Java Code Examples for com.gargoylesoftware.htmlunit.html.HtmlPage#getElementsByTagName()
The following examples show how to use
com.gargoylesoftware.htmlunit.html.HtmlPage#getElementsByTagName() .
You can vote up the ones you like or vote down the ones you don't like,
and go to the original project or source file by following the links above each example. You may check out the related API usage on the sidebar.
Example 1
| Source File: WebClient8Test.java From htmlunit with Apache License 2.0 | 6 votes |
|
/**
* @throws Exception if something goes wrong
*/
@Test
public void appendChildMoved() throws Exception {
final String html = "<html>\n"
+ "<head><title>foo</title></head>\n"
+ "<body>\n"
+ "<p>hello</p>\n"
+ "</body></html>";
final String html2 = "<html>\n"
+ "<head><title>foo</title></head>\n"
+ "<body>\n"
+ "<p id='tester'>world</p>\n"
+ "</body></html>";
try (WebClient webClient = new WebClient(getBrowserVersion(), false, null, -1)) {
final HtmlPage page = loadPage(webClient, html, null, URL_FIRST);
final HtmlPage page2 = loadPage(webClient, html2, null, URL_SECOND);
final DomNodeList<DomElement> elements = page.getElementsByTagName("*");
assertEquals(5, elements.getLength());
page.getBody().appendChild(page2.getElementById("tester"));
assertEquals(6, elements.getLength());
}
}
Example 2
| Source File: SgmlPageTest.java From htmlunit with Apache License 2.0 | 6 votes |
|
/**
* @throws Exception if the test fails
*/
@Test
public void getElementsByTagNameAsterisk() throws Exception {
final String html
= "<html><head><title>First</title></head>\n"
+ "<body>\n"
+ "<form><input type='button' name='button1' value='pushme'></form>\n"
+ "<div>a</div> <div>b</div> <div>c</div>\n"
+ "</body></html>";
final HtmlPage page = loadPage(html);
final DomNodeList<DomElement> elements = page.getElementsByTagName("*");
assertEquals(9, elements.getLength());
validateDomNodeList(elements);
final HtmlDivision newDiv = new HtmlDivision(HtmlDivision.TAG_NAME, page, null);
page.getBody().appendChild(newDiv);
assertEquals(10, elements.getLength());
validateDomNodeList(elements);
}
Example 3
| Source File: AbstractOIDCTest.java From cxf-fediz with Apache License 2.0 | 6 votes |
|
private static <P extends Page> P login(final UriBuilder uriBuilder, final WebClient webClient)
throws IOException {
final HtmlPage idpPage = webClient.getPage(
uriBuilder.queryParam("login_hint", "blabla@" + HOME_REALM).build().toURL());
assertEquals("IDP SignIn Response Form", idpPage.getTitleText());
webClient.getCredentialsProvider().clear();
// Test the SAML Version here
String wresult = null;
for (DomElement result : idpPage.getElementsByTagName("input")) {
if ("wresult".equals(result.getAttributeNS(null, "name"))) {
wresult = result.getAttributeNS(null, "value");
assertTrue(wresult.contains("urn:oasis:names:tc:SAML:2.0:cm:bearer"));
break;
}
}
assertNotNull(wresult);
final HtmlForm form = idpPage.getFormByName("signinresponseform");
final HtmlSubmitInput button = form.getInputByName("_eventId_submit");
return button.click();
}
Example 4
| Source File: CSSStyleSheet2Test.java From htmlunit with Apache License 2.0 | 5 votes |
|
/**
* Test for #1300.
* @throws Exception if the test fails
*/
@Test
public void brokenExternalCSS() throws Exception {
final String html = "<html><head>\n"
+ "<link rel='stylesheet' type='text/css' href='" + URL_SECOND + "'/></head></html>";
getMockWebConnection().setResponse(URL_SECOND, "body { font-weight: 900\\9; }");
final HtmlPage htmlPage = loadPage(html);
final NodeList list = htmlPage.getElementsByTagName("body");
final HtmlElement element = (HtmlElement) list.item(0);
final ComputedCSSStyleDeclaration style = ((HTMLElement) element.getScriptableObject()).getCurrentStyle();
assertEquals("CSSStyleDeclaration for ''", style.toString());
}
Example 5
| Source File: HTTPTestUtils.java From cxf-fediz with Apache License 2.0 | 5 votes |
|
public static void logout(String url, CookieManager cookieManager, boolean wsfed) throws IOException {
final WebClient webClient = new WebClient();
webClient.setCookieManager(cookieManager);
webClient.getOptions().setUseInsecureSSL(true);
final HtmlPage idpPage = webClient.getPage(url);
Assert.assertEquals("IDP SignOut Confirmation Response Page", idpPage.getTitleText());
final HtmlForm form = idpPage.getFormByName("signoutconfirmationresponseform");
final HtmlSubmitInput button = form.getInputByName("_eventId_submit");
webClient.getOptions().setJavaScriptEnabled(false);
final HtmlPage idpLogoutPage = button.click();
webClient.getOptions().setJavaScriptEnabled(true);
if (wsfed) {
DomNodeList<DomElement> images = idpLogoutPage.getElementsByTagName("img");
Assert.assertEquals(1, images.getLength());
for (int i = 0; i < images.size(); i++) {
DomElement domElement = images.get(i);
String imgSrc = domElement.getAttribute("src");
//we should get a fault if the image isn't available.
webClient.getPage(imgSrc);
}
} else {
// For SAML SSO we will be redirected back to the RP
HtmlForm responseForm = idpLogoutPage.getFormByName("samlsignoutresponseform");
HtmlSubmitInput button2 = responseForm.getInputByName("_eventId_submit");
button2.click();
}
webClient.close();
}
Example 6
| Source File: IdpTest.java From cxf-fediz with Apache License 2.0 | 5 votes |
|
@org.junit.Test
public void testSuccessfulInvokeOnIdP() throws Exception {
String url = "https://localhost:" + getIdpHttpsPort() + "/fediz-idp/federation?";
url += "wa=wsignin1.0";
url += "&whr=urn:org:apache:cxf:fediz:idp:realm-A";
url += "&wtrealm=urn:org:apache:cxf:fediz:fedizhelloworld";
String wreply = "https://localhost:" + getRpHttpsPort() + "/" + getServletContextName() + "/secure/fedservlet";
url += "&wreply=" + wreply;
String user = "alice";
String password = "ecila";
final WebClient webClient = new WebClient();
webClient.getOptions().setUseInsecureSSL(true);
webClient.getCredentialsProvider().setCredentials(
new AuthScope("localhost", Integer.parseInt(getIdpHttpsPort())),
new UsernamePasswordCredentials(user, password));
webClient.getOptions().setJavaScriptEnabled(false);
final HtmlPage idpPage = webClient.getPage(url);
webClient.getOptions().setJavaScriptEnabled(true);
Assert.assertEquals("IDP SignIn Response Form", idpPage.getTitleText());
// Parse the form to get the token (wresult)
DomNodeList<DomElement> results = idpPage.getElementsByTagName("input");
String wresult = null;
for (DomElement result : results) {
if ("wresult".equals(result.getAttributeNS(null, "name"))) {
wresult = result.getAttributeNS(null, "value");
break;
}
}
Assert.assertNotNull(wresult);
webClient.close();
}
Example 7
| Source File: WReqTest.java From cxf-fediz with Apache License 2.0 | 5 votes |
|
private static String login(String url, String user, String password, String idpPort) throws IOException {
final WebClient webClient = new WebClient();
webClient.getOptions().setUseInsecureSSL(true);
webClient.getCredentialsProvider().setCredentials(
new AuthScope("localhost", Integer.parseInt(idpPort)),
new UsernamePasswordCredentials(user, password));
webClient.getOptions().setJavaScriptEnabled(false);
final HtmlPage idpPage = webClient.getPage(url);
webClient.getOptions().setJavaScriptEnabled(true);
Assert.assertEquals("IDP SignIn Response Form", idpPage.getTitleText());
// Test the SAML Version here
DomNodeList<DomElement> results = idpPage.getElementsByTagName("input");
String wresult = null;
for (DomElement result : results) {
if ("wresult".equals(result.getAttributeNS(null, "name"))) {
wresult = result.getAttributeNS(null, "value");
break;
}
}
Assert.assertTrue(wresult != null
&& wresult.contains("urn:oasis:names:tc:SAML:1.0:cm:bearer"));
final HtmlForm form = idpPage.getFormByName("signinresponseform");
final HtmlSubmitInput button = form.getInputByName("_eventId_submit");
final HtmlPage rpPage = button.click();
Assert.assertEquals("WS Federation Systests Examples", rpPage.getTitleText());
webClient.close();
return rpPage.getBody().getTextContent();
}
Example 8
| Source File: CXFTest.java From cxf-fediz with Apache License 2.0 | 4 votes |
|
@org.junit.Test
public void testNoRequestValidation() throws Exception {
String url = "https://localhost:" + getRpHttpsPort() + "/fedizhelloworldcxfnoreqvalidation/secure/fedservlet";
String user = "alice";
String password = "ecila";
// Get the initial token
CookieManager cookieManager = new CookieManager();
final WebClient webClient = new WebClient();
webClient.setCookieManager(cookieManager);
webClient.getOptions().setUseInsecureSSL(true);
webClient.getCredentialsProvider().setCredentials(
new AuthScope("localhost", Integer.parseInt(getIdpHttpsPort())),
new UsernamePasswordCredentials(user, password));
webClient.getOptions().setJavaScriptEnabled(false);
final HtmlPage idpPage = webClient.getPage(url);
webClient.getOptions().setJavaScriptEnabled(true);
Assert.assertEquals("IDP SignIn Response Form", idpPage.getTitleText());
// Parse the form to remove the context
DomNodeList<DomElement> results = idpPage.getElementsByTagName("input");
for (DomElement result : results) {
if (getContextName().equals(result.getAttributeNS(null, "name"))) {
result.setAttributeNS(null, "value", "");
}
}
// Invoke back on the RP
final HtmlForm form = idpPage.getFormByName(getLoginFormName());
final HtmlSubmitInput button = form.getInputByName("_eventId_submit");
final HtmlPage rpPage = button.click();
Assert.assertTrue("WS Federation Systests Examples".equals(rpPage.getTitleText())
|| "WS Federation Systests Spring Examples".equals(rpPage.getTitleText()));
webClient.close();
}
Example 9
| Source File: AbstractClientCertTests.java From cxf-fediz with Apache License 2.0 | 4 votes |
|
@org.junit.Test
public void testDifferentClientCertificate() throws Exception {
// Get the initial wresult from the IdP
String url = "https://localhost:" + getRpHttpsPort() + "/" + getServletContextName() + "/secure/fedservlet";
CookieManager cookieManager = new CookieManager();
final WebClient webClient = new WebClient();
webClient.setCookieManager(cookieManager);
webClient.getOptions().setUseInsecureSSL(true);
webClient.getOptions().setSSLClientCertificate(
this.getClass().getClassLoader().getResource("alice_client.jks"), "storepass", "jks");
webClient.getOptions().setJavaScriptEnabled(false);
final HtmlPage idpPage = webClient.getPage(url);
webClient.getOptions().setJavaScriptEnabled(true);
Assert.assertEquals("IDP SignIn Response Form", idpPage.getTitleText());
// Test the Subject Confirmation method here
DomNodeList<DomElement> results = idpPage.getElementsByTagName("input");
String wresult = null;
String wa = "wsignin1.0";
String wctx = null;
String wtrealm = null;
for (DomElement result : results) {
if ("wresult".equals(result.getAttributeNS(null, "name"))) {
wresult = result.getAttributeNS(null, "value");
} else if ("wctx".equals(result.getAttributeNS(null, "name"))) {
wctx = result.getAttributeNS(null, "value");
} else if ("wtrealm".equals(result.getAttributeNS(null, "name"))) {
wtrealm = result.getAttributeNS(null, "value");
}
}
Assert.assertTrue(wctx != null && wtrealm != null);
Assert.assertTrue(wresult != null
&& wresult.contains("urn:oasis:names:tc:SAML:2.0:cm:holder-of-key"));
webClient.close();
// Now invoke on the RP using the saved parameters above, but a different client cert!
final WebClient webClient2 = new WebClient();
webClient2.setCookieManager(cookieManager);
webClient2.getOptions().setUseInsecureSSL(true);
webClient2.getOptions().setSSLClientCertificate(
this.getClass().getClassLoader().getResource("server.jks"), "tompass", "jks");
WebRequest request = new WebRequest(new URL(url), HttpMethod.POST);
request.setRequestParameters(new ArrayList<NameValuePair>());
request.getRequestParameters().add(new NameValuePair("wctx", wctx));
request.getRequestParameters().add(new NameValuePair("wa", wa));
request.getRequestParameters().add(new NameValuePair("wtrealm", wtrealm));
request.getRequestParameters().add(new NameValuePair("wresult", wresult));
try {
webClient2.getPage(request);
Assert.fail("Exception expected");
} catch (FailingHttpStatusCodeException ex) {
// expected
Assert.assertTrue(401 == ex.getStatusCode() || 403 == ex.getStatusCode());
}
webClient2.close();
}
Example 10
| Source File: AbstractClientCertTests.java From cxf-fediz with Apache License 2.0 | 4 votes |
|
@org.junit.Test
public void testClientAuthentication() throws Exception {
String url = "https://localhost:" + getRpHttpsPort() + "/" + getServletContextName() + "/secure/fedservlet";
final WebClient webClient = new WebClient();
webClient.getOptions().setUseInsecureSSL(true);
webClient.getOptions().setSSLClientCertificate(
this.getClass().getClassLoader().getResource("alice_client.jks"), "storepass", "jks");
webClient.getOptions().setJavaScriptEnabled(false);
final HtmlPage idpPage = webClient.getPage(url);
webClient.getOptions().setJavaScriptEnabled(true);
Assert.assertEquals("IDP SignIn Response Form", idpPage.getTitleText());
final HtmlForm form = idpPage.getFormByName("signinresponseform");
final HtmlSubmitInput button = form.getInputByName("_eventId_submit");
// Test the Subject Confirmation method here
DomNodeList<DomElement> results = idpPage.getElementsByTagName("input");
String wresult = null;
for (DomElement result : results) {
if ("wresult".equals(result.getAttributeNS(null, "name"))) {
wresult = result.getAttributeNS(null, "value");
break;
}
}
Assert.assertTrue(wresult != null
&& wresult.contains("urn:oasis:names:tc:SAML:2.0:cm:holder-of-key"));
final HtmlPage rpPage = button.click();
Assert.assertTrue("WS Federation Systests Examples".equals(rpPage.getTitleText())
|| "WS Federation Systests Spring Examples".equals(rpPage.getTitleText()));
final String bodyTextContent = rpPage.getBody().getTextContent();
String user = "alice";
Assert.assertTrue("Principal not " + user,
bodyTextContent.contains("userPrincipal=" + user));
Assert.assertTrue("User " + user + " does not have role Admin",
bodyTextContent.contains("role:Admin=false"));
Assert.assertTrue("User " + user + " does not have role Manager",
bodyTextContent.contains("role:Manager=false"));
Assert.assertTrue("User " + user + " must have role User",
bodyTextContent.contains("role:User=true"));
String claim = ClaimTypes.FIRSTNAME.toString();
Assert.assertTrue("User " + user + " claim " + claim + " is not 'Alice'",
bodyTextContent.contains(claim + "=Alice"));
claim = ClaimTypes.LASTNAME.toString();
Assert.assertTrue("User " + user + " claim " + claim + " is not 'Smith'",
bodyTextContent.contains(claim + "=Smith"));
claim = ClaimTypes.EMAILADDRESS.toString();
Assert.assertTrue("User " + user + " claim " + claim + " is not '[email protected]'",
bodyTextContent.contains(claim + "[email protected]"));
webClient.close();
}
Example 11
| Source File: AbstractTests.java From cxf-fediz with Apache License 2.0 | 4 votes |
|
@Test
public void testEntityExpansionAttack2() throws Exception {
String url = "https://localhost:" + getRpHttpsPort() + "/" + getServletContextName() + "/secure/fedservlet";
String user = "alice";
String password = "ecila";
// Get the initial token
CookieManager cookieManager = new CookieManager();
final WebClient webClient = new WebClient();
webClient.setCookieManager(cookieManager);
webClient.getOptions().setUseInsecureSSL(true);
webClient.getCredentialsProvider().setCredentials(
new AuthScope("localhost", Integer.parseInt(getIdpHttpsPort())),
new UsernamePasswordCredentials(user, password));
webClient.getOptions().setJavaScriptEnabled(false);
final HtmlPage idpPage = webClient.getPage(url);
webClient.getOptions().setJavaScriptEnabled(true);
Assert.assertEquals("IDP SignIn Response Form", idpPage.getTitleText());
// Parse the form to get the token (wresult)
DomNodeList<DomElement> results = idpPage.getElementsByTagName("input");
String entity = getResourceAsString("/entity2.xml");
String reference = "&m;";
for (DomElement result : results) {
if (getTokenName().equals(result.getAttributeNS(null, "name"))) {
// Now modify the Signature
String value = result.getAttributeNS(null, "value");
if (isWSFederation()) {
value = entity + value;
value = value.replace("alice", reference);
result.setAttributeNS(null, "value", value);
} else {
// Decode response
byte[] deflatedToken = Base64Utility.decode(value);
InputStream inputStream = new ByteArrayInputStream(deflatedToken);
Document responseDoc = StaxUtils.read(new InputStreamReader(inputStream, "UTF-8"));
// Modify SignatureValue to include the entity
String signatureNamespace = "http://www.w3.org/2000/09/xmldsig#";
Node signatureValue =
responseDoc.getElementsByTagNameNS(signatureNamespace, "SignatureValue").item(0);
signatureValue.setTextContent(reference + signatureValue.getTextContent());
// Re-encode response
String responseMessage = DOM2Writer.nodeToString(responseDoc);
result.setAttributeNS(null, "value", Base64Utility.encode((entity + responseMessage).getBytes()));
}
}
}
// Invoke back on the RP
final HtmlForm form = idpPage.getFormByName(getLoginFormName());
final HtmlSubmitInput button = form.getInputByName("_eventId_submit");
try {
button.click();
Assert.fail("Failure expected on an entity expansion attack");
} catch (FailingHttpStatusCodeException ex) {
// expected
Assert.assertTrue(401 == ex.getStatusCode() || 403 == ex.getStatusCode());
}
webClient.close();
}
Example 12
| Source File: WSFedTest.java From cxf-fediz with Apache License 2.0 | 4 votes |
|
private static String login(String url, String user, String password,
String idpPort, String rpIdpPort) throws IOException {
//
// Access the RP + get redirected to the IdP for "realm a". Then get redirected to the IdP for
// "realm b".
//
final WebClient webClient = new WebClient();
CookieManager cookieManager = new CookieManager();
webClient.setCookieManager(cookieManager);
webClient.getOptions().setUseInsecureSSL(true);
webClient.getCredentialsProvider().setCredentials(
new AuthScope("localhost", Integer.parseInt(idpPort)),
new UsernamePasswordCredentials(user, password));
webClient.getOptions().setJavaScriptEnabled(false);
final HtmlPage idpPage = webClient.getPage(url);
webClient.getOptions().setJavaScriptEnabled(true);
Assert.assertEquals("IDP SignIn Response Form", idpPage.getTitleText());
// For some reason, redirecting back to the IdP for "realm a" is not working with htmlunit. So extract
// the parameters manually from the form, and access the IdP for "realm a" with them
DomNodeList<DomElement> results = idpPage.getElementsByTagName("input");
String wresult = null;
String wa = "wsignin1.0";
String wctx = null;
String wtrealm = null;
for (DomElement result : results) {
if ("wresult".equals(result.getAttributeNS(null, "name"))) {
wresult = result.getAttributeNS(null, "value");
} else if ("wctx".equals(result.getAttributeNS(null, "name"))) {
wctx = result.getAttributeNS(null, "value");
} else if ("wtrealm".equals(result.getAttributeNS(null, "name"))) {
wtrealm = result.getAttributeNS(null, "value");
}
}
Assert.assertTrue(wctx != null && wresult != null && wtrealm != null);
webClient.close();
// Invoke on the IdP for "realm a"
final WebClient webClient2 = new WebClient();
webClient2.setCookieManager(cookieManager);
webClient2.getOptions().setUseInsecureSSL(true);
String url2 = "https://localhost:" + rpIdpPort + "/fediz-idp/federation?";
url2 += "wctx=" + wctx + "&";
url2 += "wa=" + wa + "&";
url2 += "wtrealm=" + URLEncoder.encode(wtrealm, "UTF8") + "&";
url2 += "wresult=" + URLEncoder.encode(wresult, "UTF8");
webClient2.getOptions().setJavaScriptEnabled(false);
final HtmlPage idpPage2 = webClient2.getPage(url2);
webClient2.getOptions().setJavaScriptEnabled(true);
Assert.assertEquals("IDP SignIn Response Form", idpPage2.getTitleText());
// Now redirect back to the RP
final HtmlForm form2 = idpPage2.getFormByName("signinresponseform");
final HtmlSubmitInput button2 = form2.getInputByName("_eventId_submit");
final HtmlPage rpPage = button2.click();
Assert.assertEquals("WS Federation Systests Examples", rpPage.getTitleText());
webClient2.close();
return rpPage.getBody().getTextContent();
}
Example 13
| Source File: AbstractTests.java From cxf-fediz with Apache License 2.0 | 4 votes |
|
@Test
public void testAliceModifiedSignature() throws Exception {
String url = "https://localhost:" + getRpHttpsPort() + "/" + getServletContextName()
+ "/secure/fedservlet";
String user = "alice";
String password = "ecila";
// Get the initial token
CookieManager cookieManager = new CookieManager();
final WebClient webClient = new WebClient();
webClient.setCookieManager(cookieManager);
webClient.getOptions().setUseInsecureSSL(true);
webClient.getCredentialsProvider().setCredentials(
new AuthScope("localhost", Integer.parseInt(getIdpHttpsPort())),
new UsernamePasswordCredentials(user, password));
webClient.getOptions().setJavaScriptEnabled(false);
final HtmlPage idpPage = webClient.getPage(url);
webClient.getOptions().setJavaScriptEnabled(true);
Assert.assertEquals("IDP SignIn Response Form", idpPage.getTitleText());
// Parse the form to get the token (wresult)
DomNodeList<DomElement> results = idpPage.getElementsByTagName("input");
for (DomElement result : results) {
if (getTokenName().equals(result.getAttributeNS(null, "name"))) {
// Now modify the Signature
String value = result.getAttributeNS(null, "value");
if (value.contains("alice")) {
value = value.replace("alice", "bob");
} else {
value = "H" + value;
}
result.setAttributeNS(null, "value", value);
}
}
// Invoke back on the RP
final HtmlForm form = idpPage.getFormByName(getLoginFormName());
final HtmlSubmitInput button = form.getInputByName("_eventId_submit");
try {
button.click();
Assert.fail("Failure expected on a modified signature");
} catch (FailingHttpStatusCodeException ex) {
// expected
Assert.assertTrue(401 == ex.getStatusCode() || 403 == ex.getStatusCode());
}
webClient.close();
}
Example 14
| Source File: FederationTest.java From cxf-fediz with Apache License 2.0 | 4 votes |
|
@org.junit.Test
public void testNoRequestValidation() throws Exception {
String url = "https://localhost:" + getRpHttpsPort() + "/fedizhelloworldnoreqvalidation/secure/fedservlet";
String user = "alice";
String password = "ecila";
// Get the initial token
CookieManager cookieManager = new CookieManager();
final WebClient webClient = new WebClient();
webClient.setCookieManager(cookieManager);
webClient.getOptions().setUseInsecureSSL(true);
webClient.getCredentialsProvider().setCredentials(
new AuthScope("localhost", Integer.parseInt(getIdpHttpsPort())),
new UsernamePasswordCredentials(user, password));
webClient.getOptions().setJavaScriptEnabled(false);
final HtmlPage idpPage = webClient.getPage(url);
webClient.getOptions().setJavaScriptEnabled(true);
Assert.assertEquals("IDP SignIn Response Form", idpPage.getTitleText());
// Parse the form to remove the context
DomNodeList<DomElement> results = idpPage.getElementsByTagName("input");
for (DomElement result : results) {
if (getContextName().equals(result.getAttributeNS(null, "name"))) {
result.setAttributeNS(null, "value", "");
}
}
// Invoke back on the RP
final HtmlForm form = idpPage.getFormByName(getLoginFormName());
final HtmlSubmitInput button = form.getInputByName("_eventId_submit");
final HtmlPage rpPage = button.click();
Assert.assertTrue("WS Federation Systests Examples".equals(rpPage.getTitleText())
|| "WS Federation Systests Spring Examples".equals(rpPage.getTitleText()));
webClient.close();
}
Example 15
| Source File: HolderOfKeyTest.java From cxf-fediz with Apache License 2.0 | 4 votes |
|
@org.junit.Test
public void testHolderOfKey() throws Exception {
String url = "https://localhost:" + TomcatLauncher.getRpHttpsPort() + '/' + SERVLET_CONTEXT_NAME
+ "/secure/fedservlet";
String user = "alice";
String password = "ecila";
final WebClient webClient = new WebClient();
webClient.getOptions().setUseInsecureSSL(true);
webClient.getOptions().setSSLClientCertificate(
this.getClass().getClassLoader().getResource("client.jks"), "storepass", "jks");
webClient.getCredentialsProvider().setCredentials(
new AuthScope("localhost", Integer.parseInt(TomcatLauncher.getIdpHttpsPort())),
new UsernamePasswordCredentials(user, password));
webClient.getOptions().setJavaScriptEnabled(false);
final HtmlPage idpPage = webClient.getPage(url);
webClient.getOptions().setJavaScriptEnabled(true);
Assert.assertEquals("IDP SignIn Response Form", idpPage.getTitleText());
final HtmlForm form = idpPage.getFormByName("signinresponseform");
final HtmlSubmitInput button = form.getInputByName("_eventId_submit");
// Test the Subject Confirmation method here
DomNodeList<DomElement> results = idpPage.getElementsByTagName("input");
String wresult = null;
for (DomElement result : results) {
if ("wresult".equals(result.getAttributeNS(null, "name"))) {
wresult = result.getAttributeNS(null, "value");
break;
}
}
Assert.assertTrue(wresult != null
&& wresult.contains("urn:oasis:names:tc:SAML:2.0:cm:holder-of-key"));
final HtmlPage rpPage = button.click();
Assert.assertEquals("WS Federation Systests Examples", rpPage.getTitleText());
final String bodyTextContent = rpPage.getBody().getTextContent();
Assert.assertTrue("Principal not " + user,
bodyTextContent.contains("userPrincipal=" + user));
Assert.assertTrue("User " + user + " does not have role Admin",
bodyTextContent.contains("role:Admin=false"));
Assert.assertTrue("User " + user + " does not have role Manager",
bodyTextContent.contains("role:Manager=false"));
Assert.assertTrue("User " + user + " must have role User",
bodyTextContent.contains("role:User=true"));
String claim = ClaimTypes.FIRSTNAME.toString();
Assert.assertTrue("User " + user + " claim " + claim + " is not 'Alice'",
bodyTextContent.contains(claim + "=Alice"));
claim = ClaimTypes.LASTNAME.toString();
Assert.assertTrue("User " + user + " claim " + claim + " is not 'Smith'",
bodyTextContent.contains(claim + "=Smith"));
claim = ClaimTypes.EMAILADDRESS.toString();
Assert.assertTrue("User " + user + " claim " + claim + " is not '[email protected]'",
bodyTextContent.contains(claim + "[email protected]"));
webClient.close();
}
Example 16
| Source File: TomcatPluginTest.java From cxf-fediz with Apache License 2.0 | 4 votes |
|
@Test
public void testAliceModifiedContext() throws Exception {
String url = "https://localhost:" + getRpHttpsPort() + "/" + getServletContextName()
+ "/secure/fedservlet";
String user = "alice";
String password = "ecila";
// Get the initial token
CookieManager cookieManager = new CookieManager();
final WebClient webClient = new WebClient();
webClient.setCookieManager(cookieManager);
webClient.getOptions().setUseInsecureSSL(true);
webClient.getCredentialsProvider().setCredentials(
new AuthScope("localhost", Integer.parseInt(getIdpHttpsPort())),
new UsernamePasswordCredentials(user, password));
webClient.getOptions().setJavaScriptEnabled(false);
final HtmlPage idpPage = webClient.getPage(url);
webClient.getOptions().setJavaScriptEnabled(true);
Assert.assertEquals("IDP SignIn Response Form", idpPage.getTitleText());
// Parse the form to get the token (wresult)
DomNodeList<DomElement> results = idpPage.getElementsByTagName("input");
for (DomElement result : results) {
if (getContextName().equals(result.getAttributeNS(null, "name"))) {
// Now modify the context
String value = result.getAttributeNS(null, "value");
value = "H" + value;
result.setAttributeNS(null, "value", value);
}
}
// Invoke back on the RP
final HtmlForm form = idpPage.getFormByName(getLoginFormName());
final HtmlSubmitInput button = form.getInputByName("_eventId_submit");
try {
button.click();
Assert.fail("Failure expected on a modified context");
} catch (FailingHttpStatusCodeException ex) {
// Request Timeout expected here, as the context isn't known - the session is presumed to have expired
Assert.assertTrue(408 == ex.getStatusCode());
}
webClient.close();
}
Example 17
| Source File: SpringTest.java From cxf-fediz with Apache License 2.0 | 4 votes |
|
@org.junit.Test
public void testNoRequestValidation() throws Exception {
String url = "https://localhost:" + getRpHttpsPort()
+ "/fedizhelloworldspringnoreqvalidation/secure/fedservlet";
String user = "alice";
String password = "ecila";
// Get the initial token
CookieManager cookieManager = new CookieManager();
final WebClient webClient = new WebClient();
webClient.setCookieManager(cookieManager);
webClient.getOptions().setUseInsecureSSL(true);
webClient.getCredentialsProvider().setCredentials(
new AuthScope("localhost", Integer.parseInt(getIdpHttpsPort())),
new UsernamePasswordCredentials(user, password));
webClient.getOptions().setJavaScriptEnabled(false);
final HtmlPage idpPage = webClient.getPage(url);
webClient.getOptions().setJavaScriptEnabled(true);
Assert.assertEquals("IDP SignIn Response Form", idpPage.getTitleText());
// Parse the form to remove the context
DomNodeList<DomElement> results = idpPage.getElementsByTagName("input");
for (DomElement result : results) {
if (getContextName().equals(result.getAttributeNS(null, "name"))) {
result.setAttributeNS(null, "value", "");
}
}
// Invoke back on the RP
final HtmlForm form = idpPage.getFormByName(getLoginFormName());
final HtmlSubmitInput button = form.getInputByName("_eventId_submit");
final HtmlPage rpPage = button.click();
Assert.assertTrue("WS Federation Systests Examples".equals(rpPage.getTitleText())
|| "WS Federation Systests Spring Examples".equals(rpPage.getTitleText()));
webClient.close();
}
Example 18
| Source File: TomcatPluginTest.java From cxf-fediz with Apache License 2.0 | 4 votes |
|
@Test
public void testModifiedSignatureValue() throws Exception {
String url = "https://localhost:" + getRpHttpsPort() + "/" + getServletContextName()
+ "/secure/fedservlet";
String user = "alice";
String password = "ecila";
// Get the initial token
CookieManager cookieManager = new CookieManager();
final WebClient webClient = new WebClient();
webClient.setCookieManager(cookieManager);
webClient.getOptions().setUseInsecureSSL(true);
webClient.getCredentialsProvider().setCredentials(
new AuthScope("localhost", Integer.parseInt(getIdpHttpsPort())),
new UsernamePasswordCredentials(user, password));
webClient.getOptions().setJavaScriptEnabled(false);
final HtmlPage idpPage = webClient.getPage(url);
webClient.getOptions().setJavaScriptEnabled(true);
Assert.assertEquals("IDP SignIn Response Form", idpPage.getTitleText());
// Parse the form to get the token (wresult)
DomNodeList<DomElement> results = idpPage.getElementsByTagName("input");
for (DomElement result : results) {
if (getTokenName().equals(result.getAttributeNS(null, "name"))) {
String value = result.getAttributeNS(null, "value");
// Decode response
byte[] deflatedToken = Base64Utility.decode(value);
InputStream inputStream = new ByteArrayInputStream(deflatedToken);
Document responseDoc = StaxUtils.read(new InputStreamReader(inputStream, "UTF-8"));
// Modify SignatureValue
String signatureNamespace = "http://www.w3.org/2000/09/xmldsig#";
Node signatureValue =
responseDoc.getElementsByTagNameNS(signatureNamespace, "SignatureValue").item(0);
signatureValue.setTextContent("H" + signatureValue.getTextContent());
// Re-encode response
String responseMessage = DOM2Writer.nodeToString(responseDoc);
result.setAttributeNS(null, "value", Base64Utility.encode(responseMessage.getBytes()));
}
}
// Invoke back on the RP
final HtmlForm form = idpPage.getFormByName(getLoginFormName());
final HtmlSubmitInput button = form.getInputByName("_eventId_submit");
try {
button.click();
Assert.fail("Failure expected on a modified signature");
} catch (FailingHttpStatusCodeException ex) {
// expected
Assert.assertTrue(401 == ex.getStatusCode() || 403 == ex.getStatusCode());
}
webClient.close();
}
Example 19
| Source File: HandlebarsIT.java From ozark with Apache License 2.0 | 4 votes |
|
@Test
public void testView1() throws Exception {
final HtmlPage page = webClient.getPage(webUrl + "resources/person");
List<DomElement> div = page.getElementsByTagName("div");
assertEquals(3, div.size());
}
Example 20
| Source File: HandlebarsIT.java From krazo with Apache License 2.0 | 4 votes |
|
@Test
public void testView1() throws Exception {
final HtmlPage page = webClient.getPage(baseURL + "resources/person");
final List<DomElement> divs = page.getElementsByTagName("div");
assertEquals(3, divs.size());
}
