刘光辉
6 小时以前 06f314545ac3514d7ce28939920866ae8188d31c
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
package jnpf.elnService.template;
 
import jnpf.util.JsonUtil;
import org.junit.Test;
 
import java.util.LinkedHashMap;
import java.util.Map;
 
import static org.junit.Assert.assertEquals;
import static org.junit.Assert.fail;
 
public class TemplateAnnotationTicketServiceTest {
 
    @Test
    public void parsesEverySignedBinding() {
        TemplateAnnotationTicketService service = service(validPayload());
 
        TemplateAnnotationTicketService.AnnotationTicketContext context = service.parse("ticket-1");
 
        assertEquals("tenant-a", context.getTenantId());
        assertEquals("user-1", context.getUserId());
        assertEquals("template-1", context.getTemplateId());
        assertEquals("file-1", context.getFileId());
    }
 
    @Test
    public void rejectsWrongScopeSceneAndGuid() {
        assertInvalid(payload("scope", "onlyoffice:eln-template-fill"));
        assertInvalid(payload("bizScene", "eln.template.fill"));
        assertInvalid(payload("pluginGuid", "asc.{OTHER}"));
    }
 
    @Test
    public void rejectsEveryMissingOrBlankBinding() {
        String[] keys = {"scope", "tenantId", "userId", "fileId", "bizDataId", "bizModule", "bizScene",
                "pluginGuid"};
        for (String key : keys) {
            Map<String, String> missing = validPayload();
            missing.remove(key);
            assertInvalid(missing);
            assertInvalid(payload(key, "  "));
        }
    }
 
    @Test
    public void rejectsExpiredAndLegacyPayloads() {
        assertInvalid(new TemplateAnnotationTicketService(ticket -> null));
        assertInvalid(new TemplateAnnotationTicketService(ticket -> validPayload()));
        assertInvalid(new TemplateAnnotationTicketService(ticket -> "null"));
    }
 
    private TemplateAnnotationTicketService service(Map<String, String> payload) {
        return new TemplateAnnotationTicketService(ticket -> JsonUtil.getObjectToString(payload));
    }
 
    private Map<String, String> payload(String key, String value) {
        Map<String, String> payload = validPayload();
        payload.put(key, value);
        return payload;
    }
 
    private void assertInvalid(Map<String, String> payload) {
        assertInvalid(service(payload));
    }
 
    private void assertInvalid(TemplateAnnotationTicketService service) {
        try {
            service.parse("ticket-1");
            fail("expected invalid annotation ticket");
        } catch (TemplateAnnotationTicketService.InvalidAnnotationTicketException e) {
            assertEquals(401, e.getStatus());
        }
    }
 
    private Map<String, String> validPayload() {
        Map<String, String> payload = new LinkedHashMap<>();
        payload.put("scope", "onlyoffice:eln-template-annotate");
        payload.put("tenantId", "tenant-a");
        payload.put("userId", "user-1");
        payload.put("fileId", "file-1");
        payload.put("bizDataId", "template-1");
        payload.put("bizModule", "eln.template");
        payload.put("bizScene", "eln.template.annotate");
        payload.put("pluginGuid", "asc.{2D6D6CB6-F6FC-45B7-8EC7-0CC1940F1A6F}");
        return payload;
    }
}