appserver/tests/quicklook/security/appperms/src/java/TestServlet.java

/*
 * Copyright (c) 2013, 2018 Oracle and/or its affiliates. All rights reserved.
 *
 * This program and the accompanying materials are made available under the
 * terms of the Eclipse Public License v. 2.0, which is available at
 * http://www.eclipse.org/legal/epl-2.0.
 *
 * This Source Code may also be made available under the following Secondary
 * Licenses when the conditions for such availability set forth in the
 * Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
 * version 2 with the GNU Classpath Exception, which is available at
 * https://www.gnu.org/software/classpath/license.html.
 *
 * SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
 */

package myapp;

import java.io.*;
import java.net.*;
import java.security.AccessControlException;
import java.security.AccessController;

import javax.ejb.EJB;
import javax.naming.*;

import javax.servlet.*;
import javax.servlet.http.*;

public class TestServlet extends HttpServlet {
   
    @EJB
    private BeanRootInterface root;

    @EJB
    private BeanMessageInterface msg;

    private ServletContext sc;

    private String message;

    public void init(ServletConfig config) throws ServletException  {
        super.init(config);
        sc = config.getServletContext();
        message = msg.getMessage();
        System.out.println("servlet init: message="+message);
    }

    protected void processRequest(HttpServletRequest request,
            HttpServletResponse response) throws ServletException, IOException {
        response.setContentType("text/plain");
        PrintWriter out = response.getWriter();
        String EXPECTED_RESULT = "PostBeanRootPostBeanLeafHelloBeanLeaf";
        boolean status = false;

        try {

            String testcase = request.getParameter("tc");
            out.println("testcase = " + testcase);
            out.println("TestServlet");
            out.println("contextPath=" + request.getContextPath());

            if (testcase != null) {

                if ("InjectLookup".equals(testcase)) {
                    // EJB injection check
                    // out.println("injected root: " + root);
                    String hello = root.sayHello();
                    out.println("Hello from injected bean: " + hello);

                    // EJB lookup check
                    InitialContext ic = new InitialContext();
                    // "java"glabal[/<app-name>]/<module-name>/<bean-name>"
                    // app-name -- name of ear file (option)
                    // module-name -- name of war or jar file
                    // bean-name -- name of ejb
                    BeanRootInterface root2 = (BeanRootInterface) ic
                            .lookup("java:global/appperms/apppermsEJB/BeanRoot");

                    // out.println("global root: " + root2);
                    String hello2 = root2.sayHello();
                    out.println("Hello from lookup bean: " + hello2);

                    StringBuffer checkReport = new StringBuffer(" -Servlet test- ");
                    FilePermission fp = new FilePermission(
                            "/scratch/spei/bug/test/war.txt", "delete");
                    try {
                        if (System.getSecurityManager() != null) {
                            AccessController.checkPermission(fp);
                            checkReport.append("servlet - success for WAR.txt; ");
                        } else
                            checkReport.append("servlet - bypass for WAR.txt; ");
                        
                    } catch (AccessControlException e) {
                        checkReport.append("servlet - failed for WAR.txt; ");
                    }

                    fp = new FilePermission("/scratch/spei/bug/test/ear.txt",
                            "delete");
                    try {
                        if (System.getSecurityManager() != null) {
                            AccessController.checkPermission(fp);
                            checkReport.append("servlet - success for EAR.txt; ");
                        } else
                            checkReport.append("servlet - bypass for EAR.txt; ");
                    } catch (AccessControlException e) {
                        checkReport.append("servlet - failed for EAR.txt; ");
                    }

                    fp = new FilePermission("/scratch/spei/bug/test/ejb.txt",
                            "delete");
                    try {
                        if (System.getSecurityManager() != null) {
                            AccessController.checkPermission(fp);
                            checkReport.append("servlet - success for EJB.txt; ");
                        } else
                            checkReport.append("servlet - bypass for EJB.txt; ");
                    } catch (AccessControlException e) {
                        checkReport.append("servlet - failed for EJB.txt; ");
                    }

                    String crStr = checkReport.toString();
                    out.println("test: " + crStr);

                    
                    
                    if (hello.equals(hello2) && 
                        !crStr.contains("failed") &&
                        !hello.contains("failed")) {
                        status = true;
                    }
                } else if ("Startup".equals(testcase)) {
                    // deployment check for startup
                    out.println("message by deployment: " + message);
                    if (message != null && message.equals(EXPECTED_RESULT)) {
                        status = true;
                    }
                }
            }

        } catch (Throwable th) {
            th.printStackTrace(out);
        } finally {
            if (status) {
                out.println("Test:Pass");
            } else {
                out.println("Test:Fail");
            }
            out.close();
        }
    }

    protected void doGet(HttpServletRequest request,
            HttpServletResponse response) throws ServletException, IOException {
        processRequest(request, response);
    }

    protected void doPost(HttpServletRequest request,
            HttpServletResponse response) throws ServletException, IOException {
        processRequest(request, response);
    }

    public String getServletInfo() {
        return "Short description";
    }

}