content: /*
   * Licensed to the Apache Software Foundation (ASF) under one or more
   * contributor license agreements.  See the NOTICE file distributed with
   * this work for additional information regarding copyright ownership.
   * The ASF licenses this file to You under the Apache License, Version 2.0
   * (the "License"); you may not use this file except in compliance with
   * the License.  You may obtain a copy of the License at
   *
   *      http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  package org.apache.camel.component.http;
  
  import java.util.ArrayList;
  import java.util.List;
  
  import org.apache.camel.BindToRegistry;
  import org.apache.camel.Exchange;
  import org.apache.camel.component.http.handler.AuthenticationValidationHandler;
  import org.apache.camel.component.http.interceptor.RequestBasicAuth;
  import org.apache.camel.component.http.interceptor.ResponseBasicUnauthorized;
  import org.apache.camel.support.jsse.SSLContextParameters;
  import org.apache.hc.client5.http.auth.AuthScope;
  import org.apache.hc.client5.http.auth.UsernamePasswordCredentials;
  import org.apache.hc.client5.http.impl.auth.BasicAuthCache;
  import org.apache.hc.client5.http.impl.auth.BasicCredentialsProvider;
  import org.apache.hc.client5.http.impl.auth.BasicScheme;
  import org.apache.hc.client5.http.protocol.HttpClientContext;
  import org.apache.hc.client5.http.ssl.NoopHostnameVerifier;
  import org.apache.hc.core5.http.HttpHost;
  import org.apache.hc.core5.http.HttpRequestInterceptor;
  import org.apache.hc.core5.http.HttpResponseInterceptor;
  import org.apache.hc.core5.http.impl.bootstrap.HttpServer;
  import org.apache.hc.core5.http.impl.bootstrap.ServerBootstrap;
  import org.apache.hc.core5.http.protocol.DefaultHttpProcessor;
  import org.apache.hc.core5.http.protocol.HttpContext;
  import org.apache.hc.core5.http.protocol.HttpProcessor;
  import org.apache.hc.core5.http.protocol.RequestValidateHost;
  import org.apache.hc.core5.http.protocol.ResponseContent;
  import org.junit.jupiter.api.Test;
  
  import static org.apache.camel.component.http.HttpMethods.GET;
  
  public class HttpsAuthenticationTest extends BaseHttpsTest {
  
      private final String user = "camel";
      private final String password = "password";
      private HttpServer localServer;
  
      @BindToRegistry("x509HostnameVerifier")
      private NoopHostnameVerifier hostnameVerifier = new NoopHostnameVerifier();
  
      @BindToRegistry("sslContextParameters")
      private SSLContextParameters sslContextParameters = new SSLContextParameters();
      @BindToRegistry("basicAuthContext")
      private HttpContext basicAuthContexts = basicAuthContext();
  
      @Override
      public final void doPreSetup() throws Exception {
          localServer = ServerBootstrap.bootstrap()
                  .setCanonicalHostName("localhost").setHttpProcessor(getBasicHttpProcessor())
                  .setConnectionReuseStrategy(getConnectionReuseStrategy()).setResponseFactory(getHttpResponseFactory())
                  .setSslContext(getSSLContext())
                  .register("/",
                          new AuthenticationValidationHandler(GET.name(), null, null, getExpectedContent(), user, password))
                  .create();
          localServer.start();
      }
  
      @Override
      public void cleanupResources() throws Exception {
  
          if (localServer != null) {
              localServer.stop();
          }
      }
  
      HttpContext basicAuthContext() {
          UsernamePasswordCredentials credentials = new UsernamePasswordCredentials(user, password.toCharArray());
          BasicCredentialsProvider provider = new BasicCredentialsProvider();
          provider.setCredentials(new AuthScope(null, -1), credentials);
  
          BasicAuthCache authCache = new BasicAuthCache();
          BasicScheme basicAuth = new BasicScheme();
          authCache.put(new HttpHost("localhost", 8083), basicAuth);
  
          HttpClientContext context = HttpClientContext.create();
          context.setAttribute(HttpClientContext.AUTH_CACHE, authCache);
          context.setAttribute(HttpClientContext.CREDS_PROVIDER, provider);
  
          return context;
      }
  
      @Test
      public void httpsGetWithAuthentication() {
  
          Exchange exchange = template.request("https://localhost:" + localServer.getLocalPort()
                                               + "/?authUsername=camel&authPassword=password&x509HostnameVerifier=#x509HostnameVerifier&sslContextParameters=#sslContextParameters",
                  exchange1 -> {
                  });
  
          assertExchange(exchange);
      }
  
      @Test
      public void httpsGetWithHttpCache() {
  
          Exchange exchange = template.request("https://localhost:" + localServer.getLocalPort()
                                               + "?throwExceptionOnFailure=false&httpContext=#basicAuthContext",
                  exchange1 -> {
                  });
  
          assertExchange(exchange);
      }
  
      @Override
      protected HttpProcessor getBasicHttpProcessor() {
          List<HttpRequestInterceptor> requestInterceptors = new ArrayList<>();
          requestInterceptors.add(new RequestValidateHost());
          requestInterceptors.add(new RequestBasicAuth());
          List<HttpResponseInterceptor> responseInterceptors = new ArrayList<>();
          responseInterceptors.add(new ResponseContent());
          responseInterceptors.add(new ResponseBasicUnauthorized());
  
          return new DefaultHttpProcessor(requestInterceptors, responseInterceptors);
      }
  }
  