New Test(s) for AAA (disable/enable authentication and verify)

[integration.git] / test / csit / suites / karaf-compatible / 900__AAA / 010_Credential_Authentication.txt

diff --git a/test/csit/suites/karaf-compatible/900__AAA/010_Credential_Authentication.txt b/test/csit/suites/karaf-compatible/900__AAA/010_Credential_Authentication.txt
index 94cf7514af0a41c1076a090a72649cdba5cd0d3f..dadfed0023c01213200c6be9a06098f31747952c 100644 (file)
--- a/test/csit/suites/karaf-compatible/900__AAA/010_Credential_Authentication.txt
+++ b/test/csit/suites/karaf-compatible/900__AAA/010_Credential_Authentication.txt
@@ -17,12 +17,9 @@ Resource          ../../../libraries/AAAKeywords.txt
 *** Test Cases ***
 Get Token With Valid Username And Password
     [Documentation]    Sanity test to ensure default user/password can get a token
-    ${auth_data}=    Create Auth Data    ${USER}    ${PWD}
-    ${resp}=    AAA Login    ${CONTROLLER}    ${auth_data}
-    ${auth_token}=    Extract Value From Content    ${resp.content}    /access_token    strip
+    ${auth_token}=    Get Auth Token
     Should Be String    ${auth_token}
     Log    Token: ${auth_token}
-    Should Be Equal As Strings    ${resp.status_code}    201
     Validate Token Format    ${auth_token}
 
 Fail To Get Token With Invalid Username And Password
@@ -37,48 +34,47 @@ Fail To Get Token With Invalid Username And Password
 
 Create Token with Client Authorization
     [Documentation]    Get a token using client domain
-    ${auth_data}=    Create Auth Data    ${USER}    ${PWD}    ${SCOPE}    dlux    secrete
-    ${resp}=    AAA Login    ${CONTROLLER}    ${auth_data}
-    ${auth_token}=    Extract Value From Content    ${resp.content}    /access_token    strip
+    ${auth_token}=    Get Auth Token    ${USER}    ${PWD}    ${SCOPE}    dlux    secrete
     Should Be String    ${auth_token}
     Log    Token: ${auth_token}
-    Should Be Equal As Strings    ${resp.status_code}    201
     Validate Token Format    ${auth_token}
 
 Token Authentication In REST Request
     [Documentation]    Use a token to make a successful REST transaction
-    ${auth_data}=    Create Auth Data    ${USER}    ${PWD}
-    ${resp}=    AAA Login    ${CONTROLLER}    ${auth_data}
-    ${auth_token}=    Extract Value From Content    ${resp.content}    /access_token    strip
-    Create Session    ODL_SESSION    http://${CONTROLLER}:8181
-    ${headers}=    Create Dictionary    Content-Type    application/x-www-form-urlencoded
-    Set To Dictionary    ${headers}    Authorization    Bearer ${auth_token}
-    ${resp}=    RequestsLibrary.GET    ODL_SESSION    ${OPERATIONAL_NODES_API}    headers=${headers}
-    Log    STATUS_CODE: ${resp.status_code} CONTENT: ${resp.content}
-    Should Be Equal As Strings    ${resp.status_code}    200
-    Should Contain    ${resp.content}    nodes
+    ${auth_token}=    Get Auth Token
+    Make REST Transaction    200    ${auth_token}
 
-Revoke Token
+Revoke Token And Verify Transaction Fails
     [Documentation]    negative test to revoke valid token and check that REST transaction fails
-    ${auth_data}=    Create Auth Data    ${USER}    ${PWD}
-    ${resp}=    AAA Login    ${CONTROLLER}    ${auth_data}
-    ${auth_token}=    Extract Value From Content    ${resp.content}    /access_token    strip
+    ${auth_token}=    Get Auth Token
+    Make REST Transaction    200    ${auth_token}
+    Revoke Auth Token    ${auth_token}
+    Make REST Transaction    401    ${auth_token}
+
+Disable Authentication And Re-Enable Authentication
+    [Documentation]    Toggles authentication off and verifies that no login credentials are needed for REST transactions
+    Disable Authentication On Controller    ${CONTROLLER}
+    Wait Until Keyword Succeeds    10s    1s    Make REST Transaction    200
+    Enable Authentication On Controller    ${CONTROLLER}
+    Wait Until Keyword Succeeds    10s    1s    Validate That Authentication Fails With Wrong Token
+    ${auth_token}=    Get Auth Token
+    Make REST Transaction    200    ${auth_token}
+
+*** Keywords ***
+Validate That Authentication Fails With Wrong Token
+    ${bad_token}=    Set Variable    notARealToken
+    Make REST Transaction    401    ${bad_token}
+
+Make REST Transaction
+    [Arguments]    ${expected_status_code}    ${auth_data}=${EMPTY}
     Create Session    ODL_SESSION    http://${CONTROLLER}:8181
     ${headers}=    Create Dictionary    Content-Type    application/x-www-form-urlencoded
-    Set To Dictionary    ${headers}    Authorization    Bearer ${auth_token}
+    Run Keyword If    "${auth_data}" != "${EMPTY}"    Set To Dictionary    ${headers}    Authorization    Bearer ${auth_data}
     ${resp}=    RequestsLibrary.GET    ODL_SESSION    ${OPERATIONAL_NODES_API}    headers=${headers}
     Log    STATUS_CODE: ${resp.status_code} CONTENT: ${resp.content}
-    Should Be Equal As Strings    ${resp.status_code}    200
+    Should Be Equal As Strings    ${resp.status_code}    ${expected_status_code}
     Should Contain    ${resp.content}    nodes
-    ${headers}=    Create Dictionary    Content-Type    application/x-www-form-urlencoded
-    ${resp}=    RequestsLibrary.POST    ODL_SESSION    ${REVOKE_TOKEN_API}    data=${auth_token}    headers=${headers}
-    Should Be Equal As Strings    ${resp.status_code}    204
-    Set To Dictionary    ${headers}    Authorization    Bearer ${auth_token}
-    ${resp}=    RequestsLibrary.GET    ODL_SESSION    ${OPERATIONAL_NODES_API}    headers=${headers}
-    Log    STATUS_CODE: ${resp.status_code} CONTENT: ${resp.content}
-    Should Be Equal As Strings    ${resp.status_code}    401
 
-*** Keywords ***
 Credential Authentication Suite Setup
     Log    Suite Setup