String signedToken = mySigner.sign(token.toString()); tokenToAuthCookie( httpResponse,
private AuthenticatedURL.Token getEncryptedAuthToken(Signer signer, String user) throws Exception { AuthenticationToken token = new AuthenticationToken(user, user, "kerberos"); token.setExpires(System.currentTimeMillis() + TIMEOUT); return new AuthenticatedURL.Token(signer.sign(token.toString())); }
token.setExpires(System.currentTimeMillis() + TOKEN_VALIDITY_SEC); Signer signer = new Signer(new StringSignerSecretProvider("secret")); String tokenSigned = signer.sign(token.toString());
String tokenSigned = signer.sign(token.toString());
String tokenSigned = signer.sign(token.toString());
@Test public void testNullAndEmptyString() throws Exception { Signer signer = new Signer(createStringSignerSecretProvider()); try { signer.sign(null); Assert.fail(); } catch (IllegalArgumentException ex) { // Expected } catch (Throwable ex) { Assert.fail(); } try { signer.sign(""); Assert.fail(); } catch (IllegalArgumentException ex) { // Expected } catch (Throwable ex) { Assert.fail(); } }
@Test public void testNullAndEmptyString() throws Exception { Signer signer = new Signer(createStringSignerSecretProvider()); try { signer.sign(null); Assert.fail(); } catch (IllegalArgumentException ex) { // Expected } catch (Throwable ex) { Assert.fail(); } try { signer.sign(""); Assert.fail(); } catch (IllegalArgumentException ex) { // Expected } catch (Throwable ex) { Assert.fail(); } }
@Test public void testVerify() throws Exception { Signer signer = new Signer(createStringSignerSecretProvider()); String t = "test"; String s = signer.sign(t); String e = signer.verifyAndExtract(s); Assert.assertEquals(t, e); }
@Test public void testVerify() throws Exception { Signer signer = new Signer(createStringSignerSecretProvider()); String t = "test"; String s = signer.sign(t); String e = signer.verifyAndExtract(s); Assert.assertEquals(t, e); }
@Test public void testNullAndEmptyString() throws Exception { Signer signer = new Signer(new StringSignerSecretProvider("secret")); try { signer.sign(null); Assert.fail(); } catch (IllegalArgumentException ex) { // Expected } catch (Throwable ex) { Assert.fail(); } try { signer.sign(""); Assert.fail(); } catch (IllegalArgumentException ex) { // Expected } catch (Throwable ex) { Assert.fail(); } }
@Test public void testVerify() throws Exception { Signer signer = new Signer(new StringSignerSecretProvider("secret")); String t = "test"; String s = signer.sign(t); String e = signer.verifyAndExtract(s); Assert.assertEquals(t, e); }
@Test public void testTampering() throws Exception { Signer signer = new Signer(createStringSignerSecretProvider()); String t = "test"; String s = signer.sign(t); s += "x"; try { signer.verifyAndExtract(s); Assert.fail(); } catch (SignerException ex) { // Expected } catch (Throwable ex) { Assert.fail(); } }
@Test public void testTampering() throws Exception { Signer signer = new Signer(createStringSignerSecretProvider()); String t = "test"; String s = signer.sign(t); s += "x"; try { signer.verifyAndExtract(s); Assert.fail(); } catch (SignerException ex) { // Expected } catch (Throwable ex) { Assert.fail(); } }
@Test public void testTampering() throws Exception { Signer signer = new Signer(new StringSignerSecretProvider("secret")); String t = "test"; String s = signer.sign(t); s += "x"; try { signer.verifyAndExtract(s); Assert.fail(); } catch (SignerException ex) { // Expected } catch (Throwable ex) { Assert.fail(); } }
secretProvider.setCurrentSecret("secretB"); String t1 = "test"; String s1 = signer.sign(t1); String e1 = signer.verifyAndExtract(s1); Assert.assertEquals(t1, e1); secretProvider.setPreviousSecret("secretA"); String t2 = "test"; String s2 = signer.sign(t2); String e2 = signer.verifyAndExtract(s2); Assert.assertEquals(t2, e2); secretProvider.setPreviousSecret("secretB"); String t3 = "test"; String s3 = signer.sign(t3); String e3 = signer.verifyAndExtract(s3); Assert.assertEquals(t3, e3);
secretProvider.setCurrentSecret("secretB"); String t1 = "test"; String s1 = signer.sign(t1); String e1 = signer.verifyAndExtract(s1); Assert.assertEquals(t1, e1); secretProvider.setPreviousSecret("secretA"); String t2 = "test"; String s2 = signer.sign(t2); String e2 = signer.verifyAndExtract(s2); Assert.assertEquals(t2, e2); secretProvider.setPreviousSecret("secretB"); String t3 = "test"; String s3 = signer.sign(t3); String e3 = signer.verifyAndExtract(s3); Assert.assertEquals(t3, e3);
secretProvider.setCurrentSecret("secretB"); String t1 = "test"; String s1 = signer.sign(t1); String e1 = signer.verifyAndExtract(s1); Assert.assertEquals(t1, e1); secretProvider.setPreviousSecret("secretA"); String t2 = "test"; String s2 = signer.sign(t2); String e2 = signer.verifyAndExtract(s2); Assert.assertEquals(t2, e2); secretProvider.setPreviousSecret("secretB"); String t3 = "test"; String s3 = signer.sign(t3); String e3 = signer.verifyAndExtract(s3); Assert.assertEquals(t3, e3);