Question

我正在尝试为以下类创建单元测试：

@Secured
@Provider
@Priority(Priorities.AUTHORIZATION)
public class AuthorizationFilter implements ContainerRequestFilter {

    @Context
    private ResourceInfo resourceInfo;

    @Context 
    private SecurityContext securityContext;

    @Override
    public void filter(ContainerRequestContext requestContext) throws IOException {

        // Get the resource class which matches with the requested URL
        // Extract the permissions declared by it
        Class<?> resourceClass = resourceInfo.getResourceClass();
        List<Permission> classPermissions = extractPermissions(resourceClass);

        // Get the resource method which matches with the requested URL
        // Extract the permissions declared by it
        Method resourceMethod = resourceInfo.getResourceMethod();
        List<Permission> methodPermissions = extractPermissions(resourceMethod);

        try {
            String email = securityContext.getUserPrincipal().getName();

            // Check if the user is allowed to execute the method
            // The method annotations override the class annotations
            if (methodPermissions.isEmpty()) {
                checkPermissions(email, classPermissions);
            } else {
                checkPermissions(email, methodPermissions);
            }

        } catch (NotAuthorizedException e) {
            requestContext.abortWith(
                Response.status(Response.Status.FORBIDDEN).build());
        }
    }

    // Extract the permissions from the annotated element
    private List<Permission> extractPermissions(AnnotatedElement annotatedElement) {
        // get permissions
        return permissions;
    }

    protected void checkPermissions(String email, List<Permission> allowedPermissions) throws NotAuthorizedException {
        Permissions permissions = DBUserUtils.getUserPermissions(email);
        for (Permission permission : allowedPermissions){
            if (!permissions.hasPermission(permission))
                throw new NotAuthorizedException("Authorization header must be provided");;
        }
    }
}

我目前的测试类是：

@RunWith(MockitoJUnitRunner.class)
public class AuthorizationFilterTest {

    @Mock
    private ResourceInfo resourceInfo = mock(ResourceInfo.class);

    @Mock
    private SecurityContext securityContext = mock(SecurityContext.class);

    @Mock
    private static DBUserUtils dbUserUtils = mock(DBUserUtils.class);

    @InjectMocks
    private AuthorizationFilter authorizationFilter = spy(AuthorizationFilter.class);

    private ContainerRequestContext requestContext = mock(ContainerRequestContext.class);

    @Before 
    public void initMocks() {
        MockitoAnnotations.initMocks(this);

        doReturn(Endpoints.class).when(resourceInfo).getResourceClass();

        when(securityContext.getUserPrincipal()).thenReturn(new UserPrincipal() {
            @Override
            public String getName() {
                return "email";
            }
        });
    }


    @Test
    public void authorizationFilterAuthorizedTest() throws NotAuthorizedException, IOException{
        doReturn(getMethodByName(Endpoints.class, "createUser")).when(resourceInfo).getResourceMethod();
        authorizationFilter.filter(requestContext);
        verify(requestContext, times(0)).abortWith(any());
    }

    private Method getMethodByName(Class<?> classToUse, String methodName){
        Method[] methods = classToUse.getMethods();
        for (Method method : methods){
            if (method.getName().equals(methodName))
                return method;
        }
        return null;
    }
}

我能够模拟类的私有字段，我似乎无法找到模拟静态方法DBUserUtils.getUserPermissions(email)的方法。这可能还是我只是在浪费时间？

我正在使用Mockito 1.10.19和JUnit 4进行测试。

我是嘲笑单位测试对象的新手，所以如果我在某处发生严重错误，请告诉我！

感谢。

Answer 1

要在您的示例中模拟DBUserUtils.getUserPermissions(email)，您可以a）使用一些额外的框架（例如PowerMock，如您对问题的评论中所述），或b）提取对DBUserUtils.getUserPermissions(email)的调用单独的方法：

Permissions getUserPermissions(String email) {
    return DBUserUtils.getUserPermissions(email);
}

然后你可以在你的测试中模拟：

doReturn(...).when(authorizationFilter).getUserPermissions(any());

Java Mockito注入一个静态类

1 个答案: