/*- * ============LICENSE_START======================================================= * ECOMP-XACML * ================================================================================ * Copyright (C) 2017 AT&T Intellectual Property. All rights reserved. * ================================================================================ * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * ============LICENSE_END========================================================= */ package org.openecomp.policy.xacml.test; import static org.junit.Assert.assertEquals; import static org.junit.Assert.fail; import java.text.ParseException; import java.util.ArrayList; import java.util.Arrays; import java.util.Collection; import java.util.List; import org.junit.Test; import com.att.research.xacml.api.Attribute; import com.att.research.xacml.api.AttributeValue; import com.att.research.xacml.api.Decision; import com.att.research.xacml.api.Identifier; import com.att.research.xacml.api.XACML3; import com.att.research.xacml.std.IdentifierImpl; import com.att.research.xacml.std.StdAttribute; import com.att.research.xacml.std.StdAttributeCategory; import com.att.research.xacml.std.StdAttributeValue; import com.att.research.xacml.std.StdIdReference; import com.att.research.xacml.std.StdMutableAdvice; import com.att.research.xacml.std.StdMutableAttribute; import com.att.research.xacml.std.StdMutableAttributeAssignment; import com.att.research.xacml.std.StdMutableMissingAttributeDetail; import com.att.research.xacml.std.StdMutableObligation; import com.att.research.xacml.std.StdMutableResponse; import com.att.research.xacml.std.StdMutableResult; import com.att.research.xacml.std.StdMutableStatus; import com.att.research.xacml.std.StdMutableStatusDetail; import com.att.research.xacml.std.StdStatusCode; import com.att.research.xacml.std.StdVersion; import com.att.research.xacml.std.datatypes.DataTypes; import com.att.research.xacml.std.datatypes.StringNamespaceContext; import com.att.research.xacml.std.datatypes.XPathExpressionWrapper; import com.att.research.xacml.std.dom.DOMResponse; import com.att.research.xacml.std.dom.DOMStructureException; /** * Test DOM XML Responses * * TO RUN - use jUnit * In Eclipse select this file or the enclosing directory, right-click and select Run As/JUnit Test * * This class was copied from the JSON tests. At this time only the first two methods have been revised to work with XML. * The second method includes multiple instances of all possible fields and has been manually verified. * The remaining methods have not been converted because: * - "conversion" consists of replacing the JSON strings with XML * - the replacement would consist of copying the XML from the JUnit output and doing a String replace * - there would be little examination of the (long) XML strings, so their validity would be questionable * so the benefit for the cost of doing that work is not clear. * * */ public class DOMResponseTest { String xmlResponse; StdMutableResponse response; StdMutableResult result; StdMutableStatus status; // Note: Initially test responses without Obligations, Associated Advice, Attributes, or PolicyIdentifier @Test public void testEmptyAndDecisions() { // null response try { xmlResponse = DOMResponse.toString(null, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // empty response (no Result object) response = new StdMutableResponse(); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // just decision, no status response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Permit", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // just status (empty), no decision response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); result.setStatus(status); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // just status (non-empty), no decision response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); status.setStatusCode(StdStatusCode.STATUS_CODE_OK); result.setStatus(status); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // test other decisions without Status response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.DENY); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Deny", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.NOTAPPLICABLE); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("NotApplicable", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.INDETERMINATE); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.INDETERMINATE_DENY); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate{D}", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.INDETERMINATE_DENYPERMIT); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate{DP}", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.INDETERMINATE_PERMIT); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate{P}", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // test Multiple Decisions - success response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); response.add(result); StdMutableResult result2 = new StdMutableResult(); result2.setDecision(Decision.DENY); response.add(result2); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitDeny", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // test Multiple Decisions - one success and one error response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); response.add(result); result2 = new StdMutableResult(); result2.setDecision(Decision.INDETERMINATE); response.add(result2); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitIndeterminate", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } } // Test with every field filled in with multiple values where appropriate @Test public void testAllFieldsResponse() { // fully-loaded multiple response StdMutableResponse response = new StdMutableResponse(); // create a Status object StdMutableStatus status = new StdMutableStatus(StdStatusCode.STATUS_CODE_MISSING_ATTRIBUTE); status.setStatusMessage("some status message"); StdMutableStatusDetail statusDetailIn = new StdMutableStatusDetail(); StdMutableMissingAttributeDetail mad = new StdMutableMissingAttributeDetail(); mad.addAttributeValue(new StdAttributeValue(DataTypes.DT_STRING.getId(), "doh")); mad.addAttributeValue(new StdAttributeValue(DataTypes.DT_INTEGER.getId(), "5432")); mad.addAttributeValue(new StdAttributeValue(DataTypes.DT_STRING.getId(), "meh")); mad.setAttributeId(XACML3.ID_ACTION_PURPOSE); mad.setCategory(XACML3.ID_ATTRIBUTE_CATEGORY_ACTION); mad.setDataTypeId(XACML3.ID_DATATYPE_STRING); mad.setIssuer("an Issuer"); statusDetailIn.addMissingAttributeDetail(mad); status.setStatusDetail(statusDetailIn); // create a single result object StdMutableResult result = new StdMutableResult(status); // set the decision result.setDecision(Decision.INDETERMINATE); // put the Result into the Response response.add(result); // create a new Result with a different Decision status = new StdMutableStatus(StdStatusCode.STATUS_CODE_OK); result = new StdMutableResult(status); result.setDecision(Decision.DENY); StdMutableObligation obligation = new StdMutableObligation(); obligation.setId(XACML3.ID_ACTION_IMPLIED_ACTION); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "obligation-issuer1", new StdAttributeValue(DataTypes.DT_STRING.getId(), "Bart"))); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "obligation-issuer2", new StdAttributeValue(DataTypes.DT_STRING.getId(), "Ned"))); result.addObligation(obligation); obligation = new StdMutableObligation(); obligation.setId(XACML3.ID_SUBJECT_CATEGORY_INTERMEDIARY_SUBJECT); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "obligation-issuer3", new StdAttributeValue(DataTypes.DT_STRING.getId(), "Maggie"))); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "obligation-issuer4", new StdAttributeValue(DataTypes.DT_STRING.getId(), "Homer"))); result.addObligation(obligation); StdMutableAdvice advice = new StdMutableAdvice(); advice.setId(XACML3.ID_ACTION_IMPLIED_ACTION); advice.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "advice-issuer1", new StdAttributeValue(DataTypes.DT_STRING.getId(), "Apu"))); advice.addAttributeAssignment(new StdMutableAttributeAssignment( null, XACML3.ID_SUBJECT, "advice-issuerNoCategory", new StdAttributeValue(DataTypes.DT_STRING.getId(), "Crusty"))); result.addAdvice(advice); response.add(result); // create a new Result with a different Decision // add Child/minor status codes within the main status StdStatusCode childChildChildStatusCode = new StdStatusCode(new IdentifierImpl("childChildChildStatusCode")); StdStatusCode childChildStatusCode = new StdStatusCode(new IdentifierImpl("childChildStatusCode"), childChildChildStatusCode); StdStatusCode child1StatusCode = new StdStatusCode(new IdentifierImpl("child1StatusCode"), childChildStatusCode); StdStatusCode statusCode = new StdStatusCode(XACML3.ID_STATUS_OK, child1StatusCode); status = new StdMutableStatus(statusCode); result = new StdMutableResult(status); result.setDecision(Decision.PERMIT); // add attribute list in result Identifier categoryIdentifier = new IdentifierImpl("firstCategory"); Attribute[] attrList = { new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Apu"), "AIssue", true), new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent2"), new StdAttributeValue(DataTypes.DT_YEARMONTHDURATION.getId(), "P10Y4M"), "BIssue", false), new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent3"), new StdAttributeValue(DataTypes.DT_DOUBLE.getId(), 765.432), "CIssue", true), new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent4"), new StdAttributeValue(DataTypes.DT_BOOLEAN.getId(), true), "DIssue", true), new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent5"), new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 4567), "EIssue", true), new StdAttribute(categoryIdentifier, new IdentifierImpl("attrNoIssuer"), new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 4567), null, true) }; result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, Arrays.asList(attrList))); categoryIdentifier = new IdentifierImpl("secondCategory"); Attribute[] secondAttrList = { new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent12"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Apu2"), "AIssue2", true), new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent22"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Abc2"), "BIssue2", false), new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent32"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Der2"), "CIssue2", true) }; result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, Arrays.asList(secondAttrList))); // add PolicyIdentifierList to result StdIdReference policyIdentifier1 = null; StdIdReference policyIdentifier2 = null; StdIdReference policySetIdentifier1 = null; StdIdReference policySetIdentifier2 = null; try { policyIdentifier1 = new StdIdReference(new IdentifierImpl("idRef1"), StdVersion.newInstance("1.2.3")); policyIdentifier2 = new StdIdReference(new IdentifierImpl("idRef2_NoVersion")); policySetIdentifier1 = new StdIdReference(new IdentifierImpl("idSetRef1"), StdVersion.newInstance("4.5.6.7.8.9.0")); policySetIdentifier2 = new StdIdReference(new IdentifierImpl("idSetRef2_NoVersion")); } catch (ParseException e1) { fail("creating policyIds, e="+e1); } result.addPolicyIdentifier(policyIdentifier1); result.addPolicyIdentifier(policyIdentifier2); result.addPolicySetIdentifier(policySetIdentifier1); result.addPolicySetIdentifier(policySetIdentifier2); response.add(result); // convert Response to XML try { xmlResponse = DOMResponse.toString(response, false); //System.out.println(xmlResponse); //System.out.println(DOMResponse.toString(response, true)); assertEquals("Indeterminatesome status messagedoh5432mehDenyBartNedMaggieHomerApuCrustyPermitApu765.432true45674567Apu2Der2idRef1idRef2_NoVersionidSetRef1idSetRef2_NoVersion", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } } // combinations of Status values with Decision values @Test public void testDecisionStatusMatch() { // the tests in this method use different values and do not change structures, so we can re-use the objects response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); result.setStatus(status); response.add(result); // StatusCode = OK status.setStatusCode(StdStatusCode.STATUS_CODE_OK); result.setDecision(Decision.PERMIT); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Permit", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } result.setDecision(Decision.DENY); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Deny", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } result.setDecision(Decision.NOTAPPLICABLE); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("NotApplicable", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } result.setDecision(Decision.INDETERMINATE); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } result.setDecision(Decision.INDETERMINATE_DENY); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } result.setDecision(Decision.INDETERMINATE_DENYPERMIT); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } result.setDecision(Decision.INDETERMINATE_PERMIT); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // StatusCode = SyntaxError status.setStatusCode(StdStatusCode.STATUS_CODE_SYNTAX_ERROR); result.setDecision(Decision.PERMIT); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } result.setDecision(Decision.DENY); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } result.setDecision(Decision.NOTAPPLICABLE); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } result.setDecision(Decision.INDETERMINATE); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } result.setDecision(Decision.INDETERMINATE_DENY); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate{D}", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } result.setDecision(Decision.INDETERMINATE_DENYPERMIT); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate{DP}", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } result.setDecision(Decision.INDETERMINATE_PERMIT); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate{P}", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // StatusCode = ProcessingError status.setStatusCode(StdStatusCode.STATUS_CODE_PROCESSING_ERROR); result.setDecision(Decision.PERMIT); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } result.setDecision(Decision.DENY); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } result.setDecision(Decision.NOTAPPLICABLE); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } result.setDecision(Decision.INDETERMINATE); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } result.setDecision(Decision.INDETERMINATE_DENY); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate{D}", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } result.setDecision(Decision.INDETERMINATE_DENYPERMIT); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate{DP}", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } result.setDecision(Decision.INDETERMINATE_PERMIT); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate{P}", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // StatusCode = MissingAttribute status.setStatusCode(StdStatusCode.STATUS_CODE_MISSING_ATTRIBUTE); result.setDecision(Decision.PERMIT); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } result.setDecision(Decision.DENY); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } result.setDecision(Decision.NOTAPPLICABLE); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } result.setDecision(Decision.INDETERMINATE); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } result.setDecision(Decision.INDETERMINATE_DENY); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate{D}", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } result.setDecision(Decision.INDETERMINATE_DENYPERMIT); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate{DP}", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } result.setDecision(Decision.INDETERMINATE_PERMIT); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate{P}", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } } // tests related to Status and its components @Test public void testStatus() { // Status with no StatusCode - error response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); result.setStatus(status); result.setDecision(Decision.PERMIT); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // Status with StatusMessage when OK response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); status.setStatusCode(StdStatusCode.STATUS_CODE_OK); status.setStatusMessage("I'm ok, you're ok"); result.setStatus(status); result.setDecision(Decision.PERMIT); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitI'm ok, you're ok", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // Status with StatusDetail when OK response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); status.setStatusCode(StdStatusCode.STATUS_CODE_OK); StdMutableStatusDetail statusDetail = new StdMutableStatusDetail(); status.setStatusDetail(statusDetail); result.setStatus(status); result.setDecision(Decision.PERMIT); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // Status with StatusMessage when SyntaxError response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); status.setStatusCode(StdStatusCode.STATUS_CODE_SYNTAX_ERROR); status.setStatusMessage("I'm ok, you're ok"); result.setStatus(status); result.setDecision(Decision.INDETERMINATE); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("IndeterminateI'm ok, you're ok", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // Status with empty StatusDetail when SyntaxError response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); status.setStatusCode(StdStatusCode.STATUS_CODE_SYNTAX_ERROR); statusDetail = new StdMutableStatusDetail(); status.setStatusDetail(statusDetail); result.setStatus(status); result.setDecision(Decision.INDETERMINATE); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // Status with StatusMessage when ProcessingError response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); status.setStatusCode(StdStatusCode.STATUS_CODE_PROCESSING_ERROR); status.setStatusMessage("I'm ok, you're ok"); result.setStatus(status); result.setDecision(Decision.INDETERMINATE); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("IndeterminateI'm ok, you're ok", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // Status with empty StatusDetail when ProcessingError response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); status.setStatusCode(StdStatusCode.STATUS_CODE_PROCESSING_ERROR); statusDetail = new StdMutableStatusDetail(); status.setStatusDetail(statusDetail); result.setStatus(status); result.setDecision(Decision.INDETERMINATE); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // Status with StatusMessage when MissingAttribute response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); status.setStatusCode(StdStatusCode.STATUS_CODE_MISSING_ATTRIBUTE); status.setStatusMessage("I'm ok, you're ok"); result.setStatus(status); result.setDecision(Decision.INDETERMINATE); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("IndeterminateI'm ok, you're ok", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // Status with empty StatusDetail when MissingAttribute response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); status.setStatusCode(StdStatusCode.STATUS_CODE_MISSING_ATTRIBUTE); statusDetail = new StdMutableStatusDetail(); status.setStatusDetail(statusDetail); result.setStatus(status); result.setDecision(Decision.INDETERMINATE); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // Status with StatusDetail with empty detail when MissingAttribute response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); status.setStatusCode(StdStatusCode.STATUS_CODE_MISSING_ATTRIBUTE); statusDetail = new StdMutableStatusDetail(); StdMutableMissingAttributeDetail mad = new StdMutableMissingAttributeDetail(); statusDetail.addMissingAttributeDetail(mad); status.setStatusDetail(statusDetail); result.setStatus(status); result.setDecision(Decision.INDETERMINATE); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // Status with StatusDetail with valid detail with no value when MissingAttribute response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); status.setStatusCode(StdStatusCode.STATUS_CODE_MISSING_ATTRIBUTE); statusDetail = new StdMutableStatusDetail(); mad = new StdMutableMissingAttributeDetail(); mad.setAttributeId(new IdentifierImpl("mad")); mad.setCategory(XACML3.ID_ACTION); mad.setDataTypeId(DataTypes.DT_STRING.getId()); statusDetail.addMissingAttributeDetail(mad); status.setStatusDetail(statusDetail); result.setStatus(status); result.setDecision(Decision.INDETERMINATE); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // Status with StatusDetail with valid detail with value when MissingAttribute response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); status.setStatusCode(StdStatusCode.STATUS_CODE_MISSING_ATTRIBUTE); statusDetail = new StdMutableStatusDetail(); mad = new StdMutableMissingAttributeDetail(); mad.setAttributeId(new IdentifierImpl("mad")); mad.setCategory(XACML3.ID_ACTION); mad.setDataTypeId(DataTypes.DT_STRING.getId()); mad.addAttributeValue(new StdAttributeValue(DataTypes.DT_STRING.getId(), "meh")); statusDetail.addMissingAttributeDetail(mad); status.setStatusDetail(statusDetail); result.setStatus(status); result.setDecision(Decision.INDETERMINATE); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminatemeh", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // Status with StatusDetail with array valid detail with value when MissingAttribute response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); status.setStatusCode(StdStatusCode.STATUS_CODE_MISSING_ATTRIBUTE); statusDetail = new StdMutableStatusDetail(); mad = new StdMutableMissingAttributeDetail(); mad.setAttributeId(new IdentifierImpl("mad")); mad.setCategory(XACML3.ID_ACTION); mad.setDataTypeId(DataTypes.DT_STRING.getId()); mad.addAttributeValue(new StdAttributeValue(DataTypes.DT_STRING.getId(), "meh")); mad.addAttributeValue(new StdAttributeValue(DataTypes.DT_STRING.getId(), "nu?")); statusDetail.addMissingAttributeDetail(mad); status.setStatusDetail(statusDetail); result.setStatus(status); result.setDecision(Decision.INDETERMINATE); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminatemehnu?", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // Status with StatusDetail with valid detail with Integer value when MissingAttribute response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); status.setStatusCode(StdStatusCode.STATUS_CODE_MISSING_ATTRIBUTE); statusDetail = new StdMutableStatusDetail(); mad = new StdMutableMissingAttributeDetail(); mad.setAttributeId(new IdentifierImpl("mad")); mad.setCategory(XACML3.ID_ACTION); mad.setDataTypeId(DataTypes.DT_STRING.getId()); mad.addAttributeValue(new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 1111)); statusDetail.addMissingAttributeDetail(mad); status.setStatusDetail(statusDetail); result.setStatus(status); result.setDecision(Decision.INDETERMINATE); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate1111", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // Status with StatusDetail with array valid detail with Integer value when MissingAttribute response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); status.setStatusCode(StdStatusCode.STATUS_CODE_MISSING_ATTRIBUTE); statusDetail = new StdMutableStatusDetail(); mad = new StdMutableMissingAttributeDetail(); mad.setAttributeId(new IdentifierImpl("mad")); mad.setCategory(XACML3.ID_ACTION); mad.setDataTypeId(DataTypes.DT_STRING.getId()); mad.addAttributeValue(new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 1111)); mad.addAttributeValue(new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 2222)); statusDetail.addMissingAttributeDetail(mad); status.setStatusDetail(statusDetail); result.setStatus(status); result.setDecision(Decision.INDETERMINATE); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Indeterminate11112222", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // StringNamespaceContext snc = new StringNamespaceContext(); // try { // snc.add("defaultURI"); // snc.add("md", "referenceForMD"); // } catch (Exception e) { // fail("unable to create NamespaceContext e="+e); // } // XPathExpressionWrapper xpathExpressionWrapper = new XPathExpressionWrapper(snc, "//md:record"); // //TODO - assume that we will never try to pass back an XPathExpression in a MissingAttributeDetail - it doesn't make sense and is unclear how to put into XML // // Status with StatusDetail with valid detail with XPathExpression value when MissingAttribute // response = new StdMutableResponse(); // result = new StdMutableResult(); // status = new StdMutableStatus(); // status.setStatusCode(StdStatusCode.STATUS_CODE_MISSING_ATTRIBUTE); // statusDetail = new StdMutableStatusDetail(); // mad = new StdMutableMissingAttributeDetail(); // mad.setAttributeId(new IdentifierImpl("mad")); // mad.setCategory(XACML3.ID_ACTION); // mad.setDataTypeId(DataTypes.DT_STRING.getId()); // mad.addAttributeValue(new StdAttributeValue(DataTypes.DT_XPATHEXPRESSION.getId(), xpathExpressionWrapper, new IdentifierImpl("xpathCategoryId"))); // statusDetail.addMissingAttributeDetail(mad); // status.setStatusDetail(statusDetail); // result.setStatus(status); // result.setDecision(Decision.INDETERMINATE); // response.add(result); // try { // xmlResponse = DOMResponse.toString(response, false); // assertEquals("{\"Response\":[{\"Status\":{\"StatusCode\":{\"Value\":\"urn:oasis:names:tc:xacml:1.0:status:missing-attribute\"},\"StatusDetail\":\"1111urn:oasis:names:tc:xacml:1.0:actionmadhttp://www.w3.org/2001/XMLSchema#string\"},\"Decision\":\"Indeterminate\"}]}", xmlResponse); // } catch (Exception e) { // fail("operation failed, e="+e); // } // // // Status with StatusDetail with array valid detail with XPathExpression value when MissingAttribute // response = new StdMutableResponse(); // result = new StdMutableResult(); // status = new StdMutableStatus(); // status.setStatusCode(StdStatusCode.STATUS_CODE_MISSING_ATTRIBUTE); // statusDetail = new StdMutableStatusDetail(); // mad = new StdMutableMissingAttributeDetail(); // mad.setAttributeId(new IdentifierImpl("mad")); // mad.setCategory(XACML3.ID_ACTION); // mad.setDataTypeId(DataTypes.DT_STRING.getId()); // mad.addAttributeValue(new StdAttributeValue(DataTypes.DT_XPATHEXPRESSION.getId(), xpathExpressionWrapper, new IdentifierImpl("xpathCategoryId1"))); // mad.addAttributeValue(new StdAttributeValue(DataTypes.DT_XPATHEXPRESSION.getId(), xpathExpressionWrapper, new IdentifierImpl("xpathCategoryId2"))); // statusDetail.addMissingAttributeDetail(mad); // status.setStatusDetail(statusDetail); // result.setStatus(status); // result.setDecision(Decision.INDETERMINATE); // response.add(result); // try { // xmlResponse = DOMResponse.toString(response, false); // assertEquals("{\"Response\":[{\"Status\":{\"StatusCode\":{\"Value\":\"urn:oasis:names:tc:xacml:1.0:status:missing-attribute\"},\"StatusDetail\":\"11112222urn:oasis:names:tc:xacml:1.0:actionmadhttp://www.w3.org/2001/XMLSchema#string\"},\"Decision\":\"Indeterminate\"}]}", xmlResponse); // } catch (Exception e) { // fail("operation failed, e="+e); // } //TODO - try with other data types, esp XPathExpression // Status with StatusDetail with array valid detail with value when SyntaxError response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); status.setStatusCode(StdStatusCode.STATUS_CODE_SYNTAX_ERROR); statusDetail = new StdMutableStatusDetail(); mad = new StdMutableMissingAttributeDetail(); mad.setAttributeId(new IdentifierImpl("mad")); mad.setCategory(XACML3.ID_ACTION); mad.setDataTypeId(DataTypes.DT_STRING.getId()); mad.addAttributeValue(new StdAttributeValue(DataTypes.DT_STRING.getId(), "meh")); mad.addAttributeValue(new StdAttributeValue(DataTypes.DT_STRING.getId(), "nu?")); statusDetail.addMissingAttributeDetail(mad); status.setStatusDetail(statusDetail); result.setStatus(status); result.setDecision(Decision.INDETERMINATE); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // Status with StatusDetail with array valid detail with value when ProcessingError response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); status.setStatusCode(StdStatusCode.STATUS_CODE_PROCESSING_ERROR); statusDetail = new StdMutableStatusDetail(); mad = new StdMutableMissingAttributeDetail(); mad.setAttributeId(new IdentifierImpl("mad")); mad.setCategory(XACML3.ID_ACTION); mad.setDataTypeId(DataTypes.DT_STRING.getId()); mad.addAttributeValue(new StdAttributeValue(DataTypes.DT_STRING.getId(), "meh")); mad.addAttributeValue(new StdAttributeValue(DataTypes.DT_STRING.getId(), "nu?")); statusDetail.addMissingAttributeDetail(mad); status.setStatusDetail(statusDetail); result.setStatus(status); result.setDecision(Decision.INDETERMINATE); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // Status with nested child StatusCodes (child status containing child status containing...) response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); StdStatusCode child1StatusCode = new StdStatusCode(new IdentifierImpl("child1StatusCode")); StdStatusCode statusCode = new StdStatusCode(XACML3.ID_STATUS_OK, child1StatusCode); status = new StdMutableStatus(statusCode); status.setStatusMessage("I'm ok, you're ok"); result.setStatus(status); result.setDecision(Decision.PERMIT); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitI'm ok, you're ok", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } response = new StdMutableResponse(); result = new StdMutableResult(); status = new StdMutableStatus(); StdStatusCode childChildChildStatusCode = new StdStatusCode(new IdentifierImpl("childChildChildStatusCode")); StdStatusCode childChildStatusCode = new StdStatusCode(new IdentifierImpl("childChildStatusCode"), childChildChildStatusCode); child1StatusCode = new StdStatusCode(new IdentifierImpl("child1StatusCode"), childChildStatusCode); statusCode = new StdStatusCode(XACML3.ID_STATUS_OK, child1StatusCode); status = new StdMutableStatus(statusCode); status.setStatusMessage("I'm ok, you're ok"); result.setStatus(status); result.setDecision(Decision.PERMIT); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitI'm ok, you're ok", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } } @Test public void testObligations() { // create an XPathExpression for use later StringNamespaceContext snc = new StringNamespaceContext(); try { snc.add("defaultURI"); snc.add("md", "referenceForMD"); } catch (Exception e) { fail("unable to create NamespaceContext e="+e); } XPathExpressionWrapper xpathExpressionWrapper = new XPathExpressionWrapper(snc, "//md:record"); XPathExpressionWrapper xpathExpressionWrapper2 = new XPathExpressionWrapper(snc, "//md:hospital"); StdMutableObligation obligation; // test Obligation single decision no attributes response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); obligation = new StdMutableObligation(); obligation.setId(XACML3.ID_ACTION_IMPLIED_ACTION); result.addObligation(obligation); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Permit", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // obligation missing Id response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); obligation = new StdMutableObligation(); result.addObligation(obligation); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // AttributeAssignment - with AttributeId, Value, Category, DataType, Issuer response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); obligation = new StdMutableObligation(); obligation.setId(XACML3.ID_ACTION_IMPLIED_ACTION); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "obligation-issuer1", new StdAttributeValue(DataTypes.DT_STRING.getId(), "Bart"))); result.addObligation(obligation); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitBart", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // AttributeAssignment - with AttributeId, Value, no Category, DataType, Issuer response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); obligation = new StdMutableObligation(); obligation.setId(XACML3.ID_ACTION_IMPLIED_ACTION); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( null, XACML3.ID_SUBJECT, "obligation-issuer1", new StdAttributeValue(DataTypes.DT_STRING.getId(), "Bart"))); result.addObligation(obligation); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitBart", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // AttributeAssignment - Missing AttributeId response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); obligation = new StdMutableObligation(); obligation.setId(XACML3.ID_ACTION_IMPLIED_ACTION); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, null, "obligation-issuer1", new StdAttributeValue(DataTypes.DT_STRING.getId(), "Bart"))); result.addObligation(obligation); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // AttributeAssignment - Missing Value response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); obligation = new StdMutableObligation(); obligation.setId(XACML3.ID_ACTION_IMPLIED_ACTION); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "obligation-issuer1", null)); result.addObligation(obligation); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // AttributeAssignment - missing required DataType (Different than JSON where DataType is optional with default String) response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); obligation = new StdMutableObligation(); obligation.setId(XACML3.ID_ACTION_IMPLIED_ACTION); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "obligation-issuer1", new StdAttributeValue(null, "Bart"))); result.addObligation(obligation); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // AttributeAssignment - missing issuer response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); obligation = new StdMutableObligation(); obligation.setId(XACML3.ID_ACTION_IMPLIED_ACTION); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, null, new StdAttributeValue(DataTypes.DT_STRING.getId(), "Bart"))); result.addObligation(obligation); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitBart", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // AttributeAssignment - Integer type response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); obligation = new StdMutableObligation(); obligation.setId(XACML3.ID_ACTION_IMPLIED_ACTION); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, null, new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 1111))); result.addObligation(obligation); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Permit1111", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // AttributeAssignment - XPathExpression type response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); obligation = new StdMutableObligation(); obligation.setId(XACML3.ID_ACTION_IMPLIED_ACTION); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, null, new StdAttributeValue(DataTypes.DT_XPATHEXPRESSION.getId(), xpathExpressionWrapper, new IdentifierImpl("SimpleXPathCategory")))); result.addObligation(obligation); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Permit//md:record", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // // Technically arrays cannot occur in Obligations and Advice elements. The XML spec boils down to the following definition: // // value // value // : // may have multiple elements. // For Obligations and Advice we can simulate an array by having multiple AttributeAssignment elements with the same Category, Id and Issuer. // // AttributeAssignment - Multiple values with same Category and Id (one way of doing array) response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); obligation = new StdMutableObligation(); obligation.setId(XACML3.ID_ACTION_IMPLIED_ACTION); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "obligation-issuer1", new StdAttributeValue(DataTypes.DT_STRING.getId(), "Bart"))); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "obligation-issuer1", new StdAttributeValue(DataTypes.DT_STRING.getId(), "Lisa"))); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "obligation-issuer1", new StdAttributeValue(DataTypes.DT_STRING.getId(), "Maggie"))); result.addObligation(obligation); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitBartLisaMaggie", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // AttributeAssignment - Multiple Integer values with same Category and Id (one way of doing array) response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); obligation = new StdMutableObligation(); obligation.setId(XACML3.ID_ACTION_IMPLIED_ACTION); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "obligation-issuer1", new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 1111))); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "obligation-issuer1", new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 2222))); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "obligation-issuer1", new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 3333))); result.addObligation(obligation); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Permit111122223333", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // Multiple XPathExpression values with same Category and Id (one way of doing array) response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); obligation = new StdMutableObligation(); obligation.setId(XACML3.ID_ACTION_IMPLIED_ACTION); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, null, new StdAttributeValue(DataTypes.DT_XPATHEXPRESSION.getId(), xpathExpressionWrapper, new IdentifierImpl("SimpleXPathCategory")))); obligation.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, null, new StdAttributeValue(DataTypes.DT_XPATHEXPRESSION.getId(), xpathExpressionWrapper2, new IdentifierImpl("SimpleXPathCategory")))); result.addObligation(obligation); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Permit//md:record//md:hospital", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } } @Test public void testAdvice() { // create an XPathExpression for use later StringNamespaceContext snc = new StringNamespaceContext(); try { snc.add("defaultURI"); snc.add("md", "referenceForMD"); } catch (Exception e) { fail("unable to create NamespaceContext e="+e); } XPathExpressionWrapper xpathExpressionWrapper = new XPathExpressionWrapper(snc, "//md:record"); XPathExpressionWrapper xpathExpressionWrapper2 = new XPathExpressionWrapper(snc, "//md:hospital"); StdMutableAdvice Advice; // test Advice single decision no attributes response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); Advice = new StdMutableAdvice(); Advice.setId(XACML3.ID_ACTION_IMPLIED_ACTION); result.addAdvice(Advice); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Permit", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // Advice missing Id response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); Advice = new StdMutableAdvice(); result.addAdvice(Advice); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // AttributeAssignment - with AttributeId, Value, Category, DataType, Issuer response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); Advice = new StdMutableAdvice(); Advice.setId(XACML3.ID_ACTION_IMPLIED_ACTION); Advice.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "Advice-issuer1", new StdAttributeValue(DataTypes.DT_STRING.getId(), "Bart"))); result.addAdvice(Advice); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitBart", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // AttributeAssignment - with AttributeId, Value, no Category, DataType, Issuer response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); Advice = new StdMutableAdvice(); Advice.setId(XACML3.ID_ACTION_IMPLIED_ACTION); Advice.addAttributeAssignment(new StdMutableAttributeAssignment( null, XACML3.ID_SUBJECT, "Advice-issuer1", new StdAttributeValue(DataTypes.DT_STRING.getId(), "Bart"))); result.addAdvice(Advice); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitBart", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // AttributeAssignment - Missing AttributeId response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); Advice = new StdMutableAdvice(); Advice.setId(XACML3.ID_ACTION_IMPLIED_ACTION); Advice.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, null, "Advice-issuer1", new StdAttributeValue(DataTypes.DT_STRING.getId(), "Bart"))); result.addAdvice(Advice); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // AttributeAssignment - Missing Value response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); Advice = new StdMutableAdvice(); Advice.setId(XACML3.ID_ACTION_IMPLIED_ACTION); Advice.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "Advice-issuer1", null)); result.addAdvice(Advice); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // AttributeAssignment - missing Required DataType (Different than JSON where DataType is optional with default String) response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); Advice = new StdMutableAdvice(); Advice.setId(XACML3.ID_ACTION_IMPLIED_ACTION); Advice.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "Advice-issuer1", new StdAttributeValue(null, "Bart"))); result.addAdvice(Advice); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // AttributeAssignment - missing issuer response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); Advice = new StdMutableAdvice(); Advice.setId(XACML3.ID_ACTION_IMPLIED_ACTION); Advice.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, null, new StdAttributeValue(DataTypes.DT_STRING.getId(), "Bart"))); result.addAdvice(Advice); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitBart", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // AttributeAssignment - Integer type response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); Advice = new StdMutableAdvice(); Advice.setId(XACML3.ID_ACTION_IMPLIED_ACTION); Advice.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, null, new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 1111))); result.addAdvice(Advice); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Permit1111", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // AttributeAssignment - XPathExpression type response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); Advice = new StdMutableAdvice(); Advice.setId(XACML3.ID_ACTION_IMPLIED_ACTION); Advice.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, null, new StdAttributeValue(DataTypes.DT_XPATHEXPRESSION.getId(), xpathExpressionWrapper, new IdentifierImpl("SimpleXPathCategory")))); result.addAdvice(Advice); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Permit//md:record", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // // Technically arrays cannot occur in Obligations and Advice elements. The XML spec boils down to the following definition: // // value // value // : // may have multiple elements. // For Obligations and Advice we can simulate an array by having multiple AttributeAssignment elements with the same Category, Id and Issuer. // // AttributeAssignment - Multiple values with same Category and Id (one way of doing array) response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); Advice = new StdMutableAdvice(); Advice.setId(XACML3.ID_ACTION_IMPLIED_ACTION); Advice.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "Advice-issuer1", new StdAttributeValue(DataTypes.DT_STRING.getId(), "Bart"))); Advice.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "Advice-issuer1", new StdAttributeValue(DataTypes.DT_STRING.getId(), "Lisa"))); Advice.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "Advice-issuer1", new StdAttributeValue(DataTypes.DT_STRING.getId(), "Maggie"))); result.addAdvice(Advice); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitBartLisaMaggie", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // AttributeAssignment - Multiple Integer values with same Category and Id (one way of doing array) response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); Advice = new StdMutableAdvice(); Advice.setId(XACML3.ID_ACTION_IMPLIED_ACTION); Advice.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "Advice-issuer1", new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 1111))); Advice.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "Advice-issuer1", new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 2222))); Advice.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, "Advice-issuer1", new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 3333))); result.addAdvice(Advice); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Permit111122223333", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // Multiple XPathExpression values with same Category and Id (one way of doing array) response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); Advice = new StdMutableAdvice(); Advice.setId(XACML3.ID_ACTION_IMPLIED_ACTION); Advice.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, null, new StdAttributeValue(DataTypes.DT_XPATHEXPRESSION.getId(), xpathExpressionWrapper, new IdentifierImpl("SimpleXPathCategory")))); Advice.addAttributeAssignment(new StdMutableAttributeAssignment( XACML3.ID_ATTRIBUTE_CATEGORY_RESOURCE, XACML3.ID_SUBJECT, null, new StdAttributeValue(DataTypes.DT_XPATHEXPRESSION.getId(), xpathExpressionWrapper2, new IdentifierImpl("SimpleXPathCategory")))); result.addAdvice(Advice); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Permit//md:record//md:hospital", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } } // Attributes tests @Test public void testAttributes() { // create an XPathExpression for use later StringNamespaceContext snc = new StringNamespaceContext(); try { snc.add("defaultURI"); snc.add("md", "referenceForMD"); } catch (Exception e) { fail("unable to create NamespaceContext e="+e); } XPathExpressionWrapper xpathExpressionWrapper = new XPathExpressionWrapper(snc, "//md:record"); Identifier categoryIdentifier; List attrList = new ArrayList(); StdMutableAttribute mutableAttribute; // Attr list with no entries response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); categoryIdentifier = new IdentifierImpl("firstCategory"); attrList.clear(); result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, attrList)); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Permit", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // one Attribute response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); categoryIdentifier = new IdentifierImpl("firstCategory"); attrList.clear(); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Apu"), "AIssue", true)); result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, attrList)); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitApu", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // multiple attributes response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); categoryIdentifier = new IdentifierImpl("firstCategory"); attrList.clear(); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Apu"), "AIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent2"), new StdAttributeValue(DataTypes.DT_YEARMONTHDURATION.getId(), "P10Y4M"), "BIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent3"), new StdAttributeValue(DataTypes.DT_DOUBLE.getId(), 765.432), "CIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent4"), new StdAttributeValue(DataTypes.DT_BOOLEAN.getId(), true), "DIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent5"), new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 4567), "EIssue", true)); result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, attrList)); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitApuP10Y4M765.432true4567", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // IncludeInResult=false/true response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); categoryIdentifier = new IdentifierImpl("firstCategory"); attrList.clear(); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Apu"), "AIssue", false)); result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, attrList)); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Permit", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // Missing AttributeId (mandatory) response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); categoryIdentifier = new IdentifierImpl("firstCategory"); attrList.clear(); attrList.add(new StdAttribute(categoryIdentifier, null, new StdAttributeValue(DataTypes.DT_STRING.getId(), "Apu"), "AIssue", true)); result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, attrList)); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // Missing mandatory Value response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); categoryIdentifier = new IdentifierImpl("firstCategory"); attrList.clear(); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_STRING.getId(), null), "AIssue", true)); result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, attrList)); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // Missing optional Issuer response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); categoryIdentifier = new IdentifierImpl("firstCategory"); attrList.clear(); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Apu"), null, true)); result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, attrList)); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitApu", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // missing required DataType (different from JSON where DataType is optional and assumed to be String) response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); categoryIdentifier = new IdentifierImpl("firstCategory"); attrList.clear(); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(null, "Apu"), "AIssue", true)); result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, attrList)); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // same id, same type different issuer // (This is not an array of values because Issuer is different) response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); categoryIdentifier = new IdentifierImpl("firstCategory"); attrList.clear(); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Apu"), "AIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Bart"), "BIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Simpson"), "CIssue", true)); result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, attrList)); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitApuBartSimpson", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // same id, same type same issuer // (This is an array of values) response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); categoryIdentifier = new IdentifierImpl("firstCategory"); attrList.clear(); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Apu"), "AIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Bart"), "AIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Simpson"), "AIssue", true)); result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, attrList)); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitApuBartSimpson", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // same Id, different types, same issuer response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); categoryIdentifier = new IdentifierImpl("firstCategory"); attrList.clear(); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Apu"), "AIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_YEARMONTHDURATION.getId(), "P10Y4M"), "AIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_DOUBLE.getId(), 765.432), "AIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_BOOLEAN.getId(), true), "AIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 4567), "AIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 4567), "AIssue", true)); result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, attrList)); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitApuP10Y4M765.432true45674567", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // same Id, different types, different issuer response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); categoryIdentifier = new IdentifierImpl("firstCategory"); attrList.clear(); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Apu"), "AIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_YEARMONTHDURATION.getId(), "P10Y4M"), "BIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_DOUBLE.getId(), 765.432), "CIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_BOOLEAN.getId(), true), "DIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 4567), "EIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 4567), null, true)); result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, attrList)); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitApuP10Y4M765.432true45674567", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // different Id, different types, same issuer response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); categoryIdentifier = new IdentifierImpl("firstCategory"); attrList.clear(); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Apu"), "AIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent2"), new StdAttributeValue(DataTypes.DT_YEARMONTHDURATION.getId(), "AIssue"), "BIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent3"), new StdAttributeValue(DataTypes.DT_DOUBLE.getId(), 765.432), "AIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent4"), new StdAttributeValue(DataTypes.DT_BOOLEAN.getId(), true), "AIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent5"), new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 4567), "AIssue", true)); result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, attrList)); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitApuAIssue765.432true4567", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // one Attribute of type XPathExpression (the only complex data type) response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); categoryIdentifier = new IdentifierImpl("firstCategory"); attrList.clear(); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_XPATHEXPRESSION.getId(), xpathExpressionWrapper, new IdentifierImpl("xpathCategory")), "AIssue", true)); result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, attrList)); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Permit//md:record", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // multiple sets of values response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); categoryIdentifier = new IdentifierImpl("firstCategory"); attrList.clear(); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Apu"), "AIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent2"), new StdAttributeValue(DataTypes.DT_YEARMONTHDURATION.getId(), "P10Y4M"), "BIssue", false)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent3"), new StdAttributeValue(DataTypes.DT_DOUBLE.getId(), 765.432), "CIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent4"), new StdAttributeValue(DataTypes.DT_BOOLEAN.getId(), true), "DIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent5"), new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 4567), "EIssue", true)); attrList.add(new StdAttribute(categoryIdentifier, new IdentifierImpl("attrNoIssuer"), new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 4567), null, true)); result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, attrList)); categoryIdentifier = new IdentifierImpl("secondCategory"); Attribute[] secondAttrList = { new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent12"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Apu2"), "AIssue2", true), new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent22"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Abc2"), "BIssue2", false), new StdAttribute(categoryIdentifier, new IdentifierImpl("attrIdent32"), new StdAttributeValue(DataTypes.DT_STRING.getId(), "Der2"), "CIssue2", true) }; result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, Arrays.asList(secondAttrList))); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitApu765.432true45674567Apu2Der2", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // array of values - same type response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); attrList.clear(); categoryIdentifier = new IdentifierImpl("firstCategory"); mutableAttribute = new StdMutableAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), (Collection>)null, "AIssue", true); mutableAttribute.addValue(new StdAttributeValue(DataTypes.DT_STRING.getId(), "Apu")); mutableAttribute.addValue(new StdAttributeValue(DataTypes.DT_STRING.getId(), "Bart")); mutableAttribute.addValue(new StdAttributeValue(DataTypes.DT_STRING.getId(), "Homer")); mutableAttribute.addValue(new StdAttributeValue(DataTypes.DT_STRING.getId(), "Ned")); attrList.add(mutableAttribute); result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, attrList)); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitApuBartHomerNed", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // array of values - compatible different types response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); attrList.clear(); categoryIdentifier = new IdentifierImpl("firstCategory"); mutableAttribute = new StdMutableAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), (Collection>)null, "AIssue", true); mutableAttribute.addValue(new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 4567)); mutableAttribute.addValue(new StdAttributeValue(DataTypes.DT_DOUBLE.getId(), 765.432)); mutableAttribute.addValue(new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 4567)); attrList.add(mutableAttribute); result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, attrList)); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("Permit4567765.4324567", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // array of values - incompatible different types (Different from JSON because these are not part of an array in XML, just separate values) response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); attrList.clear(); categoryIdentifier = new IdentifierImpl("firstCategory"); mutableAttribute = new StdMutableAttribute(categoryIdentifier, new IdentifierImpl("attrIdent1"), (Collection>)null, "AIssue", true); mutableAttribute.addValue(new StdAttributeValue(DataTypes.DT_STRING.getId(), "Apu")); mutableAttribute.addValue(new StdAttributeValue(DataTypes.DT_YEARMONTHDURATION.getId(), "P10Y4M")); mutableAttribute.addValue(new StdAttributeValue(DataTypes.DT_DOUBLE.getId(), 765.432)); mutableAttribute.addValue(new StdAttributeValue(DataTypes.DT_BOOLEAN.getId(), true)); mutableAttribute.addValue(new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 4567)); mutableAttribute.addValue(new StdAttributeValue(DataTypes.DT_INTEGER.getId(), 4567)); attrList.add(mutableAttribute); result.addAttributeCategory(new StdAttributeCategory(categoryIdentifier, attrList)); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitApuP10Y4M765.432true45674567", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } } // PolicyIdentifier tests @Test public void testPolicyIdentifier() { StdIdReference policyIdentifier1 = null; StdIdReference policyIdentifier2 = null; StdIdReference policySetIdentifier1 = null; StdIdReference policySetIdentifier2 = null; // multiple PolicyIdentifiers of both types response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); try { policyIdentifier1 = new StdIdReference(new IdentifierImpl("idRef1"), StdVersion.newInstance("1.2.3")); policyIdentifier2 = new StdIdReference(new IdentifierImpl("idRef2_NoVersion")); policySetIdentifier1 = new StdIdReference(new IdentifierImpl("idSetRef1"), StdVersion.newInstance("4.5.6.7.8.9.0")); policySetIdentifier2 = new StdIdReference(new IdentifierImpl("idSetRef2_NoVersion")); } catch (ParseException e1) { fail("creating policyIds, e="+e1); } result.addPolicyIdentifier(policyIdentifier1); result.addPolicyIdentifier(policyIdentifier2); result.addPolicySetIdentifier(policySetIdentifier1); result.addPolicySetIdentifier(policySetIdentifier2); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitidRef1idRef2_NoVersionidSetRef1idSetRef2_NoVersion", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // PolicyIdentifier exists but has no IdReferences response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); policyIdentifier1 = null; result.addPolicyIdentifier(policyIdentifier1); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // PolicySetIdentifier exists but has not IdReferences response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); policySetIdentifier1 = null; result.addPolicyIdentifier(policySetIdentifier1); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); fail("Operation should throw exception"); } catch (DOMStructureException e) { // correct response } catch (Exception e) { fail ("Failed convert from object to XML: " + e); } // PolicyIdentifier with PolicyIdReference and no PolicySetIdReference response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); try { policyIdentifier1 = new StdIdReference(new IdentifierImpl("idRef1"), StdVersion.newInstance("1.2.3")); } catch (ParseException e1) { fail("creating policyIds, e="+e1); } result.addPolicyIdentifier(policyIdentifier1); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitidRef1", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // PolicyIdentifier with no PolicyIdReference and with PolicySetIdReference response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); try { policySetIdentifier1 = new StdIdReference(new IdentifierImpl("idSetRef1"), StdVersion.newInstance("4.5.6.7.8.9.0")); } catch (ParseException e1) { fail("creating policyIds, e="+e1); } result.addPolicySetIdentifier(policySetIdentifier1); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitidSetRef1", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } // IdReferences without version response = new StdMutableResponse(); result = new StdMutableResult(); result.setDecision(Decision.PERMIT); policyIdentifier1 = new StdIdReference(new IdentifierImpl("idRef1"), null); policyIdentifier2 = new StdIdReference(new IdentifierImpl("idRef2_NoVersion")); policySetIdentifier1 = new StdIdReference(new IdentifierImpl("idSetRef1")); policySetIdentifier2 = new StdIdReference(new IdentifierImpl("idSetRef2_NoVersion")); result.addPolicyIdentifier(policyIdentifier1); result.addPolicyIdentifier(policyIdentifier2); result.addPolicySetIdentifier(policySetIdentifier1); result.addPolicySetIdentifier(policySetIdentifier2); response.add(result); try { xmlResponse = DOMResponse.toString(response, false); assertEquals("PermitidRef1idRef2_NoVersionidSetRef1idSetRef2_NoVersion", xmlResponse); } catch (Exception e) { fail("operation failed, e="+e); } } //TODO - the XML spec implies that the Result Attributes may include the Content (It is part of the UML) // test indentation??? } /* Place to edit long strings ouput from tests Expected Permit Permit Actual */