From: Ray Lee <rhlee@berkeley.edu>
Date: Fri, 22 Jul 2016 03:39:48 +0000 (-0700)
Subject: DRYD-22: Add more XmlReplay tests.
X-Git-Url: https://git.aero2k.de/?a=commitdiff_plain;h=b145827649c1adc48777081c40c48109f9097711;p=tmp%2Fjakarta-migration.git

DRYD-22: Add more XmlReplay tests.
---

diff --git a/services/IntegrationTests/src/test/resources/test-data/xmlreplay/security-oauth.xml b/services/IntegrationTests/src/test/resources/test-data/xmlreplay/security-oauth.xml
index f54773b72..38eedc2be 100644
--- a/services/IntegrationTests/src/test/resources/test-data/xmlreplay/security-oauth.xml
+++ b/services/IntegrationTests/src/test/resources/test-data/xmlreplay/security-oauth.xml
@@ -101,4 +101,28 @@
             <expectedCodes>200,201</expectedCodes>
         </test>
     </testGroup>
+    
+    <testGroup ID="readerTokenUsage">
+        <!-- Token grant with password should succeed-->
+        <test ID="readerTokenGrant" auth="cspace-ui">
+            <method>POST</method>
+            <contentType>application/x-www-form-urlencoded</contentType>
+            <uri>/cspace-services/oauth/token</uri>
+            <filename>security-oauth/password-grant-reader.txt</filename>
+            <expectedCodes>200</expectedCodes>
+        </test>
+        <!-- Getting a resource with the granted access token should succeed -->
+        <test ID="readerGetWithToken" tokenauth='${readerTokenGrant.got("//access_token")}'>
+            <method>GET</method>
+            <uri>/cspace-services/collectionobjects</uri>
+            <expectedCodes>200</expectedCodes>
+        </test>
+        <!-- Posting a resource with the granted access token should fail -->
+        <test ID="readerPostWithToken" tokenauth='${readerTokenGrant.got("//access_token")}'>
+            <method>POST</method>
+            <uri>/cspace-services/collectionobjects</uri>
+            <filename>collectionobject/co1.xml</filename>
+            <expectedCodes>403</expectedCodes>
+        </test>
+    </testGroup>
 </xmlReplay>
diff --git a/services/IntegrationTests/src/test/resources/test-data/xmlreplay/security-oauth/password-grant-reader.txt b/services/IntegrationTests/src/test/resources/test-data/xmlreplay/security-oauth/password-grant-reader.txt
new file mode 100644
index 000000000..b74be9dc5
--- /dev/null
+++ b/services/IntegrationTests/src/test/resources/test-data/xmlreplay/security-oauth/password-grant-reader.txt
@@ -0,0 +1 @@
+grant_type=password&username=reader@core.collectionspace.org&password=reader
\ No newline at end of file