1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
|
/*-
* ============LICENSE_START=======================================================
* simulators
* ================================================================================
* Copyright (C) 2017-2019, 2021 AT&T Intellectual Property. All rights reserved.
* Modifications Copyright (C) 2019-2020 Nordix Foundation.
* ================================================================================
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
* ============LICENSE_END=========================================================
*/
package org.onap.policy.simulators;
import static org.assertj.core.api.Assertions.assertThat;
import static org.junit.Assert.assertEquals;
import static org.junit.Assert.assertNotNull;
import static org.junit.Assert.fail;
import java.util.HashMap;
import java.util.Map;
import org.apache.commons.lang3.tuple.Pair;
import org.junit.AfterClass;
import org.junit.BeforeClass;
import org.junit.Test;
import org.onap.policy.common.endpoints.http.server.HttpServletServerFactoryInstance;
import org.onap.policy.common.utils.coder.CoderException;
import org.onap.policy.common.utils.coder.StandardCoder;
import org.onap.policy.models.decisions.concepts.DecisionRequest;
import org.onap.policy.models.decisions.concepts.DecisionResponse;
import org.onap.policy.rest.RestManager;
public class XacmlSimulatorTest {
private static final StandardCoder coder = new StandardCoder();
/**
* Set up test class.
*/
@BeforeClass
public static void setupSimulator() {
try {
org.onap.policy.simulators.Util.buildXacmlSim();
} catch (Exception e) {
fail(e.getMessage());
}
}
@AfterClass
public static void tearDownSimulator() {
HttpServletServerFactoryInstance.getServerFactory().destroy();
}
@Test
public void testGuard() throws CoderException {
String request = makeGuardRequest("test_actor_id", "test_op_id", "test_target", "test_clName");
DecisionResponse decision = sendRequest(request);
assertEquals("Permit", decision.getStatus());
request = makeGuardRequest("test_actor_id", "test_op_id", "test_target", "denyGuard");
decision = sendRequest(request);
assertEquals("Deny", decision.getStatus());
}
@Test
public void testConfigure() throws CoderException {
// test retrieving a policy
String request = makeConfigureRequest("policy-id", "test-policy");
DecisionResponse decision = sendRequest(request);
assertNotNull(decision.getPolicies());
assertThat(decision.getPolicies()).containsKey("test-policy");
// test no policy found
request = makeConfigureRequest("policy-id", "nonexistent");
decision = sendRequest(request);
assertNotNull(decision.getPolicies());
assertThat(decision.getPolicies()).doesNotContainKey("nonexistent");
// test unsupported operation
request = makeConfigureRequest("policy-type", "test");
decision = sendRequest(request);
assertEquals("resource must contain policy-id key", decision.getMessage());
}
@Test
public void testConfigureMissingFile() throws CoderException {
// test retrieving a policy
String request = makeConfigureRequest("policy-id", "bogus-policy");
DecisionResponse decision = sendRequest(request);
assertNotNull(decision.getPolicies());
assertEquals("cannot read policy simulator file", decision.getMessage());
}
@Test
public void testConfigureInvalidJson() throws CoderException {
// test retrieving a policy
String request = makeConfigureRequest("policy-id", "invalid-policy");
DecisionResponse decision = sendRequest(request);
assertNotNull(decision.getPolicies());
assertEquals("cannot decode policy", decision.getMessage());
}
@Test
public void testUnknownAction() throws CoderException {
String request = makeGuardRequest("test_actor_id", "test_op_id", "test_target", "test_clName");
request = request.replace("guard", "bogus-action");
DecisionResponse decision = sendRequest(request);
assertThat(decision.getStatus()).isNull();
assertThat(decision.getMessage()).isEqualTo("unsupported action: bogus-action");
}
private DecisionResponse sendRequest(String request) throws CoderException {
String url = "http://localhost:" + Util.XACMLSIM_SERVER_PORT + "/policy/pdpx/v1/decision";
Pair<Integer, String> response =
new RestManager().post(url, "testUname", "testPass", null, "application/json", request);
// verify the response isn't null
assertNotNull(response);
assertNotNull(response.getLeft());
assertNotNull(response.getRight());
return coder.decode(response.getRight(), DecisionResponse.class);
}
private String makeGuardRequest(String actor, String recipe, String target, String clName) throws CoderException {
Map<String, String> guard = new HashMap<>();
guard.put("actor", actor);
guard.put("recipe", recipe);
guard.put("target", target);
guard.put("clname", clName);
Map<String, Object> resource = new HashMap<>();
resource.put("guard", guard);
DecisionRequest request = new DecisionRequest();
request.setAction("guard");
request.setResource(resource);
return coder.encode(request);
}
private String makeConfigureRequest(String key, String val) throws CoderException {
Map<String, Object> resource = new HashMap<>();
resource.put(key, val);
DecisionRequest request = new DecisionRequest();
request.setAction("configure");
request.setResource(resource);
return coder.encode(request);
}
}
|
