Example usage for org.springframework.mock.web MockHttpServletRequest getSession

List of usage examples for org.springframework.mock.web MockHttpServletRequest getSession

Introduction

In this page you can find the example usage for org.springframework.mock.web MockHttpServletRequest getSession.

Prototype

@Override
    @Nullable
    public HttpSession getSession(boolean create) 

Source Link

Usage

From source file:org.springframework.test.web.servlet.htmlunit.HtmlUnitRequestBuilderTests.java

@Test
public void buildRequestSessionFalseWithExistingSession() throws Exception {
    String sessionId = "session-id";
    webRequest.setAdditionalHeader("Cookie", "JSESSIONID=" + sessionId);
    MockHttpServletRequest actualRequest = requestBuilder.buildRequest(servletContext);

    HttpSession session = actualRequest.getSession(false);
    assertThat(session, notNullValue());
}

From source file:fr.paris.lutece.portal.web.user.AdminUserJspBeanTest.java

public void testGetCreateAdminUserTEMPLATE_DEFAULT_CREATE_USER()
        throws PasswordResetException, AccessDeniedException {
    AdminUserJspBean bean = new AdminUserJspBean();
    MockHttpServletRequest request = new MockHttpServletRequest();
    request.getSession(true).setAttribute("lutece_admin_user",
            getLevel1AdminUserWithCORE_USERS_MANAGEMENTRight());
    bean.init(request, "CORE_USERS_MANAGEMENT");
    bean.getCreateAdminUser(request); // should not throw
}

From source file:fr.paris.lutece.portal.web.user.AdminUserJspBeanTest.java

public void testGetModifyUserPasswordNoRight() throws AccessDeniedException, UserNotSignedException {
    AdminUserJspBean bean = new AdminUserJspBean();
    MockHttpServletRequest request = new MockHttpServletRequest();
    request.getSession(true).setAttribute("lutece_admin_user", AdminUserHome.findUserByLogin("lutece"));
    request.setParameter("id_user", Integer.toString(1));
    try {/*  ww  w  .  jav  a2  s  . com*/
        bean.getModifyUserPassword(request);
        fail("Should have thrown");
    } catch (AccessDeniedException e) {
        // OK
    }
}

From source file:fr.paris.lutece.portal.web.user.AdminUserJspBeanTest.java

public void testDoModifyAdminUserPasswordNoRight() {
    AdminUserJspBean bean = new AdminUserJspBean();
    MockHttpServletRequest request = new MockHttpServletRequest();
    request.getSession(true).setAttribute("lutece_admin_user", AdminUserHome.findUserByLogin("lutece"));
    request.setParameter("id_user", Integer.toString(1));
    try {/*from   www  .j a  va  2s .  c o  m*/
        bean.doModifyAdminUserPassword(request);
        fail("Should have thrown");
    } catch (AccessDeniedException e) {
        // OK
    }
}

From source file:fr.paris.lutece.portal.web.user.AdminUserJspBeanTest.java

public void testDoModifyAdminUser() throws AccessDeniedException, UserNotSignedException {
    AdminUser userToModify = getUserToModify();
    try {/* www. j  ava2  s  . com*/
        AdminUserJspBean bean = new AdminUserJspBean();
        MockHttpServletRequest request = new MockHttpServletRequest();
        request.getSession(true).setAttribute("lutece_admin_user",
                getLevel1AdminUserWithCORE_USERS_MANAGEMENTRight());
        request.addParameter("id_user", Integer.toString(userToModify.getUserId()));
        try {
            bean.doModifyAdminUser(request);
            fail("Should not be able to modify a user with a lower level");
        } catch (AccessDeniedException e) {
        }

        request = new MockHttpServletRequest();
        AdminAuthenticationService.getInstance().registerUser(request, AdminUserHome.findUserByLogin("admin"));
        request.addParameter("id_user", Integer.toString(userToModify.getUserId()));
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/ModifyUser.jsp"));
        bean.doModifyAdminUser(request);
        AdminMessage message = AdminMessageService.getMessage(request);
        assertNotNull(message);
        assertEquals(I18nService.getLocalizedString(Messages.MANDATORY_FIELDS, Locale.FRENCH),
                message.getText(Locale.FRENCH));

        final String modifiedName = userToModify.getAccessCode() + "_mod";

        request = new MockHttpServletRequest();
        AdminAuthenticationService.getInstance().registerUser(request, AdminUserHome.findUserByLogin("admin"));
        request.addParameter("id_user", Integer.toString(userToModify.getUserId()));
        request.addParameter("access_code", modifiedName);
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/ModifyUser.jsp"));
        bean.doModifyAdminUser(request);
        message = AdminMessageService.getMessage(request);
        assertNotNull(message);
        assertEquals(I18nService.getLocalizedString(Messages.MANDATORY_FIELDS, Locale.FRENCH),
                message.getText(Locale.FRENCH));

        request = new MockHttpServletRequest();
        AdminAuthenticationService.getInstance().registerUser(request, AdminUserHome.findUserByLogin("admin"));
        request.addParameter("id_user", Integer.toString(userToModify.getUserId()));
        request.addParameter("access_code", modifiedName);
        request.addParameter("last_name", modifiedName);
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/ModifyUser.jsp"));
        bean.doModifyAdminUser(request);
        message = AdminMessageService.getMessage(request);
        assertNotNull(message);
        assertEquals(I18nService.getLocalizedString(Messages.MANDATORY_FIELDS, Locale.FRENCH),
                message.getText(Locale.FRENCH));

        request = new MockHttpServletRequest();
        AdminAuthenticationService.getInstance().registerUser(request, AdminUserHome.findUserByLogin("admin"));
        request.addParameter("id_user", Integer.toString(userToModify.getUserId()));
        request.addParameter("access_code", modifiedName);
        request.addParameter("last_name", modifiedName);
        request.addParameter("first_name", modifiedName);
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/ModifyUser.jsp"));
        bean.doModifyAdminUser(request);
        message = AdminMessageService.getMessage(request);
        assertNotNull(message);
        assertEquals(I18nService.getLocalizedString(Messages.MANDATORY_FIELDS, Locale.FRENCH),
                message.getText(Locale.FRENCH));

        request = new MockHttpServletRequest();
        AdminAuthenticationService.getInstance().registerUser(request, AdminUserHome.findUserByLogin("admin"));
        request.addParameter("id_user", Integer.toString(userToModify.getUserId()));
        request.addParameter("access_code", modifiedName);
        request.addParameter("last_name", modifiedName);
        request.addParameter("first_name", modifiedName);
        request.addParameter("email", "  ");
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/ModifyUser.jsp"));
        bean.doModifyAdminUser(request);
        message = AdminMessageService.getMessage(request);
        assertNotNull(message);
        assertEquals(I18nService.getLocalizedString(Messages.MANDATORY_FIELDS, Locale.FRENCH),
                message.getText(Locale.FRENCH));

        request = new MockHttpServletRequest();
        AdminAuthenticationService.getInstance().registerUser(request, AdminUserHome.findUserByLogin("admin"));
        request.addParameter("id_user", Integer.toString(userToModify.getUserId()));
        request.addParameter("access_code", "admin");
        request.addParameter("last_name", modifiedName);
        request.addParameter("first_name", modifiedName);
        request.addParameter("email", modifiedName + "@lutece.fr");
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/ModifyUser.jsp"));
        bean.doModifyAdminUser(request);
        message = AdminMessageService.getMessage(request);
        assertNotNull(message);
        assertEquals(I18nService.getLocalizedString("portal.users.message.user.accessCodeAlreadyUsed",
                Locale.FRENCH), message.getText(Locale.FRENCH));

        request = new MockHttpServletRequest();
        AdminAuthenticationService.getInstance().registerUser(request, AdminUserHome.findUserByLogin("admin"));
        request.addParameter("id_user", Integer.toString(userToModify.getUserId()));
        request.addParameter("access_code", modifiedName);
        request.addParameter("last_name", modifiedName);
        request.addParameter("first_name", modifiedName);
        request.addParameter("email", "admin@lutece.fr");
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/ModifyUser.jsp"));
        bean.doModifyAdminUser(request);
        message = AdminMessageService.getMessage(request);
        assertNotNull(message);
        assertEquals(I18nService.getLocalizedString("portal.users.message.user.accessEmailUsed", Locale.FRENCH),
                message.getText(Locale.FRENCH));
    } finally {
        disposeOfUser(userToModify);
    }
}

From source file:fr.paris.lutece.portal.web.user.AdminUserJspBeanTest.java

public void testDoCreateAdminUserNoToken()
        throws PasswordResetException, AccessDeniedException, UserNotSignedException {
    AdminUserJspBean bean = new AdminUserJspBean();
    MockHttpServletRequest request = new MockHttpServletRequest();
    String randomUserName = "User_" + new SecureRandom().nextLong();
    try {//from w w w  .java  2  s. c  om
        request.addParameter("access_code", randomUserName);
        request.addParameter("last_name", randomUserName);
        request.addParameter("first_name", randomUserName);
        request.addParameter("email", randomUserName + "@lutece.fr");
        request.addParameter("user_level", "0");
        request.addParameter("first_password", randomUserName);
        request.addParameter("second_password", randomUserName);
        request.addParameter("status", Integer.toString(AdminUser.ACTIVE_CODE)); // NPE if absent
        request.addParameter("language", "fr"); // NPE if absent
        request.getSession(true).setAttribute("lutece_admin_user",
                getLevel0AdminUserWithCORE_USERS_MANAGEMENTRight());
        bean.init(request, "CORE_USERS_MANAGEMENT");
        bean.doCreateAdminUser(request);
        fail("Should have thrown");
    } catch (AccessDeniedException e) {
        AdminMessage message = AdminMessageService.getMessage(request);
        assertNull(message);
        AdminUser createdUser = AdminUserHome.findUserByLogin(randomUserName);
        assertNull(createdUser);
    } finally {
        AdminUser user = AdminUserHome.findUserByLogin(randomUserName);
        if (user != null) {
            AdminUserHome.remove(user.getUserId());
        }
    }
}

From source file:fr.paris.lutece.portal.web.user.AdminUserJspBeanTest.java

public void testDoCreateAdminUserInvalidToken()
        throws PasswordResetException, AccessDeniedException, UserNotSignedException {
    AdminUserJspBean bean = new AdminUserJspBean();
    MockHttpServletRequest request = new MockHttpServletRequest();
    String randomUserName = "User_" + new SecureRandom().nextLong();
    try {//  w  w w  .  j  a  v  a 2s  . c  om
        request.addParameter("access_code", randomUserName);
        request.addParameter("last_name", randomUserName);
        request.addParameter("first_name", randomUserName);
        request.addParameter("email", randomUserName + "@lutece.fr");
        request.addParameter("user_level", "0");
        request.addParameter("first_password", randomUserName);
        request.addParameter("second_password", randomUserName);
        request.addParameter("status", Integer.toString(AdminUser.ACTIVE_CODE)); // NPE if absent
        request.addParameter("language", "fr"); // NPE if absent
        request.getSession(true).setAttribute("lutece_admin_user",
                getLevel0AdminUserWithCORE_USERS_MANAGEMENTRight());
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/CreateUser.jsp") + "b");
        bean.init(request, "CORE_USERS_MANAGEMENT");
        bean.doCreateAdminUser(request);
        fail("Should have thrown");
    } catch (AccessDeniedException e) {
        AdminMessage message = AdminMessageService.getMessage(request);
        assertNull(message);
        AdminUser createdUser = AdminUserHome.findUserByLogin(randomUserName);
        assertNull(createdUser);
    } finally {
        AdminUser user = AdminUserHome.findUserByLogin(randomUserName);
        if (user != null) {
            AdminUserHome.remove(user.getUserId());
        }
    }
}

From source file:fr.paris.lutece.portal.web.user.AdminUserJspBeanTest.java

public void testDoCreateAdminUser()
        throws PasswordResetException, AccessDeniedException, UserNotSignedException {
    AdminUserJspBean bean = new AdminUserJspBean();
    MockHttpServletRequest request = new MockHttpServletRequest();
    request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
            SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/CreateUser.jsp"));
    bean.doCreateAdminUser(request);/*from w w  w.jav  a 2s  . c om*/
    AdminMessage message = AdminMessageService.getMessage(request);
    assertNotNull(message);
    assertEquals(I18nService.getLocalizedString(Messages.MANDATORY_FIELDS, Locale.FRENCH),
            message.getText(Locale.FRENCH));

    String randomUserName = "User_" + new SecureRandom().nextLong();
    try {
        request = new MockHttpServletRequest();
        request.addParameter("access_code", randomUserName);
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/CreateUser.jsp"));
        bean.doCreateAdminUser(request);
        message = AdminMessageService.getMessage(request);
        assertNotNull(message);
        assertEquals(I18nService.getLocalizedString(Messages.MANDATORY_FIELDS, Locale.FRENCH),
                message.getText(Locale.FRENCH));

        request = new MockHttpServletRequest();
        request.addParameter("access_code", randomUserName);
        request.addParameter("last_name", randomUserName);
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/CreateUser.jsp"));
        bean.doCreateAdminUser(request);
        message = AdminMessageService.getMessage(request);
        assertNotNull(message);
        assertEquals(I18nService.getLocalizedString(Messages.MANDATORY_FIELDS, Locale.FRENCH),
                message.getText(Locale.FRENCH));

        request = new MockHttpServletRequest();
        request.addParameter("access_code", randomUserName);
        request.addParameter("last_name", randomUserName);
        request.addParameter("first_name", randomUserName);
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/CreateUser.jsp"));
        bean.doCreateAdminUser(request);
        message = AdminMessageService.getMessage(request);
        assertNotNull(message);
        assertEquals(I18nService.getLocalizedString(Messages.MANDATORY_FIELDS, Locale.FRENCH),
                message.getText(Locale.FRENCH));

        request = new MockHttpServletRequest();
        request.addParameter("access_code", randomUserName);
        request.addParameter("last_name", randomUserName);
        request.addParameter("first_name", randomUserName);
        request.addParameter("email", "   ");
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/CreateUser.jsp"));
        bean.doCreateAdminUser(request);
        message = AdminMessageService.getMessage(request);
        assertNotNull(message);
        assertEquals(I18nService.getLocalizedString(Messages.MANDATORY_FIELDS, Locale.FRENCH),
                message.getText(Locale.FRENCH));

        request = new MockHttpServletRequest();
        request.addParameter("access_code", "admin");
        request.addParameter("last_name", randomUserName);
        request.addParameter("first_name", randomUserName);
        request.addParameter("email", randomUserName + "@lutece.fr");
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/CreateUser.jsp"));
        bean.doCreateAdminUser(request);
        message = AdminMessageService.getMessage(request);
        assertNotNull(message);
        assertEquals(I18nService.getLocalizedString("portal.users.message.user.accessCodeAlreadyUsed",
                Locale.FRENCH), message.getText(Locale.FRENCH));

        request = new MockHttpServletRequest();
        request.addParameter("access_code", randomUserName);
        request.addParameter("last_name", randomUserName);
        request.addParameter("first_name", randomUserName);
        request.addParameter("email", "admin@lutece.fr");
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/CreateUser.jsp"));
        bean.doCreateAdminUser(request);
        message = AdminMessageService.getMessage(request);
        assertNotNull(message);
        assertEquals(I18nService.getLocalizedString("portal.users.message.user.accessEmailUsed", Locale.FRENCH),
                message.getText(Locale.FRENCH));

        request = new MockHttpServletRequest();
        request.addParameter("access_code", randomUserName);
        request.addParameter("last_name", randomUserName);
        request.addParameter("first_name", randomUserName);
        request.addParameter("email", randomUserName + "@lutece.fr");
        request.addParameter("user_level", "0");
        request.getSession(true).setAttribute("lutece_admin_user",
                getLevel1AdminUserWithCORE_USERS_MANAGEMENTRight());
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/CreateUser.jsp"));
        bean.init(request, "CORE_USERS_MANAGEMENT");
        bean.doCreateAdminUser(request);
        message = AdminMessageService.getMessage(request);
        assertNotNull(message);
        assertEquals(I18nService.getLocalizedString(Messages.USER_ACCESS_DENIED, Locale.FRENCH),
                message.getText(Locale.FRENCH));

        request = new MockHttpServletRequest();
        request.addParameter("access_code", randomUserName);
        request.addParameter("last_name", randomUserName);
        request.addParameter("first_name", randomUserName);
        request.addParameter("email", randomUserName + "@lutece.fr");
        request.addParameter("user_level", "0");
        request.getSession(true).setAttribute("lutece_admin_user",
                getLevel0AdminUserWithCORE_USERS_MANAGEMENTRight());
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/CreateUser.jsp"));
        bean.init(request, "CORE_USERS_MANAGEMENT");
        bean.doCreateAdminUser(request);
        message = AdminMessageService.getMessage(request);
        assertNotNull(message);
        assertEquals(I18nService.getLocalizedString(Messages.MANDATORY_FIELDS, Locale.FRENCH),
                message.getText(Locale.FRENCH));

        request = new MockHttpServletRequest();
        request.addParameter("access_code", randomUserName);
        request.addParameter("last_name", randomUserName);
        request.addParameter("first_name", randomUserName);
        request.addParameter("email", randomUserName + "@lutece.fr");
        request.addParameter("user_level", "0");
        request.addParameter("first_password", randomUserName);
        request.getSession(true).setAttribute("lutece_admin_user",
                getLevel0AdminUserWithCORE_USERS_MANAGEMENTRight());
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/CreateUser.jsp"));
        bean.init(request, "CORE_USERS_MANAGEMENT");
        bean.doCreateAdminUser(request);
        message = AdminMessageService.getMessage(request);
        assertNotNull(message);
        assertEquals(I18nService.getLocalizedString("portal.users.message.differentsPassword", Locale.FRENCH),
                message.getText(Locale.FRENCH));

        request = new MockHttpServletRequest();
        request.addParameter("access_code", randomUserName);
        request.addParameter("last_name", randomUserName);
        request.addParameter("first_name", randomUserName);
        request.addParameter("email", randomUserName + "@lutece.fr");
        request.addParameter("user_level", "0");
        request.addParameter("first_password", randomUserName);
        request.getSession(true).setAttribute("lutece_admin_user",
                getLevel0AdminUserWithCORE_USERS_MANAGEMENTRight());
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/CreateUser.jsp"));
        bean.init(request, "CORE_USERS_MANAGEMENT");
        bean.doCreateAdminUser(request);
        message = AdminMessageService.getMessage(request);
        assertNotNull(message);
        assertEquals(I18nService.getLocalizedString("portal.users.message.differentsPassword", Locale.FRENCH),
                message.getText(Locale.FRENCH));

        request = new MockHttpServletRequest();
        request.addParameter("access_code", randomUserName);
        request.addParameter("last_name", randomUserName);
        request.addParameter("first_name", randomUserName);
        request.addParameter("email", randomUserName + "@lutece.fr");
        request.addParameter("user_level", "0");
        request.addParameter("first_password", randomUserName);
        request.addParameter("second_password", randomUserName);
        request.addParameter("status", Integer.toString(AdminUser.ACTIVE_CODE)); // NPE if absent
        request.addParameter("language", "fr"); // NPE if absent
        request.getSession(true).setAttribute("lutece_admin_user",
                getLevel0AdminUserWithCORE_USERS_MANAGEMENTRight());
        request.setParameter(SecurityTokenService.PARAMETER_TOKEN,
                SecurityTokenService.getInstance().getToken(request, "jsp/admin/user/CreateUser.jsp"));
        bean.init(request, "CORE_USERS_MANAGEMENT");
        bean.doCreateAdminUser(request);
        message = AdminMessageService.getMessage(request);
        assertNull(message);
        AdminUser createdUser = AdminUserHome.findUserByLogin(randomUserName);
        assertNotNull(createdUser);
        LuteceDefaultAdminUser createdUserWithPassword = AdminUserHome
                .findLuteceDefaultAdminUserByPrimaryKey(createdUser.getUserId());
        assertNotNull(createdUserWithPassword);
        assertTrue(createdUserWithPassword.getPassword().check(randomUserName));
    } finally {
        AdminUser user = AdminUserHome.findUserByLogin(randomUserName);
        if (user != null) {
            AdminUserHome.remove(user.getUserId());
        }
    }
}

From source file:org.apache.archiva.webdav.RepositoryServletSecurityTest.java

@Test
public void testPutWithValidUserWithNoWriteAccess() throws Exception {

    servlet.setDavSessionProvider(davSessionProvider);

    ArchivaDavResourceFactory archivaDavResourceFactory = (ArchivaDavResourceFactory) servlet
            .getResourceFactory();// ww w  . j  a  v  a 2  s. c om
    archivaDavResourceFactory.setHttpAuth(httpAuth);
    archivaDavResourceFactory.setServletAuth(servletAuth);
    servlet.setResourceFactory(archivaDavResourceFactory);

    AuthenticationResult result = new AuthenticationResult();

    EasyMock.expect(httpAuth.getAuthenticationResult(anyObject(HttpServletRequest.class),
            anyObject(HttpServletResponse.class))).andReturn(result);

    EasyMock.expect(servletAuth.isAuthenticated(anyObject(HttpServletRequest.class),
            anyObject(AuthenticationResult.class))).andReturn(true);

    // ArchivaDavResourceFactory#isAuthorized()
    SecuritySession session = new DefaultSecuritySession();

    EasyMock.expect(httpAuth.getAuthenticationResult(anyObject(HttpServletRequest.class),
            anyObject(HttpServletResponse.class))).andReturn(result);

    MockHttpServletRequest mockHttpServletRequest = new MockHttpServletRequest();

    EasyMock.expect(httpAuth.getSecuritySession(mockHttpServletRequest.getSession(true))).andReturn(session);

    EasyMock.expect(httpAuth.getSessionUser(mockHttpServletRequest.getSession())).andReturn(new SimpleUser());

    EasyMock.expect(servletAuth.isAuthenticated(anyObject(HttpServletRequest.class), eq(result)))
            .andReturn(true);

    EasyMock.expect(servletAuth.isAuthorized(anyObject(HttpServletRequest.class), eq(session), eq("internal"),
            eq(ArchivaRoleConstants.OPERATION_REPOSITORY_UPLOAD)))
            .andThrow(new UnauthorizedException("User not authorized"));
    httpAuthControl.replay();
    servletAuthControl.replay();

    InputStream is = getClass().getResourceAsStream("/artifact.jar");
    assertNotNull("artifact.jar inputstream", is);

    mockHttpServletRequest.addHeader("User-Agent", "foo");
    mockHttpServletRequest.setMethod("PUT");
    mockHttpServletRequest.setRequestURI("/repository/internal/path/to/artifact.jar");
    mockHttpServletRequest.setContent(IOUtils.toByteArray(is));
    mockHttpServletRequest.setContentType("application/octet-stream");

    MockHttpServletResponse mockHttpServletResponse = new MockHttpServletResponse();

    servlet.service(mockHttpServletRequest, mockHttpServletResponse);

    httpAuthControl.verify();
    servletAuthControl.verify();

    assertEquals(HttpServletResponse.SC_UNAUTHORIZED, mockHttpServletResponse.getStatus());
}

From source file:org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilterTests.java

/**
 * SEC-571/* w w  w  .  ja v a2 s.co m*/
 */
@Test
public void testNoSessionIsCreatedIfAllowSessionCreationIsFalse() throws Exception {
    MockHttpServletRequest request = createMockAuthenticationRequest();

    MockFilterConfig config = new MockFilterConfig(null, null);
    MockFilterChain chain = new MockFilterChain(true);
    MockHttpServletResponse response = new MockHttpServletResponse();

    // Reject authentication, so exception would normally be stored in session
    MockAuthenticationFilter filter = new MockAuthenticationFilter(false);
    failureHandler.setAllowSessionCreation(false);
    filter.setAuthenticationFailureHandler(failureHandler);

    filter.doFilter(request, response, chain);

    assertThat(request.getSession(false)).isNull();
}