From b145827649c1adc48777081c40c48109f9097711 Mon Sep 17 00:00:00 2001
From: Ray Lee <rhlee@berkeley.edu>
Date: Thu, 21 Jul 2016 20:39:48 -0700
Subject: [PATCH] DRYD-22: Add more XmlReplay tests.

---
 .../test-data/xmlreplay/security-oauth.xml    | 24 +++++++++++++++++++
 .../security-oauth/password-grant-reader.txt  |  1 +
 2 files changed, 25 insertions(+)
 create mode 100644 services/IntegrationTests/src/test/resources/test-data/xmlreplay/security-oauth/password-grant-reader.txt

diff --git a/services/IntegrationTests/src/test/resources/test-data/xmlreplay/security-oauth.xml b/services/IntegrationTests/src/test/resources/test-data/xmlreplay/security-oauth.xml
index f54773b72..38eedc2be 100644
--- a/services/IntegrationTests/src/test/resources/test-data/xmlreplay/security-oauth.xml
+++ b/services/IntegrationTests/src/test/resources/test-data/xmlreplay/security-oauth.xml
@@ -101,4 +101,28 @@
             <expectedCodes>200,201</expectedCodes>
         </test>
     </testGroup>
+    
+    <testGroup ID="readerTokenUsage">
+        <!-- Token grant with password should succeed-->
+        <test ID="readerTokenGrant" auth="cspace-ui">
+            <method>POST</method>
+            <contentType>application/x-www-form-urlencoded</contentType>
+            <uri>/cspace-services/oauth/token</uri>
+            <filename>security-oauth/password-grant-reader.txt</filename>
+            <expectedCodes>200</expectedCodes>
+        </test>
+        <!-- Getting a resource with the granted access token should succeed -->
+        <test ID="readerGetWithToken" tokenauth='${readerTokenGrant.got("//access_token")}'>
+            <method>GET</method>
+            <uri>/cspace-services/collectionobjects</uri>
+            <expectedCodes>200</expectedCodes>
+        </test>
+        <!-- Posting a resource with the granted access token should fail -->
+        <test ID="readerPostWithToken" tokenauth='${readerTokenGrant.got("//access_token")}'>
+            <method>POST</method>
+            <uri>/cspace-services/collectionobjects</uri>
+            <filename>collectionobject/co1.xml</filename>
+            <expectedCodes>403</expectedCodes>
+        </test>
+    </testGroup>
 </xmlReplay>
diff --git a/services/IntegrationTests/src/test/resources/test-data/xmlreplay/security-oauth/password-grant-reader.txt b/services/IntegrationTests/src/test/resources/test-data/xmlreplay/security-oauth/password-grant-reader.txt
new file mode 100644
index 000000000..b74be9dc5
--- /dev/null
+++ b/services/IntegrationTests/src/test/resources/test-data/xmlreplay/security-oauth/password-grant-reader.txt
@@ -0,0 +1 @@
+grant_type=password&username=reader@core.collectionspace.org&password=reader
\ No newline at end of file
-- 
2.47.3