additional tests, one fix

2017-08-08 23:56:43 -06:00
parent 476ab415a4
commit 8f740ace73
3 changed files with 56 additions and 3 deletions
--- a/webgoat-lessons/missing-function-ac/src/test/org/owasp/webgoat/plugin/MissingFunctionACHiddenMenusTest.java
+++ b/webgoat-lessons/missing-function-ac/src/test/org/owasp/webgoat/plugin/MissingFunctionACHiddenMenusTest.java
@ -0,0 +1,53 @@
+package org.owasp.webgoat.plugin;
+
+import org.hamcrest.CoreMatchers;
+import org.junit.Before;
+import org.junit.Test;
+import org.junit.runner.RunWith;
+import org.mockito.runners.MockitoJUnitRunner;
+import org.owasp.webgoat.assignments.AssignmentEndpointTest;
+import org.springframework.test.web.servlet.MockMvc;
+import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
+
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.jsonPath;
+import static org.springframework.test.web.servlet.setup.MockMvcBuilders.standaloneSetup;
+
+@RunWith(MockitoJUnitRunner.class)
+public class MissingFunctionACHiddenMenusTest extends AssignmentEndpointTest {
+
+    private MockMvc mockMvc;
+
+    @Before
+    public void setup() {
+        MissingFunctionACHiddenMenus hiddenMenus = new MissingFunctionACHiddenMenus();
+        init(hiddenMenus);
+        this.mockMvc = standaloneSetup(hiddenMenus).build();
+    }
+
+    @Test
+    public void HiddenMenusSuccess() throws  Exception {
+        mockMvc.perform(MockMvcRequestBuilders.post("/access-control/hidden-menu")
+                .param("hiddenMenu1", "Users")
+                .param("hiddenMenu2", "Config"))
+                .andExpect(jsonPath("$.feedback", CoreMatchers.is(messages.getMessage("access-control.hidden-menus.success"))))
+                .andExpect(jsonPath("$.lessonCompleted", CoreMatchers.is(true)));
+    }
+
+    @Test
+    public void HiddenMenusClose() throws  Exception {
+        mockMvc.perform(MockMvcRequestBuilders.post("/access-control/hidden-menu")
+                .param("hiddenMenu1", "Config")
+                .param("hiddenMenu2", "Users"))
+                .andExpect(jsonPath("$.feedback", CoreMatchers.is(messages.getMessage("access-control.hidden-menus.close"))))
+                .andExpect(jsonPath("$.lessonCompleted", CoreMatchers.is(false)));
+    }
+
+    @Test
+    public void HiddenMenusFailure() throws  Exception {
+        mockMvc.perform(MockMvcRequestBuilders.post("/access-control/hidden-menu")
+                .param("hiddenMenu1", "Foo")
+                .param("hiddenMenu2", "Bar"))
+                .andExpect(jsonPath("$.feedback", CoreMatchers.is(messages.getMessage("access-control.hidden-menus.failure"))))
+                .andExpect(jsonPath("$.lessonCompleted", CoreMatchers.is(false)));
+    }
+}