commit
d0b7700c04
2 changed files with 398 additions and 299 deletions
|
|
@ -0,0 +1,398 @@
|
||||||
|
/*
|
||||||
|
* Copyright 2016 Red Hat, Inc. and/or its affiliates
|
||||||
|
* and other contributors as indicated by the @author tags.
|
||||||
|
*
|
||||||
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
* you may not use this file except in compliance with the License.
|
||||||
|
* You may obtain a copy of the License at
|
||||||
|
*
|
||||||
|
* http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
*
|
||||||
|
* Unless required by applicable law or agreed to in writing, software
|
||||||
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
* See the License for the specific language governing permissions and
|
||||||
|
* limitations under the License.
|
||||||
|
*/
|
||||||
|
|
||||||
|
package org.keycloak.testsuite.model;
|
||||||
|
|
||||||
|
import org.jboss.arquillian.container.test.api.Deployment;
|
||||||
|
import org.jboss.arquillian.container.test.api.TargetsContainer;
|
||||||
|
import org.jboss.shrinkwrap.api.spec.WebArchive;
|
||||||
|
import org.junit.After;
|
||||||
|
import org.junit.Before;
|
||||||
|
import org.junit.Test;
|
||||||
|
import org.keycloak.admin.client.resource.UserResource;
|
||||||
|
import org.keycloak.common.util.Time;
|
||||||
|
import org.keycloak.models.*;
|
||||||
|
import org.keycloak.models.utils.KeycloakModelUtils;
|
||||||
|
import org.keycloak.representations.idm.RealmRepresentation;
|
||||||
|
import org.keycloak.services.managers.ClientManager;
|
||||||
|
import org.keycloak.services.managers.RealmManager;
|
||||||
|
import org.keycloak.sessions.AuthenticationSessionModel;
|
||||||
|
import org.keycloak.sessions.CommonClientSessionModel;
|
||||||
|
import org.keycloak.sessions.RootAuthenticationSessionModel;
|
||||||
|
import org.keycloak.testsuite.AbstractTestRealmKeycloakTest;
|
||||||
|
import org.keycloak.testsuite.arquillian.annotation.ModelTest;
|
||||||
|
import org.keycloak.testsuite.runonserver.RunOnServerDeployment;
|
||||||
|
|
||||||
|
import java.util.concurrent.atomic.AtomicReference;
|
||||||
|
|
||||||
|
import static org.hamcrest.core.Is.is;
|
||||||
|
import static org.hamcrest.core.IsNull.notNullValue;
|
||||||
|
import static org.hamcrest.core.IsNull.nullValue;
|
||||||
|
import static org.junit.Assert.assertThat;
|
||||||
|
import static org.keycloak.testsuite.arquillian.DeploymentTargetModifier.AUTH_SERVER_CURRENT;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* @author <a href="mailto:mposolda@redhat.com">Marek Posolda</a>
|
||||||
|
*/
|
||||||
|
public class AuthenticationSessionProviderTest extends AbstractTestRealmKeycloakTest {
|
||||||
|
|
||||||
|
@Deployment
|
||||||
|
@TargetsContainer(AUTH_SERVER_CURRENT)
|
||||||
|
public static WebArchive deploy() {
|
||||||
|
return RunOnServerDeployment.create(UserResource.class, AuthenticationSessionProviderTest.class)
|
||||||
|
.addPackages(true,
|
||||||
|
"org.keycloak.testsuite",
|
||||||
|
"org.keycloak.testsuite.model");
|
||||||
|
}
|
||||||
|
|
||||||
|
@Before
|
||||||
|
public void before() {
|
||||||
|
testingClient.server().run(session -> {
|
||||||
|
RealmModel realm = session.realms().getRealm("test");
|
||||||
|
session.users().addUser(realm, "user1").setEmail("user1@localhost");
|
||||||
|
session.users().addUser(realm, "user2").setEmail("user2@localhost");
|
||||||
|
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
@After
|
||||||
|
public void after() {
|
||||||
|
testingClient.server().run(session -> {
|
||||||
|
RealmModel realm = session.realms().getRealm("test");
|
||||||
|
session.sessions().removeUserSessions(realm);
|
||||||
|
|
||||||
|
UserModel user1 = session.users().getUserByUsername("user1", realm);
|
||||||
|
UserModel user2 = session.users().getUserByUsername("user2", realm);
|
||||||
|
|
||||||
|
UserManager um = new UserManager(session);
|
||||||
|
if (user1 != null) {
|
||||||
|
um.removeUser(realm, user1);
|
||||||
|
}
|
||||||
|
if (user2 != null) {
|
||||||
|
um.removeUser(realm, user2);
|
||||||
|
}
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
@Test
|
||||||
|
@ModelTest
|
||||||
|
public void testLoginSessionsCRUD(KeycloakSession session) {
|
||||||
|
AtomicReference<String> rootAuthSessionID = new AtomicReference<>();
|
||||||
|
AtomicReference<String> tabID = new AtomicReference<>();
|
||||||
|
|
||||||
|
KeycloakModelUtils.runJobInTransaction(session.getKeycloakSessionFactory(), (KeycloakSession sessionCRUD1) -> {
|
||||||
|
KeycloakSession currentSession = sessionCRUD1;
|
||||||
|
RealmModel realm = currentSession.realms().getRealm("test");
|
||||||
|
|
||||||
|
ClientModel client1 = realm.getClientByClientId("test-app");
|
||||||
|
|
||||||
|
RootAuthenticationSessionModel rootAuthSession = currentSession.authenticationSessions().createRootAuthenticationSession(realm);
|
||||||
|
rootAuthSessionID.set(rootAuthSession.getId());
|
||||||
|
|
||||||
|
AuthenticationSessionModel authSession = rootAuthSession.createAuthenticationSession(client1);
|
||||||
|
tabID.set(authSession.getTabId());
|
||||||
|
|
||||||
|
authSession.setAction("foo");
|
||||||
|
rootAuthSession.setTimestamp(100);
|
||||||
|
});
|
||||||
|
|
||||||
|
KeycloakModelUtils.runJobInTransaction(session.getKeycloakSessionFactory(), (KeycloakSession sessionCRUD2) -> {
|
||||||
|
KeycloakSession currentSession = sessionCRUD2;
|
||||||
|
RealmModel realm = currentSession.realms().getRealm("test");
|
||||||
|
|
||||||
|
ClientModel client1 = realm.getClientByClientId("test-app");
|
||||||
|
|
||||||
|
// Ensure currentSession is here
|
||||||
|
RootAuthenticationSessionModel rootAuthSession = currentSession.authenticationSessions().getRootAuthenticationSession(realm, rootAuthSessionID.get());
|
||||||
|
AuthenticationSessionModel authSession = rootAuthSession.getAuthenticationSession(client1, tabID.get());
|
||||||
|
testAuthenticationSession(authSession, client1.getId(), null, "foo");
|
||||||
|
|
||||||
|
assertThat(rootAuthSession.getTimestamp(), is(100));
|
||||||
|
|
||||||
|
// Update and commit
|
||||||
|
authSession.setAction("foo-updated");
|
||||||
|
rootAuthSession.setTimestamp(200);
|
||||||
|
authSession.setAuthenticatedUser(currentSession.users().getUserByUsername("user1", realm));
|
||||||
|
});
|
||||||
|
|
||||||
|
KeycloakModelUtils.runJobInTransaction(session.getKeycloakSessionFactory(), (KeycloakSession sessionCRUD3) -> {
|
||||||
|
KeycloakSession currentSession = sessionCRUD3;
|
||||||
|
RealmModel realm = currentSession.realms().getRealm("test");
|
||||||
|
UserModel user1 = currentSession.users().getUserByUsername("user1", realm);
|
||||||
|
|
||||||
|
// Ensure currentSession was updated
|
||||||
|
RootAuthenticationSessionModel rootAuthSession = currentSession.authenticationSessions().getRootAuthenticationSession(realm, rootAuthSessionID.get());
|
||||||
|
ClientModel client1 = realm.getClientByClientId("test-app");
|
||||||
|
AuthenticationSessionModel authSession = rootAuthSession.getAuthenticationSession(client1, tabID.get());
|
||||||
|
|
||||||
|
testAuthenticationSession(authSession, client1.getId(), user1.getId(), "foo-updated");
|
||||||
|
|
||||||
|
assertThat(rootAuthSession.getTimestamp(), is(200));
|
||||||
|
|
||||||
|
// Remove and commit
|
||||||
|
currentSession.authenticationSessions().removeRootAuthenticationSession(realm, rootAuthSession);
|
||||||
|
});
|
||||||
|
|
||||||
|
KeycloakModelUtils.runJobInTransaction(session.getKeycloakSessionFactory(), (KeycloakSession sessionCRUD4) -> {
|
||||||
|
KeycloakSession currentSession = sessionCRUD4;
|
||||||
|
RealmModel realm = currentSession.realms().getRealm("test");
|
||||||
|
|
||||||
|
// Ensure currentSession was removed
|
||||||
|
assertThat(currentSession.authenticationSessions().getRootAuthenticationSession(realm, rootAuthSessionID.get()), nullValue());
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
@Test
|
||||||
|
@ModelTest
|
||||||
|
public void testAuthenticationSessionRestart(KeycloakSession session) {
|
||||||
|
AtomicReference<String> parentAuthSessionID = new AtomicReference<>();
|
||||||
|
AtomicReference<String> tabID = new AtomicReference<>();
|
||||||
|
|
||||||
|
KeycloakModelUtils.runJobInTransaction(session.getKeycloakSessionFactory(), (KeycloakSession sessionRestart1) -> {
|
||||||
|
KeycloakSession currentSession = sessionRestart1;
|
||||||
|
RealmModel realm = currentSession.realms().getRealm("test");
|
||||||
|
|
||||||
|
ClientModel client1 = realm.getClientByClientId("test-app");
|
||||||
|
UserModel user1 = currentSession.users().getUserByUsername("user1", realm);
|
||||||
|
|
||||||
|
AuthenticationSessionModel authSession = currentSession.authenticationSessions().createRootAuthenticationSession(realm)
|
||||||
|
.createAuthenticationSession(client1);
|
||||||
|
|
||||||
|
parentAuthSessionID.set(authSession.getParentSession().getId());
|
||||||
|
tabID.set(authSession.getTabId());
|
||||||
|
|
||||||
|
authSession.setAction("foo");
|
||||||
|
authSession.getParentSession().setTimestamp(100);
|
||||||
|
|
||||||
|
authSession.setAuthenticatedUser(user1);
|
||||||
|
authSession.setAuthNote("foo", "bar");
|
||||||
|
authSession.setClientNote("foo2", "bar2");
|
||||||
|
authSession.setExecutionStatus("123", CommonClientSessionModel.ExecutionStatus.SUCCESS);
|
||||||
|
});
|
||||||
|
|
||||||
|
KeycloakModelUtils.runJobInTransaction(session.getKeycloakSessionFactory(), (KeycloakSession sessionRestart2) -> {
|
||||||
|
KeycloakSession currentSession = sessionRestart2;
|
||||||
|
RealmModel realm = currentSession.realms().getRealm("test");
|
||||||
|
|
||||||
|
// Test restart root authentication session
|
||||||
|
ClientModel client1 = realm.getClientByClientId("test-app");
|
||||||
|
AuthenticationSessionModel authSession = currentSession.authenticationSessions().getRootAuthenticationSession(realm, parentAuthSessionID.get())
|
||||||
|
.getAuthenticationSession(client1, tabID.get());
|
||||||
|
authSession.getParentSession().restartSession(realm);
|
||||||
|
});
|
||||||
|
|
||||||
|
KeycloakModelUtils.runJobInTransaction(session.getKeycloakSessionFactory(), (KeycloakSession sessionRestart3) -> {
|
||||||
|
KeycloakSession currentSession = sessionRestart3;
|
||||||
|
RealmModel realm = currentSession.realms().getRealm("test");
|
||||||
|
|
||||||
|
ClientModel client1 = realm.getClientByClientId("test-app");
|
||||||
|
|
||||||
|
RootAuthenticationSessionModel rootAuthSession = currentSession.authenticationSessions().getRootAuthenticationSession(realm, parentAuthSessionID.get());
|
||||||
|
|
||||||
|
assertThat(rootAuthSession.getAuthenticationSession(client1, tabID.get()), nullValue());
|
||||||
|
assertThat(rootAuthSession.getTimestamp() > 0, is(true));
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
@Test
|
||||||
|
@ModelTest
|
||||||
|
public void testExpiredAuthSessions(KeycloakSession session) {
|
||||||
|
AtomicReference<String> authSessionID = new AtomicReference<>();
|
||||||
|
|
||||||
|
KeycloakModelUtils.runJobInTransaction(session.getKeycloakSessionFactory(), (KeycloakSession sessionExpired) -> {
|
||||||
|
KeycloakSession mainSession = sessionExpired;
|
||||||
|
try {
|
||||||
|
// AccessCodeLifespan = 10 ; AccessCodeLifespanUserAction = 10 ; AccessCodeLifespanLogin = 30
|
||||||
|
setAccessCodeLifespan(mainSession, 10, 10, 30);
|
||||||
|
|
||||||
|
createAuthSession(mainSession, authSessionID);
|
||||||
|
testExpiredOffset(mainSession, 25, false, authSessionID.get());
|
||||||
|
testExpiredOffset(mainSession, 35, true, authSessionID.get());
|
||||||
|
|
||||||
|
// AccessCodeLifespan = Not set ; AccessCodeLifespanUserAction = 10 ; AccessCodeLifespanLogin = Not set
|
||||||
|
setAccessCodeLifespan(mainSession, -1, 40, -1);
|
||||||
|
|
||||||
|
createAuthSession(mainSession, authSessionID);
|
||||||
|
testExpiredOffset(mainSession, 35, false, authSessionID.get());
|
||||||
|
testExpiredOffset(mainSession, 45, true, authSessionID.get());
|
||||||
|
|
||||||
|
// AccessCodeLifespan = 50 ; AccessCodeLifespanUserAction = Not set ; AccessCodeLifespanLogin = Not set
|
||||||
|
setAccessCodeLifespan(mainSession, 50, -1, -1);
|
||||||
|
|
||||||
|
createAuthSession(mainSession, authSessionID);
|
||||||
|
testExpiredOffset(mainSession, 45, false, authSessionID.get());
|
||||||
|
testExpiredOffset(mainSession, 55, true, authSessionID.get());
|
||||||
|
|
||||||
|
} finally {
|
||||||
|
Time.setOffset(0);
|
||||||
|
setAccessCodeLifespan(mainSession, 60, 300, 1800);
|
||||||
|
}
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
@Test
|
||||||
|
@ModelTest
|
||||||
|
public void testOnRealmRemoved(KeycloakSession session) {
|
||||||
|
AtomicReference<String> authSessionID = new AtomicReference<>();
|
||||||
|
AtomicReference<String> authSessionID2 = new AtomicReference<>();
|
||||||
|
|
||||||
|
KeycloakModelUtils.runJobInTransaction(session.getKeycloakSessionFactory(), (KeycloakSession sesRealmRemoved1) -> {
|
||||||
|
KeycloakSession currentSession = sesRealmRemoved1;
|
||||||
|
RealmModel realm = currentSession.realms().getRealm("test");
|
||||||
|
RealmModel fooRealm = currentSession.realms().createRealm("foo-realm");
|
||||||
|
|
||||||
|
fooRealm.addClient("foo-client");
|
||||||
|
|
||||||
|
authSessionID.set(currentSession.authenticationSessions().createRootAuthenticationSession(realm).getId());
|
||||||
|
authSessionID2.set(currentSession.authenticationSessions().createRootAuthenticationSession(fooRealm).getId());
|
||||||
|
});
|
||||||
|
|
||||||
|
KeycloakModelUtils.runJobInTransaction(session.getKeycloakSessionFactory(), (KeycloakSession sesRealmRemoved2) -> {
|
||||||
|
KeycloakSession currentSession = sesRealmRemoved2;
|
||||||
|
|
||||||
|
new RealmManager(currentSession).removeRealm(currentSession.realms().getRealmByName("foo-realm"));
|
||||||
|
});
|
||||||
|
|
||||||
|
KeycloakModelUtils.runJobInTransaction(session.getKeycloakSessionFactory(), (KeycloakSession sesRealmRemoved3) -> {
|
||||||
|
KeycloakSession currentSession = sesRealmRemoved3;
|
||||||
|
RealmModel realm = currentSession.realms().getRealm("test");
|
||||||
|
|
||||||
|
RootAuthenticationSessionModel authSession = currentSession.authenticationSessions().getRootAuthenticationSession(realm, authSessionID.get());
|
||||||
|
|
||||||
|
assertThat(authSession, notNullValue());
|
||||||
|
assertThat(currentSession.authenticationSessions().getRootAuthenticationSession(realm, authSessionID2.get()), nullValue());
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
@Test
|
||||||
|
@ModelTest
|
||||||
|
public void testOnClientRemoved(KeycloakSession session) {
|
||||||
|
AtomicReference<String> tab1ID = new AtomicReference<>();
|
||||||
|
AtomicReference<String> tab2ID = new AtomicReference<>();
|
||||||
|
AtomicReference<String> authSessionID = new AtomicReference<>();
|
||||||
|
|
||||||
|
KeycloakModelUtils.runJobInTransaction(session.getKeycloakSessionFactory(), (KeycloakSession sesRealmRemoved1) -> {
|
||||||
|
KeycloakSession currentSession = sesRealmRemoved1;
|
||||||
|
RealmModel realm = currentSession.realms().getRealm("test");
|
||||||
|
|
||||||
|
authSessionID.set(currentSession.authenticationSessions().createRootAuthenticationSession(realm).getId());
|
||||||
|
|
||||||
|
AuthenticationSessionModel authSession1 = currentSession.authenticationSessions().getRootAuthenticationSession(realm, authSessionID.get()).createAuthenticationSession(realm.getClientByClientId("test-app"));
|
||||||
|
AuthenticationSessionModel authSession2 = currentSession.authenticationSessions().getRootAuthenticationSession(realm, authSessionID.get()).createAuthenticationSession(realm.getClientByClientId("third-party"));
|
||||||
|
tab1ID.set(authSession1.getTabId());
|
||||||
|
tab2ID.set(authSession2.getTabId());
|
||||||
|
|
||||||
|
authSession1.setAuthNote("foo", "bar");
|
||||||
|
authSession2.setAuthNote("foo", "baz");
|
||||||
|
});
|
||||||
|
|
||||||
|
KeycloakModelUtils.runJobInTransaction(session.getKeycloakSessionFactory(), (KeycloakSession sesRealmRemoved1) -> {
|
||||||
|
KeycloakSession currentSession = sesRealmRemoved1;
|
||||||
|
RealmModel realm = currentSession.realms().getRealm("test");
|
||||||
|
|
||||||
|
RootAuthenticationSessionModel rootAuthSession = currentSession.authenticationSessions().getRootAuthenticationSession(realm, authSessionID.get());
|
||||||
|
|
||||||
|
assertThat(rootAuthSession.getAuthenticationSessions().size(), is(2));
|
||||||
|
assertThat(rootAuthSession.getAuthenticationSession(realm.getClientByClientId("test-app"), tab1ID.get()).getAuthNote("foo"), is("bar"));
|
||||||
|
assertThat(rootAuthSession.getAuthenticationSession(realm.getClientByClientId("third-party"), tab2ID.get()).getAuthNote("foo"), is("baz"));
|
||||||
|
|
||||||
|
new ClientManager(new RealmManager(currentSession)).removeClient(realm, realm.getClientByClientId("third-party"));
|
||||||
|
});
|
||||||
|
|
||||||
|
KeycloakModelUtils.runJobInTransaction(session.getKeycloakSessionFactory(), (KeycloakSession sesRealmRemoved1) -> {
|
||||||
|
KeycloakSession currentSession = sesRealmRemoved1;
|
||||||
|
RealmModel realm = currentSession.realms().getRealm("test");
|
||||||
|
RootAuthenticationSessionModel rootAuthSession = currentSession.authenticationSessions().getRootAuthenticationSession(realm, authSessionID.get());
|
||||||
|
|
||||||
|
assertThat(rootAuthSession.getAuthenticationSession(realm.getClientByClientId("test-app"), tab1ID.get()).getAuthNote("foo"), is("bar"));
|
||||||
|
assertThat(rootAuthSession.getAuthenticationSession(realm.getClientByClientId("third-party"), tab2ID.get()), nullValue());
|
||||||
|
|
||||||
|
// Revert client
|
||||||
|
realm.addClient("third-party");
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
private void testAuthenticationSession(AuthenticationSessionModel authSession, String expectedClientId, String expectedUserId, String expectedAction) {
|
||||||
|
assertThat(authSession.getClient().getId(), is(expectedClientId));
|
||||||
|
|
||||||
|
if (expectedUserId == null) {
|
||||||
|
assertThat(authSession.getAuthenticatedUser(), nullValue());
|
||||||
|
} else {
|
||||||
|
assertThat(authSession.getAuthenticatedUser().getId(), is(expectedUserId));
|
||||||
|
}
|
||||||
|
|
||||||
|
if (expectedAction == null) {
|
||||||
|
assertThat(authSession.getAction(), nullValue());
|
||||||
|
} else {
|
||||||
|
assertThat(authSession.getAction(), is(expectedAction));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
private void createAuthSession(KeycloakSession session, AtomicReference<String> authSessionID) {
|
||||||
|
|
||||||
|
KeycloakModelUtils.runJobInTransaction(session.getKeycloakSessionFactory(), (KeycloakSession createAuthSession) -> {
|
||||||
|
KeycloakSession currentSession = createAuthSession;
|
||||||
|
RealmModel realm = currentSession.realms().getRealm("test");
|
||||||
|
|
||||||
|
Time.setOffset(0);
|
||||||
|
authSessionID.set(currentSession.authenticationSessions().createRootAuthenticationSession(realm).getId());
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
private void testExpiredOffset(KeycloakSession session, int offset, boolean isSessionNull, String authSessionID) {
|
||||||
|
|
||||||
|
KeycloakModelUtils.runJobInTransaction(session.getKeycloakSessionFactory(), (KeycloakSession sessionExp) -> {
|
||||||
|
KeycloakSession currentSession = sessionExp;
|
||||||
|
RealmModel realm = currentSession.realms().getRealm("test");
|
||||||
|
|
||||||
|
Time.setOffset(offset);
|
||||||
|
currentSession.authenticationSessions().removeExpired(realm);
|
||||||
|
});
|
||||||
|
|
||||||
|
KeycloakModelUtils.runJobInTransaction(session.getKeycloakSessionFactory(), (KeycloakSession sessionExpVerify) -> {
|
||||||
|
KeycloakSession currentSession = sessionExpVerify;
|
||||||
|
RealmModel realm = currentSession.realms().getRealm("test");
|
||||||
|
|
||||||
|
if (isSessionNull)
|
||||||
|
assertThat(currentSession.authenticationSessions().getRootAuthenticationSession(realm, authSessionID), nullValue());
|
||||||
|
else
|
||||||
|
assertThat(currentSession.authenticationSessions().getRootAuthenticationSession(realm, authSessionID), notNullValue());
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
// If parameter is -1, then the parameter won't change.
|
||||||
|
private void setAccessCodeLifespan(KeycloakSession session, int lifespan, int lifespanUserAction, int lifespanLogin) {
|
||||||
|
|
||||||
|
KeycloakModelUtils.runJobInTransaction(session.getKeycloakSessionFactory(), (KeycloakSession sessionLifespan) -> {
|
||||||
|
KeycloakSession currentSession = sessionLifespan;
|
||||||
|
RealmModel realm = currentSession.realms().getRealm("test");
|
||||||
|
|
||||||
|
if (lifespan != -1)
|
||||||
|
realm.setAccessCodeLifespan(lifespan);
|
||||||
|
|
||||||
|
if (lifespanUserAction != -1)
|
||||||
|
realm.setAccessCodeLifespanUserAction(lifespanUserAction);
|
||||||
|
|
||||||
|
if (lifespanLogin != -1)
|
||||||
|
realm.setAccessCodeLifespanLogin(lifespanLogin);
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
@Override
|
||||||
|
public void configureTestRealm(RealmRepresentation testRealm) {
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
@ -1,299 +0,0 @@
|
||||||
/*
|
|
||||||
* Copyright 2016 Red Hat, Inc. and/or its affiliates
|
|
||||||
* and other contributors as indicated by the @author tags.
|
|
||||||
*
|
|
||||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
||||||
* you may not use this file except in compliance with the License.
|
|
||||||
* You may obtain a copy of the License at
|
|
||||||
*
|
|
||||||
* http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
*
|
|
||||||
* Unless required by applicable law or agreed to in writing, software
|
|
||||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
||||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
||||||
* See the License for the specific language governing permissions and
|
|
||||||
* limitations under the License.
|
|
||||||
*/
|
|
||||||
|
|
||||||
package org.keycloak.testsuite.model;
|
|
||||||
|
|
||||||
import org.junit.After;
|
|
||||||
import org.junit.Assert;
|
|
||||||
import org.junit.Before;
|
|
||||||
import org.junit.ClassRule;
|
|
||||||
import org.junit.Test;
|
|
||||||
import org.keycloak.common.util.Time;
|
|
||||||
import org.keycloak.models.ClientModel;
|
|
||||||
import org.keycloak.models.KeycloakSession;
|
|
||||||
import org.keycloak.models.RealmModel;
|
|
||||||
import org.keycloak.models.UserManager;
|
|
||||||
import org.keycloak.models.UserModel;
|
|
||||||
import org.keycloak.services.managers.ClientManager;
|
|
||||||
import org.keycloak.services.managers.RealmManager;
|
|
||||||
import org.keycloak.sessions.AuthenticationSessionModel;
|
|
||||||
import org.keycloak.sessions.CommonClientSessionModel;
|
|
||||||
import org.keycloak.sessions.RootAuthenticationSessionModel;
|
|
||||||
import org.keycloak.testsuite.rule.KeycloakRule;
|
|
||||||
|
|
||||||
import static org.junit.Assert.assertNotNull;
|
|
||||||
import static org.junit.Assert.assertNull;
|
|
||||||
|
|
||||||
/**
|
|
||||||
* @author <a href="mailto:mposolda@redhat.com">Marek Posolda</a>
|
|
||||||
*/
|
|
||||||
public class AuthenticationSessionProviderTest {
|
|
||||||
|
|
||||||
@ClassRule
|
|
||||||
public static KeycloakRule kc = new KeycloakRule();
|
|
||||||
|
|
||||||
private KeycloakSession session;
|
|
||||||
private RealmModel realm;
|
|
||||||
|
|
||||||
@Before
|
|
||||||
public void before() {
|
|
||||||
session = kc.startSession();
|
|
||||||
realm = session.realms().getRealm("test");
|
|
||||||
session.users().addUser(realm, "user1").setEmail("user1@localhost");
|
|
||||||
session.users().addUser(realm, "user2").setEmail("user2@localhost");
|
|
||||||
}
|
|
||||||
|
|
||||||
@After
|
|
||||||
public void after() {
|
|
||||||
resetSession();
|
|
||||||
UserModel user1 = session.users().getUserByUsername("user1", realm);
|
|
||||||
UserModel user2 = session.users().getUserByUsername("user2", realm);
|
|
||||||
|
|
||||||
UserManager um = new UserManager(session);
|
|
||||||
if (user1 != null) {
|
|
||||||
um.removeUser(realm, user1);
|
|
||||||
}
|
|
||||||
if (user2 != null) {
|
|
||||||
um.removeUser(realm, user2);
|
|
||||||
}
|
|
||||||
kc.stopSession(session, true);
|
|
||||||
}
|
|
||||||
|
|
||||||
private void resetSession() {
|
|
||||||
kc.stopSession(session, true);
|
|
||||||
session = kc.startSession();
|
|
||||||
realm = session.realms().getRealm("test");
|
|
||||||
}
|
|
||||||
|
|
||||||
@Test
|
|
||||||
public void testLoginSessionsCRUD() {
|
|
||||||
ClientModel client1 = realm.getClientByClientId("test-app");
|
|
||||||
UserModel user1 = session.users().getUserByUsername("user1", realm);
|
|
||||||
|
|
||||||
RootAuthenticationSessionModel rootAuthSession = session.authenticationSessions().createRootAuthenticationSession(realm);
|
|
||||||
AuthenticationSessionModel authSession = rootAuthSession.createAuthenticationSession(client1);
|
|
||||||
|
|
||||||
String tabId = authSession.getTabId();
|
|
||||||
|
|
||||||
authSession.setAction("foo");
|
|
||||||
rootAuthSession.setTimestamp(100);
|
|
||||||
|
|
||||||
|
|
||||||
resetSession();
|
|
||||||
|
|
||||||
client1 = realm.getClientByClientId("test-app");
|
|
||||||
|
|
||||||
// Ensure session is here
|
|
||||||
rootAuthSession = session.authenticationSessions().getRootAuthenticationSession(realm, rootAuthSession.getId());
|
|
||||||
authSession = rootAuthSession.getAuthenticationSession(client1, tabId);
|
|
||||||
testAuthenticationSession(authSession, client1.getId(), null, "foo");
|
|
||||||
Assert.assertEquals(100, rootAuthSession.getTimestamp());
|
|
||||||
|
|
||||||
// Update and commit
|
|
||||||
authSession.setAction("foo-updated");
|
|
||||||
rootAuthSession.setTimestamp(200);
|
|
||||||
authSession.setAuthenticatedUser(session.users().getUserByUsername("user1", realm));
|
|
||||||
|
|
||||||
resetSession();
|
|
||||||
|
|
||||||
// Ensure session was updated
|
|
||||||
rootAuthSession = session.authenticationSessions().getRootAuthenticationSession(realm, rootAuthSession.getId());
|
|
||||||
client1 = realm.getClientByClientId("test-app");
|
|
||||||
authSession = rootAuthSession.getAuthenticationSession(client1, tabId);
|
|
||||||
testAuthenticationSession(authSession, client1.getId(), user1.getId(), "foo-updated");
|
|
||||||
Assert.assertEquals(200, rootAuthSession.getTimestamp());
|
|
||||||
|
|
||||||
// Remove and commit
|
|
||||||
session.authenticationSessions().removeRootAuthenticationSession(realm, rootAuthSession);
|
|
||||||
|
|
||||||
resetSession();
|
|
||||||
|
|
||||||
// Ensure session was removed
|
|
||||||
Assert.assertNull(session.authenticationSessions().getRootAuthenticationSession(realm, rootAuthSession.getId()));
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
@Test
|
|
||||||
public void testAuthenticationSessionRestart() {
|
|
||||||
ClientModel client1 = realm.getClientByClientId("test-app");
|
|
||||||
UserModel user1 = session.users().getUserByUsername("user1", realm);
|
|
||||||
|
|
||||||
AuthenticationSessionModel authSession = session.authenticationSessions().createRootAuthenticationSession(realm).createAuthenticationSession(client1);
|
|
||||||
String tabId = authSession.getTabId();
|
|
||||||
|
|
||||||
authSession.setAction("foo");
|
|
||||||
authSession.getParentSession().setTimestamp(100);
|
|
||||||
|
|
||||||
authSession.setAuthenticatedUser(user1);
|
|
||||||
authSession.setAuthNote("foo", "bar");
|
|
||||||
authSession.setClientNote("foo2", "bar2");
|
|
||||||
authSession.setExecutionStatus("123", CommonClientSessionModel.ExecutionStatus.SUCCESS);
|
|
||||||
|
|
||||||
resetSession();
|
|
||||||
|
|
||||||
// Test restart root authentication session
|
|
||||||
client1 = realm.getClientByClientId("test-app");
|
|
||||||
authSession = session.authenticationSessions().getRootAuthenticationSession(realm, authSession.getParentSession().getId())
|
|
||||||
.getAuthenticationSession(client1, tabId);
|
|
||||||
authSession.getParentSession().restartSession(realm);
|
|
||||||
|
|
||||||
resetSession();
|
|
||||||
|
|
||||||
RootAuthenticationSessionModel rootAuthSession = session.authenticationSessions().getRootAuthenticationSession(realm, authSession.getParentSession().getId());
|
|
||||||
Assert.assertNull(rootAuthSession.getAuthenticationSession(client1, tabId));
|
|
||||||
Assert.assertTrue(rootAuthSession.getTimestamp() > 0);
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
@Test
|
|
||||||
public void testExpiredAuthSessions() {
|
|
||||||
try {
|
|
||||||
realm.setAccessCodeLifespan(10);
|
|
||||||
realm.setAccessCodeLifespanUserAction(10);
|
|
||||||
realm.setAccessCodeLifespanLogin(30);
|
|
||||||
|
|
||||||
// Login lifespan is largest
|
|
||||||
String authSessionId = session.authenticationSessions().createRootAuthenticationSession(realm).getId();
|
|
||||||
|
|
||||||
resetSession();
|
|
||||||
|
|
||||||
Time.setOffset(25);
|
|
||||||
session.authenticationSessions().removeExpired(realm);
|
|
||||||
resetSession();
|
|
||||||
|
|
||||||
assertNotNull(session.authenticationSessions().getRootAuthenticationSession(realm, authSessionId));
|
|
||||||
|
|
||||||
Time.setOffset(35);
|
|
||||||
session.authenticationSessions().removeExpired(realm);
|
|
||||||
resetSession();
|
|
||||||
|
|
||||||
assertNull(session.authenticationSessions().getRootAuthenticationSession(realm, authSessionId));
|
|
||||||
|
|
||||||
// User action is largest
|
|
||||||
realm.setAccessCodeLifespanUserAction(40);
|
|
||||||
|
|
||||||
Time.setOffset(0);
|
|
||||||
authSessionId = session.authenticationSessions().createRootAuthenticationSession(realm).getId();
|
|
||||||
resetSession();
|
|
||||||
|
|
||||||
Time.setOffset(35);
|
|
||||||
session.authenticationSessions().removeExpired(realm);
|
|
||||||
resetSession();
|
|
||||||
|
|
||||||
assertNotNull(session.authenticationSessions().getRootAuthenticationSession(realm, authSessionId));
|
|
||||||
|
|
||||||
Time.setOffset(45);
|
|
||||||
session.authenticationSessions().removeExpired(realm);
|
|
||||||
resetSession();
|
|
||||||
|
|
||||||
assertNull(session.authenticationSessions().getRootAuthenticationSession(realm, authSessionId));
|
|
||||||
|
|
||||||
// Access code is largest
|
|
||||||
realm.setAccessCodeLifespan(50);
|
|
||||||
|
|
||||||
Time.setOffset(0);
|
|
||||||
authSessionId = session.authenticationSessions().createRootAuthenticationSession(realm).getId();
|
|
||||||
resetSession();
|
|
||||||
|
|
||||||
Time.setOffset(45);
|
|
||||||
session.authenticationSessions().removeExpired(realm);
|
|
||||||
resetSession();
|
|
||||||
|
|
||||||
assertNotNull(session.authenticationSessions().getRootAuthenticationSession(realm, authSessionId));
|
|
||||||
|
|
||||||
Time.setOffset(55);
|
|
||||||
session.authenticationSessions().removeExpired(realm);
|
|
||||||
resetSession();
|
|
||||||
|
|
||||||
assertNull(session.authenticationSessions().getRootAuthenticationSession(realm, authSessionId));
|
|
||||||
} finally {
|
|
||||||
Time.setOffset(0);
|
|
||||||
|
|
||||||
realm.setAccessCodeLifespan(60);
|
|
||||||
realm.setAccessCodeLifespanUserAction(300);
|
|
||||||
realm.setAccessCodeLifespanLogin(1800);
|
|
||||||
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
@Test
|
|
||||||
public void testOnRealmRemoved() {
|
|
||||||
RealmModel fooRealm = session.realms().createRealm("foo-realm");
|
|
||||||
ClientModel fooClient = fooRealm.addClient("foo-client");
|
|
||||||
|
|
||||||
String authSessionId = session.authenticationSessions().createRootAuthenticationSession(realm).getId();
|
|
||||||
String authSessionId2 = session.authenticationSessions().createRootAuthenticationSession(fooRealm).getId();
|
|
||||||
|
|
||||||
resetSession();
|
|
||||||
|
|
||||||
new RealmManager(session).removeRealm(session.realms().getRealmByName("foo-realm"));
|
|
||||||
|
|
||||||
resetSession();
|
|
||||||
|
|
||||||
RootAuthenticationSessionModel authSession = session.authenticationSessions().getRootAuthenticationSession(realm, authSessionId);
|
|
||||||
Assert.assertNotNull(authSession);
|
|
||||||
Assert.assertNull(session.authenticationSessions().getRootAuthenticationSession(realm, authSessionId2));
|
|
||||||
}
|
|
||||||
|
|
||||||
@Test
|
|
||||||
public void testOnClientRemoved() {
|
|
||||||
String authSessionId = session.authenticationSessions().createRootAuthenticationSession(realm).getId();
|
|
||||||
AuthenticationSessionModel authSession1 = session.authenticationSessions().getRootAuthenticationSession(realm, authSessionId).createAuthenticationSession(realm.getClientByClientId("test-app"));
|
|
||||||
AuthenticationSessionModel authSession2 = session.authenticationSessions().getRootAuthenticationSession(realm, authSessionId).createAuthenticationSession(realm.getClientByClientId("third-party"));
|
|
||||||
String tab1Id = authSession1.getTabId();
|
|
||||||
String tab2Id = authSession2.getTabId();
|
|
||||||
|
|
||||||
authSession1.setAuthNote("foo", "bar");
|
|
||||||
authSession2.setAuthNote("foo", "baz");
|
|
||||||
|
|
||||||
resetSession();
|
|
||||||
|
|
||||||
RootAuthenticationSessionModel rootAuthSession = session.authenticationSessions().getRootAuthenticationSession(realm, authSessionId);
|
|
||||||
Assert.assertEquals(2, rootAuthSession.getAuthenticationSessions().size());
|
|
||||||
Assert.assertEquals("bar", rootAuthSession.getAuthenticationSession(realm.getClientByClientId("test-app"), tab1Id).getAuthNote("foo"));
|
|
||||||
Assert.assertEquals("baz", rootAuthSession.getAuthenticationSession(realm.getClientByClientId("third-party"), tab2Id).getAuthNote("foo"));
|
|
||||||
|
|
||||||
new ClientManager(new RealmManager(session)).removeClient(realm, realm.getClientByClientId("third-party"));
|
|
||||||
|
|
||||||
resetSession();
|
|
||||||
|
|
||||||
rootAuthSession = session.authenticationSessions().getRootAuthenticationSession(realm, authSessionId);
|
|
||||||
Assert.assertEquals("bar", rootAuthSession.getAuthenticationSession(realm.getClientByClientId("test-app"), tab1Id).getAuthNote("foo"));
|
|
||||||
Assert.assertNull(rootAuthSession.getAuthenticationSession(realm.getClientByClientId("third-party"), tab2Id));
|
|
||||||
|
|
||||||
// Revert client
|
|
||||||
realm.addClient("third-party");
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
private void testAuthenticationSession(AuthenticationSessionModel authSession, String expectedClientId, String expectedUserId, String expectedAction) {
|
|
||||||
Assert.assertEquals(expectedClientId, authSession.getClient().getId());
|
|
||||||
|
|
||||||
if (expectedUserId == null) {
|
|
||||||
Assert.assertNull(authSession.getAuthenticatedUser());
|
|
||||||
} else {
|
|
||||||
Assert.assertEquals(expectedUserId, authSession.getAuthenticatedUser().getId());
|
|
||||||
}
|
|
||||||
|
|
||||||
if (expectedAction == null) {
|
|
||||||
Assert.assertNull(authSession.getAction());
|
|
||||||
} else {
|
|
||||||
Assert.assertEquals(expectedAction, authSession.getAction());
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
Loading…
Reference in a new issue