appserver/tests/quicklook/security/helloworld/src/test/HelloSecurityTestNG.java

/*
 * Copyright (c) 1997, 2018 Oracle and/or its affiliates. All rights reserved.
 *
 * This program and the accompanying materials are made available under the
 * terms of the Eclipse Public License v. 2.0, which is available at
 * http://www.eclipse.org/legal/epl-2.0.
 *
 * This Source Code may also be made available under the following Secondary
 * Licenses when the conditions for such availability set forth in the
 * Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
 * version 2 with the GNU Classpath Exception, which is available at
 * https://www.gnu.org/software/classpath/license.html.
 *
 * SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
 */

package test.security.hellojsp;
import org.testng.annotations.Configuration;
import org.testng.annotations.ExpectedExceptions;
import org.testng.annotations.Test;
import org.testng.annotations.*;
import org.testng.Assert;

import java.io.*;
import java.net.*;
import java.util.*;

/**
 * Simple TestNG client for basic WAR containing one JSP,one Servlet and one static
 *HTML resource.Each resources (HTML,JSP,Servlet) is invoked as a separate test.
 *
 */
public class HelloSecurityTestNG {

    private static final String TEST_NAME =
        "simple-webapp-jspservlet-noresource";

    private String strContextRoot="hellojspsecure";

    static String result = "";
    String host=System.getProperty("http.host");
    String port=System.getProperty("http.port");

    /*
     *If two asserts are mentioned in one method, then last assert is taken in
     *to account.
     *Each method can act as one test within one test suite
     */


    //@Parameters({ "host", "port", "contextroot" })
    @Test(groups ={ "pulse"} ) // test method
    //public void webtest(String host, String port, String contextroot) throws Exception{
    public void simpleJSPTestPage() throws Exception{

        try{


        String testurl = "http://" + host  + ":" + port + "/"+ strContextRoot + "/hello.jsp";
        //System.out.println("URL is: "+testurl);
        URL url = new URL(testurl);
        //echo("Connecting to: " + url.toString());
        HttpURLConnection conn = (HttpURLConnection) url.openConnection();
        conn.connect();
        int responseCode = conn.getResponseCode();
        if (responseCode == 401) {
            //security constraint enforced
            Assert.assertEquals(true, true, "Anonymous Client access Denied");
            //echo("Anonymous Client access Denied");
        } else {
            echo("ERROR: Anonymous Client access was Allowed, security-constraint not Enforced correctly");
            Assert.assertEquals(false, true,"Anonymous Client acess was Allowed, security-constraint not Enforced");
        }

//        InputStream is = conn.getInputStream();
//        BufferedReader input = new BufferedReader(new InputStreamReader(is));
//
//        String line = null;
//        boolean result=false;
//        String testLine = null;
//    String EXPECTED_RESPONSE ="JSP Test Page";
//        while ((line = input.readLine()) != null) {
//            if(line.indexOf(EXPECTED_RESPONSE)!=-1){
//                result=true;
//             testLine = line;
//           System.out.println(testLine);
//            }
//
//        }
//
//        Assert.assertEquals(result, true,"Unexpected HTML");
//

        }catch(Exception e){
            e.printStackTrace();
            throw new Exception(e);
        }

    }

/*
    @Test(groups={"pulse"}) //test method for server
    public void testServerRunning() throws Exception{
        //Your server is up and running!
        //
    String testurl = "http://" + host  + ":" + port;
        //System.out.println("URL is: "+testurl);
        URL url = new URL(testurl);
        //echo("Connecting to: " + url.toString());
        HttpURLConnection conn = (HttpURLConnection) url.openConnection();
        conn.connect();
        int responseCode = conn.getResponseCode();

    InputStream is = conn.getInputStream();
        BufferedReader input = new BufferedReader(new InputStreamReader(is));

        String line = null;
        boolean result=false;
        String testLine = null;
        while ((line = input.readLine()) != null) {
            if(line.indexOf("Your Application Server is now running")!=-1){
                result=true;
             testLine = line;
           //echo(testLine);
            }

        }

        Assert.assertEquals(result, true,"Unexpected HTML");
    }

*/

    @Test(groups ={ "pulse"} ) // test method
    public void staticHTMLPageTest() throws Exception{
         try{


        String testurl = "http://" + host  + ":" + port + "/"+ strContextRoot + "/first.html";
        //System.out.println("URL is: "+testurl);
        URL url = new URL(testurl);
        //echo("Connecting to: " + url.toString());
        HttpURLConnection conn = (HttpURLConnection) url.openConnection();
        conn.connect();
        int responseCode = conn.getResponseCode();

        if (responseCode == 401) {
            //security constraint enforced
            Assert.assertEquals(true, true, "Anonymous Client access Denied");
            //echo("Anonymous Client access Denied");
        } else {
            echo("ERROR: Anonymous Client access was Allowed, security-constraint not Enforced correctly");
            Assert.assertEquals(false, true,"Anonymous Client acess was Allowed, security-constraint not Enforced");
        }
        //Assert.assertEquals(responseCode, 200);

//        InputStream is = conn.getInputStream();
//        BufferedReader input = new BufferedReader(new InputStreamReader(is));
//
//        String line = null;
//        boolean result=false;
//        String testLine = null;
//        while ((line = input.readLine()) != null) {
//            if(line.indexOf("Welcome to HTML Test Program")!=-1){
//                result=true;
//             testLine = line;
//           System.out.println(testLine);
//            }
//
//        }
//
//        Assert.assertEquals(result, true,"Unexpected HTML");


        }catch(Exception e){
            e.printStackTrace();
            throw new Exception(e);
        }

    }

    @Test(groups ={ "pulse"} ) // test method
    public void simpleServletTest() throws Exception{
         try{


        String testurl = "http://" + host  + ":" + port + "/"+ strContextRoot + "/simpleservlet";
        //System.out.println("URL is: "+testurl);
        URL url = new URL(testurl);
        //echo("Connecting to: " + url.toString());
        HttpURLConnection conn = (HttpURLConnection) url.openConnection();
        conn.connect();
        int responseCode = conn.getResponseCode();
        if (responseCode == 401) {
            //security constraint enforced
            Assert.assertEquals(true, true, "Anonymous Client access Denied");
            //echo("Anonymous Client access Denied");
        } else {
            echo("ERROR: Anonymous Client access was Allowed, security-constraint not Enforced correctly");
            Assert.assertEquals(false, true,"Anonymous Client acess was Allowed, security-constraint not Enforced");
        }


//        InputStream is = conn.getInputStream();
//        BufferedReader input = new BufferedReader(new InputStreamReader(is));
//
//        String line = null;
//        boolean result=false;
//        String testLine = null;
//        while ((line = input.readLine()) != null) {
//            if(line.indexOf("Sample Application Servlet")!=-1){
//                result=true;
//             testLine = line;
//           echo(testLine);
//            }
//
//        }
//
//        Assert.assertEquals(result, true,"Unexpected HTML");


        }catch(Exception e){
            e.printStackTrace();
            throw new Exception(e);
        }

    }

    public static void echo(String msg) {
        System.out.println(msg);
    }

}