@@ -61,36 +61,37 @@ class KeycloakJwtAuthenticationConverterTests {
6161 jwtConverted)
6262 }
6363
64- @Test
65- fun `convertRolesToAuthorities with correct values when no principalJwtClaim set` () {
66- val principalClaimName = " unexisting-principal-claim"
67- val applicationIdClaimValue = " 123-456-798"
68- val applicationIdClaimName = " sub"
69- val claims =
70- mutableMapOf (
71- " claim1" to " 10" ,
72- " claimRoles" to listOf (" role1" , " role2" , " role3" ),
73- " claimName" to " myClaimName" ,
74- applicationIdClaimName to applicationIdClaimValue)
75- val expectedSimpleGrantedAuthorities =
76- listOf (
77- SimpleGrantedAuthority (" role1" ),
78- SimpleGrantedAuthority (" role2" ),
79- SimpleGrantedAuthority (" role3" ))
80-
81- every { jwt.claims } returns claims
82- every { csmPlatformProperties.authorization.rolesJwtClaim } returns " claimRoles"
83- every { csmPlatformProperties.authorization.principalJwtClaim } returns principalClaimName
84- every { csmPlatformProperties.authorization.applicationIdJwtClaim } returns applicationIdClaimName
85- every { jwt.getClaimAsString(principalClaimName) } returns null
86- every { jwt.getClaimAsString(applicationIdClaimName) } returns applicationIdClaimValue
87-
88- val jwtConverted = keycloakJwtAuthenticationConverter.convert(jwt)
89-
90- assertEquals(
91- JwtAuthenticationToken (jwt, expectedSimpleGrantedAuthorities, applicationIdClaimValue),
92- jwtConverted)
93- }
64+ @Test
65+ fun `convertRolesToAuthorities with correct values when no principalJwtClaim set` () {
66+ val principalClaimName = " unexisting-principal-claim"
67+ val applicationIdClaimValue = " 123-456-798"
68+ val applicationIdClaimName = " sub"
69+ val claims =
70+ mutableMapOf (
71+ " claim1" to " 10" ,
72+ " claimRoles" to listOf (" role1" , " role2" , " role3" ),
73+ " claimName" to " myClaimName" ,
74+ applicationIdClaimName to applicationIdClaimValue)
75+ val expectedSimpleGrantedAuthorities =
76+ listOf (
77+ SimpleGrantedAuthority (" role1" ),
78+ SimpleGrantedAuthority (" role2" ),
79+ SimpleGrantedAuthority (" role3" ))
80+
81+ every { jwt.claims } returns claims
82+ every { csmPlatformProperties.authorization.rolesJwtClaim } returns " claimRoles"
83+ every { csmPlatformProperties.authorization.principalJwtClaim } returns principalClaimName
84+ every { csmPlatformProperties.authorization.applicationIdJwtClaim } returns
85+ applicationIdClaimName
86+ every { jwt.getClaimAsString(principalClaimName) } returns null
87+ every { jwt.getClaimAsString(applicationIdClaimName) } returns applicationIdClaimValue
88+
89+ val jwtConverted = keycloakJwtAuthenticationConverter.convert(jwt)
90+
91+ assertEquals(
92+ JwtAuthenticationToken (jwt, expectedSimpleGrantedAuthorities, applicationIdClaimValue),
93+ jwtConverted)
94+ }
9495
9596 @Test
9697 fun `convertRolesToAuthorities with non-existing role claim values` () {
@@ -114,34 +115,35 @@ class KeycloakJwtAuthenticationConverterTests {
114115 assertEquals(JwtAuthenticationToken (jwt, emptyList(), principalClaimName), jwtConverted)
115116 }
116117
117- @Test
118- fun `convertRolesToAuthorities with non-existing role claim values when no principalJwtClaim set` () {
119- val principalClaimName = " unexisting-principal-claim"
120- val applicationIdClaimValue = " 123-456-798"
121- val applicationIdClaimName = " sub"
122- val claims =
123- mutableMapOf (
124- " claim1" to " 10" ,
125- " claimRoles" to listOf (" role1" , " role2" , " role3" ),
126- " claimName" to " myClaimName" ,
127- " sub" to " 123-456-798" )
128-
129- every { jwt.claims } returns claims
130- every { csmPlatformProperties.authorization.rolesJwtClaim } returns " unexisting-role-claim"
131- every { csmPlatformProperties.authorization.principalJwtClaim } returns principalClaimName
132- every { csmPlatformProperties.authorization.applicationIdJwtClaim } returns applicationIdClaimName
133- every { jwt.getClaimAsString(principalClaimName) } returns null
134- every { jwt.getClaimAsString(applicationIdClaimName) } returns applicationIdClaimValue
135-
136- val jwtConverted = keycloakJwtAuthenticationConverter.convert(jwt)
137-
138- assertEquals(JwtAuthenticationToken (jwt, emptyList(), applicationIdClaimName), jwtConverted)
139- }
118+ @Test
119+ fun `convertRolesToAuthorities with non-existing role claim values when no principalJwtClaim set` () {
120+ val principalClaimName = " unexisting-principal-claim"
121+ val applicationIdClaimValue = " 123-456-798"
122+ val applicationIdClaimName = " sub"
123+ val claims =
124+ mutableMapOf (
125+ " claim1" to " 10" ,
126+ " claimRoles" to listOf (" role1" , " role2" , " role3" ),
127+ " claimName" to " myClaimName" ,
128+ " sub" to " 123-456-798" )
129+
130+ every { jwt.claims } returns claims
131+ every { csmPlatformProperties.authorization.rolesJwtClaim } returns " unexisting-role-claim"
132+ every { csmPlatformProperties.authorization.principalJwtClaim } returns principalClaimName
133+ every { csmPlatformProperties.authorization.applicationIdJwtClaim } returns
134+ applicationIdClaimName
135+ every { jwt.getClaimAsString(principalClaimName) } returns null
136+ every { jwt.getClaimAsString(applicationIdClaimName) } returns applicationIdClaimValue
137+
138+ val jwtConverted = keycloakJwtAuthenticationConverter.convert(jwt)
139+
140+ assertEquals(JwtAuthenticationToken (jwt, emptyList(), applicationIdClaimName), jwtConverted)
141+ }
140142
141143 @Test
142144 fun `convertRolesToAuthorities with existing role claim but no roles defined` () {
143- val principalClaimValue
= " [email protected] " 144- val principalClaimName = " email"
145+ val principalClaimValue
= " [email protected] " 146+ val principalClaimName = " email"
145147 val claims =
146148 mutableMapOf (
147149 " claim1" to " 10" ,
@@ -160,30 +162,28 @@ class KeycloakJwtAuthenticationConverterTests {
160162 assertEquals(JwtAuthenticationToken (jwt, emptyList(), principalClaimName), jwtConverted)
161163 }
162164
163- @Test
164- fun `convertRolesToAuthorities with existing role claim but no roles defined when no principalJwtClaim set` () {
165- val principalClaimName = " unexisting-principal-claim"
166- val applicationIdClaimValue = " 123-456-798"
167- val applicationIdClaimName = " sub"
168- val claims =
169- mutableMapOf (
170- " claim1" to " 10" ,
171- " claimRoles" to emptyList<String >(),
172- " claimName" to " myClaimName" ,
173- " sub" to " 123-456-798" )
174-
175- every { jwt.claims } returns claims
176- every { csmPlatformProperties.authorization.rolesJwtClaim } returns " claimRoles"
177- every { csmPlatformProperties.authorization.principalJwtClaim } returns principalClaimName
178- every { csmPlatformProperties.authorization.applicationIdJwtClaim } returns applicationIdClaimName
179- every { jwt.getClaimAsString(principalClaimName) } returns null
180- every { jwt.getClaimAsString(applicationIdClaimName) } returns applicationIdClaimValue
181-
182- val jwtConverted = keycloakJwtAuthenticationConverter.convert(jwt)
183-
184- assertEquals(JwtAuthenticationToken (jwt, emptyList(), applicationIdClaimName), jwtConverted)
185- }
165+ @Test
166+ fun `convertRolesToAuthorities with existing role claim but no roles defined when no principalJwtClaim set` () {
167+ val principalClaimName = " unexisting-principal-claim"
168+ val applicationIdClaimValue = " 123-456-798"
169+ val applicationIdClaimName = " sub"
170+ val claims =
171+ mutableMapOf (
172+ " claim1" to " 10" ,
173+ " claimRoles" to emptyList<String >(),
174+ " claimName" to " myClaimName" ,
175+ " sub" to " 123-456-798" )
186176
177+ every { jwt.claims } returns claims
178+ every { csmPlatformProperties.authorization.rolesJwtClaim } returns " claimRoles"
179+ every { csmPlatformProperties.authorization.principalJwtClaim } returns principalClaimName
180+ every { csmPlatformProperties.authorization.applicationIdJwtClaim } returns
181+ applicationIdClaimName
182+ every { jwt.getClaimAsString(principalClaimName) } returns null
183+ every { jwt.getClaimAsString(applicationIdClaimName) } returns applicationIdClaimValue
187184
185+ val jwtConverted = keycloakJwtAuthenticationConverter.convert(jwt)
188186
187+ assertEquals(JwtAuthenticationToken (jwt, emptyList(), applicationIdClaimName), jwtConverted)
188+ }
189189}
0 commit comments