import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
@Test
@WithAnonymousUser
public void postPathsforAnonymousUsers() throws Exception {

    // all posts
    mockMvc.perform(get("/json/posts/page/2"))
            .andExpect(status().isOk());

    // titles only
    mockMvc.perform(get("/json/posts/titles/page/2"))
            .andExpect(status().isOk());

    // by tag
    mockMvc.perform(get("/json/posts/tag/1/page/2"))
            .andExpect(status().isOk());

    // by tag titles
    mockMvc.perform(get("/json/posts/titles/tag/1/page/2"))
            .andExpect(status().isOk());

}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
/**
 * If the user is not logged in, is currently in the registration page and tries to register under the conditions:
 * - their input is valid;
 * - the username does not exist in the database,
 * they should be sent to the login page
 * @throws Exception
 */
@Test
@WithAnonymousUser
public void registerPOST_userIsNotLoggedInAndInfoIsValidAndUserDoesNotExist_redirectToLogInView() throws Exception
{
    User user = new User();
    user.setUsername("user");
    user.setPassword("password");

    mockMvc.perform(post("/register")
            .with(csrf())
            .param("username", user.getUsername())
            .param("password", user.getPassword()))
            .andExpect(status().isFound())
            .andExpect(redirectedUrl("/login"));
}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
/**
 * If the user is not logged in, is currently in the registration page and tries to register under the conditions:
 * - their input is valid;
 * - the username exists in the database,
 * they should be sent back to the registration page with an error
 * @throws Exception
 */
@Test
@WithAnonymousUser
public void registerPOST_userIsNotLoggedInAndInfoIsValidAndUserExists_redirectToRegisterViewWithError() throws Exception
{
    User user = new User();
    user.setUsername("user");
    user.setPassword("password");
    Mockito.when(userRepository.findOne("user")).thenReturn(user);

    mockMvc.perform(post("/register")
            .with(csrf())
            .param("username", user.getUsername())
            .param("password", user.getPassword()))
            .andExpect(status().isFound())
            .andExpect(redirectedUrl("/register?exists"));
}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
/**
 * If the user is not logged in, is currently in the registration page and tries to register under the condition:
 * - their input is invalid,
 * they should be sent back to the registration page with an error
 * @throws Exception
 */
@Test
@WithAnonymousUser
public void registerPOST_userIsNotLoggedInAndInfoIsNotValid_redirectToRegisterViewWithError() throws Exception
{
    User user = new User();
    user.setUsername("");
    user.setPassword("");

    mockMvc.perform(post("/register")
            .with(csrf())
            .param("username", user.getUsername())
            .param("password", user.getPassword()))
            .andExpect(status().isOk())
            .andExpect(model().hasErrors());
}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
@Test
@WithAnonymousUser
public void successfulAuthenticationWithAnonymousUser() throws Exception {

    JwtAuthenticationRequest jwtAuthenticationRequest = new JwtAuthenticationRequest("user", "password");

    this.mvc.perform(post("/api/auth")
            .contentType(MediaType.APPLICATION_JSON)
            .content(new ObjectMapper().writeValueAsString(jwtAuthenticationRequest)))
            .andExpect(status().is2xxSuccessful());
}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
@Test
@WithAnonymousUser
public void shouldGetUnauthorizedWithAnonymousUser() throws Exception {

    this.mvc.perform(get("/refresh"))
            .andExpect(status().isUnauthorized());

}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
@Test
@WithAnonymousUser
public void anonymousCannotAccessAdmin() throws Exception {

    // Whereas Erwin is forbidden, anonymous users redirected to login page
    RequestBuilder request = get("/admin").with(csrf());
    mvc.perform(request)
            .andExpect(status().is3xxRedirection())
            .andExpect(loginPage());
}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
@Test
@WithAnonymousUser
public void anonymousUserCannotAccessResetPasswordPage() throws Exception {
    RequestBuilder request = get("/users/resetpassword").with(csrf());
    mvc.perform(request)
            .andExpect(status().is3xxRedirection())
            .andExpect(loginPage());
}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
@Test
@WithAnonymousUser
public void resetPasswordPageWithTokenReturnsChangePasswordView() throws Exception {
    RequestBuilder request = get("/users/resetpassword/" + UUID.randomUUID().toString()).with(csrf());
    mvc.perform(request)
            .andExpect(status().isOk())
            .andExpect(model().attributeExists("userPasswordDTO"))
            .andExpect(view().name(USER_CHANGEPASSWORD_VIEW));
}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
@Test
@WithAnonymousUser
public void resetPasswordFromEmail() throws Exception {

    UserToken userToken = userService.createUserToken(erwin);
    RequestBuilder request = post("/users/resetpassword")
            .param("userId", "-400")
            .param("verificationToken", userToken.getToken())
            .param("password", "password")
            .param("repeatedPassword", "password").with(csrf());
    mvc.perform(request)
            .andExpect(model().attribute("feedbackMessage", containsString("login")));
}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
@Test
@WithAnonymousUser
public void googleAnalyticsAnonymousUserTest() throws Exception {
    RequestBuilder request = get("/").with(csrf());
    MvcResult result = mockMvc.perform(request)
            .andReturn();

    assertTrue(result
            .getResponse()
            .getContentAsString()
            .contains(TRACKING_ID));
}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
/**
 * If the user is not logged in and tries to load the login page, they should be sent to the login page
 * @throws Exception
 */
@Test
@WithAnonymousUser
public void logIn_userIsNotLoggedIn_goToLogInView() throws Exception
{
    mockMvc.perform(get("/login"))
            .andExpect(status().isOk());
}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
/**
 * If the user is not logged in and tries to load the registration page, they should be sent to the registration page
 * @throws Exception
 */
@Test
@WithAnonymousUser
public void registerGET_userIsNotLoggedIn_returnModelWithEmptyUser() throws Exception
{
    mockMvc.perform(get("/register"))
            .andExpect(status().isOk())
            .andExpect(model().attribute("user",
                    hasProperty("username", isEmptyOrNullString())));
}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
/**
 * If the user is not logged in, is currently in the registration page and tries to register under the condition:
 * - their username is null (this condition should not be possible under normal usage),
 * they should be sent back to the registration page with an error
 * @throws Exception
 */
@Test
@WithAnonymousUser
public void registerPOST_userIsNotLoggedInAndUsernameIsNull_redirectToRegisterViewWithError() throws Exception
{
    User user = new User();
    user.setPassword("");

    mockMvc.perform(post("/register")
            .with(csrf())
            .param("username", user.getUsername())
            .param("password", user.getPassword()))
            .andExpect(status().isOk())
            .andExpect(model().hasErrors());
}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
/**
 * If the user is not logged in, is currently in the registration page and tries to register under the condition:
 * - their password is null (this condition should not be possible under normal usage),
 * they should be sent back to the registration page with an error
 * @throws Exception
 */
@Test
@WithAnonymousUser
public void registerPOST_userIsNotLoggedInAndPasswordIsNull_redirectToRegisterViewWithError() throws Exception
{
    User user = new User();
    user.setUsername("");

    mockMvc.perform(post("/register")
            .with(csrf())
            .param("username", user.getUsername())
            .param("password", user.getPassword()))
            .andExpect(status().isOk())
            .andExpect(model().hasErrors());
}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
@Test
@WithAnonymousUser
public void expectAnonymousUsersToBeAbleToCallCreateAuthenticationToken() throws Exception {

    final JwtAuthenticationRequest jwtAuthenticationRequest =
            new JwtAuthenticationRequest("not-being-tested-here", "not-being-tested-here");

    mockMvc.perform(post("/auth")
            .contentType(MediaType.APPLICATION_JSON)
            .content(new ObjectMapper().writeValueAsString(jwtAuthenticationRequest)))
            .andExpect(status().is2xxSuccessful());
}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
@Test
@WithAnonymousUser
public void whenCreateTokenCalledWithBadCredentialsThenExpectUnauthorizedResponse() throws Exception {

    final JwtAuthenticationRequest jwtAuthenticationRequest =
            new JwtAuthenticationRequest("user", "bad-password");

    when(authenticationManager.authenticate(any())).thenThrow(new BadCredentialsException("invalid password!"));

    mockMvc.perform(post("/auth")
            .contentType(MediaType.APPLICATION_JSON)
            .content(new ObjectMapper().writeValueAsString(jwtAuthenticationRequest)))
            .andExpect(status().isUnauthorized());
}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
@Test
@WithAnonymousUser
public void test_welcome_WithAnonymousUser() throws Exception {
    mockMvc
            .perform(get("/"))
            .andExpect(status().isOk())
            .andExpect(view().name("index"))
            .andDo(print())
    ;
}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
@Test
@WithAnonymousUser
public void securityEnabled() throws Exception {
    mvc
            .perform(get("/admin/h2")
                    .header("X-Requested-With", "XMLHttpRequest")
            )
            .andExpect(status().isUnauthorized());
}
 

import org.springframework.security.test.context.support.WithAnonymousUser; //导入依赖的package包/类
@Test
    @WithAnonymousUser
    public void test_events_WithAnonymousUser() throws Exception {
        mvc.perform(get("/events/"))
                .andExpect(status().is3xxRedirection())
                .andExpect(redirectedUrl("http://localhost/login/form"))
//                .andExpect(redirectedUrlPattern("/login/form"))
        ;
    }