nbudin-castronaut 0.7.5

data/spec/castronaut/models/proxy_ticket_spec.rb

@@ -0,0 +1,109 @@
+require File.expand_path(File.join(File.dirname(__FILE__), '..', '..', 'spec_helper'))
+
+include Castronaut::Models
+
+describe Castronaut::Models::ProxyTicket do
+
+  it "has a ticket prefix of PT" do
+    ProxyTicket.new.ticket_prefix.should == 'PT'
+  end
+  
+  it "builds a list of proxies by asking the proxy granting ticket for it's service ticket service" do
+    proxy_ticket = stub_model(ProxyTicket, :proxy_granting_ticket => stub_model(ProxyGrantingTicket, :service_ticket => stub_model(ServiceTicket, :service => 'my service')))
+    proxy_ticket.proxies.should == ['my service']
+  end
+  
+  describe "validating ticket" do
+
+    it "validates the service and ticket using the service ticket validator" do
+      ServiceTicket.should_receive(:validate_ticket).with('service', 'ticket', true).and_return(stub(:invalid? => true).as_null_object)
+      ProxyTicket.validate_ticket('service', 'ticket')
+    end
+
+    describe "when the service ticket result is invalid" do
+
+      it "and_return the service ticket result directly" do
+        ticket_result = stub('ticket result', :invalid? => true)
+        ServiceTicket.stub!(:validate_ticket).and_return(ticket_result)
+        
+        ProxyTicket.validate_ticket('service', 'ticket').should == ticket_result
+      end
+
+    end
+
+    describe "when the service ticket result is valid and the ticket is a proxy ticket" do
+
+      describe "when the proxy granting ticket is nil it and_return a ticket result" do
+
+        before do
+          ticket_result = stub('ticket_result', :invalid? => false, :username => 'bob', :ticket => stub('ticket', :=== => true, :to_s => 'PT', :proxy_granting_ticket => nil))
+          ServiceTicket.stub!(:validate_ticket).and_return(ticket_result)
+        end
+
+        it "with a proxy ticket not associated to a proxy granting ticket message" do
+          ProxyTicket.validate_ticket('service', 'ticket').message.should == "Proxy ticket 'PT' belonging to user 'bob' is not associated with a proxy granting ticket."
+        end
+
+        it "with the INTERNAL_ERROR message category" do
+          ProxyTicket.validate_ticket('service', 'ticket').message_category.should == "INTERNAL_ERROR"
+        end
+
+        it "is marked as invalid" do
+          ProxyTicket.validate_ticket('service', 'ticket').should be_invalid
+        end
+
+      end
+
+      describe "when the proxy granting ticket's service ticket is nil it and_return a ticket result" do
+        
+        before do
+          ticket_result = stub('ticket_result', :invalid? => false, :username => 'bob', :ticket => stub('ticket', :=== => true, 
+                                                :to_s => 'PT', :proxy_granting_ticket => stub('pgt', :service_ticket => nil, :to_s => 'PGT')))
+          ServiceTicket.stub!(:validate_ticket).and_return(ticket_result)
+        end
+
+        it "with a proxy granting ticket is not associated to a service ticket message" do
+          ProxyTicket.validate_ticket('service', 'ticket').message.should == "Proxy granting ticket 'PGT' (associated with proxy ticket 'PT' and belonging to user 'bob' is not associated with a service ticket."
+        end
+
+        it "with the INTERNAL_ERROR message category" do
+          ProxyTicket.validate_ticket('service', 'ticket').message_category.should == "INTERNAL_ERROR"
+        end
+
+        it "is marked as invalid" do
+          ProxyTicket.validate_ticket('service', 'ticket').should be_invalid
+        end
+
+      end
+
+    end
+    
+    describe "when the service ticket result is valid" do
+
+      it "returns a ticket result with the service results ticket" do
+        ticket_result = stub('ticket result', :invalid? => false, :ticket => "STUB")
+        ServiceTicket.stub!(:validate_ticket).and_return(ticket_result)
+        
+        ProxyTicket.validate_ticket('service', 'ticket').ticket.should == "STUB"
+      end
+
+      it "returns a ticket result with the 'success' message category" do
+        ticket_result = stub('ticket result', :invalid? => false, :ticket => "STUB")
+        ServiceTicket.stub!(:validate_ticket).and_return(ticket_result)
+        
+        ProxyTicket.validate_ticket('service', 'ticket').message_category.should == 'success'
+      end
+
+
+      it "returns a ticket result that is valid" do
+        ticket_result = stub('ticket result', :invalid? => false, :ticket => "STUB")
+        ServiceTicket.stub!(:validate_ticket).and_return(ticket_result)
+        
+        ProxyTicket.validate_ticket('service', 'ticket').should be_valid
+      end
+
+    end
+
+  end
+
+end

data/spec/castronaut/models/service_ticket_spec.rb

@@ -0,0 +1,269 @@
+require File.expand_path(File.join(File.dirname(__FILE__), '..', '..', 'spec_helper'))
+
+include Castronaut::Models
+
+describe Castronaut::Models::ServiceTicket do
+
+  it "has no proxies" do
+    ServiceTicket.new.proxies.should be_nil
+  end
+  
+  it "has a ticket prefix of ST" do
+    ServiceTicket.new.ticket_prefix.should == 'ST'
+  end
+
+  describe "service uri" do
+
+    it "returns nil if no service is present" do
+      ServiceTicket.new.service_uri.should be_nil
+    end
+
+    it "tries to parse service using URI.parse" do
+      URI.should_receive(:parse).with('http://example.com')
+
+      service_ticket = ServiceTicket.new(:service => 'http://example.com')
+      service_ticket.service_uri
+    end
+
+    describe "when the service has an existing querystring" do
+
+      it "appends the ticket to the service querystring" do
+        service_ticket = ServiceTicket.new(:service => 'http://example.com?foo=bar', :ticket => 'my_ticket')
+        service_ticket.service_uri.should == "http://example.com?foo=bar&ticket=my_ticket"
+      end
+
+    end
+
+    describe "when the service has no querystring" do
+
+      it "adds a querystring containing the ticket to the service" do
+        service_ticket = ServiceTicket.new(:service => 'http://example.com', :ticket => 'my_ticket')
+        service_ticket.service_uri.should == "http://example.com?ticket=my_ticket"
+      end
+
+    end
+
+    describe "when the service has a querystring of '?' only" do
+
+      it "removes the question mark" do
+        service_ticket = ServiceTicket.new(:service => 'http://example.com?', :ticket => 'my_ticket')
+        service_ticket.service_uri.should == "http://example.com?ticket=my_ticket"
+      end
+
+    end
+
+    describe "when you give an invalid URI" do
+
+      it "handles the URI::InvalidURIError" do
+        URI.should_receive(:parse).and_raise(URI::InvalidURIError)
+
+        service_ticket = ServiceTicket.new(:service => 'invalid uri here', :ticket => 'my_ticket')
+        service_ticket.service_uri
+      end
+
+      it "returns nil" do
+        service_ticket = ServiceTicket.new(:service => 'invalid uri here', :ticket => 'my_ticket')
+        service_ticket.service_uri.should be_nil
+      end
+
+    end
+
+  end
+
+  describe "generate ticket for" do
+
+    it "delegates to create!" do
+      ticket = TicketGrantingTicket.new :username => 'foo'
+
+      ServiceTicket.should_receive(:create!).with(:service => 'service', :client_hostname => 'client_host', :username => 'foo', :ticket_granting_ticket => ticket)
+
+      ServiceTicket.generate_ticket_for('service', 'client_host', ticket)
+    end
+
+  end
+
+  describe "matching service?" do
+
+    it "matches if the given service is equal to the ticket's service" do
+      service_ticket = Castronaut::Models::ServiceTicket.new(:service => 'http://foo')
+      service_ticket.matches_service?('foo').should be_false
+      service_ticket.matches_service?('http://foo').should be_true
+      service_ticket.matches_service?('http://foo/').should be_false
+    end
+
+  end
+
+  describe "validating ticket" do
+
+    describe "when the service and ticket are missing returns a ticket result" do
+
+      it "with the missing ticket message" do
+        Castronaut::Models::ServiceTicket.validate_ticket(nil, nil).message.should == Castronaut::Models::ServiceTicket::MissingMessage
+      end
+
+      it "with the INVALID_REQUEST message category" do
+        Castronaut::Models::ServiceTicket.validate_ticket(nil, nil).message_category.should == 'INVALID_REQUEST'
+      end
+
+      it "is marked as invalid" do
+        Castronaut::Models::ServiceTicket.validate_ticket(nil, nil).should be_invalid
+      end
+
+    end
+
+    describe "when the service and ticket are given" do
+
+      it "attempts to find the ServiceTicket by the given ticket" do
+        Castronaut::Models::ServiceTicket.should_receive(:find_by_ticket).with('ticket').and_return(stub({}).as_null_object)
+        Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket')
+      end
+
+      describe "when it fails to find a service ticket returns a ticket result" do
+
+        it "with the ticket not recognized message" do
+          Castronaut::Models::ServiceTicket.stub!(:find_by_ticket).and_return(nil)
+          Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket').message.should == "Ticket ticket not recognized."
+        end
+
+        it "with the INVALID_TICKET message category" do
+          Castronaut::Models::ServiceTicket.stub!(:find_by_ticket).and_return(nil)
+          Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket').message_category.should == 'INVALID_TICKET'
+        end
+
+        it "is marked as invalid" do
+          Castronaut::Models::ServiceTicket.stub!(:find_by_ticket).and_return(nil)
+          Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket').should be_invalid
+        end
+
+      end
+
+      describe "when it finds a service ticket" do
+
+        describe "when it is already consumed it returns a ticket result" do
+
+          it "with the ticket used up message" do
+            Castronaut::Models::ServiceTicket.stub!(:find_by_ticket).and_return(stub(:consumed? => true).as_null_object)
+            Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket').message.should == "Ticket 'ticket' has already been used up."
+          end
+
+          it "with the INVALID_TICKET message category" do
+            Castronaut::Models::ServiceTicket.stub!(:find_by_ticket).and_return(stub(:consumed? => true).as_null_object)
+            Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket').message_category.should == 'INVALID_TICKET'
+          end
+
+          it "is marked as invalid" do
+            Castronaut::Models::ServiceTicket.stub!(:find_by_ticket).and_return(stub(:consumed? => true).as_null_object)
+            Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket').should be_invalid
+          end
+
+        end
+
+        describe "when it has not been consumed" do
+
+          it "consumes the service ticket" do
+            service_ticket = stub_model(ServiceTicket, :consumed? => false)
+            service_ticket.should_receive(:consume!)
+
+            Castronaut::Models::ServiceTicket.stub!(:find_by_ticket).and_return(service_ticket)
+            Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket')
+          end
+
+          describe "when it encounters a proxy ticket it returns a ticket result" do
+
+            it "with the ticket is a proxy ticket message" do
+              service_ticket = stub_model(ServiceTicket, :consumed? => false, :consume! => nil)
+              service_ticket.stub!(:===).and_return(true)
+              Castronaut::Models::ServiceTicket.stub!(:find_by_ticket).and_return(service_ticket)
+
+              Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket', false).message.should == "Ticket 'ticket' is a proxy ticket, but only service tickets are allowed here."
+            end
+
+            it "with the INVALID_TICKET message category" do
+              service_ticket = stub_model(ServiceTicket, :consumed? => false, :consume! => nil)
+              service_ticket.stub!(:===).and_return(true)
+              Castronaut::Models::ServiceTicket.stub!(:find_by_ticket).and_return(service_ticket)
+
+              Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket', false).message_category.should == "INVALID_TICKET"
+            end
+
+            it "is marked as invalid" do
+              service_ticket = stub_model(ServiceTicket, :consumed? => false, :consume! => nil)
+              service_ticket.stub!(:===).and_return(true)
+              Castronaut::Models::ServiceTicket.stub!(:find_by_ticket).and_return(service_ticket)
+
+              Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket', false).should be_invalid
+            end
+
+          end
+
+          describe "when it is already expired it returns a ticket result" do
+            
+            before do
+              Castronaut::Models::ServiceTicket.stub!(:find_by_ticket).and_return(stub_model(ServiceTicket, :expired? => true, :consumed? => false, :consumed_at= => nil, :save! => nil))
+            end
+
+            it "with the ticket expired message" do
+              Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket').message.should == "Ticket 'ticket' has expired."
+            end
+
+            it "with the INVALID_TICKET message category" do
+              Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket').message_category.should == 'INVALID_TICKET'
+            end
+
+            it "is marked as invalid" do
+              Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket').should be_invalid
+            end
+
+          end
+
+          describe "when it encounters a mismatched service it returns a ticket result" do
+
+            before do
+              Castronaut::Models::ServiceTicket.stub!(:find_by_ticket).and_return(stub_model(ServiceTicket, :expired? => false, :consumed? => false, :consumed_at= => nil, :service => 'my service', :save! => nil))              
+            end
+
+            it "with the service mismatch message" do
+              Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket').message.should include("does not match the service")
+            end
+
+            it "with the INVALID_SERVICE message category" do
+              Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket').message_category.should == 'INVALID_SERVICE'
+            end
+
+            it "is marked as invalid" do
+              Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket').should be_invalid
+            end
+
+          end
+
+          
+        end
+      
+
+        describe "when ticket validation was successful and no branches were encountered" do
+          
+          before do
+            Castronaut::Models::ServiceTicket.stub!(:find_by_ticket).and_return(mock('service ticket', :consumed? => false, :expired? => false, :consumed_at= => nil, :null_object => true, :matches_service? => true))
+          end
+
+          it "returns a ticket result with a nil message" do
+            Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket').message.should be_nil
+          end
+
+          it "returns a ticket result with a message category of 'success'" do
+            Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket').message_category.should == 'success'
+          end
+
+          it "returns a valid ticket result" do
+            Castronaut::Models::ServiceTicket.validate_ticket('service', 'ticket').should be_valid
+          end
+
+        end
+
+      end
+
+    end
+
+  end
+
+end

data/spec/castronaut/models/ticket_granting_ticket_spec.rb

@@ -0,0 +1,89 @@
+require File.expand_path(File.join(File.dirname(__FILE__), '..', '..', 'spec_helper'))
+
+include Castronaut::Models
+
+describe Castronaut::Models::TicketGrantingTicket do
+
+  it "has no proxies" do
+    TicketGrantingTicket.new.proxies.should be_nil
+  end
+
+  it "has a ticket prefix of TGC" do
+    TicketGrantingTicket.new.ticket_prefix.should == 'TGC'
+  end
+
+  describe "validating ticket granting ticket" do
+
+    describe "when given no ticket" do
+
+      it "has a message explaining you must give a ticket" do
+        TicketGrantingTicket.validate_cookie(nil).message.should == 'No ticket granting ticket given'
+      end
+      
+      it "is invalid" do
+        TicketGrantingTicket.validate_cookie(nil).should be_invalid
+      end
+      
+    end
+
+    describe "when given a ticket" do
+
+      it "attempts to find the ticket granting ticket in the database" do
+        TicketGrantingTicket.should_receive(:find_by_ticket).and_return(nil)
+        TicketGrantingTicket.validate_cookie('abc')
+      end
+
+      describe "when it finds a ticket granting ticket" do
+
+        before do
+          @ticket_granting_ticket = TicketGrantingTicket.new
+          @ticket_granting_ticket.stub!(:username).and_return('bob_smith')
+          @ticket_granting_ticket.stub!(:expired?).and_return(false)
+          TicketGrantingTicket.stub!(:find_by_ticket).and_return(@ticket_granting_ticket)
+        end
+
+        it "returns an error message if the ticket granting ticket is expired" do
+          @ticket_granting_ticket.stub!(:expired?).and_return(true)
+          TicketGrantingTicket.validate_cookie('abc').message.should == "Your session has expired. Please log in again."
+        end
+
+      end
+
+    end
+
+    describe "in all other cases" do
+
+      it "returns a TicketResult with no error message" do
+        TicketGrantingTicket.stub!(:find_by_ticket).and_return(nil)
+        TicketGrantingTicket.validate_cookie('abc').message.should be_nil
+      end
+
+    end
+
+  end
+
+  describe "generating for a username and client host" do
+
+    it "delegates to :create!" do
+      TicketGrantingTicket.should_receive(:create!).with(:username => 'username', :client_hostname => 'client_host')
+      TicketGrantingTicket.generate_for('username', 'client_host')
+    end
+
+  end
+  
+  describe "general accessors" do
+    
+    it "returns the value of the ticket column for to_cookie" do
+      tgt = TicketGrantingTicket.new
+      tgt.stub!(:ticket).and_return("ticket")
+      tgt.to_cookie.should == "ticket"
+    end
+    
+    it "never expires" do
+      tgt = TicketGrantingTicket.new
+      tgt.expired?.should == false
+    end
+    
+  end
+
+end