Spring Boot1.4测试是否启用了安全性？

Question

我想知道我应该如何为我的测试验证用户？现在，我将编写的所有测试都将失败，因为endpoint需要授权。

@RunWith(SpringRunner.class)
@WebMvcTest(value = PostController.class)
public class PostControllerTest {

    @Autowired
    private MockMvc mvc;

    @MockBean
    private PostService postService;

    @Test
    public void testHome() throws Exception {
        this.mvc.perform(get("/")).andExpect(status().isOk()).andExpect(view().name("posts"));
    }


}

Answer 1

Spring Security提供了@WithMockUser注释，可用于指示测试应作为特定用户运行：

@Test
@WithMockUser(username = "test", password = "test", roles = "USER")
public void withMockUser() throws Exception {
    this.mockMvc.perform(get("/")).andExpect(status().isOk());
}

或者，如果使用基本身份验证，则可以发送所需的Authorization标头：

@Test
public void basicAuth() throws Exception {
    this.mockMvc
            .perform(get("/").header(HttpHeaders.AUTHORIZATION,
                    "Basic " + Base64Utils.encodeToString("user:secret".getBytes())))
            .andExpect(status().isOk());
}