* Expression-Based Access Control PermitAll, hasRole, hasAnyRole etc. I modified classes regards to Security * Added test cases for Spring Security Expressions * Handler Interceptor - logging example * Test for logger interceptor * Removed conflicted part * UserInterceptor (adding user information to model) * Spring Handler Interceptor - session timers * Spring Security CSRF attack protection with Thymeleaf * Fix and(); * Logger update * Changed config for Thymeleaf * Thymeleaf Natural Processing and Inlining * Expression Utility Objects, Thymeleaf
59 lines
2.2 KiB
Java
59 lines
2.2 KiB
Java
package com.baeldung.thymeleaf.controller;
|
|
|
|
import static org.springframework.security.test.web.servlet.request.SecurityMockMvcRequestPostProcessors.csrf;
|
|
import static org.springframework.security.test.web.servlet.request.SecurityMockMvcRequestPostProcessors.user;
|
|
import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.get;
|
|
import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
|
|
import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.view;
|
|
|
|
import javax.servlet.Filter;
|
|
|
|
import org.junit.Before;
|
|
import org.junit.Test;
|
|
import org.junit.runner.RunWith;
|
|
import org.springframework.beans.factory.annotation.Autowired;
|
|
import org.springframework.mock.web.MockHttpSession;
|
|
import org.springframework.test.context.ContextConfiguration;
|
|
import org.springframework.test.context.junit4.SpringJUnit4ClassRunner;
|
|
import org.springframework.test.context.web.WebAppConfiguration;
|
|
import org.springframework.test.web.servlet.MockMvc;
|
|
import org.springframework.test.web.servlet.request.RequestPostProcessor;
|
|
import org.springframework.test.web.servlet.setup.MockMvcBuilders;
|
|
import org.springframework.web.context.WebApplicationContext;
|
|
|
|
import com.baeldung.thymeleaf.config.InitSecurity;
|
|
import com.baeldung.thymeleaf.config.WebApp;
|
|
import com.baeldung.thymeleaf.config.WebMVCConfig;
|
|
import com.baeldung.thymeleaf.config.WebMVCSecurity;
|
|
|
|
@RunWith(SpringJUnit4ClassRunner.class)
|
|
@WebAppConfiguration
|
|
@ContextConfiguration(classes = { WebApp.class, WebMVCConfig.class, WebMVCSecurity.class, InitSecurity.class })
|
|
public class ExpressionUtilityObjectsControllerTest {
|
|
|
|
@Autowired
|
|
WebApplicationContext wac;
|
|
@Autowired
|
|
MockHttpSession session;
|
|
|
|
private MockMvc mockMvc;
|
|
|
|
@Autowired
|
|
private Filter springSecurityFilterChain;
|
|
|
|
protected RequestPostProcessor testUser() {
|
|
return user("user1").password("user1Pass").roles("USER");
|
|
}
|
|
|
|
@Before
|
|
public void setup() {
|
|
mockMvc = MockMvcBuilders.webAppContextSetup(wac).addFilters(springSecurityFilterChain).build();
|
|
}
|
|
|
|
@Test
|
|
public void testGetDates() throws Exception{
|
|
mockMvc.perform(get("/objects").with(testUser()).with(csrf())).andExpect(status().isOk()).andExpect(view().name("objects.html"));
|
|
}
|
|
|
|
}
|