org.apache.shindig.gadgets.oauth

Class OAuthRequestTest

java.lang.Object

org.apache.shindig.gadgets.oauth.OAuthRequestTest

public class OAuthRequestTest
extends Object

Tests for signing requests.

Field Summary

Fields

Modifier and Type	Field and Description
static String	GADGET_MAKE_REQUEST_URL
static String	GADGET_URL
static String	GADGET_URL_APPROVAL_PARAMS
static String	GADGET_URL_BAD_OAUTH_URL
static String	GADGET_URL_BODY
static String	GADGET_URL_HEADER
static String	GADGET_URL_NO_KEY
protected List<LogRecord>	logRecords

Constructor Summary

Constructors

Constructor and Description
OAuthRequestTest()

Method Summary

Methods

Modifier and Type	Method and Description
static SecurityToken	getBodySecurityToken(String owner, String viewer) Builds gadget token for testing a service that wants parameters in the request body.
static SecurityToken	getHeaderSecurityToken(String owner, String viewer) Builds gadget token for testing a service that wants parameters in a header.
static SecurityToken	getNokeySecurityToken(String owner, String viewer) Builds gadget token for testing services without a key.
static SecurityToken	getNormalSecurityToken(String owner, String viewer) Builds gadget token for testing a service with parameters in the query.
org.apache.shindig.gadgets.oauth.GadgetOAuthTokenStore	getOAuthStore(org.apache.shindig.gadgets.oauth.BasicOAuthStore base) Builds a nicely populated fake token store.
static SecurityToken	getSecurityToken(String owner, String viewer, String gadget)
void	setUp()
void	tearDown()
void	testAccessTokenData_noDirectRequest()
void	testAccessTokenData_noOAuthParams()
void	testAccessTokenExpired_andRevoked()
void	testAccessTokenExpires_onClient()
void	testAccessTokenExpires_onClientNoPredictedExpiration()
void	testAccessTokenExpires_onServer()
void	testAccessTokenNotUsedForSocialPage()
void	testAccessTokenOkForSecureOwnerPage()
void	testAlwaysAppendTrustedParams() Test trusted parameters will always be sent when signOwner and signViewer are false.
void	testBadSessionHandle()
void	testBrokenAccessTokenResponse()
void	testBrokenRequestTokenResponse()
void	testCanRetrieveAccessTokenData()
void	testConsumerThrottled_vagueErrors()
void	testConsumerThrottled()
void	testError400()
void	testError401()
void	testError403()
void	testError404()
void	testExtraApprovalParams()
void	testExtraParamsRejected()
void	testExtraParamsSuppressed()
void	testGetNoQuery()
void	testGetTamperedFormContent()
void	testGetTamperedRawContent()
void	testGetTamperedRemoveRawContent()
void	testGetWithFormEncodedBody()
void	testGetWithQuery()
void	testGetWithQueryMultiParam()
void	testGetWithRawBody()
void	testNextFetchReturnsNull()
void	testNextFetchThrowsGadgetException()
void	testNextFetchThrowsRuntimeException()
void	testNoSignOwner()
void	testNoSignViewer()
void	testOAuthFlow_badCallbackVerifier()
void	testOAuthFlow_noSpec()
void	testOAuthFlow_noSpecAuthHeader()
void	testOAuthFlow_noSpecBlankUrl()
void	testOAuthFlow_noSpecInvalidUrl()
void	testOAuthFlow_noSpecNoAccessTokenUrl()
void	testOAuthFlow_noSpecNoApprovalUrl()
void	testOAuthFlow_noSpecNoRequestTokenUrl()
void	testOAuthFlow_noSpecPostBody()
void	testOAuthFlow_noSpecPostBodyAndHeader()
void	testOAuthFlow_noViewer()
void	testOAuthFlow_tokenReused()
void	testOAuthFlow_unauthUser()
void	testOAuthFlow_withCallbackVerifier()
void	testOAuthFlow()
void	testParamsInBody_forGetRequest()
void	testParamsInBody_forGetRequestStrictSp()
void	testParamsInBody_withExtraParams()
void	testParamsInBody()
void	testParamsInHeader()
void	testPostBinaryData()
void	testPostNoQueryNoData()
void	testPostNoQueryWithData()
void	testPostTamperedFormContent()
void	testPostTamperedRawContent()
void	testPostTamperedRemoveRawContent()
void	testPostWeirdContentType()
void	testPostWithQueryNoData()
void	testPostWithQueryWithData()
void	testPreapprovedToken_invalid()
void	testPreapprovedToken_notUsedIfAccessTokenExists()
void	testPreapprovedToken()
void	testRevokedAccessToken()
void	testSignedFetch_authHeader()
void	testSignedFetch_error401()
void	testSignedFetch_error403()
void	testSignedFetch_extraQueryParameters()
void	testSignedFetch_unnamedConsumerKey()
void	testSignedFetchParametersSet()
void	testSignedFetchParametersSetProxiedContent()
void	testSocialOAuth_tokenRevoked()
void	testStripOAuthParamsFromBody()
void	testStripOAuthParamsFromQuery()
void	testStripOpenSocialParamsFromBody()
void	testStripOpenSocialParamsFromQuery()
void	testTrickyParametersInBody()
void	testTrickyParametersInQuery()
void	testTrustedParams()
void	testTrustedParamsInvalidParameter() Test invalid trusted parameters which are not prefixed with 'oauth' 'xoauth' or 'opensocial'.
void	testTrustedParamsMisc() Test different behaviors of trusted parameters.
void	testUnknownConsumerKey()
void	testValidParameterCharacters()
void	testWrongServiceName()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logRecords

protected final List<LogRecord> logRecords

GADGET_URL

public static final String GADGET_URL

See Also:

Constant Field Values

GADGET_URL_NO_KEY

public static final String GADGET_URL_NO_KEY

See Also:

Constant Field Values

GADGET_URL_HEADER

public static final String GADGET_URL_HEADER

See Also:

Constant Field Values

GADGET_URL_BODY

public static final String GADGET_URL_BODY

See Also:

Constant Field Values

GADGET_URL_BAD_OAUTH_URL

public static final String GADGET_URL_BAD_OAUTH_URL

See Also:

Constant Field Values

GADGET_URL_APPROVAL_PARAMS

public static final String GADGET_URL_APPROVAL_PARAMS

See Also:

Constant Field Values

GADGET_MAKE_REQUEST_URL

public static final String GADGET_MAKE_REQUEST_URL

See Also:

Constant Field Values

Constructor Detail

OAuthRequestTest

public OAuthRequestTest()

Method Detail

setUp

public void setUp()
           throws Exception

Throws:

Exception

getOAuthStore

public org.apache.shindig.gadgets.oauth.GadgetOAuthTokenStore getOAuthStore(org.apache.shindig.gadgets.oauth.BasicOAuthStore base)

Builds a nicely populated fake token store.

getNormalSecurityToken

public static SecurityToken getNormalSecurityToken(String owner,
                                   String viewer)
                                            throws Exception

Builds gadget token for testing a service with parameters in the query.

Throws:

Exception

getNokeySecurityToken

public static SecurityToken getNokeySecurityToken(String owner,
                                  String viewer)
                                           throws Exception

Builds gadget token for testing services without a key.

Throws:

Exception

getHeaderSecurityToken

public static SecurityToken getHeaderSecurityToken(String owner,
                                   String viewer)
                                            throws Exception

Builds gadget token for testing a service that wants parameters in a header.

Throws:

Exception

getBodySecurityToken

public static SecurityToken getBodySecurityToken(String owner,
                                 String viewer)
                                          throws Exception

Builds gadget token for testing a service that wants parameters in the request body.

Throws:

Exception

getSecurityToken

public static SecurityToken getSecurityToken(String owner,
                             String viewer,
                             String gadget)
                                      throws Exception

Throws:

Exception

tearDown

public void tearDown()
              throws Exception

Throws:

Exception

testOAuthFlow

public void testOAuthFlow()
                   throws Exception

Throws:

Exception

testOAuthFlow_withCallbackVerifier

public void testOAuthFlow_withCallbackVerifier()
                                        throws Exception

Throws:

Exception

testOAuthFlow_badCallbackVerifier

public void testOAuthFlow_badCallbackVerifier()
                                       throws Exception

Throws:

Exception

testOAuthFlow_tokenReused

public void testOAuthFlow_tokenReused()
                               throws Exception

Throws:

Exception

testOAuthFlow_unauthUser

public void testOAuthFlow_unauthUser()
                              throws Exception

Throws:

Exception

testOAuthFlow_noViewer

public void testOAuthFlow_noViewer()
                            throws Exception

Throws:

Exception

testOAuthFlow_noSpec

public void testOAuthFlow_noSpec()
                          throws Exception

Throws:

Exception

testOAuthFlow_noSpecNoRequestTokenUrl

public void testOAuthFlow_noSpecNoRequestTokenUrl()
                                           throws Exception

Throws:

Exception

testOAuthFlow_noSpecNoAccessTokenUrl

public void testOAuthFlow_noSpecNoAccessTokenUrl()
                                          throws Exception

Throws:

Exception

testOAuthFlow_noSpecNoApprovalUrl

public void testOAuthFlow_noSpecNoApprovalUrl()
                                       throws Exception

Throws:

Exception

testOAuthFlow_noSpecAuthHeader

public void testOAuthFlow_noSpecAuthHeader()
                                    throws Exception

Throws:

Exception

testOAuthFlow_noSpecPostBody

public void testOAuthFlow_noSpecPostBody()
                                  throws Exception

Throws:

Exception

testOAuthFlow_noSpecPostBodyAndHeader

public void testOAuthFlow_noSpecPostBodyAndHeader()
                                           throws Exception

Throws:

Exception

testOAuthFlow_noSpecInvalidUrl

public void testOAuthFlow_noSpecInvalidUrl()
                                    throws Exception

Throws:

Exception

testOAuthFlow_noSpecBlankUrl

public void testOAuthFlow_noSpecBlankUrl()
                                  throws Exception

Throws:

Exception

testAccessTokenNotUsedForSocialPage

public void testAccessTokenNotUsedForSocialPage()
                                         throws Exception

Throws:

Exception

testAccessTokenOkForSecureOwnerPage

public void testAccessTokenOkForSecureOwnerPage()
                                         throws Exception

Throws:

Exception

testParamsInHeader

public void testParamsInHeader()
                        throws Exception

Throws:

Exception

testParamsInBody

public void testParamsInBody()
                      throws Exception

Throws:

Exception

testParamsInBody_withExtraParams

public void testParamsInBody_withExtraParams()
                                      throws Exception

Throws:

Exception

testParamsInBody_forGetRequest

public void testParamsInBody_forGetRequest()
                                    throws Exception

Throws:

Exception

testParamsInBody_forGetRequestStrictSp

public void testParamsInBody_forGetRequestStrictSp()
                                            throws Exception

Throws:

Exception

testRevokedAccessToken

public void testRevokedAccessToken()
                            throws Exception

Throws:

Exception

testError401

public void testError401()
                  throws Exception

Throws:

Exception

testUnknownConsumerKey

public void testUnknownConsumerKey()
                            throws Exception

Throws:

Exception

testBrokenRequestTokenResponse

public void testBrokenRequestTokenResponse()
                                    throws Exception

Throws:

Exception

testBrokenAccessTokenResponse

public void testBrokenAccessTokenResponse()
                                   throws Exception

Throws:

Exception

testExtraApprovalParams

public void testExtraApprovalParams()
                             throws Exception

Throws:

Exception

testError403

public void testError403()
                  throws Exception

Throws:

Exception

testError404

public void testError404()
                  throws Exception

Throws:

Exception

testError400

public void testError400()
                  throws Exception

Throws:

Exception

testConsumerThrottled

public void testConsumerThrottled()
                           throws Exception

Throws:

Exception

testConsumerThrottled_vagueErrors

public void testConsumerThrottled_vagueErrors()
                                       throws Exception

Throws:

Exception

testSocialOAuth_tokenRevoked

public void testSocialOAuth_tokenRevoked()
                                  throws Exception

Throws:

Exception

testWrongServiceName

public void testWrongServiceName()
                          throws Exception

Throws:

Exception

testPreapprovedToken

public void testPreapprovedToken()
                          throws Exception

Throws:

Exception

testPreapprovedToken_invalid

public void testPreapprovedToken_invalid()
                                  throws Exception

Throws:

Exception

testPreapprovedToken_notUsedIfAccessTokenExists

public void testPreapprovedToken_notUsedIfAccessTokenExists()
                                                     throws Exception

Throws:

Exception

testSignedFetchParametersSet

public void testSignedFetchParametersSet()
                                  throws Exception

Throws:

Exception

testSignedFetch_authHeader

public void testSignedFetch_authHeader()
                                throws Exception

Throws:

Exception

testSignedFetchParametersSetProxiedContent

public void testSignedFetchParametersSetProxiedContent()
                                                throws Exception

Throws:

Exception

testPostBinaryData

public void testPostBinaryData()
                        throws Exception

Throws:

Exception

testPostWeirdContentType

public void testPostWeirdContentType()
                              throws Exception

Throws:

Exception

testGetWithFormEncodedBody

public void testGetWithFormEncodedBody()
                                throws Exception

Throws:

Exception

testGetWithRawBody

public void testGetWithRawBody()
                        throws Exception

Throws:

Exception

testGetTamperedRawContent

public void testGetTamperedRawContent()
                               throws Exception

Throws:

Exception

testGetTamperedFormContent

public void testGetTamperedFormContent()
                                throws Exception

Throws:

Exception

testGetTamperedRemoveRawContent

public void testGetTamperedRemoveRawContent()
                                     throws Exception

Throws:

Exception

testPostTamperedRawContent

public void testPostTamperedRawContent()
                                throws Exception

Throws:

Exception

testPostTamperedFormContent

public void testPostTamperedFormContent()
                                 throws Exception

Throws:

Exception

testPostTamperedRemoveRawContent

public void testPostTamperedRemoveRawContent()
                                      throws Exception

Throws:

Exception

testSignedFetch_error401

public void testSignedFetch_error401()
                              throws Exception

Throws:

Exception

testSignedFetch_error403

public void testSignedFetch_error403()
                              throws Exception

Throws:

Exception

testSignedFetch_unnamedConsumerKey

public void testSignedFetch_unnamedConsumerKey()
                                        throws Exception

Throws:

Exception

testSignedFetch_extraQueryParameters

public void testSignedFetch_extraQueryParameters()
                                          throws Exception

Throws:

Exception

testNoSignViewer

public void testNoSignViewer()
                      throws Exception

Throws:

Exception

testNoSignOwner

public void testNoSignOwner()
                     throws Exception

Throws:

Exception

testTrickyParametersInQuery

public void testTrickyParametersInQuery()
                                 throws Exception

Throws:

Exception

testTrickyParametersInBody

public void testTrickyParametersInBody()
                                throws Exception

Throws:

Exception

testGetNoQuery

public void testGetNoQuery()
                    throws Exception

Throws:

Exception

testGetWithQuery

public void testGetWithQuery()
                      throws Exception

Throws:

Exception

testGetWithQueryMultiParam

public void testGetWithQueryMultiParam()
                                throws Exception

Throws:

Exception

testValidParameterCharacters

public void testValidParameterCharacters()
                                  throws Exception

Throws:

Exception

testPostNoQueryNoData

public void testPostNoQueryNoData()
                           throws Exception

Throws:

Exception

testPostWithQueryNoData

public void testPostWithQueryNoData()
                             throws Exception

Throws:

Exception

testPostNoQueryWithData

public void testPostNoQueryWithData()
                             throws Exception

Throws:

Exception

testPostWithQueryWithData

public void testPostWithQueryWithData()
                               throws Exception

Throws:

Exception

testStripOpenSocialParamsFromQuery

public void testStripOpenSocialParamsFromQuery()
                                        throws Exception

Throws:

Exception

testStripOAuthParamsFromQuery

public void testStripOAuthParamsFromQuery()
                                   throws Exception

Throws:

Exception

testStripOpenSocialParamsFromBody

public void testStripOpenSocialParamsFromBody()
                                       throws Exception

Throws:

Exception

testStripOAuthParamsFromBody

public void testStripOAuthParamsFromBody()
                                  throws Exception

Throws:

Exception

testAccessTokenExpires_onClient

public void testAccessTokenExpires_onClient()
                                     throws Exception

Throws:

Exception

testAccessTokenExpires_onClientNoPredictedExpiration

public void testAccessTokenExpires_onClientNoPredictedExpiration()
                                                          throws Exception

Throws:

Exception

testAccessTokenExpires_onServer

public void testAccessTokenExpires_onServer()
                                     throws Exception

Throws:

Exception

testAccessTokenExpired_andRevoked

public void testAccessTokenExpired_andRevoked()
                                       throws Exception

Throws:

Exception

testBadSessionHandle

public void testBadSessionHandle()
                          throws Exception

Throws:

Exception

testExtraParamsRejected

public void testExtraParamsRejected()
                             throws Exception

Throws:

Exception

testExtraParamsSuppressed

public void testExtraParamsSuppressed()
                               throws Exception

Throws:

Exception

testCanRetrieveAccessTokenData

public void testCanRetrieveAccessTokenData()
                                    throws Exception

Throws:

Exception

testAccessTokenData_noOAuthParams

public void testAccessTokenData_noOAuthParams()
                                       throws Exception

Throws:

Exception

testAccessTokenData_noDirectRequest

public void testAccessTokenData_noDirectRequest()
                                         throws Exception

Throws:

Exception

testNextFetchReturnsNull

public void testNextFetchReturnsNull()
                              throws Exception

Throws:

Exception

testNextFetchThrowsGadgetException

public void testNextFetchThrowsGadgetException()
                                        throws Exception

Throws:

Exception

testNextFetchThrowsRuntimeException

public void testNextFetchThrowsRuntimeException()
                                         throws Exception

Throws:

Exception

testTrustedParams

public void testTrustedParams()
                       throws Exception

Throws:

Exception

testTrustedParamsMisc

public void testTrustedParamsMisc()
                           throws Exception

Test different behaviors of trusted parameters. 1) pass two parameters with same name, the latter will win. 2) parameter name starting with 'oauth' 'oauth' or 'opensocial'. 3) trusted parameter can override existing parameter.

Throws:

Exception

testAlwaysAppendTrustedParams

public void testAlwaysAppendTrustedParams()
                                   throws Exception

Test trusted parameters will always be sent when signOwner and signViewer are false.

Throws:

Exception

testTrustedParamsInvalidParameter

public void testTrustedParamsInvalidParameter()
                                       throws Exception

Test invalid trusted parameters which are not prefixed with 'oauth' 'xoauth' or 'opensocial'.

Throws:

Exception