|
45 | 45 | import com.sap.cloud.sdk.cloudplatform.resilience.ResilienceConfiguration; |
46 | 46 | import com.sap.cloud.sdk.cloudplatform.resilience.ResilienceIsolationMode; |
47 | 47 | import com.sap.cloud.sdk.cloudplatform.security.AuthToken; |
| 48 | +import com.sap.cloud.sdk.cloudplatform.security.principal.DefaultPrincipal; |
48 | 49 | import com.sap.cloud.sdk.cloudplatform.tenant.DefaultTenant; |
49 | 50 | import com.sap.cloud.sdk.cloudplatform.tenant.TenantAccessor; |
50 | 51 | import com.sap.cloud.sdk.testutil.TestContext; |
@@ -209,27 +210,44 @@ void testSubdomainTenantStrategy() |
209 | 210 |
|
210 | 211 | assertThatThrownBy(service::retrieveAccessToken); |
211 | 212 |
|
212 | | - context.setTenant(new DefaultTenant("tenant", "localhost")); |
213 | | - context.setPrincipal(); |
214 | | - final String token = |
| 213 | + final var tenant = new DefaultTenant("tenant", "ma"); |
| 214 | + var principal = new DefaultPrincipal("user1"); |
| 215 | + context.setTenant(tenant); |
| 216 | + context.setPrincipal(principal); |
| 217 | + var token = |
215 | 218 | JwtGenerator |
216 | 219 | .getInstance(Service.IAS, "clientid") |
217 | | - .withClaimValue("app_tid", "tenant") |
| 220 | + .withClaimValue("app_tid", tenant.getTenantId()) |
| 221 | + .withClaimValue("user_uuid", principal.getPrincipalId()) |
218 | 222 | .createToken() |
219 | 223 | .getTokenValue(); |
220 | 224 | context.setAuthToken(new AuthToken(JWT.decode(token))); |
221 | 225 |
|
| 226 | + service.retrieveAccessToken(); |
| 227 | + service.retrieveAccessToken(); |
| 228 | + |
| 229 | + principal = new DefaultPrincipal("user2"); |
| 230 | + token = |
| 231 | + JwtGenerator |
| 232 | + .getInstance(Service.IAS, "clientid") |
| 233 | + .withClaimValue("app_tid", tenant.getTenantId()) |
| 234 | + .withClaimValue("user_uuid", principal.getPrincipalId()) |
| 235 | + .createToken() |
| 236 | + .getTokenValue(); |
| 237 | + context.setAuthToken(new AuthToken(JWT.decode(token))); |
| 238 | + |
| 239 | + service.retrieveAccessToken(); |
222 | 240 | service.retrieveAccessToken(); |
223 | 241 |
|
224 | 242 | SERVER_1 |
225 | 243 | .verify( |
226 | | - 1, |
| 244 | + 2, |
227 | 245 | postRequestedFor(urlEqualTo("/oauth/token")) |
228 | | - .withRequestBody(containing("app_tid=tenant")) |
| 246 | + .withRequestBody(containing("app_tid=" + tenant.getTenantId())) |
229 | 247 | .withRequestBody(containing("refresh_token=0")) |
230 | 248 | .withRequestBody( |
231 | 249 | containing("grant_type=urn:ietf:params:oauth:grant-type:jwt-bearer".replace(":", "%3A"))) |
232 | | - .withRequestBody(containing("assertion=" + token))); |
| 250 | + .withRequestBody(containing("assertion="))); |
233 | 251 | } |
234 | 252 | } |
235 | 253 |
|
|
0 commit comments