放心承载认证

Question

我对使用Rest-Assured、Java和Api测试还不熟悉，所以请对我温柔一点。当我使用rest-assured测试一个使用承载身份验证的api时，测试失败，导致：-java。网ConnectException:连接被拒绝：连接

我知道这个问题可能与身份验证有关，但我不确定如何使用“Bearer”。我四处搜索，认为我需要用我的用户名和密码提出一个初始请求。然后获取一个令牌，用于承载身份验证。请有人能帮我举一个简单的例子吗？

我的代码是

import com.jayway.restassured.RestAssured;
import static com.jayway.restassured.RestAssured.*;
import static org.hamcrest.Matchers.hasItem;

@BeforeTest
    public void setUp() {
        RestAssured.enableLoggingOfRequestAndResponseIfValidationFails();
        RestAssured.authentication =   preemptive().basic("username","password");

}

@Test
public void successfulTest() {
    given()
            .contentType("application/json; charset=UTF-8");

    when().

            get("http://mydomain/testpath/Id=2").
    then().
            statusCode(200);

}

Answer 1

我的Cucumber步骤定义如下所示：

    // Class variables
    private String token_resource = "/yourApp/oauth/token?username=";
    private String endpoint_rest="https://your.app.domain.com/";
    private String acessToken;

    @When("^user gets access token using userId \"(.+)\" and password \"(.+)\"$")
public void getAccessToken(String userName, String password){
    RequestSpecification requestSpec = RestAssured.with();
    requestSpec.given().contentType("application/json");
    requestSpec.headers("Authorization", "Basic  your-string-here");
    Response response = requestSpec.post(endpoint_rest + token_resource + userName + "&password=" + password + "&client_id=yourApp&grant_type=password");
    String responseMsg = response.asString();
    System.out.println(">> responseMsg=" + responseMsg);
    assertTrue("Missing access token",responseMsg.contains("access_token"));
    System.out.println(">> Get Access token RESPONSE: " + responseMsg);

    DocumentContext doc = JsonPath.parse(responseMsg);
    acessToken= doc.read("access_token");

    System.out.println(" >> doc.read access_token= " + acessToken);  
}

这在很大程度上取决于endpoint的编码方式。

当我想学习这类东西时，我会去“放心”的例子和搜索。

比如这里。

Answer 2

为了获得承载令牌，您可以使用此代码授权您的请求：

PreemptiveBasicAuthScheme authScheme = new PreemptiveBasicAuthScheme();
authScheme.setUserName("login");
authScheme.setPassword("password");
RestAssured.authentication = authScheme;

在您获得令牌后，通过以下方式将其发送到您的请求中：

response = given().auth().oauth2(token).get("http://mydomain/testpath/Id=2");

Answer 3

Response response =
      given()
          .headers(
              "Authorization",
              "Bearer " + bearerToken,
              "Content-Type",
              ContentType.JSON,
              "Accept",
              ContentType.JSON)
          .when()
          .get(url)
          .then()
          .contentType(ContentType.JSON)
          .extract()
          .response();