tests/org/cacert/gigi/LoginTest.java

   1 package org.cacert.gigi;
   2
   3 import static org.hamcrest.CoreMatchers.*;
   4 import static org.junit.Assert.*;
   5
   6 import java.io.IOException;
   7 import java.net.HttpURLConnection;
   8 import java.net.URL;
   9 import java.net.URLConnection;
  10 import java.net.URLEncoder;
  11 import java.security.GeneralSecurityException;
  12 import java.security.KeyPair;
  13 import java.security.PrivateKey;
  14 import java.security.cert.X509Certificate;
  15
  16 import org.cacert.gigi.dbObjects.Certificate;
  17 import org.cacert.gigi.dbObjects.Certificate.CSRType;
  18 import org.cacert.gigi.dbObjects.Digest;
  19 import org.cacert.gigi.dbObjects.User;
  20 import org.cacert.gigi.testUtils.IOUtils;
  21 import org.cacert.gigi.testUtils.ManagedTest;
  22 import org.junit.Test;
  23
  24 public class LoginTest extends ManagedTest {
  25
  26     @Test
  27     public void testLoginUnverified() throws IOException {
  28         String email = createUniqueName() + "@testmail.org";
  29         registerUser("an", "bn", email, TEST_PASSWORD);
  30         getMailReceiver().receive();
  31         assertFalse(isLoggedin(login(email, TEST_PASSWORD)));
  32     }
  33
  34     @Test
  35     public void testLoginVerified() throws IOException {
  36         String email = createUniqueName() + "@testmail.org";
  37         createVerifiedUser("an", "bn", email, TEST_PASSWORD);
  38         assertTrue(isLoggedin(login(email, TEST_PASSWORD)));
  39     }
  40
  41     @Test
  42     public void testLoginRedirectBack() throws IOException {
  43         String email = createUniqueName() + "@testmail.org";
  44         createVerifiedUser("an", "bn", email, TEST_PASSWORD);
  45
  46         URL u0 = new URL("https://" + getServerName() + SECURE_REFERENCE);
  47         HttpURLConnection huc0 = (HttpURLConnection) u0.openConnection();
  48         String headerField = stripCookie(huc0.getHeaderField("Set-Cookie"));
  49
  50         HttpURLConnection huc = post(headerField, "/login", "username=" + URLEncoder.encode(email, "UTF-8") + "&password=" + URLEncoder.encode(TEST_PASSWORD, "UTF-8"), 0);
  51
  52         headerField = huc.getHeaderField("Set-Cookie");
  53         assertNotNull(headerField);
  54         assertEquals(302, huc.getResponseCode());
  55         assertEquals("https://" + getServerName() + SECURE_REFERENCE, huc.getHeaderField("Location"));
  56     }
  57
  58     @Test
  59     public void testLoginWrongPassword() throws IOException {
  60         String email = createUniqueName() + "@testmail.org";
  61         createVerifiedUser("an", "bn", email, TEST_PASSWORD);
  62         assertFalse(isLoggedin(login(email, TEST_PASSWORD + "b")));
  63     }
  64
  65     @Test
  66     public void testLogoutVerified() throws IOException {
  67         String email = createUniqueName() + "@testmail.org";
  68         createVerifiedUser("an", "bn", email, TEST_PASSWORD);
  69         String cookie = login(email, TEST_PASSWORD);
  70         assertTrue(isLoggedin(cookie));
  71         logout(cookie);
  72         assertFalse(isLoggedin(cookie));
  73     }
  74
  75     private void logout(String cookie) throws IOException {
  76         get(cookie, "/logout").getHeaderField("Location");
  77     }
  78
  79     @Test
  80     public void testLoginMethodDisplay() throws IOException {
  81         String email = createUniqueName() + "@testmail.org";
  82         createVerifiedUser("an", "bn", email, TEST_PASSWORD);
  83         String l = login(email, TEST_PASSWORD);
  84         URLConnection c = get(l, "");
  85         String readURL = IOUtils.readURL(c);
  86         assertThat(readURL, containsString("Password"));
  87     }
  88
  89     @Test
  90     public void testLoginCertificate() throws IOException, GeneralSecurityException, GigiApiException, InterruptedException {
  91         String email = createUniqueName() + "@testmail.org";
  92         int user = createVerifiedUser("an", "bn", email, TEST_PASSWORD);
  93         KeyPair kp = generateKeypair();
  94         String csr = generatePEMCSR(kp, "CN=hans");
  95         User u = User.getById(user);
  96         Certificate c = new Certificate(u, u, Certificate.buildDN("CN", "hans"), Digest.SHA256, csr, CSRType.CSR, getClientProfile());
  97         final PrivateKey pk = kp.getPrivate();
  98         await(c.issue(null, "2y", u));
  99         final X509Certificate ce = c.cert();
 100         c.setLoginEnabled(true);
 101         String cookie = login(pk, ce);
 102         URL u2 = new URL("https://" + getSecureServerName() + SECURE_REFERENCE);
 103         HttpURLConnection huc = (HttpURLConnection) u2.openConnection();
 104         huc.addRequestProperty("Cookie", cookie);
 105         authenticateClientCert(pk, ce, huc);
 106         assertEquals(200, huc.getResponseCode());
 107     }
 108 }