|
45 | 45 | import com.sap.cloud.sdk.cloudplatform.resilience.ResilienceConfiguration;
|
46 | 46 | import com.sap.cloud.sdk.cloudplatform.resilience.ResilienceIsolationMode;
|
47 | 47 | import com.sap.cloud.sdk.cloudplatform.security.AuthToken;
|
| 48 | +import com.sap.cloud.sdk.cloudplatform.security.principal.DefaultPrincipal; |
48 | 49 | import com.sap.cloud.sdk.cloudplatform.tenant.DefaultTenant;
|
49 | 50 | import com.sap.cloud.sdk.cloudplatform.tenant.TenantAccessor;
|
50 | 51 | import com.sap.cloud.sdk.testutil.TestContext;
|
@@ -209,26 +210,43 @@ void testSubdomainTenantStrategy()
|
209 | 210 |
|
210 | 211 | assertThatThrownBy(service::retrieveAccessToken);
|
211 | 212 |
|
212 |
| - context.setTenant(new DefaultTenant("tenant", "localhost")); |
213 |
| - context.setPrincipal(); |
214 |
| - final String token = |
| 213 | + final var tenant = new DefaultTenant("tenant", "ma"); |
| 214 | + var principal = new DefaultPrincipal("user1"); |
| 215 | + context.setTenant(tenant); |
| 216 | + context.setPrincipal(principal); |
| 217 | + var token = |
215 | 218 | JwtGenerator
|
216 | 219 | .getInstance(Service.IAS, "clientid")
|
217 |
| - .withClaimValue("app_tid", "tenant") |
| 220 | + .withClaimValue("app_tid", tenant.getTenantId()) |
| 221 | + .withClaimValue("user_uuid", principal.getPrincipalId()) |
218 | 222 | .createToken()
|
219 | 223 | .getTokenValue();
|
220 | 224 | context.setAuthToken(new AuthToken(JWT.decode(token)));
|
221 | 225 |
|
| 226 | + service.retrieveAccessToken(); |
| 227 | + service.retrieveAccessToken(); |
| 228 | + |
| 229 | + principal = new DefaultPrincipal("user2"); |
| 230 | + token = |
| 231 | + JwtGenerator |
| 232 | + .getInstance(Service.IAS, "clientid") |
| 233 | + .withClaimValue("app_tid", tenant.getTenantId()) |
| 234 | + .withClaimValue("user_uuid", principal.getPrincipalId()) |
| 235 | + .createToken() |
| 236 | + .getTokenValue(); |
| 237 | + context.setAuthToken(new AuthToken(JWT.decode(token))); |
| 238 | + |
| 239 | + service.retrieveAccessToken(); |
222 | 240 | service.retrieveAccessToken();
|
223 | 241 |
|
224 | 242 | SERVER_1
|
225 | 243 | .verify(
|
226 |
| - 1, |
| 244 | + 2, |
227 | 245 | postRequestedFor(urlEqualTo("/oauth/token"))
|
228 |
| - .withRequestBody(containing("app_tid=tenant")) |
| 246 | + .withRequestBody(containing("app_tid="+tenant.getTenantId())) |
229 | 247 | .withRequestBody(
|
230 | 248 | containing("grant_type=urn:ietf:params:oauth:grant-type:jwt-bearer".replace(":", "%3A")))
|
231 |
| - .withRequestBody(containing("assertion=" + token))); |
| 249 | + .withRequestBody(containing("assertion="))); |
232 | 250 | }
|
233 | 251 | }
|
234 | 252 |
|
|
0 commit comments