-
Notifications
You must be signed in to change notification settings - Fork 604
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #26236 from c00crane/25734
WasReqUrl tests for Social Clients
- Loading branch information
Showing
35 changed files
with
920 additions
and
150 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
264 changes: 128 additions & 136 deletions
264
...ent/fat/IBM/OidcClientWasReqURLTests.java → ...Tests/WasReqUrl/ClientWasReqURLTests.java
Large diffs are not rendered by default.
Oops, something went wrong.
31 changes: 31 additions & 0 deletions
31
...SSO.clientTests/publish/servers/com.ibm.ws.security.SSO.op.wasReqUrl/bootstrap.properties
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,31 @@ | ||
| ############################################################################### | ||
| # Copyright (c) 2021 IBM Corporation and others. | ||
| # All rights reserved. This program and the accompanying materials | ||
| # are made available under the terms of the Eclipse Public License 2.0 | ||
| # which accompanies this distribution, and is available at | ||
| # http://www.eclipse.org/legal/epl-2.0/ | ||
| # | ||
| # SPDX-License-Identifier: EPL-2.0 | ||
| # | ||
| # Contributors: | ||
| # IBM Corporation - initial API and implementation | ||
| ############################################################################### | ||
|
|
||
| bootstrap.include=../testports.properties | ||
|
|
||
| com.ibm.ws.logging.trace.specification=*=info=enabled:\ | ||
| OpenIdConnect=all:\ | ||
| OPENIDCONNECT=all:\ | ||
| com.ibm.ws.security.oauth*=all=enabled:\ | ||
| com.ibm.ws.security.openidconnect*=all=enabled:\ | ||
| com.ibm.ws.security.jwt*=all=enabled:\ | ||
| com.ibm.ws.security.common*=all=enabled:\ | ||
| com.ibm.ws.webcontainer.security.*=all=enabled:\ | ||
| com.ibm.oauth.*=all=enabled:\ | ||
| com.ibm.wsspi.security.oauth20.*=all=enabled:\ | ||
| org.apache.http.client.*=all:\ | ||
| OpenIdConnect=all:\ | ||
| OPENIDCONNECT=all | ||
|
|
||
| com.ibm.ws.logging.max.file.size=0 | ||
| ds.loglevel=debug |
32 changes: 32 additions & 0 deletions
32
...ests/publish/servers/com.ibm.ws.security.SSO.op.wasReqUrl/configs/op_server_WasReqUrl.xml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,32 @@ | ||
| <!-- | ||
| Copyright (c) 2023, 2024 IBM Corporation and others. | ||
| All rights reserved. This program and the accompanying materials | ||
| are made available under the terms of the Eclipse Public License 2.0 | ||
| which accompanies this distribution, and is available at | ||
| http://www.eclipse.org/legal/epl-2.0/ | ||
| SPDX-License-Identifier: EPL-2.0 | ||
| Contributors: | ||
| IBM Corporation - initial API and implementation | ||
| --> | ||
|
|
||
| <server> | ||
|
|
||
| <include location="${server.config.dir}/imports/oidcServerFeatures.xml" /> | ||
|
|
||
| <include location="${server.config.dir}/imports/goodBasicRegistry.xml" /> | ||
|
|
||
| <include location="${server.config.dir}/imports/goodSSLSettings.xml" /> | ||
|
|
||
| <include location="${server.config.dir}/imports/miscNoSslSettings.xml" /> | ||
|
|
||
| <include location="${server.config.dir}/imports/oauthRoles_1.xml" /> | ||
|
|
||
| <include location="${server.config.dir}/imports/oauthProvider_1.xml" /> | ||
|
|
||
| <include location="${server.config.dir}/imports/op_fatTestPorts.xml" /> | ||
|
|
||
| <variable name="oidcSignAlg" value="HS256"/> | ||
|
|
||
| </server> |
32 changes: 32 additions & 0 deletions
32
dev/com.ibm.ws.security.fat.common.SSO.clientTests/publish/shared/config/goodSSLSettings.xml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,32 @@ | ||
| <!-- | ||
| Copyright (c) 2021 IBM Corporation and others. | ||
| All rights reserved. This program and the accompanying materials | ||
| are made available under the terms of the Eclipse Public License 2.0 | ||
| which accompanies this distribution, and is available at | ||
| http://www.eclipse.org/legal/epl-2.0/ | ||
| SPDX-License-Identifier: EPL-2.0 | ||
| Contributors: | ||
| IBM Corporation - initial API and implementation | ||
| --> | ||
| <server> | ||
|
|
||
| <sslDefault sslRef="DefaultSSLSettings" /> | ||
| <ssl | ||
| id="DefaultSSLSettings" | ||
| keyStoreRef="myKeyStore" | ||
| trustStoreRef="myTrustStore" | ||
| clientAuthenticationSupported="true" /> | ||
| <keyStore | ||
| id="myKeyStore" | ||
| password="Liberty" | ||
| type="jks" | ||
| location="${server.config.dir}/commonBasicKeyStore.jks" /> | ||
| <keyStore | ||
| id="myTrustStore" | ||
| password="Liberty" | ||
| type="jks" | ||
| location="${server.config.dir}/commonTrustStore.jks" /> | ||
|
|
||
| </server> |
20 changes: 20 additions & 0 deletions
20
...om.ibm.ws.security.fat.common.SSO.clientTests/publish/shared/config/miscNoSslSettings.xml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,20 @@ | ||
| <!-- | ||
| Copyright (c) 2021 IBM Corporation and others. | ||
| All rights reserved. This program and the accompanying materials | ||
| are made available under the terms of the Eclipse Public License 2.0 | ||
| which accompanies this distribution, and is available at | ||
| http://www.eclipse.org/legal/epl-2.0/ | ||
| SPDX-License-Identifier: EPL-2.0 | ||
| Contributors: | ||
| IBM Corporation - initial API and implementation | ||
| --> | ||
| <server> | ||
|
|
||
| <httpSession cookieHttpOnly="false" /> | ||
|
|
||
| <webAppSecurity | ||
| httpOnlyCookies="false" | ||
| allowFailOverToBasicAuth="true" /> | ||
| </server> |
63 changes: 63 additions & 0 deletions
63
dev/com.ibm.ws.security.fat.common.SSO.clientTests/publish/shared/config/oauthProvider_1.xml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,63 @@ | ||
| <!-- | ||
| Copyright (c) 2021, 2023 IBM Corporation and others. | ||
| All rights reserved. This program and the accompanying materials | ||
| are made available under the terms of the Eclipse Public License 2.0 | ||
| which accompanies this distribution, and is available at | ||
| http://www.eclipse.org/legal/epl-2.0/ | ||
| SPDX-License-Identifier: EPL-2.0 | ||
| Contributors: | ||
| IBM Corporation - initial API and implementation | ||
| --> | ||
| <server> | ||
|
|
||
| <openidConnectProvider | ||
| id="OidcConfigSample" | ||
| scope="myScopeSample" | ||
| jwkEnabled="${oidcJWKEnabled}" | ||
| signatureAlgorithm="${oidcSignAlg}" | ||
| oauthProviderRef="OAuthConfigSample" | ||
| issuerIdentifier="http://localhost:${bvt.prop.security_1_HTTP_default}/oidc/endpoint/OidcConfigSample" | ||
| /> | ||
| <!-- TODO: remove issuerIdentifier when back-channel logout beta is removed --> | ||
|
|
||
| <oauthProvider | ||
| id="OAuthConfigSample" | ||
| filter="request-url%=SimpleServlet;request-url!=snooping" | ||
| httpsRequired="false" | ||
| allowPublicClients="false" | ||
| oauthOnly="true" | ||
| autoAuthorize="true" | ||
| jwtAccessToken="${oidcCreateJWTToken}" | ||
| > | ||
|
|
||
| <autoAuthorizeClient>client01</autoAuthorizeClient> | ||
| <autoAuthorizeClient>client02</autoAuthorizeClient> | ||
|
|
||
|
|
||
| <localStore> | ||
| <client | ||
| name="client01" | ||
| secret="{xor}LDo8LTor" | ||
| displayname="client01" | ||
| redirect="http://localhost:${bvt.prop.security_2_HTTP_default}/oidcclient/redirect/client01, | ||
| https://localhost:${bvt.prop.security_2_HTTP_default.secure}/ibm/api/social-login/redirect/client01" | ||
| scope="ALL_SCOPES" | ||
| enabled="true" /> | ||
| <!-- !d becomes \d for regexp evaluation, any 4 digit port should be accepted. --> | ||
| <client | ||
| name="client02" | ||
| secret="{xor}LDo8LTor" | ||
| displayname="client02" | ||
| allowRegexpRedirects="true" | ||
| redirect="regexp:http://localhost:!d!d!d!d/oidcclient/redirect/client02, | ||
| regexp:https://localhost:!d!d!d!d/ibm/api/social-login/redirect/client02" | ||
| scope="ALL_SCOPES" | ||
| enabled="true" /> | ||
|
|
||
| </localStore> | ||
|
|
||
| </oauthProvider> | ||
|
|
||
| </server> |
32 changes: 32 additions & 0 deletions
32
...bm.ws.security.fat.common.SSO.clientTests/publish/shared/securityKeys/goodSSLSettings.xml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,32 @@ | ||
| <!-- | ||
| Copyright (c) 2021 IBM Corporation and others. | ||
| All rights reserved. This program and the accompanying materials | ||
| are made available under the terms of the Eclipse Public License 2.0 | ||
| which accompanies this distribution, and is available at | ||
| http://www.eclipse.org/legal/epl-2.0/ | ||
| SPDX-License-Identifier: EPL-2.0 | ||
| Contributors: | ||
| IBM Corporation - initial API and implementation | ||
| --> | ||
| <server> | ||
|
|
||
| <sslDefault sslRef="DefaultSSLSettings" /> | ||
| <ssl | ||
| id="DefaultSSLSettings" | ||
| keyStoreRef="myKeyStore" | ||
| trustStoreRef="myTrustStore" | ||
| clientAuthenticationSupported="true" /> | ||
| <keyStore | ||
| id="myKeyStore" | ||
| password="Liberty" | ||
| type="jks" | ||
| location="${server.config.dir}/commonBasicKeyStore.jks" /> | ||
| <keyStore | ||
| id="myTrustStore" | ||
| password="Liberty" | ||
| type="jks" | ||
| location="${server.config.dir}/commonTrustStore.jks" /> | ||
|
|
||
| </server> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.