196 lines
6.8 KiB
Java
196 lines
6.8 KiB
Java
/*
|
|
* Copyright (c) 2018, 2019, Oracle and/or its affiliates. All rights reserved.
|
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
|
|
*
|
|
* This code is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 only, as
|
|
* published by the Free Software Foundation.
|
|
*
|
|
* This code is distributed in the hope that it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* version 2 for more details (a copy is included in the LICENSE file that
|
|
* accompanied this code).
|
|
*
|
|
* You should have received a copy of the GNU General Public License version
|
|
* 2 along with this work; if not, write to the Free Software Foundation,
|
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
|
|
* or visit www.oracle.com if you need additional information or have any
|
|
* questions.
|
|
*/
|
|
|
|
/*
|
|
* @test
|
|
* @bug 8225425
|
|
* @summary Verifies that transparent NTLM (on Windows) is not used by default,
|
|
* and is used only when the relevant property is set.
|
|
* @requires os.family == "windows"
|
|
* @library /test/lib
|
|
* @run testng/othervm
|
|
* -Dtest.auth.succeed=false
|
|
* TestTransparentNTLM
|
|
* @run testng/othervm
|
|
* -Djdk.http.ntlm.transparentAuth=allHosts
|
|
* -Dtest.auth.succeed=true
|
|
* TestTransparentNTLM
|
|
* @run testng/othervm
|
|
* -Djdk.http.ntlm.transparentAuth=blahblah
|
|
* -Dtest.auth.succeed=false
|
|
* TestTransparentNTLM
|
|
* @run testng/othervm
|
|
* -Djdk.http.ntlm.transparentAuth=trustedHosts
|
|
* -Dtest.auth.succeed=false
|
|
* TestTransparentNTLM
|
|
*/
|
|
|
|
// Run with `trustedHosts` to exercise the native code, nothing more.
|
|
|
|
import java.io.Closeable;
|
|
import java.io.IOException;
|
|
import java.io.InputStream;
|
|
import java.net.HttpURLConnection;
|
|
import java.net.InetAddress;
|
|
import java.net.InetSocketAddress;
|
|
import java.net.ServerSocket;
|
|
import java.net.Socket;
|
|
import java.net.URL;
|
|
import jdk.test.lib.net.URIBuilder;
|
|
import org.testng.annotations.AfterTest;
|
|
import org.testng.annotations.BeforeTest;
|
|
import org.testng.annotations.Test;
|
|
import org.testng.SkipException;
|
|
import static java.lang.System.out;
|
|
import static java.net.Proxy.NO_PROXY;
|
|
import static java.nio.charset.StandardCharsets.UTF_8;
|
|
import static org.testng.Assert.assertEquals;
|
|
import static org.testng.Assert.fail;
|
|
|
|
public class TestTransparentNTLM {
|
|
|
|
boolean succeed; // true if authentication is expected to succeed
|
|
Server server;
|
|
URL url;
|
|
|
|
@Test
|
|
public void testNTLM() throws IOException {
|
|
out.println("connecting to url: " + url);
|
|
HttpURLConnection uc = (HttpURLConnection)url.openConnection(NO_PROXY);
|
|
int respCode = uc.getResponseCode();
|
|
out.println("received: " + respCode);
|
|
|
|
if (succeed) {
|
|
assertEquals(respCode, HttpURLConnection.HTTP_OK);
|
|
String body = new String(uc.getInputStream().readAllBytes(), UTF_8);
|
|
out.println("received body: " + body);
|
|
} else {
|
|
assertEquals(respCode, HttpURLConnection.HTTP_UNAUTHORIZED);
|
|
}
|
|
}
|
|
|
|
static class Server extends Thread implements Closeable {
|
|
|
|
static final InetAddress LOOPBACK = InetAddress.getLoopbackAddress();
|
|
final ServerSocket serverSocket;
|
|
final boolean expectAuthToSucceed;
|
|
|
|
Server(boolean expectAuthToSucceed) throws IOException {
|
|
super("TestTransparentNTLM-Server");
|
|
serverSocket = new ServerSocket();
|
|
serverSocket.bind(new InetSocketAddress(LOOPBACK, 0));
|
|
this.expectAuthToSucceed = expectAuthToSucceed;
|
|
}
|
|
|
|
int port() {
|
|
return serverSocket.getLocalPort();
|
|
}
|
|
|
|
static final String AUTH_REQUIRED =
|
|
"HTTP/1.1 401 Unauthorized\r\n" +
|
|
"Content-Length: 0\r\n" +
|
|
"Connection: close\r\n" +
|
|
"WWW-Authenticate: NTLM\r\n\r\n";
|
|
|
|
static final String AUTH_STAGE_TWO =
|
|
"HTTP/1.1 401 Unauthorized\r\n" +
|
|
"Content-Length: 0\r\n" +
|
|
"WWW-Authenticate: NTLM TlRMTVNTUAACAAAAAAAAACgAAAABggAAU3J2Tm9uY2UAAAAAAAAAAA==\r\n\r\n";
|
|
|
|
static final String AUTH_SUCCESSFUL =
|
|
"HTTP/1.1 200 OK\r\n" +
|
|
"Content-Length: 11\r\n\r\n" +
|
|
"Hello world";
|
|
|
|
@Override
|
|
public void run() {
|
|
try {
|
|
try (Socket s = serverSocket.accept()) {
|
|
out.println("Server accepted connection - 1");
|
|
readRequestHeaders(s.getInputStream());
|
|
s.getOutputStream().write(AUTH_REQUIRED.getBytes(UTF_8));
|
|
}
|
|
|
|
if (expectAuthToSucceed) {
|
|
// await the second follow up connection
|
|
try (Socket s = serverSocket.accept()) {
|
|
out.println("Server accepted connection - 2");
|
|
readRequestHeaders(s.getInputStream());
|
|
s.getOutputStream().write(AUTH_STAGE_TWO.getBytes(UTF_8));
|
|
readRequestHeaders(s.getInputStream());
|
|
s.getOutputStream().write(AUTH_SUCCESSFUL.getBytes(UTF_8));
|
|
}
|
|
}
|
|
} catch (IOException e) {
|
|
fail("Unexpected exception", e);
|
|
}
|
|
}
|
|
|
|
@Override
|
|
public void close() throws IOException {
|
|
serverSocket.close();
|
|
}
|
|
|
|
static final byte[] REQUEST_END = new byte[] {'\r', '\n', '\r', '\n'};
|
|
|
|
// Read until the end of the HTTP request headers
|
|
static void readRequestHeaders(InputStream is) throws IOException {
|
|
int requestEndCount = 0, r;
|
|
while ((r = is.read()) != -1) {
|
|
if (r == REQUEST_END[requestEndCount]) {
|
|
requestEndCount++;
|
|
if (requestEndCount == 4) {
|
|
break;
|
|
}
|
|
} else {
|
|
requestEndCount = 0;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
@BeforeTest
|
|
public void setup() throws Exception {
|
|
succeed = System.getProperty("test.auth.succeed").equals("true");
|
|
if (succeed)
|
|
out.println("Expect client to succeed, with 200 Ok");
|
|
else
|
|
out.println("Expect client to fail, with 401 Unauthorized");
|
|
|
|
server = new Server(succeed);
|
|
server.start();
|
|
url = URIBuilder.newBuilder()
|
|
.scheme("http")
|
|
.loopback()
|
|
.port(server.port())
|
|
.path("/xxyyzz")
|
|
.toURL();
|
|
}
|
|
|
|
@AfterTest
|
|
public void teardown() throws Exception {
|
|
server.close();
|
|
server.join();
|
|
}
|
|
}
|