I am using @PreAuthorize("hasAnyRole('SOME_ROLE')"), how to test it using testNG?

Question

I have started to use @PreAuthorize, which i want to test using testNg. I am using withUserContext("username"); But every test I run gets passed but in real time the authorisation is done perfectly in the portal. Can someone help me out of this.

@Test
private void testFunctionWith@PreAuthorize() throws Exception {
   withUserContext("username");
}
public SecurityContext withUserContext(String username) {
    UserDetails principal = asyncCall(username);
    Authentication authentication = new UsernamePasswordAuthenticationToken(principal, principal.getPassword(),
            principal.getAuthorities());
    SecurityContext context = SecurityContextHolder.getContext();
    context.setAuthentication(authentication);

    return context;
}

@Async
public UserDetails asyncCall(String username) {
    return userDetailsService.loadUserByUsername(username);
}

The tests that are expected to fail are getting passed.

score 0 · Answer 1 · answered Sep 05 '19 at 06:56

0

You should use the mvcPerform suite and mvcMock.

McvMock will mock your security filter chain, filters and mic context, instead mvcPerform will perform the http calls validating the responses (type, status, content and so on)

MvcPerform example: https://www.baeldung.com/integration-testing-in-spring

answered Sep 05 '19 at 06:56

Ludovico Sidari

67
6

can i do this with user context, for a standalone application – shashank Sep 05 '19 at 13:44
I don’t know. MvcContext is used to retrieve all your mvc related bean. Look at https://spring.io/guides/gs/testing-web/ – Ludovico Sidari Sep 05 '19 at 13:54

I am using @PreAuthorize("hasAnyRole('SOME_ROLE')"), how to test it using testNG?

1 Answers1