| OLD | NEW |
| (Empty) |
| 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #include <string> | |
| 6 | |
| 7 #include "base/strings/string16.h" | |
| 8 #include "base/strings/string_util.h" | |
| 9 #include "base/strings/stringprintf.h" | |
| 10 #include "base/strings/utf_string_conversions.h" | |
| 11 #include "net/base/net_errors.h" | |
| 12 #include "net/http/http_auth_cache.h" | |
| 13 #include "net/http/http_auth_handler.h" | |
| 14 #include "testing/gtest/include/gtest/gtest.h" | |
| 15 | |
| 16 using base::ASCIIToUTF16; | |
| 17 | |
| 18 namespace net { | |
| 19 | |
| 20 namespace { | |
| 21 | |
| 22 class MockAuthHandler : public HttpAuthHandler { | |
| 23 public: | |
| 24 MockAuthHandler(HttpAuth::Scheme scheme, | |
| 25 const std::string& realm, | |
| 26 HttpAuth::Target target) { | |
| 27 // Can't use initializer list since these are members of the base class. | |
| 28 auth_scheme_ = scheme; | |
| 29 realm_ = realm; | |
| 30 score_ = 1; | |
| 31 target_ = target; | |
| 32 properties_ = 0; | |
| 33 } | |
| 34 | |
| 35 HttpAuth::AuthorizationResult HandleAnotherChallenge( | |
| 36 HttpAuthChallengeTokenizer* challenge) override { | |
| 37 return HttpAuth::AUTHORIZATION_RESULT_REJECT; | |
| 38 } | |
| 39 | |
| 40 protected: | |
| 41 bool Init(HttpAuthChallengeTokenizer* challenge) override { | |
| 42 return false; // Unused. | |
| 43 } | |
| 44 | |
| 45 int GenerateAuthTokenImpl(const AuthCredentials*, | |
| 46 const HttpRequestInfo*, | |
| 47 const CompletionCallback& callback, | |
| 48 std::string* auth_token) override { | |
| 49 *auth_token = "mock-credentials"; | |
| 50 return OK; | |
| 51 } | |
| 52 | |
| 53 | |
| 54 private: | |
| 55 ~MockAuthHandler() override {} | |
| 56 }; | |
| 57 | |
| 58 const char kRealm1[] = "Realm1"; | |
| 59 const char kRealm2[] = "Realm2"; | |
| 60 const char kRealm3[] = "Realm3"; | |
| 61 const char kRealm4[] = "Realm4"; | |
| 62 const char kRealm5[] = "Realm5"; | |
| 63 const base::string16 k123(ASCIIToUTF16("123")); | |
| 64 const base::string16 k1234(ASCIIToUTF16("1234")); | |
| 65 const base::string16 kAdmin(ASCIIToUTF16("admin")); | |
| 66 const base::string16 kAlice(ASCIIToUTF16("alice")); | |
| 67 const base::string16 kAlice2(ASCIIToUTF16("alice2")); | |
| 68 const base::string16 kPassword(ASCIIToUTF16("password")); | |
| 69 const base::string16 kRoot(ASCIIToUTF16("root")); | |
| 70 const base::string16 kUsername(ASCIIToUTF16("username")); | |
| 71 const base::string16 kWileCoyote(ASCIIToUTF16("wilecoyote")); | |
| 72 | |
| 73 AuthCredentials CreateASCIICredentials(const char* username, | |
| 74 const char* password) { | |
| 75 return AuthCredentials(ASCIIToUTF16(username), ASCIIToUTF16(password)); | |
| 76 } | |
| 77 | |
| 78 } // namespace | |
| 79 | |
| 80 // Test adding and looking-up cache entries (both by realm and by path). | |
| 81 TEST(HttpAuthCacheTest, Basic) { | |
| 82 GURL origin("http://www.google.com"); | |
| 83 HttpAuthCache cache; | |
| 84 HttpAuthCache::Entry* entry; | |
| 85 | |
| 86 // Add cache entries for 4 realms: "Realm1", "Realm2", "Realm3" and | |
| 87 // "Realm4" | |
| 88 | |
| 89 scoped_ptr<HttpAuthHandler> realm1_handler( | |
| 90 new MockAuthHandler(HttpAuth::AUTH_SCHEME_BASIC, | |
| 91 kRealm1, | |
| 92 HttpAuth::AUTH_SERVER)); | |
| 93 cache.Add(origin, realm1_handler->realm(), realm1_handler->auth_scheme(), | |
| 94 "Basic realm=Realm1", | |
| 95 CreateASCIICredentials("realm1-user", "realm1-password"), | |
| 96 "/foo/bar/index.html"); | |
| 97 | |
| 98 scoped_ptr<HttpAuthHandler> realm2_handler( | |
| 99 new MockAuthHandler(HttpAuth::AUTH_SCHEME_BASIC, | |
| 100 kRealm2, | |
| 101 HttpAuth::AUTH_SERVER)); | |
| 102 cache.Add(origin, realm2_handler->realm(), realm2_handler->auth_scheme(), | |
| 103 "Basic realm=Realm2", | |
| 104 CreateASCIICredentials("realm2-user", "realm2-password"), | |
| 105 "/foo2/index.html"); | |
| 106 | |
| 107 scoped_ptr<HttpAuthHandler> realm3_basic_handler( | |
| 108 new MockAuthHandler(HttpAuth::AUTH_SCHEME_BASIC, | |
| 109 kRealm3, | |
| 110 HttpAuth::AUTH_PROXY)); | |
| 111 cache.Add( | |
| 112 origin, | |
| 113 realm3_basic_handler->realm(), | |
| 114 realm3_basic_handler->auth_scheme(), | |
| 115 "Basic realm=Realm3", | |
| 116 CreateASCIICredentials("realm3-basic-user", "realm3-basic-password"), | |
| 117 std::string()); | |
| 118 | |
| 119 scoped_ptr<HttpAuthHandler> realm3_digest_handler( | |
| 120 new MockAuthHandler(HttpAuth::AUTH_SCHEME_DIGEST, | |
| 121 kRealm3, | |
| 122 HttpAuth::AUTH_PROXY)); | |
| 123 cache.Add(origin, realm3_digest_handler->realm(), | |
| 124 realm3_digest_handler->auth_scheme(), "Digest realm=Realm3", | |
| 125 CreateASCIICredentials("realm3-digest-user", | |
| 126 "realm3-digest-password"), | |
| 127 "/baz/index.html"); | |
| 128 | |
| 129 scoped_ptr<HttpAuthHandler> realm4_basic_handler( | |
| 130 new MockAuthHandler(HttpAuth::AUTH_SCHEME_BASIC, | |
| 131 kRealm4, | |
| 132 HttpAuth::AUTH_SERVER)); | |
| 133 cache.Add(origin, realm4_basic_handler->realm(), | |
| 134 realm4_basic_handler->auth_scheme(), "Basic realm=Realm4", | |
| 135 CreateASCIICredentials("realm4-basic-user", | |
| 136 "realm4-basic-password"), | |
| 137 "/"); | |
| 138 | |
| 139 // There is no Realm5 | |
| 140 entry = cache.Lookup(origin, kRealm5, HttpAuth::AUTH_SCHEME_BASIC); | |
| 141 EXPECT_TRUE(NULL == entry); | |
| 142 | |
| 143 // While Realm3 does exist, the origin scheme is wrong. | |
| 144 entry = cache.Lookup(GURL("https://www.google.com"), kRealm3, | |
| 145 HttpAuth::AUTH_SCHEME_BASIC); | |
| 146 EXPECT_TRUE(NULL == entry); | |
| 147 | |
| 148 // Realm, origin scheme ok, authentication scheme wrong | |
| 149 entry = cache.Lookup | |
| 150 (GURL("http://www.google.com"), kRealm1, HttpAuth::AUTH_SCHEME_DIGEST); | |
| 151 EXPECT_TRUE(NULL == entry); | |
| 152 | |
| 153 // Valid lookup by origin, realm, scheme. | |
| 154 entry = cache.Lookup( | |
| 155 GURL("http://www.google.com:80"), kRealm3, HttpAuth::AUTH_SCHEME_BASIC); | |
| 156 ASSERT_FALSE(NULL == entry); | |
| 157 EXPECT_EQ(HttpAuth::AUTH_SCHEME_BASIC, entry->scheme()); | |
| 158 EXPECT_EQ(kRealm3, entry->realm()); | |
| 159 EXPECT_EQ("Basic realm=Realm3", entry->auth_challenge()); | |
| 160 EXPECT_EQ(ASCIIToUTF16("realm3-basic-user"), entry->credentials().username()); | |
| 161 EXPECT_EQ(ASCIIToUTF16("realm3-basic-password"), | |
| 162 entry->credentials().password()); | |
| 163 | |
| 164 // Valid lookup by origin, realm, scheme when there's a duplicate | |
| 165 // origin, realm in the cache | |
| 166 entry = cache.Lookup( | |
| 167 GURL("http://www.google.com:80"), kRealm3, HttpAuth::AUTH_SCHEME_DIGEST); | |
| 168 ASSERT_FALSE(NULL == entry); | |
| 169 EXPECT_EQ(HttpAuth::AUTH_SCHEME_DIGEST, entry->scheme()); | |
| 170 EXPECT_EQ(kRealm3, entry->realm()); | |
| 171 EXPECT_EQ("Digest realm=Realm3", entry->auth_challenge()); | |
| 172 EXPECT_EQ(ASCIIToUTF16("realm3-digest-user"), | |
| 173 entry->credentials().username()); | |
| 174 EXPECT_EQ(ASCIIToUTF16("realm3-digest-password"), | |
| 175 entry->credentials().password()); | |
| 176 | |
| 177 // Valid lookup by realm. | |
| 178 entry = cache.Lookup(origin, kRealm2, HttpAuth::AUTH_SCHEME_BASIC); | |
| 179 ASSERT_FALSE(NULL == entry); | |
| 180 EXPECT_EQ(HttpAuth::AUTH_SCHEME_BASIC, entry->scheme()); | |
| 181 EXPECT_EQ(kRealm2, entry->realm()); | |
| 182 EXPECT_EQ("Basic realm=Realm2", entry->auth_challenge()); | |
| 183 EXPECT_EQ(ASCIIToUTF16("realm2-user"), entry->credentials().username()); | |
| 184 EXPECT_EQ(ASCIIToUTF16("realm2-password"), entry->credentials().password()); | |
| 185 | |
| 186 // Check that subpaths are recognized. | |
| 187 HttpAuthCache::Entry* realm2_entry = cache.Lookup( | |
| 188 origin, kRealm2, HttpAuth::AUTH_SCHEME_BASIC); | |
| 189 HttpAuthCache::Entry* realm4_entry = cache.Lookup( | |
| 190 origin, kRealm4, HttpAuth::AUTH_SCHEME_BASIC); | |
| 191 EXPECT_FALSE(NULL == realm2_entry); | |
| 192 EXPECT_FALSE(NULL == realm4_entry); | |
| 193 // Realm4 applies to '/' and Realm2 applies to '/foo2/'. | |
| 194 // LookupByPath() should return the closest enclosing path. | |
| 195 // Positive tests: | |
| 196 entry = cache.LookupByPath(origin, "/foo2/index.html"); | |
| 197 EXPECT_TRUE(realm2_entry == entry); | |
| 198 entry = cache.LookupByPath(origin, "/foo2/foobar.html"); | |
| 199 EXPECT_TRUE(realm2_entry == entry); | |
| 200 entry = cache.LookupByPath(origin, "/foo2/bar/index.html"); | |
| 201 EXPECT_TRUE(realm2_entry == entry); | |
| 202 entry = cache.LookupByPath(origin, "/foo2/"); | |
| 203 EXPECT_TRUE(realm2_entry == entry); | |
| 204 entry = cache.LookupByPath(origin, "/foo2"); | |
| 205 EXPECT_TRUE(realm4_entry == entry); | |
| 206 entry = cache.LookupByPath(origin, "/"); | |
| 207 EXPECT_TRUE(realm4_entry == entry); | |
| 208 | |
| 209 // Negative tests: | |
| 210 entry = cache.LookupByPath(origin, "/foo3/index.html"); | |
| 211 EXPECT_FALSE(realm2_entry == entry); | |
| 212 entry = cache.LookupByPath(origin, std::string()); | |
| 213 EXPECT_FALSE(realm2_entry == entry); | |
| 214 | |
| 215 // Confirm we find the same realm, different auth scheme by path lookup | |
| 216 HttpAuthCache::Entry* realm3_digest_entry = | |
| 217 cache.Lookup(origin, kRealm3, HttpAuth::AUTH_SCHEME_DIGEST); | |
| 218 EXPECT_FALSE(NULL == realm3_digest_entry); | |
| 219 entry = cache.LookupByPath(origin, "/baz/index.html"); | |
| 220 EXPECT_TRUE(realm3_digest_entry == entry); | |
| 221 entry = cache.LookupByPath(origin, "/baz/"); | |
| 222 EXPECT_TRUE(realm3_digest_entry == entry); | |
| 223 entry = cache.LookupByPath(origin, "/baz"); | |
| 224 EXPECT_FALSE(realm3_digest_entry == entry); | |
| 225 | |
| 226 // Confirm we find the same realm, different auth scheme by path lookup | |
| 227 HttpAuthCache::Entry* realm3DigestEntry = | |
| 228 cache.Lookup(origin, kRealm3, HttpAuth::AUTH_SCHEME_DIGEST); | |
| 229 EXPECT_FALSE(NULL == realm3DigestEntry); | |
| 230 entry = cache.LookupByPath(origin, "/baz/index.html"); | |
| 231 EXPECT_TRUE(realm3DigestEntry == entry); | |
| 232 entry = cache.LookupByPath(origin, "/baz/"); | |
| 233 EXPECT_TRUE(realm3DigestEntry == entry); | |
| 234 entry = cache.LookupByPath(origin, "/baz"); | |
| 235 EXPECT_FALSE(realm3DigestEntry == entry); | |
| 236 | |
| 237 // Lookup using empty path (may be used for proxy). | |
| 238 entry = cache.LookupByPath(origin, std::string()); | |
| 239 EXPECT_FALSE(NULL == entry); | |
| 240 EXPECT_EQ(HttpAuth::AUTH_SCHEME_BASIC, entry->scheme()); | |
| 241 EXPECT_EQ(kRealm3, entry->realm()); | |
| 242 } | |
| 243 | |
| 244 TEST(HttpAuthCacheTest, AddPath) { | |
| 245 HttpAuthCache::Entry entry; | |
| 246 | |
| 247 // All of these paths have a common root /1/2/2/4/5/ | |
| 248 entry.AddPath("/1/2/3/4/5/x.txt"); | |
| 249 entry.AddPath("/1/2/3/4/5/y.txt"); | |
| 250 entry.AddPath("/1/2/3/4/5/z.txt"); | |
| 251 | |
| 252 EXPECT_EQ(1U, entry.paths_.size()); | |
| 253 EXPECT_EQ("/1/2/3/4/5/", entry.paths_.front()); | |
| 254 | |
| 255 // Add a new entry (not a subpath). | |
| 256 entry.AddPath("/1/XXX/q"); | |
| 257 EXPECT_EQ(2U, entry.paths_.size()); | |
| 258 EXPECT_EQ("/1/XXX/", entry.paths_.front()); | |
| 259 EXPECT_EQ("/1/2/3/4/5/", entry.paths_.back()); | |
| 260 | |
| 261 // Add containing paths of /1/2/3/4/5/ -- should swallow up the deeper paths. | |
| 262 entry.AddPath("/1/2/3/4/x.txt"); | |
| 263 EXPECT_EQ(2U, entry.paths_.size()); | |
| 264 EXPECT_EQ("/1/2/3/4/", entry.paths_.front()); | |
| 265 EXPECT_EQ("/1/XXX/", entry.paths_.back()); | |
| 266 entry.AddPath("/1/2/3/x"); | |
| 267 EXPECT_EQ(2U, entry.paths_.size()); | |
| 268 EXPECT_EQ("/1/2/3/", entry.paths_.front()); | |
| 269 EXPECT_EQ("/1/XXX/", entry.paths_.back()); | |
| 270 | |
| 271 entry.AddPath("/index.html"); | |
| 272 EXPECT_EQ(1U, entry.paths_.size()); | |
| 273 EXPECT_EQ("/", entry.paths_.front()); | |
| 274 } | |
| 275 | |
| 276 // Calling Add when the realm entry already exists, should append that | |
| 277 // path. | |
| 278 TEST(HttpAuthCacheTest, AddToExistingEntry) { | |
| 279 HttpAuthCache cache; | |
| 280 GURL origin("http://www.foobar.com:70"); | |
| 281 const std::string auth_challenge = "Basic realm=MyRealm"; | |
| 282 | |
| 283 scoped_ptr<HttpAuthHandler> handler( | |
| 284 new MockAuthHandler( | |
| 285 HttpAuth::AUTH_SCHEME_BASIC, "MyRealm", HttpAuth::AUTH_SERVER)); | |
| 286 HttpAuthCache::Entry* orig_entry = cache.Add( | |
| 287 origin, handler->realm(), handler->auth_scheme(), auth_challenge, | |
| 288 CreateASCIICredentials("user1", "password1"), "/x/y/z/"); | |
| 289 cache.Add(origin, handler->realm(), handler->auth_scheme(), auth_challenge, | |
| 290 CreateASCIICredentials("user2", "password2"), "/z/y/x/"); | |
| 291 cache.Add(origin, handler->realm(), handler->auth_scheme(), auth_challenge, | |
| 292 CreateASCIICredentials("user3", "password3"), "/z/y"); | |
| 293 | |
| 294 HttpAuthCache::Entry* entry = cache.Lookup( | |
| 295 origin, "MyRealm", HttpAuth::AUTH_SCHEME_BASIC); | |
| 296 | |
| 297 EXPECT_TRUE(entry == orig_entry); | |
| 298 EXPECT_EQ(ASCIIToUTF16("user3"), entry->credentials().username()); | |
| 299 EXPECT_EQ(ASCIIToUTF16("password3"), entry->credentials().password()); | |
| 300 | |
| 301 EXPECT_EQ(2U, entry->paths_.size()); | |
| 302 EXPECT_EQ("/z/", entry->paths_.front()); | |
| 303 EXPECT_EQ("/x/y/z/", entry->paths_.back()); | |
| 304 } | |
| 305 | |
| 306 TEST(HttpAuthCacheTest, Remove) { | |
| 307 GURL origin("http://foobar2.com"); | |
| 308 | |
| 309 scoped_ptr<HttpAuthHandler> realm1_handler( | |
| 310 new MockAuthHandler( | |
| 311 HttpAuth::AUTH_SCHEME_BASIC, kRealm1, HttpAuth::AUTH_SERVER)); | |
| 312 | |
| 313 scoped_ptr<HttpAuthHandler> realm2_handler( | |
| 314 new MockAuthHandler( | |
| 315 HttpAuth::AUTH_SCHEME_BASIC, kRealm2, HttpAuth::AUTH_SERVER)); | |
| 316 | |
| 317 scoped_ptr<HttpAuthHandler> realm3_basic_handler( | |
| 318 new MockAuthHandler( | |
| 319 HttpAuth::AUTH_SCHEME_BASIC, kRealm3, HttpAuth::AUTH_SERVER)); | |
| 320 | |
| 321 scoped_ptr<HttpAuthHandler> realm3_digest_handler( | |
| 322 new MockAuthHandler( | |
| 323 HttpAuth::AUTH_SCHEME_DIGEST, kRealm3, HttpAuth::AUTH_SERVER)); | |
| 324 | |
| 325 HttpAuthCache cache; | |
| 326 cache.Add(origin, realm1_handler->realm(), realm1_handler->auth_scheme(), | |
| 327 "basic realm=Realm1", AuthCredentials(kAlice, k123), "/"); | |
| 328 cache.Add(origin, realm2_handler->realm(), realm2_handler->auth_scheme(), | |
| 329 "basic realm=Realm2", CreateASCIICredentials("bob", "princess"), | |
| 330 "/"); | |
| 331 cache.Add(origin, realm3_basic_handler->realm(), | |
| 332 realm3_basic_handler->auth_scheme(), "basic realm=Realm3", | |
| 333 AuthCredentials(kAdmin, kPassword), "/"); | |
| 334 cache.Add(origin, realm3_digest_handler->realm(), | |
| 335 realm3_digest_handler->auth_scheme(), "digest realm=Realm3", | |
| 336 AuthCredentials(kRoot, kWileCoyote), "/"); | |
| 337 | |
| 338 // Fails, because there is no realm "Realm5". | |
| 339 EXPECT_FALSE(cache.Remove( | |
| 340 origin, kRealm5, HttpAuth::AUTH_SCHEME_BASIC, | |
| 341 AuthCredentials(kAlice, k123))); | |
| 342 | |
| 343 // Fails because the origin is wrong. | |
| 344 EXPECT_FALSE(cache.Remove(GURL("http://foobar2.com:100"), | |
| 345 kRealm1, | |
| 346 HttpAuth::AUTH_SCHEME_BASIC, | |
| 347 AuthCredentials(kAlice, k123))); | |
| 348 | |
| 349 // Fails because the username is wrong. | |
| 350 EXPECT_FALSE(cache.Remove( | |
| 351 origin, kRealm1, HttpAuth::AUTH_SCHEME_BASIC, | |
| 352 AuthCredentials(kAlice2, k123))); | |
| 353 | |
| 354 // Fails because the password is wrong. | |
| 355 EXPECT_FALSE(cache.Remove( | |
| 356 origin, kRealm1, HttpAuth::AUTH_SCHEME_BASIC, | |
| 357 AuthCredentials(kAlice, k1234))); | |
| 358 | |
| 359 // Fails because the authentication type is wrong. | |
| 360 EXPECT_FALSE(cache.Remove( | |
| 361 origin, kRealm1, HttpAuth::AUTH_SCHEME_DIGEST, | |
| 362 AuthCredentials(kAlice, k123))); | |
| 363 | |
| 364 // Succeeds. | |
| 365 EXPECT_TRUE(cache.Remove( | |
| 366 origin, kRealm1, HttpAuth::AUTH_SCHEME_BASIC, | |
| 367 AuthCredentials(kAlice, k123))); | |
| 368 | |
| 369 // Fails because we just deleted the entry! | |
| 370 EXPECT_FALSE(cache.Remove( | |
| 371 origin, kRealm1, HttpAuth::AUTH_SCHEME_BASIC, | |
| 372 AuthCredentials(kAlice, k123))); | |
| 373 | |
| 374 // Succeed when there are two authentication types for the same origin,realm. | |
| 375 EXPECT_TRUE(cache.Remove( | |
| 376 origin, kRealm3, HttpAuth::AUTH_SCHEME_DIGEST, | |
| 377 AuthCredentials(kRoot, kWileCoyote))); | |
| 378 | |
| 379 // Succeed as above, but when entries were added in opposite order | |
| 380 cache.Add(origin, realm3_digest_handler->realm(), | |
| 381 realm3_digest_handler->auth_scheme(), "digest realm=Realm3", | |
| 382 AuthCredentials(kRoot, kWileCoyote), "/"); | |
| 383 EXPECT_TRUE(cache.Remove( | |
| 384 origin, kRealm3, HttpAuth::AUTH_SCHEME_BASIC, | |
| 385 AuthCredentials(kAdmin, kPassword))); | |
| 386 | |
| 387 // Make sure that removing one entry still leaves the other available for | |
| 388 // lookup. | |
| 389 HttpAuthCache::Entry* entry = cache.Lookup( | |
| 390 origin, kRealm3, HttpAuth::AUTH_SCHEME_DIGEST); | |
| 391 EXPECT_FALSE(NULL == entry); | |
| 392 } | |
| 393 | |
| 394 TEST(HttpAuthCacheTest, UpdateStaleChallenge) { | |
| 395 HttpAuthCache cache; | |
| 396 GURL origin("http://foobar2.com"); | |
| 397 scoped_ptr<HttpAuthHandler> digest_handler( | |
| 398 new MockAuthHandler( | |
| 399 HttpAuth::AUTH_SCHEME_DIGEST, kRealm1, HttpAuth::AUTH_PROXY)); | |
| 400 HttpAuthCache::Entry* entry_pre = cache.Add( | |
| 401 origin, | |
| 402 digest_handler->realm(), | |
| 403 digest_handler->auth_scheme(), | |
| 404 "Digest realm=Realm1," | |
| 405 "nonce=\"s3MzvFhaBAA=4c520af5acd9d8d7ae26947529d18c8eae1e98f4\"", | |
| 406 CreateASCIICredentials("realm-digest-user", "realm-digest-password"), | |
| 407 "/baz/index.html"); | |
| 408 ASSERT_TRUE(entry_pre != NULL); | |
| 409 | |
| 410 EXPECT_EQ(2, entry_pre->IncrementNonceCount()); | |
| 411 EXPECT_EQ(3, entry_pre->IncrementNonceCount()); | |
| 412 EXPECT_EQ(4, entry_pre->IncrementNonceCount()); | |
| 413 | |
| 414 bool update_success = cache.UpdateStaleChallenge( | |
| 415 origin, | |
| 416 digest_handler->realm(), | |
| 417 digest_handler->auth_scheme(), | |
| 418 "Digest realm=Realm1," | |
| 419 "nonce=\"claGgoRXBAA=7583377687842fdb7b56ba0555d175baa0b800e3\"," | |
| 420 "stale=\"true\""); | |
| 421 EXPECT_TRUE(update_success); | |
| 422 | |
| 423 // After the stale update, the entry should still exist in the cache and | |
| 424 // the nonce count should be reset to 0. | |
| 425 HttpAuthCache::Entry* entry_post = cache.Lookup( | |
| 426 origin, | |
| 427 digest_handler->realm(), | |
| 428 digest_handler->auth_scheme()); | |
| 429 ASSERT_TRUE(entry_post != NULL); | |
| 430 EXPECT_EQ(2, entry_post->IncrementNonceCount()); | |
| 431 | |
| 432 // UpdateStaleChallenge will fail if an entry doesn't exist in the cache. | |
| 433 bool update_failure = cache.UpdateStaleChallenge( | |
| 434 origin, | |
| 435 kRealm2, | |
| 436 digest_handler->auth_scheme(), | |
| 437 "Digest realm=Realm2," | |
| 438 "nonce=\"claGgoRXBAA=7583377687842fdb7b56ba0555d175baa0b800e3\"," | |
| 439 "stale=\"true\""); | |
| 440 EXPECT_FALSE(update_failure); | |
| 441 } | |
| 442 | |
| 443 TEST(HttpAuthCacheTest, UpdateAllFrom) { | |
| 444 GURL origin("http://example.com"); | |
| 445 std::string path("/some/path"); | |
| 446 std::string another_path("/another/path"); | |
| 447 | |
| 448 scoped_ptr<HttpAuthHandler> realm1_handler( | |
| 449 new MockAuthHandler( | |
| 450 HttpAuth::AUTH_SCHEME_BASIC, kRealm1, HttpAuth::AUTH_SERVER)); | |
| 451 | |
| 452 scoped_ptr<HttpAuthHandler> realm2_handler( | |
| 453 new MockAuthHandler( | |
| 454 HttpAuth::AUTH_SCHEME_BASIC, kRealm2, HttpAuth::AUTH_PROXY)); | |
| 455 | |
| 456 scoped_ptr<HttpAuthHandler> realm3_digest_handler( | |
| 457 new MockAuthHandler( | |
| 458 HttpAuth::AUTH_SCHEME_DIGEST, kRealm3, HttpAuth::AUTH_SERVER)); | |
| 459 | |
| 460 scoped_ptr<HttpAuthHandler> realm4_handler( | |
| 461 new MockAuthHandler( | |
| 462 HttpAuth::AUTH_SCHEME_BASIC, kRealm4, HttpAuth::AUTH_SERVER)); | |
| 463 | |
| 464 HttpAuthCache first_cache; | |
| 465 HttpAuthCache::Entry* entry; | |
| 466 | |
| 467 first_cache.Add(origin, realm1_handler->realm(), | |
| 468 realm1_handler->auth_scheme(), "basic realm=Realm1", | |
| 469 AuthCredentials(kAlice, k123), path); | |
| 470 first_cache.Add(origin, realm2_handler->realm(), | |
| 471 realm2_handler->auth_scheme(), "basic realm=Realm2", | |
| 472 AuthCredentials(kAlice2, k1234), path); | |
| 473 first_cache.Add(origin, realm3_digest_handler->realm(), | |
| 474 realm3_digest_handler->auth_scheme(), "digest realm=Realm3", | |
| 475 AuthCredentials(kRoot, kWileCoyote), path); | |
| 476 entry = first_cache.Add( | |
| 477 origin, realm3_digest_handler->realm(), | |
| 478 realm3_digest_handler->auth_scheme(), "digest realm=Realm3", | |
| 479 AuthCredentials(kRoot, kWileCoyote), another_path); | |
| 480 | |
| 481 EXPECT_EQ(2, entry->IncrementNonceCount()); | |
| 482 | |
| 483 HttpAuthCache second_cache; | |
| 484 // Will be overwritten by kRoot:kWileCoyote. | |
| 485 second_cache.Add(origin, realm3_digest_handler->realm(), | |
| 486 realm3_digest_handler->auth_scheme(), "digest realm=Realm3", | |
| 487 AuthCredentials(kAlice2, k1234), path); | |
| 488 // Should be left intact. | |
| 489 second_cache.Add(origin, realm4_handler->realm(), | |
| 490 realm4_handler->auth_scheme(), "basic realm=Realm4", | |
| 491 AuthCredentials(kAdmin, kRoot), path); | |
| 492 | |
| 493 second_cache.UpdateAllFrom(first_cache); | |
| 494 | |
| 495 // Copied from first_cache. | |
| 496 entry = second_cache.Lookup(origin, kRealm1, HttpAuth::AUTH_SCHEME_BASIC); | |
| 497 EXPECT_TRUE(NULL != entry); | |
| 498 EXPECT_EQ(kAlice, entry->credentials().username()); | |
| 499 EXPECT_EQ(k123, entry->credentials().password()); | |
| 500 | |
| 501 // Copied from first_cache. | |
| 502 entry = second_cache.Lookup(origin, kRealm2, HttpAuth::AUTH_SCHEME_BASIC); | |
| 503 EXPECT_TRUE(NULL != entry); | |
| 504 EXPECT_EQ(kAlice2, entry->credentials().username()); | |
| 505 EXPECT_EQ(k1234, entry->credentials().password()); | |
| 506 | |
| 507 // Overwritten from first_cache. | |
| 508 entry = second_cache.Lookup(origin, kRealm3, HttpAuth::AUTH_SCHEME_DIGEST); | |
| 509 EXPECT_TRUE(NULL != entry); | |
| 510 EXPECT_EQ(kRoot, entry->credentials().username()); | |
| 511 EXPECT_EQ(kWileCoyote, entry->credentials().password()); | |
| 512 // Nonce count should get copied. | |
| 513 EXPECT_EQ(3, entry->IncrementNonceCount()); | |
| 514 | |
| 515 // All paths should get copied. | |
| 516 entry = second_cache.LookupByPath(origin, another_path); | |
| 517 EXPECT_TRUE(NULL != entry); | |
| 518 EXPECT_EQ(kRoot, entry->credentials().username()); | |
| 519 EXPECT_EQ(kWileCoyote, entry->credentials().password()); | |
| 520 | |
| 521 // Left intact in second_cache. | |
| 522 entry = second_cache.Lookup(origin, kRealm4, HttpAuth::AUTH_SCHEME_BASIC); | |
| 523 EXPECT_TRUE(NULL != entry); | |
| 524 EXPECT_EQ(kAdmin, entry->credentials().username()); | |
| 525 EXPECT_EQ(kRoot, entry->credentials().password()); | |
| 526 } | |
| 527 | |
| 528 // Test fixture class for eviction tests (contains helpers for bulk | |
| 529 // insertion and existence testing). | |
| 530 class HttpAuthCacheEvictionTest : public testing::Test { | |
| 531 protected: | |
| 532 HttpAuthCacheEvictionTest() : origin_("http://www.google.com") { } | |
| 533 | |
| 534 std::string GenerateRealm(int realm_i) { | |
| 535 return base::StringPrintf("Realm %d", realm_i); | |
| 536 } | |
| 537 | |
| 538 std::string GeneratePath(int realm_i, int path_i) { | |
| 539 return base::StringPrintf("/%d/%d/x/y", realm_i, path_i); | |
| 540 } | |
| 541 | |
| 542 void AddRealm(int realm_i) { | |
| 543 AddPathToRealm(realm_i, 0); | |
| 544 } | |
| 545 | |
| 546 void AddPathToRealm(int realm_i, int path_i) { | |
| 547 cache_.Add(origin_, | |
| 548 GenerateRealm(realm_i), | |
| 549 HttpAuth::AUTH_SCHEME_BASIC, | |
| 550 std::string(), | |
| 551 AuthCredentials(kUsername, kPassword), | |
| 552 GeneratePath(realm_i, path_i)); | |
| 553 } | |
| 554 | |
| 555 void CheckRealmExistence(int realm_i, bool exists) { | |
| 556 const HttpAuthCache::Entry* entry = | |
| 557 cache_.Lookup( | |
| 558 origin_, GenerateRealm(realm_i), HttpAuth::AUTH_SCHEME_BASIC); | |
| 559 if (exists) { | |
| 560 EXPECT_FALSE(entry == NULL); | |
| 561 EXPECT_EQ(GenerateRealm(realm_i), entry->realm()); | |
| 562 } else { | |
| 563 EXPECT_TRUE(entry == NULL); | |
| 564 } | |
| 565 } | |
| 566 | |
| 567 void CheckPathExistence(int realm_i, int path_i, bool exists) { | |
| 568 const HttpAuthCache::Entry* entry = | |
| 569 cache_.LookupByPath(origin_, GeneratePath(realm_i, path_i)); | |
| 570 if (exists) { | |
| 571 EXPECT_FALSE(entry == NULL); | |
| 572 EXPECT_EQ(GenerateRealm(realm_i), entry->realm()); | |
| 573 } else { | |
| 574 EXPECT_TRUE(entry == NULL); | |
| 575 } | |
| 576 } | |
| 577 | |
| 578 GURL origin_; | |
| 579 HttpAuthCache cache_; | |
| 580 | |
| 581 static const int kMaxPaths = HttpAuthCache::kMaxNumPathsPerRealmEntry; | |
| 582 static const int kMaxRealms = HttpAuthCache::kMaxNumRealmEntries; | |
| 583 }; | |
| 584 | |
| 585 // Add the maxinim number of realm entries to the cache. Each of these entries | |
| 586 // must still be retrievable. Next add three more entries -- since the cache is | |
| 587 // full this causes FIFO eviction of the first three entries. | |
| 588 TEST_F(HttpAuthCacheEvictionTest, RealmEntryEviction) { | |
| 589 for (int i = 0; i < kMaxRealms; ++i) | |
| 590 AddRealm(i); | |
| 591 | |
| 592 for (int i = 0; i < kMaxRealms; ++i) | |
| 593 CheckRealmExistence(i, true); | |
| 594 | |
| 595 for (int i = 0; i < 3; ++i) | |
| 596 AddRealm(i + kMaxRealms); | |
| 597 | |
| 598 for (int i = 0; i < 3; ++i) | |
| 599 CheckRealmExistence(i, false); | |
| 600 | |
| 601 for (int i = 0; i < kMaxRealms; ++i) | |
| 602 CheckRealmExistence(i + 3, true); | |
| 603 } | |
| 604 | |
| 605 // Add the maximum number of paths to a single realm entry. Each of these | |
| 606 // paths should be retrievable. Next add 3 more paths -- since the cache is | |
| 607 // full this causes FIFO eviction of the first three paths. | |
| 608 TEST_F(HttpAuthCacheEvictionTest, RealmPathEviction) { | |
| 609 for (int i = 0; i < kMaxPaths; ++i) | |
| 610 AddPathToRealm(0, i); | |
| 611 | |
| 612 for (int i = 1; i < kMaxRealms; ++i) | |
| 613 AddRealm(i); | |
| 614 | |
| 615 for (int i = 0; i < 3; ++i) | |
| 616 AddPathToRealm(0, i + kMaxPaths); | |
| 617 | |
| 618 for (int i = 0; i < 3; ++i) | |
| 619 CheckPathExistence(0, i, false); | |
| 620 | |
| 621 for (int i = 0; i < kMaxPaths; ++i) | |
| 622 CheckPathExistence(0, i + 3, true); | |
| 623 | |
| 624 for (int i = 0; i < kMaxRealms; ++i) | |
| 625 CheckRealmExistence(i, true); | |
| 626 } | |
| 627 | |
| 628 } // namespace net | |
| OLD | NEW |