89f43229ab
* upgrade springboot version and some related unit test fixes * removed log for test * removed junit version property
73 lines
2.6 KiB
Java
73 lines
2.6 KiB
Java
package org.owasp.webgoat;
|
|
|
|
import static org.junit.jupiter.api.Assertions.assertTrue;
|
|
|
|
import java.io.IOException;
|
|
import java.util.HashMap;
|
|
import java.util.Map;
|
|
|
|
import org.junit.jupiter.api.Test;
|
|
|
|
import io.restassured.RestAssured;
|
|
|
|
public class WebWolfTest extends IntegrationTest {
|
|
|
|
@Test
|
|
public void runTests() throws IOException {
|
|
startLesson("WebWolfIntroduction");
|
|
|
|
//Assignment 3
|
|
Map<String, Object> params = new HashMap<>();
|
|
params.clear();
|
|
params.put("email", getWebgoatUser()+"@webgoat.org");
|
|
checkAssignment(url("/WebGoat/WebWolf/mail/send"), params, false);
|
|
|
|
String responseBody = RestAssured.given()
|
|
.when()
|
|
.relaxedHTTPSValidation()
|
|
.cookie("WEBWOLFSESSION", getWebWolfCookie())
|
|
.get(webWolfUrl("/WebWolf/mail"))
|
|
.then()
|
|
.extract().response().getBody().asString();
|
|
|
|
String uniqueCode = responseBody.replace("%20", " ");
|
|
uniqueCode = uniqueCode.substring(21+uniqueCode.lastIndexOf("your unique code is: "),uniqueCode.lastIndexOf("your unique code is: ")+(21+getWebgoatUser().length()));
|
|
params.clear();
|
|
params.put("uniqueCode", uniqueCode);
|
|
checkAssignment(url("/WebGoat/WebWolf/mail"), params, true);
|
|
|
|
//Assignment 4
|
|
RestAssured.given()
|
|
.when()
|
|
.relaxedHTTPSValidation()
|
|
.cookie("JSESSIONID", getWebGoatCookie())
|
|
.queryParams(params)
|
|
.get(url("/WebGoat/WebWolf/landing/password-reset"))
|
|
.then()
|
|
.statusCode(200);
|
|
RestAssured.given()
|
|
.when()
|
|
.relaxedHTTPSValidation()
|
|
.cookie("WEBWOLFSESSION", getWebWolfCookie())
|
|
.queryParams(params)
|
|
.get(webWolfUrl("/landing"))
|
|
.then()
|
|
.statusCode(200);
|
|
responseBody = RestAssured.given()
|
|
.when()
|
|
.relaxedHTTPSValidation()
|
|
.cookie("WEBWOLFSESSION", getWebWolfCookie())
|
|
.get(webWolfUrl("/WebWolf/requests"))
|
|
.then()
|
|
.extract().response().getBody().asString();
|
|
assertTrue(responseBody.contains(uniqueCode));
|
|
params.clear();
|
|
params.put("uniqueCode", uniqueCode);
|
|
checkAssignment(url("/WebGoat/WebWolf/landing"), params, true);
|
|
|
|
checkResults("/WebWolf");
|
|
|
|
}
|
|
|
|
}
|