Automatisches Front-End-Testing einer OAuth 2.0 Spring-Boot Anwendungen

dependencies { ... testImplementation 'org.springframework.boot:spring-boot-starter-test:3.2.2' testImplementation 'com.microsoft.playwright:playwright:1.41.1' } ... tasks.named('test') { useJUnitPlatform() }

import ... @SpringBootTest( classes = [DemoApplication::class], webEnvironment = SpringBootTest.WebEnvironment.DEFINED_PORT ) class DemoTest { companion object { // Playwright setup private var playwright: Playwright? = null private var browser: Browser? = null private var context: BrowserContext? = null private var page: Page? = null @JvmStatic @BeforeAll fun launchBrowser() { playwright = Playwright.create() browser = playwright?.chromium()?.launch( // Run playwright in headed mode with slow motion to see what's happening BrowserType.LaunchOptions().setHeadless(false).setSlowMo(100.0) ) } @JvmStatic @AfterAll fun closeBrowser() { playwright?.close() } } @BeforeEach fun createContextAndPage() { context = browser?.newContext() page = context?.newPage() } @AfterEach fun closeContext() { context?.close() } }

@Test fun publicEndpointTest() { page?.navigate("http://localhost:8080/public") assertThat(page?.locator("body")).hasText("Hello from a public endpoint!") } @Test fun privateEndpointTest() { // Unable to access private endpoint without logging in and redirects to login page page?.navigate("http://localhost:8080/private") // Login with example user 'John Doe' by filling the login form and submitting it page?.fill("#username", "john.doe") page?.fill("#password", "password") page?.locator("input[type=submit]")?.click() // Wait for redirect to previously requested private endpoint page?.waitForURL("http://localhost:8080/private?continue") // Check for expected content on private endpoint assertThat(page?.locator("body")).hasText("Hello from a private endpoint!") }

companion object { // Start a Keycloak instance with an import file for the demo realm @JvmStatic private val keycloakContainer = KeycloakContainer().apply { withRealmImportFile("realm.json") portBindings = listOf("8081:8080") start() } // Register the Keycloak issuer URL as a dynamic property for the Spring Boot application @JvmStatic @DynamicPropertySource private fun registerResourceServerIssuerProperty(registry: DynamicPropertyRegistry) { registry.add("spring.security.oauth2.client.provider.demo-provider.issuer-uri") { "${keycloakContainer.authServerUrl}/realms/demo-realm" } } ... @JvmStatic @BeforeAll fun launchBrowser() { playwright = Playwright.create() browser = playwright?.chromium()?.launch() // Use headless mode } ... }

image: mcr.microsoft.com/playwright/java:v1.41.0-jammy services: - name: docker:dind command: [ "--tls=false" ] variables: DOCKER_HOST: "tcp://docker:2375" DOCKER_TLS_CERTDIR: "" DOCKER_DRIVER: overlay2 before_script: - GRADLE_USER_HOME="$(pwd)/.gradle" - export GRADLE_USER_HOME stages: - test tests: stage: test script: - ./gradlew test

Running with gitlab-runner 14.7.0 (98daeee0) on gitlab-runner-01 y7AkGoZD Preparing the "docker" executor 00:34 ... Preparing environment 00:00 ... Getting source from Git repository 00:02 ... Executing "step_script" stage of the job script 03:52 Using docker image sha256:df9599e540016f99fbcd1d862224ae9d1cf30df17fa5d367c969ee37cc060afb for mcr.microsoft.com/playwright/java:v1.41.0-jammy with digest mcr.microsoft.com/playwright/java@sha256:390fdf6801be59dd7bc6a3fad6344ae9d795b6585d102af293b57d61076d0824 ... $ GRADLE_USER_HOME="$(pwd)/.gradle" $ export GRADLE_USER_HOME $ ./gradlew test Downloading https://services.gradle.org/distributions/gradle-8.5-bin.zip ............10%.............20%............30%.............40%.............50%............60%.............70%.............80%............90%.............100% Welcome to Gradle 8.5! Here are the highlights of this release: - Support for running on Java 21 - Faster first use with Kotlin DSL - Improved error and warning messages For more details see https://docs.gradle.org/8.5/release-notes.html Starting a Gradle Daemon (subsequent builds will be faster) > Task :checkKotlinGradlePluginConfigurationErrors > Task :processResources > Task :processTestResources > Task :compileKotlin > Task :compileJava NO-SOURCE > Task :classes > Task :compileTestKotlin > Task :compileTestJava NO-SOURCE > Task :testClasses > Task :test OpenJDK 64-Bit Server VM warning: Sharing is only supported for boot loader classes because bootstrap classpath has been appended Deprecated Gradle features were used in this build, making it incompatible with Gradle 9.0. You can use '--warning-mode all' to show the individual deprecation warnings and determine if they come from your own scripts or plugins. For more on this, please refer to https://docs.gradle.org/8.5/userguide/command_line_interface.html#sec:command_line_warnings in the Gradle documentation. BUILD SUCCESSFUL in 3m 50s 6 actionable tasks: 6 executed Cleaning up project directory and file based variables 00:01 Job succeeded

Referenzierte Artikel

Integration von OAuth 2.0 in Spring Boot mit Keycloak

Alexander Kusmin 30. November 2023

Dieser Leitfaden beschreibt die Integration von OAuth 2.0 in eine Spring Boot Anwendung mit Keycloak. Nach einer kurzen Einführung in die Spring Boot Plattform liegt der Schwerpunkt auf der genauen Konfiguration von Keycloak als vertrauenswürdigen OAuth 2.0 Server und der Absicherung bestimmter Endpunkte in der Anwendung mit Anmeldedaten. Der Beitrag ist dabei so strukturiert, dass Entwickler Schritt für Schritt eine sichere Authentifizierung in einer Spring Boot-Anwendung implementieren können. Inhaltsverzeichnis Spring

Integration von OAuth 2.0 in Spring Boot mit Keycloak

Alexander Kusmin 30. November 2023

Integration von OAuth 2.0 in Spring Boot mit Keycloak

Alexander Kusmin 30. November 2023