content: /*
   * Licensed to the Apache Software Foundation (ASF) under one or more
   * contributor license agreements.  See the NOTICE file distributed with
   * this work for additional information regarding copyright ownership.
   * The ASF licenses this file to You under the Apache License, Version 2.0
   * (the "License"); you may not use this file except in compliance with
   * the License.  You may obtain a copy of the License at
   *
   *      http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  package org.apache.camel.component.undertow.spi;
  
  import io.undertow.util.StatusCodes;
  import org.apache.camel.CamelContext;
  import org.apache.camel.CamelExecutionException;
  import org.apache.camel.Exchange;
  import org.apache.camel.builder.RouteBuilder;
  import org.apache.camel.component.mock.MockEndpoint;
  import org.apache.camel.component.undertow.UndertowComponent;
  import org.apache.camel.http.base.HttpOperationFailedException;
  import org.junit.jupiter.api.Test;
  
  import static org.apache.camel.test.junit5.TestSupport.assertIsInstanceOf;
  import static org.junit.jupiter.api.Assertions.assertEquals;
  import static org.junit.jupiter.api.Assertions.fail;
  
  /**
   * Tests whether security provider parameters defined in component are used.
   */
  public class SecurityProviderRolesFromComponentTest extends AbstractSecurityProviderTest {
  
      @Override
      protected CamelContext createCamelContext() throws Exception {
          CamelContext camelContext = super.createCamelContext();
          UndertowComponent component = camelContext.getComponent("undertow", UndertowComponent.class);
          component.setAllowedRoles("user");
          return camelContext;
      }
  
      @Test
      public void testSecuredAllowed() throws Exception {
          securityConfiguration.setRoleToAssign("user");
  
          getMockEndpoint("mock:input").expectedHeaderReceived(Exchange.HTTP_METHOD, "GET");
  
          String out = template.requestBody("undertow:http://localhost:{{port}}/foo", null, String.class);
  
          assertEquals("user", out);
  
          MockEndpoint.assertIsSatisfied(context);
      }
  
      @Test
      public void testSecuredNotAllowed() {
          securityConfiguration.setRoleToAssign("admin");
  
          getMockEndpoint("mock:input").expectedHeaderReceived(Exchange.HTTP_METHOD, "GET");
  
          try {
              template.requestBody("undertow:http://localhost:{{port}}/foo", null, String.class);
  
              fail("Should throw exception");
  
          } catch (CamelExecutionException e) {
              HttpOperationFailedException he = assertIsInstanceOf(HttpOperationFailedException.class, e.getCause());
              assertEquals(StatusCodes.FORBIDDEN, he.getStatusCode());
          }
      }
  
      @Override
      protected RouteBuilder createRouteBuilder() {
          return new RouteBuilder() {
              @Override
              public void configure() {
                  from("undertow:http://localhost:{{port}}/foo")
                          .to("mock:input")
                          .transform(simple("${in.header." + PRINCIPAL_PARAMETER + "}"));
              }
          };
      }
  
  }
  