Package org.apache.solr.cloud

Class SolrCloudAuthTestCase

java.lang.Object

org.junit.Assert

org.apache.lucene.tests.util.LuceneTestCase

org.apache.solr.SolrTestCase

org.apache.solr.SolrTestCaseJ4

org.apache.solr.cloud.SolrCloudTestCase

org.apache.solr.cloud.SolrCloudAuthTestCase

public class SolrCloudAuthTestCase
extends SolrCloudTestCase

Base test class for cloud tests wanting to track authentication metrics. The assertions provided by this base class require a *minimum* count, not exact count from metrics. Warning: Make sure that your test case does not break when beasting.

Nested Class Summary

Nested classes/interfaces inherited from class org.apache.solr.cloud.SolrCloudTestCase

SolrCloudTestCase.NoPrs

Nested classes/interfaces inherited from class org.apache.solr.SolrTestCaseJ4

SolrTestCaseJ4.BVal, SolrTestCaseJ4.Doc, SolrTestCaseJ4.Fld, SolrTestCaseJ4.FldType, SolrTestCaseJ4.FVal, SolrTestCaseJ4.IRange, SolrTestCaseJ4.IVals, SolrTestCaseJ4.IValsPercent, SolrTestCaseJ4.RandomizingCloudSolrClientBuilder, SolrTestCaseJ4.SuppressPointFields, SolrTestCaseJ4.SuppressSSL, SolrTestCaseJ4.SVal, SolrTestCaseJ4.Vals, SolrTestCaseJ4.XmlDoc

Nested classes/interfaces inherited from class org.apache.lucene.tests.util.LuceneTestCase

org.apache.lucene.tests.util.LuceneTestCase.AwaitsFix, org.apache.lucene.tests.util.LuceneTestCase.Concurrency, org.apache.lucene.tests.util.LuceneTestCase.Monster, org.apache.lucene.tests.util.LuceneTestCase.Nightly, org.apache.lucene.tests.util.LuceneTestCase.SuppressAssertingFormats, org.apache.lucene.tests.util.LuceneTestCase.SuppressCodecs, org.apache.lucene.tests.util.LuceneTestCase.SuppressFileSystems, org.apache.lucene.tests.util.LuceneTestCase.SuppressFsync, org.apache.lucene.tests.util.LuceneTestCase.SuppressReproduceLine, org.apache.lucene.tests.util.LuceneTestCase.SuppressSysoutChecks, org.apache.lucene.tests.util.LuceneTestCase.SuppressTempFileChecks, org.apache.lucene.tests.util.LuceneTestCase.ThrowingConsumer<T>, org.apache.lucene.tests.util.LuceneTestCase.ThrowingRunnable, org.apache.lucene.tests.util.LuceneTestCase.Weekly

Field Summary

Fields

Modifier and Type	Field	Description
static final Predicate	NOT_NULL_PREDICATE

Fields inherited from class org.apache.solr.cloud.SolrCloudTestCase

cluster, DEFAULT_TIMEOUT

Fields inherited from class org.apache.solr.SolrTestCaseJ4

configString, CORE_PROPERTIES_FILENAME, coreName, DEAD_HOST_1, DEAD_HOST_2, DEAD_HOST_3, DEFAULT_CONNECTION_TIMEOUT, DEFAULT_TEST_COLLECTION_NAME, DEFAULT_TEST_CORENAME, h, lrf, NUMERIC_DOCVALUES_SYSPROP, NUMERIC_POINTS_SYSPROP, ONE_ONE, RANDOMIZED_NUMERIC_FIELDTYPES, schemaString, solrConfig, sslConfig, SYSTEM_PROPERTY_SOLR_TESTS_MERGEPOLICYFACTORY, TEST_URL_ALLOW_LIST, testExecutor, testSolrHome, UPDATELOG_SYSPROP, USE_NUMERIC_POINTS_SYSPROP, ZERO_ONE, ZERO_TWO

Fields inherited from class org.apache.solr.SolrTestCase

solrClassRules, solrTestRules

Fields inherited from class org.apache.lucene.tests.util.LuceneTestCase

assertsAreEnabled, classRules, DEFAULT_LINE_DOCS_FILE, INFOSTREAM, JENKINS_LARGE_LINE_DOCS_FILE, LEAVE_TEMPORARY, MAYBE_CACHE_POLICY, RANDOM_MULTIPLIER, ruleChain, suiteFailureMarker, SYSPROP_AWAITSFIX, SYSPROP_FAILFAST, SYSPROP_MAXFAILURES, SYSPROP_MONSTER, SYSPROP_NIGHTLY, SYSPROP_WEEKLY, TEST_ASSERTS_ENABLED, TEST_AWAITSFIX, TEST_CODEC, TEST_DIRECTORY, TEST_DOCVALUESFORMAT, TEST_LINE_DOCS_FILE, TEST_MONSTER, TEST_NIGHTLY, TEST_POSTINGSFORMAT, TEST_THROTTLING, TEST_WEEKLY, VERBOSE

Constructor Summary

Constructors

Constructor	Description
SolrCloudAuthTestCase()

Method Summary

Modifier and Type	Method	Description
protected void	assertAuthMetricsMinimums(Class<? extends org.apache.solr.security.AuthenticationPlugin> authPluginClass, int requests, int authenticated, int passThrough, int failWrongCredentials, int failMissingCredentials, int errors)	Used to check metric counts for the AuthPlugin in use (except PKI)
protected void	assertPkiAuthMetricsMinimums(int requests, int authenticated, int passThrough, int failWrongCredentials, int failMissingCredentials, int errors)	Used to check metric counts for PKI auth
static void	enableMetrics()
static Map<String,Object>	getAuthPluginsInUseForCluster(String url)	This helper method can be used by tests to monitor the current state of either "authentication" or "authorization" plugins in use each node of the current cluster.
protected static String	makeBasicAuthHeader(String user, String pwd)
static void	verifySecurityStatus(org.eclipse.jetty.client.HttpClient httpClient, String url, String objPath, Object expected, int count)
protected static void	verifySecurityStatus(org.eclipse.jetty.client.HttpClient httpClient, String url, String objPath, Object expected, int count, String authHeader)
static void	verifySecurityStatus(org.eclipse.jetty.client.HttpClient httpClient, String url, String objPath, Object expected, int count, String user, String pwd)

Methods inherited from class org.apache.solr.cloud.SolrCloudTestCase

activeClusterShape, checkClusterConfiguration, clusterShape, configureCluster, configurePrsDefault, containsLiveNode, ensureRunningJettys, getCollectionState, getCoreStatus, getHttpSolrConnection, getRandomReplica, getRandomReplica, getRandomShard, getReplicas, getSolrConnection, getZookeeperSolrConnection, isPRS, mapReplicasToReplicaType, missingLiveNode, missingLiveNodes, replicasForCollectionAreFullyActive, shutdownCluster, waitForAsyncClusterRequest, waitForResponse, waitForState, waitForState, waitForState, waitForState, zkClient

Methods inherited from class org.apache.solr.SolrTestCaseJ4

add, addAndGetVersion, addDoc, adoc, adoc, assertExceptionThrownWithMessageContaining, assertFailedU, assertFailedU, assertFieldValues, assertJJQ, assertJQ, assertJQ, assertNonBlockingRandomGeneratorAvailable, assertQ, assertQ, assertQEx, assertQEx, assertQEx, assertResponseValues, assertSolrInputFieldEquals, assertThatJQ, assertThatJQ, assertU, assertU, assertXmlFile, assumeWorkingMockito, buildUrl, clearIndex, commit, compareSolrDocument, compareSolrDocumentList, compareSolrInputDocument, configset, copyMinConf, copyMinConf, copyMinConf, copySolrHomeToTemp, createComparator, createComparator, createCore, createCoreContainer, createCoreContainer, createCoreContainer, createDefaultCoreContainer, createDistributedUpdateProcessor, createDoc, createSort, deleteAndGetVersion, deleteByQueryAndGetVersion, deleteCore, delI, delQ, doc, getClassName, getFile, getRootCause, getSaferTestName, getSchemaFile, getSolrConfigFile, getWrappedException, hasInitException, hasInitException, indexDocs, initAndGetDataDir, initCore, initCore, initCore, initCore, invertField, isSSLMode, JQ, json, json, json, jsonAdd, jsonDelId, jsonDelQ, map, map, newRandomConfig, optimize, params, pickRandom, postSetUp, preTearDown, randomDate, randomSkewedDate, randomXmlUsableUnicodeString, req, req, req, reqWithPath, reqWithPath, resetFactory, sdoc, sdocs, sdocWithChildren, sdocWithChildren, sdocWithChildren, setUp, setupNoCoreTest, setupTestCases, skewed, startTrackingSearchers, systemSetPropertySolrTestsMergePolicyFactory, tearDown, teardownTestCases, TEST_COLL1_CONF, TEST_HOME, TEST_PATH, toJSON, updateJ, useFactory, waitForAsyncClusterRequest, waitForWarming, waitForWarming, whitespaceMockTokenizer, withPath, writeCoreProperties, writeCoreProperties

Methods inherited from class org.apache.solr.SolrTestCase

afterClassSolrTestCase, assertJSONEquals, assertThat, assertThat, beforeSolrTestCase, checkSyspropForceBeforeAssumptionFailure, checkSyspropForceBeforeClassAssumptionFailure

Methods inherited from class org.apache.lucene.tests.util.LuceneTestCase

addVirusChecker, assertDeletedDocsEquals, assertDocsAndPositionsEnumEquals, assertDocsEnumEquals, assertDocsSkippingEquals, assertDocValuesEquals, assertDocValuesEquals, assertDoubleUlpEquals, assertFieldInfosEquals, assertFloatUlpEquals, assertNormsEquals, assertPointsEquals, assertPositionsSkippingEquals, assertReaderEquals, assertReaderStatisticsEquals, assertStoredFieldEquals, assertStoredFieldsEquals, assertTermsEnumEquals, assertTermsEquals, assertTermsEquals, assertTermsStatisticsEquals, assertTermStatsEquals, assertTermVectorsEquals, asSet, assumeFalse, assumeNoException, assumeTrue, atLeast, atLeast, callStackContains, callStackContains, callStackContainsAnyOf, closeAfterSuite, closeAfterTest, collate, createTempDir, createTempDir, createTempFile, createTempFile, dumpArray, dumpIterator, ensureSaneIWCOnNightly, expectThrows, expectThrows, expectThrows, expectThrowsAnyOf, expectThrowsAnyOf, getDataInputStream, getDataPath, getJvmForkArguments, getOnlyLeafReader, getTestClass, getTestName, isTestThread, localeForLanguageTag, maybeChangeLiveIndexWriterConfig, maybeWrapReader, newAlcoholicMergePolicy, newAlcoholicMergePolicy, newBytesRef, newBytesRef, newBytesRef, newBytesRef, newBytesRef, newBytesRef, newDirectory, newDirectory, newDirectory, newDirectory, newDirectory, newField, newField, newFSDirectory, newFSDirectory, newIndexWriterConfig, newIndexWriterConfig, newIndexWriterConfig, newIOContext, newIOContext, newLogMergePolicy, newLogMergePolicy, newLogMergePolicy, newLogMergePolicy, newLogMergePolicy, newMaybeVirusCheckingDirectory, newMaybeVirusCheckingFSDirectory, newMergePolicy, newMergePolicy, newMergePolicy, newMockDirectory, newMockDirectory, newMockDirectory, newMockFSDirectory, newMockFSDirectory, newSearcher, newSearcher, newSearcher, newSearcher, newSearcher, newSnapshotIndexWriterConfig, newStringField, newStringField, newStringField, newStringField, newTextField, newTextField, newTieredMergePolicy, newTieredMergePolicy, overrideDefaultQueryCache, overrideTestDefaultQueryCache, random, randomLocale, randomTimeZone, randomVectorFormat, rarely, rarely, replaceMaxFailureRule, resetDefaultQueryCache, restoreCPUCoreCount, restoreIndexWriterMaxDocs, runWithRestrictedPermissions, setIndexWriterMaxDocs, setupCPUCoreCount, setUpExecutorService, shutdownExecutorService, slowFileExists, usually, usually, wrapReader

Methods inherited from class org.junit.Assert

assertArrayEquals, assertArrayEquals, assertArrayEquals, assertArrayEquals, assertArrayEquals, assertArrayEquals, assertArrayEquals, assertArrayEquals, assertArrayEquals, assertArrayEquals, assertArrayEquals, assertArrayEquals, assertArrayEquals, assertArrayEquals, assertArrayEquals, assertArrayEquals, assertArrayEquals, assertArrayEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertFalse, assertFalse, assertNotEquals, assertNotEquals, assertNotEquals, assertNotEquals, assertNotEquals, assertNotEquals, assertNotEquals, assertNotEquals, assertNotNull, assertNotNull, assertNotSame, assertNotSame, assertNull, assertNull, assertSame, assertSame, assertThrows, assertThrows, assertTrue, assertTrue, fail, fail

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

NOT_NULL_PREDICATE

public static final Predicate NOT_NULL_PREDICATE

Constructor Details

SolrCloudAuthTestCase

public SolrCloudAuthTestCase()

Method Details

enableMetrics

public static void enableMetrics()

assertPkiAuthMetricsMinimums

protected void assertPkiAuthMetricsMinimums(int requests,
 int authenticated,
 int passThrough,
 int failWrongCredentials,
 int failMissingCredentials,
 int errors)

Used to check metric counts for PKI auth

assertAuthMetricsMinimums

protected void assertAuthMetricsMinimums(Class<? extends org.apache.solr.security.AuthenticationPlugin> authPluginClass,
 int requests,
 int authenticated,
 int passThrough,
 int failWrongCredentials,
 int failMissingCredentials,
 int errors)

Used to check metric counts for the AuthPlugin in use (except PKI)

TODO: many of these params have to be under specified - this should wait a bit to see the desired params and timeout

verifySecurityStatus

public static void verifySecurityStatus(org.eclipse.jetty.client.HttpClient httpClient,
 String url,
 String objPath,
 Object expected,
 int count)
                                 throws Exception

Throws:

Exception

verifySecurityStatus

public static void verifySecurityStatus(org.eclipse.jetty.client.HttpClient httpClient,
 String url,
 String objPath,
 Object expected,
 int count,
 String user,
 String pwd)
                                 throws Exception

Throws:

Exception

verifySecurityStatus

protected static void verifySecurityStatus(org.eclipse.jetty.client.HttpClient httpClient,
 String url,
 String objPath,
 Object expected,
 int count,
 String authHeader)
                                    throws Exception

Throws:

Exception

makeBasicAuthHeader

protected static String makeBasicAuthHeader(String user,
 String pwd)

getAuthPluginsInUseForCluster

public static Map<String,Object> getAuthPluginsInUseForCluster(String url)

This helper method can be used by tests to monitor the current state of either "authentication" or "authorization" plugins in use each node of the current cluster.

This can be useful in a TimeOut.waitFor(java.lang.String, java.util.function.Supplier<java.lang.Boolean>) loop to monitor a cluster and "wait for" A change in security settings to affect all nodes by comparing the objects in the current Map with the one in use prior to executing some test command. (providing a workaround for the security user experience limitations identified in SOLR-13464 )

Parameters:

url - A REST url (or any arbitrary String) ending in "authentication" or "authorization" used to specify the type of plugins to introspect

Returns:

A Map from nodeName to auth plugin