test/jdk/java/net/httpclient/MultiAuthTest.java - platform/libcore - Git at Google

 /*
  * Copyright (c) 2016, 2018, Oracle and/or its affiliates. All rights reserved.
  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
  *
  * This code is free software; you can redistribute it and/or modify it
  * under the terms of the GNU General Public License version 2 only, as
  * published by the Free Software Foundation.
  *
  * This code is distributed in the hope that it will be useful, but WITHOUT
  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
  * version 2 for more details (a copy is included in the LICENSE file that
  * accompanied this code).
  *
  * You should have received a copy of the GNU General Public License version
  * 2 along with this work; if not, write to the Free Software Foundation,
  * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
  *
  * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
  * or visit www.oracle.com if you need additional information or have any
  * questions.
  */

 /**
  * @test
  * @modules java.net.http
  *          jdk.httpserver
  * @run main/othervm MultiAuthTest
  * @summary Basic Authentication test with multiple clients issuing
  *          multiple requests. Includes password changes
  *          on server and client side.
  */

 import com.sun.net.httpserver.BasicAuthenticator;
 import com.sun.net.httpserver.HttpContext;
 import com.sun.net.httpserver.HttpExchange;
 import com.sun.net.httpserver.HttpHandler;
 import com.sun.net.httpserver.HttpServer;
 import java.io.IOException;
 import java.io.InputStream;
 import java.io.OutputStream;
 import java.net.InetAddress;
 import java.net.InetSocketAddress;
 import java.net.PasswordAuthentication;
 import java.net.URI;
 import java.net.http.HttpClient;
 import java.net.http.HttpRequest;
 import java.net.http.HttpRequest.BodyPublishers;
 import java.net.http.HttpResponse;
 import java.net.http.HttpResponse.BodyHandlers;
 import java.util.concurrent.ExecutorService;
 import java.util.concurrent.Executors;
 import static java.nio.charset.StandardCharsets.US_ASCII;
 import java.util.UUID;
 import java.util.concurrent.atomic.AtomicInteger;
 import java.util.function.Function;

 public class MultiAuthTest {

     static volatile boolean ok;
     static final String RESPONSE = "Hello world";
     static final String POST_BODY = "This is the POST body " + UUID.randomUUID();

     static HttpServer createServer(ExecutorService e, BasicAuthenticator sa) throws Exception {
         InetSocketAddress addr = new InetSocketAddress(InetAddress.getLoopbackAddress(), 0);
         HttpServer server = HttpServer.create(addr, 10);
         Handler h = new Handler();
         HttpContext serverContext = server.createContext("/test", h);
         serverContext.setAuthenticator(sa);
         server.setExecutor(e);
         server.start();
         return server;
     }

     public interface HttpRequestBuilderFactory extends Function<URI, HttpRequest.Builder> {

         default HttpRequest.Builder request(URI uri) {
             return this.apply(uri);
         }
     }


     public static void main(String[] args) throws Exception {
         ExecutorService e = Executors.newCachedThreadPool();
         ServerAuth sa = new ServerAuth("foo realm");
         HttpServer server = createServer(e, sa);
         int port = server.getAddress().getPort();
         System.out.println("Server port = " + port);

         ClientAuth ca = new ClientAuth();
         HttpClient client1 = HttpClient.newBuilder()
                                        .authenticator(ca)
                                        .build();
         HttpClient client2 = HttpClient.newBuilder()
                                        .authenticator(ca)
                                        .build();
         HttpClient client3 = HttpClient.newHttpClient();

         try {
             URI uri = new URI("http://localhost:" + port + "/test/foo");
             System.out.println("URI: " + uri);

             System.out.println("\nTesting with client #1, Authenticator #1");
             test(client1, ca, uri, 1, null);
             System.out.println("Testing again with client #1, Authenticator #1");
             test(client1, ca, uri, 1, null);
             System.out.println("Testing with client #2, Authenticator #1");
             test(client2, ca, uri, 2, null);

             System.out.println("Testing with default client"
                                + " (HttpClient.newHttpClient()), no authenticator");
             test(HttpClient.newHttpClient(), ca, uri, 2, IOException.class);

             System.out.println("\nSetting default authenticator\n");
             java.net.Authenticator.setDefault(ca);

             System.out.println("Testing default client"
                                + " (HttpClient.newHttpClient()), no authenticator");
             test(HttpClient.newHttpClient(), ca, uri, 3, IOException.class);

             System.out.println("Testing with client #4, no authenticator");
             test(client3, ca, uri, 4, IOException.class);

             String oldpwd = sa.passwd;
             sa.passwd = "changed";
             System.out.println("\nChanged server password\n");

             sa.passwd = "changed";
             System.out.println("\nChanged server password\n");

             System.out.println("Testing with client #1, Authenticator #1"
                                 + " (count=" + ca.count.get() +")");
             test(client1, ca, uri, 7, IOException.class);
             System.out.println("Testing again with client #1, Authenticator #1"
                                 + " (count=" + ca.count.get() +")");
             test(client1, ca, uri, 10, IOException.class);
             System.out.println("Testing with client #2, Authenticator #1"
                                 + " (count=" + ca.count.get() +")");
             test(client2, ca, uri, 14, IOException.class);

             System.out.println("\nRestored server password"
                                 + " (count=" + ca.count.get() +")\n");
             sa.passwd = oldpwd;

             int count = ca.count.get(); // depends on retry limit...
             System.out.println("Testing with client #1, Authenticator #1");
             test(client1, ca, uri, count+1, null);
             System.out.println("Testing again with client #1, Authenticator #1");
             test(client1, ca, uri, count+1, null);
             System.out.println("Testing with client #2, Authenticator #1");
             test(client2, ca, uri, count+2, null);

             sa.passwd = ca.passwd = "changed#2";
             System.out.println("\nChanged password on both sides\n");

             System.out.println("Testing with client #1, Authenticator #1");
             test(client1, ca, uri, count+3, null);
             System.out.println("Testing again with client #1, Authenticator #1");
             test(client1, ca, uri, count+3, null);
             System.out.println("Testing with client #2, Authenticator #1");
             test(client2, ca, uri, count+4, null);
         } finally {
             server.stop(0);
             e.shutdownNow();
         }
         System.out.println("OK");
     }

     static void test(HttpClient client,
                      ClientAuth ca,
                      URI uri,
                      int expectCount,
                      Class<? extends Exception> expectFailure)
         throws IOException, InterruptedException
     {
         HttpRequest req = HttpRequest.newBuilder(uri).GET().build();

         HttpResponse resp;
         try {
             resp = client.send(req, BodyHandlers.ofString());
             ok = resp.statusCode() == 200 &&
                 resp.body().equals(RESPONSE);
             if (resp.statusCode() == 401 || resp.statusCode() == 407) {
                 throw new IOException(String.valueOf(resp));
             }
             if (expectFailure != null) {
                 throw new RuntimeException("Expected " + expectFailure.getName()
                          +" not raised");
             }
         } catch (IOException io) {
             if (expectFailure != null) {
                 if (expectFailure.isInstance(io)) {
                     System.out.println("Got expected exception: " + io);
                     return;
                 }
             }
             throw io;
         }

         if (!ok || ca.count.get() != expectCount)
             throw new RuntimeException("Test failed: ok=" + ok
                  + " count=" + ca.count.get() + " (expected=" + expectCount+")");

         // repeat same request, should succeed but no additional authenticator calls
         resp = client.send(req, BodyHandlers.ofString());
         ok = resp.statusCode() == 200 &&
                 resp.body().equals(RESPONSE);

         if (!ok || ca.count.get() != expectCount)
             throw new RuntimeException("Test failed: ok=" + ok
                  + " count=" + ca.count.get() + " (expected=" + expectCount+")");

         // try a POST
         req = HttpRequest.newBuilder(uri)
                          .POST(BodyPublishers.ofString(POST_BODY))
                          .build();
         resp = client.send(req, BodyHandlers.ofString());
         ok = resp.statusCode() == 200;

         if (!ok || ca.count.get() != expectCount)
             throw new RuntimeException("Test failed");

     }

     static class ServerAuth extends BasicAuthenticator {

         volatile String passwd = "passwd";

         ServerAuth(String realm) {
             super(realm);
         }

         @Override
         public boolean checkCredentials(String username, String password) {
             if (!"user".equals(username) || !passwd.equals(password)) {
                 return false;
             }
             return true;
         }

     }

     static class ClientAuth extends java.net.Authenticator {
         final AtomicInteger count = new AtomicInteger();
         volatile String passwd = "passwd";

         @Override
         protected PasswordAuthentication getPasswordAuthentication() {
             count.incrementAndGet();
             return new PasswordAuthentication("user", passwd.toCharArray());
         }
     }

    static class Handler implements HttpHandler {
         static volatile boolean ok;

         @Override
         public void handle(HttpExchange he) throws IOException {
             String method = he.getRequestMethod();
             InputStream is = he.getRequestBody();
             if (method.equalsIgnoreCase("POST")) {
                 String requestBody = new String(is.readAllBytes(), US_ASCII);
                 if (!requestBody.equals(POST_BODY)) {
                     he.sendResponseHeaders(500, -1);
                     ok = false;
                 } else {
                     he.sendResponseHeaders(200, -1);
                     ok = true;
                 }
             } else { // GET
                 he.sendResponseHeaders(200, RESPONSE.length());
                 OutputStream os = he.getResponseBody();
                 os.write(RESPONSE.getBytes(US_ASCII));
                 os.close();
                 ok = true;
             }
         }

    }
 }
	/*
	* Copyright (c) 2016, 2018, Oracle and/or its affiliates. All rights reserved.
	* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
	*
	* This code is free software; you can redistribute it and/or modify it
	* under the terms of the GNU General Public License version 2 only, as
	* published by the Free Software Foundation.
	*
	* This code is distributed in the hope that it will be useful, but WITHOUT
	* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
	* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
	* version 2 for more details (a copy is included in the LICENSE file that
	* accompanied this code).
	*
	* You should have received a copy of the GNU General Public License version
	* 2 along with this work; if not, write to the Free Software Foundation,
	* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
	*
	* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
	* or visit www.oracle.com if you need additional information or have any
	* questions.
	*/

	/**
	* @test
	* @modules java.net.http
	* jdk.httpserver
	* @run main/othervm MultiAuthTest
	* @summary Basic Authentication test with multiple clients issuing
	* multiple requests. Includes password changes
	* on server and client side.
	*/

	import com.sun.net.httpserver.BasicAuthenticator;
	import com.sun.net.httpserver.HttpContext;
	import com.sun.net.httpserver.HttpExchange;
	import com.sun.net.httpserver.HttpHandler;
	import com.sun.net.httpserver.HttpServer;
	import java.io.IOException;
	import java.io.InputStream;
	import java.io.OutputStream;
	import java.net.InetAddress;
	import java.net.InetSocketAddress;
	import java.net.PasswordAuthentication;
	import java.net.URI;
	import java.net.http.HttpClient;
	import java.net.http.HttpRequest;
	import java.net.http.HttpRequest.BodyPublishers;
	import java.net.http.HttpResponse;
	import java.net.http.HttpResponse.BodyHandlers;
	import java.util.concurrent.ExecutorService;
	import java.util.concurrent.Executors;
	import static java.nio.charset.StandardCharsets.US_ASCII;
	import java.util.UUID;
	import java.util.concurrent.atomic.AtomicInteger;
	import java.util.function.Function;

	public class MultiAuthTest {

	static volatile boolean ok;
	static final String RESPONSE = "Hello world";
	static final String POST_BODY = "This is the POST body " + UUID.randomUUID();

	static HttpServer createServer(ExecutorService e, BasicAuthenticator sa) throws Exception {
	InetSocketAddress addr = new InetSocketAddress(InetAddress.getLoopbackAddress(), 0);
	HttpServer server = HttpServer.create(addr, 10);
	Handler h = new Handler();
	HttpContext serverContext = server.createContext("/test", h);
	serverContext.setAuthenticator(sa);
	server.setExecutor(e);
	server.start();
	return server;
	}

	public interface HttpRequestBuilderFactory extends Function<URI, HttpRequest.Builder> {

	default HttpRequest.Builder request(URI uri) {
	return this.apply(uri);
	}
	}


	public static void main(String[] args) throws Exception {
	ExecutorService e = Executors.newCachedThreadPool();
	ServerAuth sa = new ServerAuth("foo realm");
	HttpServer server = createServer(e, sa);
	int port = server.getAddress().getPort();
	System.out.println("Server port = " + port);

	ClientAuth ca = new ClientAuth();
	HttpClient client1 = HttpClient.newBuilder()
	.authenticator(ca)
	.build();
	HttpClient client2 = HttpClient.newBuilder()
	.authenticator(ca)
	.build();
	HttpClient client3 = HttpClient.newHttpClient();

	try {
	URI uri = new URI("http://localhost:" + port + "/test/foo");
	System.out.println("URI: " + uri);

	System.out.println("\nTesting with client #1, Authenticator #1");
	test(client1, ca, uri, 1, null);
	System.out.println("Testing again with client #1, Authenticator #1");
	test(client1, ca, uri, 1, null);
	System.out.println("Testing with client #2, Authenticator #1");
	test(client2, ca, uri, 2, null);

	System.out.println("Testing with default client"
	+ " (HttpClient.newHttpClient()), no authenticator");
	test(HttpClient.newHttpClient(), ca, uri, 2, IOException.class);

	System.out.println("\nSetting default authenticator\n");
	java.net.Authenticator.setDefault(ca);

	System.out.println("Testing default client"
	+ " (HttpClient.newHttpClient()), no authenticator");
	test(HttpClient.newHttpClient(), ca, uri, 3, IOException.class);

	System.out.println("Testing with client #4, no authenticator");
	test(client3, ca, uri, 4, IOException.class);

	String oldpwd = sa.passwd;
	sa.passwd = "changed";
	System.out.println("\nChanged server password\n");

	sa.passwd = "changed";
	System.out.println("\nChanged server password\n");

	System.out.println("Testing with client #1, Authenticator #1"
	+ " (count=" + ca.count.get() +")");
	test(client1, ca, uri, 7, IOException.class);
	System.out.println("Testing again with client #1, Authenticator #1"
	+ " (count=" + ca.count.get() +")");
	test(client1, ca, uri, 10, IOException.class);
	System.out.println("Testing with client #2, Authenticator #1"
	+ " (count=" + ca.count.get() +")");
	test(client2, ca, uri, 14, IOException.class);

	System.out.println("\nRestored server password"
	+ " (count=" + ca.count.get() +")\n");
	sa.passwd = oldpwd;

	int count = ca.count.get(); // depends on retry limit...
	System.out.println("Testing with client #1, Authenticator #1");
	test(client1, ca, uri, count+1, null);
	System.out.println("Testing again with client #1, Authenticator #1");
	test(client1, ca, uri, count+1, null);
	System.out.println("Testing with client #2, Authenticator #1");
	test(client2, ca, uri, count+2, null);

	sa.passwd = ca.passwd = "changed#2";
	System.out.println("\nChanged password on both sides\n");

	System.out.println("Testing with client #1, Authenticator #1");
	test(client1, ca, uri, count+3, null);
	System.out.println("Testing again with client #1, Authenticator #1");
	test(client1, ca, uri, count+3, null);
	System.out.println("Testing with client #2, Authenticator #1");
	test(client2, ca, uri, count+4, null);
	} finally {
	server.stop(0);
	e.shutdownNow();
	}
	System.out.println("OK");
	}

	static void test(HttpClient client,
	ClientAuth ca,
	URI uri,
	int expectCount,
	Class<? extends Exception> expectFailure)
	throws IOException, InterruptedException
	{
	HttpRequest req = HttpRequest.newBuilder(uri).GET().build();

	HttpResponse resp;
	try {
	resp = client.send(req, BodyHandlers.ofString());
	ok = resp.statusCode() == 200 &&
	resp.body().equals(RESPONSE);
	if (resp.statusCode() == 401 \|\| resp.statusCode() == 407) {
	throw new IOException(String.valueOf(resp));
	}
	if (expectFailure != null) {
	throw new RuntimeException("Expected " + expectFailure.getName()
	+" not raised");
	}
	} catch (IOException io) {
	if (expectFailure != null) {
	if (expectFailure.isInstance(io)) {
	System.out.println("Got expected exception: " + io);
	return;
	}
	}
	throw io;
	}

	if (!ok \|\| ca.count.get() != expectCount)
	throw new RuntimeException("Test failed: ok=" + ok
	+ " count=" + ca.count.get() + " (expected=" + expectCount+")");

	// repeat same request, should succeed but no additional authenticator calls
	resp = client.send(req, BodyHandlers.ofString());
	ok = resp.statusCode() == 200 &&
	resp.body().equals(RESPONSE);

	if (!ok \|\| ca.count.get() != expectCount)
	throw new RuntimeException("Test failed: ok=" + ok
	+ " count=" + ca.count.get() + " (expected=" + expectCount+")");

	// try a POST
	req = HttpRequest.newBuilder(uri)
	.POST(BodyPublishers.ofString(POST_BODY))
	.build();
	resp = client.send(req, BodyHandlers.ofString());
	ok = resp.statusCode() == 200;

	if (!ok \|\| ca.count.get() != expectCount)
	throw new RuntimeException("Test failed");

	}

	static class ServerAuth extends BasicAuthenticator {

	volatile String passwd = "passwd";

	ServerAuth(String realm) {
	super(realm);
	}

	@Override
	public boolean checkCredentials(String username, String password) {
	if (!"user".equals(username) \|\| !passwd.equals(password)) {
	return false;
	}
	return true;
	}

	}

	static class ClientAuth extends java.net.Authenticator {
	final AtomicInteger count = new AtomicInteger();
	volatile String passwd = "passwd";

	@Override
	protected PasswordAuthentication getPasswordAuthentication() {
	count.incrementAndGet();
	return new PasswordAuthentication("user", passwd.toCharArray());
	}
	}

	static class Handler implements HttpHandler {
	static volatile boolean ok;

	@Override
	public void handle(HttpExchange he) throws IOException {
	String method = he.getRequestMethod();
	InputStream is = he.getRequestBody();
	if (method.equalsIgnoreCase("POST")) {
	String requestBody = new String(is.readAllBytes(), US_ASCII);
	if (!requestBody.equals(POST_BODY)) {
	he.sendResponseHeaders(500, -1);
	ok = false;
	} else {
	he.sendResponseHeaders(200, -1);
	ok = true;
	}
	} else { // GET
	he.sendResponseHeaders(200, RESPONSE.length());
	OutputStream os = he.getResponseBody();
	os.write(RESPONSE.getBytes(US_ASCII));
	os.close();
	ok = true;
	}
	}

	}
	}