You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@usergrid.apache.org by gr...@apache.org on 2015/04/20 18:18:08 UTC
[1/8] incubator-usergrid git commit: Ensure that when external token
validation is enabled, Admin Users cannot be created, activated or confirmed;
plus a test.
Repository: incubator-usergrid
Updated Branches:
refs/heads/master 61b492bb3 -> 2e90f39ce
Ensure that when external token validation is enabled, Admin Users cannot be created, activated or confirmed; plus a test.
Project: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/commit/11709e05
Tree: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/tree/11709e05
Diff: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/diff/11709e05
Branch: refs/heads/master
Commit: 11709e05cc74abcadde0f817734ef04562237b41
Parents: 25d0077
Author: Dave Johnson <dm...@apigee.com>
Authored: Fri Apr 17 18:23:00 2015 -0400
Committer: Dave Johnson <dm...@apigee.com>
Committed: Fri Apr 17 18:23:00 2015 -0400
----------------------------------------------------------------------
.../organizations/OrganizationsResource.java | 18 +++-
.../rest/management/users/UserResource.java | 42 ++++++++
.../rest/management/users/UsersResource.java | 16 ++-
.../rest/management/ManagementResourceIT.java | 22 ++--
.../rest/management/users/MUUserResourceIT.java | 102 +++++++++++++++++--
5 files changed, 179 insertions(+), 21 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/incubator-usergrid/blob/11709e05/stack/rest/src/main/java/org/apache/usergrid/rest/management/organizations/OrganizationsResource.java
----------------------------------------------------------------------
diff --git a/stack/rest/src/main/java/org/apache/usergrid/rest/management/organizations/OrganizationsResource.java b/stack/rest/src/main/java/org/apache/usergrid/rest/management/organizations/OrganizationsResource.java
index 67c273f..e4e9eda 100644
--- a/stack/rest/src/main/java/org/apache/usergrid/rest/management/organizations/OrganizationsResource.java
+++ b/stack/rest/src/main/java/org/apache/usergrid/rest/management/organizations/OrganizationsResource.java
@@ -33,6 +33,7 @@ import javax.ws.rs.core.MediaType;
import javax.ws.rs.core.UriInfo;
import org.apache.usergrid.rest.RootResource;
+import org.apache.usergrid.rest.management.ManagementResource;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
@@ -111,9 +112,9 @@ public class OrganizationsResource extends AbstractContextResource {
String name = ( String ) json.remove( "name" );
String email = ( String ) json.remove( "email" );
String password = ( String ) json.remove( "password" );
- Map<String, Object> properties = ( Map<String, Object> ) json.remove( ORGANIZATION_PROPERTIES );
+ Map<String, Object> orgProperties = ( Map<String, Object> ) json.remove( ORGANIZATION_PROPERTIES );
- return newOrganization( ui, organizationName, username, name, email, password, json, properties, callback );
+ return newOrganization( ui, organizationName, username, name, email, password, json, orgProperties, callback );
}
@@ -146,7 +147,16 @@ public class OrganizationsResource extends AbstractContextResource {
/** Create a new organization */
private JSONWithPadding newOrganization( @Context UriInfo ui, String organizationName, String username, String name,
String email, String password, Map<String, Object> userProperties,
- Map<String, Object> properties, String callback ) throws Exception {
+ Map<String, Object> orgProperties, String callback ) throws Exception {
+
+ final boolean externalTokensEnabled =
+ !StringUtils.isEmpty( properties.getProperty( ManagementResource.USERGRID_CENTRAL_URL ) );
+
+ if ( externalTokensEnabled ) {
+ throw new IllegalArgumentException( "Organization / Admin Users must be created via " +
+ properties.getProperty( ManagementResource.USERGRID_CENTRAL_URL ) );
+ }
+
Preconditions
.checkArgument( StringUtils.isNotBlank( organizationName ), "The organization parameter was missing" );
@@ -157,7 +167,7 @@ public class OrganizationsResource extends AbstractContextResource {
OrganizationOwnerInfo organizationOwner = management
.createOwnerAndOrganization( organizationName, username, name, email, password, false, false,
- userProperties, properties );
+ userProperties, orgProperties );
if ( organizationOwner == null ) {
logger.info( "organizationOwner is null, returning. organization: {}", organizationName );
http://git-wip-us.apache.org/repos/asf/incubator-usergrid/blob/11709e05/stack/rest/src/main/java/org/apache/usergrid/rest/management/users/UserResource.java
----------------------------------------------------------------------
diff --git a/stack/rest/src/main/java/org/apache/usergrid/rest/management/users/UserResource.java b/stack/rest/src/main/java/org/apache/usergrid/rest/management/users/UserResource.java
index 49b0037..de3928d 100644
--- a/stack/rest/src/main/java/org/apache/usergrid/rest/management/users/UserResource.java
+++ b/stack/rest/src/main/java/org/apache/usergrid/rest/management/users/UserResource.java
@@ -33,6 +33,8 @@ import javax.ws.rs.core.Context;
import javax.ws.rs.core.MediaType;
import javax.ws.rs.core.UriInfo;
+import org.apache.commons.lang.StringUtils;
+import org.apache.usergrid.rest.management.ManagementResource;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.context.annotation.Scope;
@@ -205,6 +207,14 @@ public class UserResource extends AbstractContextResource {
@Produces( MediaType.TEXT_HTML )
public Viewable showPasswordResetForm( @Context UriInfo ui, @QueryParam( "token" ) String token ) {
+ final boolean externalTokensEnabled =
+ !StringUtils.isEmpty( properties.getProperty( ManagementResource.USERGRID_CENTRAL_URL ) );
+
+ if ( externalTokensEnabled ) {
+ throw new IllegalArgumentException( "Admin Users must reset passwords via " +
+ properties.getProperty( ManagementResource.USERGRID_CENTRAL_URL ) );
+ }
+
try {
this.token = token;
@@ -234,6 +244,14 @@ public class UserResource extends AbstractContextResource {
@FormParam( "recaptcha_challenge_field" ) String challenge,
@FormParam( "recaptcha_response_field" ) String uresponse ) {
+ final boolean externalTokensEnabled =
+ !StringUtils.isEmpty( properties.getProperty( ManagementResource.USERGRID_CENTRAL_URL ) );
+
+ if ( externalTokensEnabled ) {
+ throw new IllegalArgumentException( "Admin Users must reset passwords via " +
+ properties.getProperty( ManagementResource.USERGRID_CENTRAL_URL ) );
+ }
+
try {
this.token = token;
@@ -309,6 +327,14 @@ public class UserResource extends AbstractContextResource {
@Produces( MediaType.TEXT_HTML )
public Viewable activate( @Context UriInfo ui, @QueryParam( "token" ) String token ) {
+ final boolean externalTokensEnabled =
+ !StringUtils.isEmpty( properties.getProperty( ManagementResource.USERGRID_CENTRAL_URL ) );
+
+ if ( externalTokensEnabled ) {
+ throw new IllegalArgumentException( "Admin Users must activate via " +
+ properties.getProperty( ManagementResource.USERGRID_CENTRAL_URL ) );
+ }
+
try {
management.handleActivationTokenForAdminUser( user.getUuid(), token );
return handleViewable( "activate", this );
@@ -330,6 +356,14 @@ public class UserResource extends AbstractContextResource {
@Produces( MediaType.TEXT_HTML )
public Viewable confirm( @Context UriInfo ui, @QueryParam( "token" ) String token ) {
+ final boolean externalTokensEnabled =
+ !StringUtils.isEmpty( properties.getProperty( ManagementResource.USERGRID_CENTRAL_URL ) );
+
+ if ( externalTokensEnabled ) {
+ throw new IllegalArgumentException( "Admin Users must confirm via " +
+ properties.getProperty( ManagementResource.USERGRID_CENTRAL_URL ) );
+ }
+
try {
ActivationState state = management.handleConfirmationTokenForAdminUser( user.getUuid(), token );
if ( state == ActivationState.CONFIRMED_AWAITING_ACTIVATION ) {
@@ -355,6 +389,14 @@ public class UserResource extends AbstractContextResource {
@QueryParam( "callback" ) @DefaultValue( "callback" ) String callback )
throws Exception {
+ final boolean externalTokensEnabled =
+ !StringUtils.isEmpty( properties.getProperty( ManagementResource.USERGRID_CENTRAL_URL ) );
+
+ if ( externalTokensEnabled ) {
+ throw new IllegalArgumentException( "Admin Users must reactiveate via " +
+ properties.getProperty( ManagementResource.USERGRID_CENTRAL_URL ) );
+ }
+
logger.info( "Send activation email for user: {}" , user.getUuid() );
ApiResponse response = createApiResponse();
http://git-wip-us.apache.org/repos/asf/incubator-usergrid/blob/11709e05/stack/rest/src/main/java/org/apache/usergrid/rest/management/users/UsersResource.java
----------------------------------------------------------------------
diff --git a/stack/rest/src/main/java/org/apache/usergrid/rest/management/users/UsersResource.java b/stack/rest/src/main/java/org/apache/usergrid/rest/management/users/UsersResource.java
index 144a6de..d907632 100644
--- a/stack/rest/src/main/java/org/apache/usergrid/rest/management/users/UsersResource.java
+++ b/stack/rest/src/main/java/org/apache/usergrid/rest/management/users/UsersResource.java
@@ -34,8 +34,10 @@ import javax.ws.rs.core.Context;
import javax.ws.rs.core.MediaType;
import javax.ws.rs.core.UriInfo;
+import org.apache.commons.lang.StringUtils;
import org.apache.usergrid.management.exceptions.ManagementException;
import org.apache.usergrid.rest.RootResource;
+import org.apache.usergrid.rest.management.ManagementResource;
import org.apache.usergrid.services.exceptions.ServiceResourceNotFoundException;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
@@ -78,7 +80,7 @@ public class UsersResource extends AbstractContextResource {
@Path(RootResource.USER_ID_PATH)
public UserResource getUserById( @Context UriInfo ui, @PathParam( "userId" ) String userIdStr ) throws Exception {
- return getUserResource(management.getAdminUserByUuid(UUID.fromString(userIdStr)), "user id", userIdStr);
+ return getUserResource(management.getAdminUserByUuid( UUID.fromString( userIdStr ) ), "user id", userIdStr);
}
@@ -101,14 +103,14 @@ public class UsersResource extends AbstractContextResource {
if (user == null) {
throw new ManagementException("Could not find organization for " + type + " : " + value);
}
- return getSubResource(UserResource.class).init(user);
+ return getSubResource(UserResource.class).init( user );
}
@Path(RootResource.EMAIL_PATH)
public UserResource getUserByEmail( @Context UriInfo ui, @PathParam( "email" ) String email ) throws Exception {
- return getUserResource(management.getAdminUserByEmail(email), "email", email);
+ return getUserResource(management.getAdminUserByEmail( email ), "email", email);
}
@@ -120,6 +122,14 @@ public class UsersResource extends AbstractContextResource {
@QueryParam( "callback" ) @DefaultValue( "callback" ) String callback )
throws Exception {
+ final boolean externalTokensEnabled =
+ !StringUtils.isEmpty( properties.getProperty( ManagementResource.USERGRID_CENTRAL_URL ) );
+
+ if ( externalTokensEnabled ) {
+ throw new IllegalArgumentException( "Admin Users must signup via " +
+ properties.getProperty( ManagementResource.USERGRID_CENTRAL_URL ) );
+ }
+
logger.info( "Create user: " + username );
ApiResponse response = createApiResponse();
http://git-wip-us.apache.org/repos/asf/incubator-usergrid/blob/11709e05/stack/rest/src/test/java/org/apache/usergrid/rest/management/ManagementResourceIT.java
----------------------------------------------------------------------
diff --git a/stack/rest/src/test/java/org/apache/usergrid/rest/management/ManagementResourceIT.java b/stack/rest/src/test/java/org/apache/usergrid/rest/management/ManagementResourceIT.java
index d6b507e..2cec9ac 100644
--- a/stack/rest/src/test/java/org/apache/usergrid/rest/management/ManagementResourceIT.java
+++ b/stack/rest/src/test/java/org/apache/usergrid/rest/management/ManagementResourceIT.java
@@ -669,7 +669,7 @@ public class ManagementResourceIT extends AbstractRestIT {
String suToken = superAdminToken();
Map<String, String> props = new HashMap<String, String>();
- props.put( USERGRID_CENTRAL_URL, getBaseURI().toURL().toExternalForm());
+ props.put( USERGRID_CENTRAL_URL, getBaseURI().toURL().toExternalForm() );
resource().path( "/testproperties" )
.queryParam( "access_token", suToken)
.accept( MediaType.APPLICATION_JSON )
@@ -722,7 +722,7 @@ public class ManagementResourceIT extends AbstractRestIT {
// create an org and an admin user
- String rand = RandomStringUtils.randomAlphanumeric(10);
+ String rand = RandomStringUtils.randomAlphanumeric( 10 );
final String username = "user_" + rand;
OrganizationOwnerInfo orgInfo = setup.getMgmtSvc().createOwnerAndOrganization(
username, username, "Test User", username + "@example.com", "password" );
@@ -743,17 +743,23 @@ public class ManagementResourceIT extends AbstractRestIT {
try {
Map<String, Object> loginInfo = new HashMap<String, Object>() {{
- put("username", username );
- put("password", "password");
- put("grant_type", "password");
- }};
+ put("username", username );
+ put("password", "password");
+ put("grant_type", "password");
+ }};
JsonNode accessInfoNode = resource().path("/management/token")
.type( MediaType.APPLICATION_JSON_TYPE )
.post( JsonNode.class, loginInfo );
fail("Login as Admin User must fail when validate external tokens is enabled");
- } catch ( Exception actual ) {
- logger.debug( "error", actual );
+ } catch ( UniformInterfaceException actual ) {
+ assertEquals( 400, actual.getResponse().getStatus() );
+ String errorMsg = actual.getResponse().getEntity( JsonNode.class ).get( "error_description" ).toString();
+ logger.error( "ERROR: " + errorMsg );
+ assertTrue( errorMsg.contains( "Admin Users must login via" ));
+
+ } catch ( Exception e ) {
+ fail( "We expected a UniformInterfaceException" );
}
// login as superuser must succeed
http://git-wip-us.apache.org/repos/asf/incubator-usergrid/blob/11709e05/stack/rest/src/test/java/org/apache/usergrid/rest/management/users/MUUserResourceIT.java
----------------------------------------------------------------------
diff --git a/stack/rest/src/test/java/org/apache/usergrid/rest/management/users/MUUserResourceIT.java b/stack/rest/src/test/java/org/apache/usergrid/rest/management/users/MUUserResourceIT.java
index a75a401..65d6d50 100644
--- a/stack/rest/src/test/java/org/apache/usergrid/rest/management/users/MUUserResourceIT.java
+++ b/stack/rest/src/test/java/org/apache/usergrid/rest/management/users/MUUserResourceIT.java
@@ -25,9 +25,14 @@ import java.util.Map;
import javax.mail.Message;
import javax.mail.MessagingException;
import javax.mail.internet.MimeMultipart;
+import javax.ws.rs.DefaultValue;
+import javax.ws.rs.FormParam;
+import javax.ws.rs.QueryParam;
import javax.ws.rs.core.MediaType;
+import org.apache.commons.lang.RandomStringUtils;
import org.codehaus.jackson.JsonNode;
+import org.jclouds.json.Json;
import org.junit.Ignore;
import org.junit.Rule;
import org.junit.Test;
@@ -55,6 +60,7 @@ import org.apache.commons.lang.StringUtils;
import com.sun.jersey.api.client.UniformInterfaceException;
import com.sun.jersey.api.representation.Form;
+import static org.apache.usergrid.rest.management.ManagementResource.USERGRID_CENTRAL_URL;
import static org.junit.Assert.assertEquals;
import static org.junit.Assert.assertFalse;
import static org.junit.Assert.assertNotNull;
@@ -71,7 +77,7 @@ import static org.apache.usergrid.utils.MapUtils.hashMap;
/** @author zznate */
public class MUUserResourceIT extends AbstractRestIT {
- private Logger LOG = LoggerFactory.getLogger( MUUserResourceIT.class );
+ private Logger logger = LoggerFactory.getLogger( MUUserResourceIT.class );
@Rule
@@ -87,7 +93,7 @@ public class MUUserResourceIT extends AbstractRestIT {
@Test
// @Ignore( "aok - check this please" )
public void testCaseSensitivityAdminUser() throws Exception {
- LOG.info( "Starting testCaseSensitivityAdminUser()" );
+ logger.info( "Starting testCaseSensitivityAdminUser()" );
UserInfo mixcaseUser = setup.getMgmtSvc()
.createAdminUser( "AKarasulu", "Alex Karasulu", "AKarasulu@Apache.org", "test",
true, false );
@@ -157,7 +163,7 @@ public class MUUserResourceIT extends AbstractRestIT {
assertEquals( "invalid_grant", node.get( "error" ).getTextValue() );
assertEquals( "User must be confirmed to authenticate",
node.get( "error_description" ).getTextValue() );
- LOG.info( "Unconfirmed user was not authorized to authenticate!" );
+ logger.info( "Unconfirmed user was not authorized to authenticate!" );
}
// Confirm the getting account confirmation email for unconfirmed user
@@ -174,7 +180,7 @@ public class MUUserResourceIT extends AbstractRestIT {
// Extract the token to confirm the user
// -------------------------------------------
String token = getTokenFromMessage( confirmation );
- LOG.info( token );
+ logger.info( token );
ActivationState state =
setup.getMgmtSvc().handleConfirmationTokenForAdminUser( orgOwner.getOwner().getUuid(), token );
@@ -194,7 +200,7 @@ public class MUUserResourceIT extends AbstractRestIT {
.accept( MediaType.APPLICATION_JSON ).get( JsonNode.class );
assertNotNull( node );
- LOG.info( "Authentication succeeded after confirmation: {}.", node.toString() );
+ logger.info( "Authentication succeeded after confirmation: {}.", node.toString() );
}
finally {
setTestProperties( originalProperties );
@@ -305,7 +311,7 @@ public class MUUserResourceIT extends AbstractRestIT {
logNode( node );
payload = hashMap( "company", "Usergrid" );
- LOG.info( "sending PUT for company update" );
+ logger.info( "sending PUT for company update" );
node = resource().path( String.format( "/management/users/%s", userId ) ).queryParam( "access_token", token )
.type( MediaType.APPLICATION_JSON_TYPE ).put( JsonNode.class, payload );
assertNotNull( node );
@@ -602,4 +608,88 @@ public class MUUserResourceIT extends AbstractRestIT {
assertEquals( context.getActiveUser().getEmail(), adminNode.get( "email" ).asText() );
assertEquals( context.getActiveUser().getUser(), adminNode.get( "username" ).asText() );
}
+
+
+ @Test
+ public void testNoAdminUserSignupWhenValidateExternalTokensEnabled() throws Exception {
+
+ // turn on validate external tokens by setting the usergrid.central.url
+
+ String suToken = superAdminToken();
+ Map<String, String> props = new HashMap<String, String>();
+ props.put( USERGRID_CENTRAL_URL, getBaseURI().toURL().toExternalForm());
+ resource().path( "/testproperties" )
+ .queryParam( "access_token", suToken)
+ .accept( MediaType.APPLICATION_JSON )
+ .type( MediaType.APPLICATION_JSON_TYPE )
+ .post( props );
+
+ // create an admin user must fail
+
+ try {
+
+ // create an admin user
+
+ final String rand = RandomStringUtils.randomAlphanumeric( 10 );
+ Map<String, String> payload = new HashMap<String, String>() {{
+ put( "username", "user_" + rand );
+ put( "name", "Joe Userperson" );
+ put( "email", "joe_" + rand + "@example.com" );
+ put( "password", "wigglestone" );
+ }};
+ JsonNode node = resource().path( "/management/users")
+ .accept( MediaType.APPLICATION_JSON )
+ .type( MediaType.APPLICATION_JSON )
+ .post( JsonNode.class, payload );
+
+ fail( "Create admin user should fail" );
+
+ } catch ( UniformInterfaceException actual ) {
+ assertEquals( 400, actual.getResponse().getStatus() );
+ String errorMsg = actual.getResponse().getEntity( JsonNode.class ).get( "error_description" ).toString();
+ assertTrue( errorMsg.startsWith( "Admin Users must signup via http://localhost:" ) );
+
+ } catch ( Exception e ) {
+ fail("We expected a UniformInterfaceException");
+ }
+
+
+ try {
+
+ // create an org and an admin user
+
+ final String rand = RandomStringUtils.randomAlphanumeric( 10 );
+ Map<String, String> payload = new HashMap<String, String>() {{
+ put( "organization", "org_" + rand );
+ put( "username", "user_" + rand );
+ put( "name", "Joe Userperson" );
+ put( "email", "joe_" + rand + "@example.com" );
+ put( "password", "wigglestone" );
+ }};
+ JsonNode node = resource().path( "/management/organizations/")
+ .accept( MediaType.APPLICATION_JSON )
+ .type( MediaType.APPLICATION_JSON )
+ .post( JsonNode.class, payload );
+
+ fail( "Create org and admin user should fail" );
+
+ } catch ( UniformInterfaceException actual ) {
+ assertEquals( 400, actual.getResponse().getStatus() );
+ assertTrue( actual.getResponse().getEntity( JsonNode.class ).get( "error_description" )
+ .toString().startsWith( "Organization / Admin Users must be created via http://localhost:" ));
+
+ } catch ( Exception e ) {
+ fail("We expected a UniformInterfaceException");
+ }
+
+
+ // turn off validate external tokens by un-setting the usergrid.central.url
+
+ props.put( USERGRID_CENTRAL_URL, "" );
+ resource().path( "/testproperties" )
+ .queryParam( "access_token", suToken)
+ .accept( MediaType.APPLICATION_JSON )
+ .type( MediaType.APPLICATION_JSON_TYPE )
+ .post( props );
+ }
}
[3/8] incubator-usergrid git commit: This closes #228
Posted by gr...@apache.org.
This closes #228
Project: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/commit/b2b1d803
Tree: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/tree/b2b1d803
Diff: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/diff/b2b1d803
Branch: refs/heads/master
Commit: b2b1d8033186c89b6d1926533887a3cb1eecfd32
Parents: 7395a19 f512fed
Author: Dave Johnson <dm...@apigee.com>
Authored: Mon Apr 20 08:07:13 2015 -0400
Committer: Dave Johnson <dm...@apigee.com>
Committed: Mon Apr 20 08:07:13 2015 -0400
----------------------------------------------------------------------
.../usergrid/persistence/cassandra/CassandraService.java | 11 +++++++----
1 file changed, 7 insertions(+), 4 deletions(-)
----------------------------------------------------------------------
[4/8] incubator-usergrid git commit: Typo
Posted by gr...@apache.org.
Typo
Project: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/commit/c3e87822
Tree: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/tree/c3e87822
Diff: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/diff/c3e87822
Branch: refs/heads/master
Commit: c3e8782263a8b839bb1011910d72a0da9201e158
Parents: b2b1d80
Author: Dave Johnson <dm...@apigee.com>
Authored: Mon Apr 20 08:21:51 2015 -0400
Committer: Dave Johnson <dm...@apigee.com>
Committed: Mon Apr 20 08:21:51 2015 -0400
----------------------------------------------------------------------
.../org/apache/usergrid/rest/management/users/UserResource.java | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/incubator-usergrid/blob/c3e87822/stack/rest/src/main/java/org/apache/usergrid/rest/management/users/UserResource.java
----------------------------------------------------------------------
diff --git a/stack/rest/src/main/java/org/apache/usergrid/rest/management/users/UserResource.java b/stack/rest/src/main/java/org/apache/usergrid/rest/management/users/UserResource.java
index de3928d..3c755f8 100644
--- a/stack/rest/src/main/java/org/apache/usergrid/rest/management/users/UserResource.java
+++ b/stack/rest/src/main/java/org/apache/usergrid/rest/management/users/UserResource.java
@@ -393,7 +393,7 @@ public class UserResource extends AbstractContextResource {
!StringUtils.isEmpty( properties.getProperty( ManagementResource.USERGRID_CENTRAL_URL ) );
if ( externalTokensEnabled ) {
- throw new IllegalArgumentException( "Admin Users must reactiveate via " +
+ throw new IllegalArgumentException( "Admin Users must reactivate via " +
properties.getProperty( ManagementResource.USERGRID_CENTRAL_URL ) );
}
[6/8] incubator-usergrid git commit: Add comments about new keyspace
name configuration properties, plus a test fix.
Posted by gr...@apache.org.
Add comments about new keyspace name configuration properties, plus a test fix.
Project: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/commit/f96f2889
Tree: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/tree/f96f2889
Diff: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/diff/f96f2889
Branch: refs/heads/master
Commit: f96f28894e7b71d1205b95fe796650965576ef3e
Parents: 8aff671
Author: Dave Johnson <dm...@apigee.com>
Authored: Mon Apr 20 10:47:57 2015 -0400
Committer: Dave Johnson <dm...@apigee.com>
Committed: Mon Apr 20 10:47:57 2015 -0400
----------------------------------------------------------------------
.../main/resources/usergrid-default.properties | 27 ++++++++++++--------
.../rest/management/ManagementResourceIT.java | 7 +++--
2 files changed, 21 insertions(+), 13 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/incubator-usergrid/blob/f96f2889/stack/config/src/main/resources/usergrid-default.properties
----------------------------------------------------------------------
diff --git a/stack/config/src/main/resources/usergrid-default.properties b/stack/config/src/main/resources/usergrid-default.properties
index fe7a945..b895310 100644
--- a/stack/config/src/main/resources/usergrid-default.properties
+++ b/stack/config/src/main/resources/usergrid-default.properties
@@ -31,13 +31,16 @@
# URL for local testing Cassandra cluster
cassandra.url=localhost:9160
-#The number of thrift connections to open per cassandra node.
+# The number of thrift connections to open per cassandra node.
cassandra.connections=50
-
# Name of Cassandra cluster
cassandra.cluster=Test Cluster
+# Keyspace names to be used (see also the locks keyspace below)
+cassandra.system.keyspace=Usergrid
+cassandra.application.keyspace=Usergrid_Applications
+
cassandra.keyspace.strategy=org.apache.cassandra.locator.SimpleStrategy
#cassandra.keyspace.strategy=org.apache.cassandra.locator.NetworkTopologyStrategy
@@ -49,18 +52,19 @@ cassandra.keyspace.replication=1
cassandra.username=
cassandra.password=
-#Read consistency level for the cassandra cluster
+# Read consistency level for the cassandra cluster
cassandra.readcl=QUORUM
-#Write consistency level for the cassandra cluster
+# Write consistency level for the cassandra cluster
cassandra.writecl=QUORUM
-#The maximum number of pending mutations allowed in ram before it is flushed to cassandra
+# The maximum number of pending mutations allowed in ram before it is flushed to cassandra
cassandra.mutation.flushsize=2000
-#Keyspace to use for locking
-#Note that if this is deployed in a production cluster, the RF on the keyspace MUST be updated to use an odd number for it's replication Factor.
-#Even numbers for RF can potentially case the locks to fail, via "split brain" when read at QUORUM on lock verification
+# Keyspace to use for locking - Used by Hector lock manager:
+# Note that if this is deployed in a production cluster, the RF on the keyspace MUST
+# be updated to use an odd number for it's replication Factor. Even numbers for RF can
+# potentially case the locks to fail, via "split brain" when read at QUORUM on lock verification
cassandra.lock.keyspace=Locks
# false to disable test features
@@ -111,9 +115,10 @@ usergrid.sysadmin.login.allowed=false
usergrid.sysadmin.approve.users=false
usergrid.sysadmin.approve.organizations=false
-# Base URL of central Usergrid SSO server
-# Setting this will enable external token validation.
-# See also: https://issues.apache.org/jira/browse/USERGRID-567
+# Base URL of central Usergrid SSO server:
+# Setting this will enable External Token Validation for Admin Users and will configure
+# this Usergrid instance delegate all Admin User authentication to the central Usegrid SSO
+# server. See also: https://issues.apache.org/jira/browse/USERGRID-567
usergrid.central.url=
# Where to store temporary files
http://git-wip-us.apache.org/repos/asf/incubator-usergrid/blob/f96f2889/stack/rest/src/test/java/org/apache/usergrid/rest/management/ManagementResourceIT.java
----------------------------------------------------------------------
diff --git a/stack/rest/src/test/java/org/apache/usergrid/rest/management/ManagementResourceIT.java b/stack/rest/src/test/java/org/apache/usergrid/rest/management/ManagementResourceIT.java
index 2cec9ac..651fcdf 100644
--- a/stack/rest/src/test/java/org/apache/usergrid/rest/management/ManagementResourceIT.java
+++ b/stack/rest/src/test/java/org/apache/usergrid/rest/management/ManagementResourceIT.java
@@ -695,8 +695,11 @@ public class ManagementResourceIT extends AbstractRestIT {
.queryParam( "ttl", "1000" )
.get( JsonNode.class );
fail("Validation should have failed");
- } catch ( Exception actual ) {
- logger.debug( "error", actual );
+ } catch ( UniformInterfaceException actual ) {
+ assertEquals( 400, actual.getResponse().getStatus() );
+ String errorMsg = actual.getResponse().getEntity( JsonNode.class ).get( "error_description" ).toString();
+ logger.error( "ERROR: " + errorMsg );
+ assertTrue( errorMsg.contains( "Admin Users must login via" ) );
}
[2/8] incubator-usergrid git commit: Merge branch 'master' into
USERGRID-575
Posted by gr...@apache.org.
Merge branch 'master' into USERGRID-575
Project: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/commit/7395a19e
Tree: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/tree/7395a19e
Diff: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/diff/7395a19e
Branch: refs/heads/master
Commit: 7395a19e28cb2f1e119fac3e1157ea53dccb235d
Parents: 11709e0 6135d86
Author: Dave Johnson <dm...@apigee.com>
Authored: Mon Apr 20 08:01:24 2015 -0400
Committer: Dave Johnson <dm...@apigee.com>
Committed: Mon Apr 20 08:01:24 2015 -0400
----------------------------------------------------------------------
README.md | 2 +-
docs/get_2.0_running_locally.md | 165 +++++++++++++++++++++++++++++++++++
docs/index.md | 3 +-
ugc/README.md | 2 +-
4 files changed, 169 insertions(+), 3 deletions(-)
----------------------------------------------------------------------
[7/8] incubator-usergrid git commit: Another test fix.
Posted by gr...@apache.org.
Another test fix.
Project: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/commit/23febdf9
Tree: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/tree/23febdf9
Diff: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/diff/23febdf9
Branch: refs/heads/master
Commit: 23febdf9a7f961fefa6675bd166466999c0f0969
Parents: f96f288
Author: Dave Johnson <dm...@apigee.com>
Authored: Mon Apr 20 11:50:26 2015 -0400
Committer: Dave Johnson <dm...@apigee.com>
Committed: Mon Apr 20 11:50:26 2015 -0400
----------------------------------------------------------------------
.../apache/usergrid/rest/management/ManagementResourceIT.java | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/incubator-usergrid/blob/23febdf9/stack/rest/src/test/java/org/apache/usergrid/rest/management/ManagementResourceIT.java
----------------------------------------------------------------------
diff --git a/stack/rest/src/test/java/org/apache/usergrid/rest/management/ManagementResourceIT.java b/stack/rest/src/test/java/org/apache/usergrid/rest/management/ManagementResourceIT.java
index 651fcdf..cec172d 100644
--- a/stack/rest/src/test/java/org/apache/usergrid/rest/management/ManagementResourceIT.java
+++ b/stack/rest/src/test/java/org/apache/usergrid/rest/management/ManagementResourceIT.java
@@ -696,10 +696,10 @@ public class ManagementResourceIT extends AbstractRestIT {
.get( JsonNode.class );
fail("Validation should have failed");
} catch ( UniformInterfaceException actual ) {
- assertEquals( 400, actual.getResponse().getStatus() );
+ assertEquals( 404, actual.getResponse().getStatus() );
String errorMsg = actual.getResponse().getEntity( JsonNode.class ).get( "error_description" ).toString();
logger.error( "ERROR: " + errorMsg );
- assertTrue( errorMsg.contains( "Admin Users must login via" ) );
+ assertTrue( errorMsg.contains( "Cannot find Admin User" ) );
}
[5/8] incubator-usergrid git commit: Fixes to no Admin User signup
when ext. tokens enabled test.
Posted by gr...@apache.org.
Fixes to no Admin User signup when ext. tokens enabled test.
Project: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/commit/8aff6718
Tree: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/tree/8aff6718
Diff: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/diff/8aff6718
Branch: refs/heads/master
Commit: 8aff671853b7df41d2338b5617defdd99ffa08f1
Parents: c3e8782
Author: Dave Johnson <dm...@apigee.com>
Authored: Mon Apr 20 09:45:11 2015 -0400
Committer: Dave Johnson <dm...@apigee.com>
Committed: Mon Apr 20 09:45:11 2015 -0400
----------------------------------------------------------------------
.../rest/management/users/MUUserResourceIT.java | 41 ++++++++++----------
1 file changed, 20 insertions(+), 21 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/incubator-usergrid/blob/8aff6718/stack/rest/src/test/java/org/apache/usergrid/rest/management/users/MUUserResourceIT.java
----------------------------------------------------------------------
diff --git a/stack/rest/src/test/java/org/apache/usergrid/rest/management/users/MUUserResourceIT.java b/stack/rest/src/test/java/org/apache/usergrid/rest/management/users/MUUserResourceIT.java
index 65d6d50..a1e31c4 100644
--- a/stack/rest/src/test/java/org/apache/usergrid/rest/management/users/MUUserResourceIT.java
+++ b/stack/rest/src/test/java/org/apache/usergrid/rest/management/users/MUUserResourceIT.java
@@ -29,7 +29,9 @@ import javax.ws.rs.DefaultValue;
import javax.ws.rs.FormParam;
import javax.ws.rs.QueryParam;
import javax.ws.rs.core.MediaType;
+import javax.ws.rs.core.MultivaluedMap;
+import com.sun.jersey.core.util.MultivaluedMapImpl;
import org.apache.commons.lang.RandomStringUtils;
import org.codehaus.jackson.JsonNode;
import org.jclouds.json.Json;
@@ -631,26 +633,25 @@ public class MUUserResourceIT extends AbstractRestIT {
// create an admin user
final String rand = RandomStringUtils.randomAlphanumeric( 10 );
- Map<String, String> payload = new HashMap<String, String>() {{
- put( "username", "user_" + rand );
- put( "name", "Joe Userperson" );
- put( "email", "joe_" + rand + "@example.com" );
- put( "password", "wigglestone" );
+ MultivaluedMap<String, String> payload = new MultivaluedMapImpl() {{
+ putSingle( "username", "user_" + rand );
+ putSingle( "name", "Joe Userperson" );
+ putSingle( "email", "joe_" + rand + "@example.com" );
+ putSingle( "password", "wigglestone" );
}};
JsonNode node = resource().path( "/management/users")
.accept( MediaType.APPLICATION_JSON )
- .type( MediaType.APPLICATION_JSON )
+ .type( MediaType.APPLICATION_FORM_URLENCODED )
.post( JsonNode.class, payload );
fail( "Create admin user should fail" );
- } catch ( UniformInterfaceException actual ) {
- assertEquals( 400, actual.getResponse().getStatus() );
- String errorMsg = actual.getResponse().getEntity( JsonNode.class ).get( "error_description" ).toString();
- assertTrue( errorMsg.startsWith( "Admin Users must signup via http://localhost:" ) );
-
- } catch ( Exception e ) {
- fail("We expected a UniformInterfaceException");
+ } catch ( Exception actual ) {
+ assertTrue( actual instanceof UniformInterfaceException );
+ UniformInterfaceException uie = (UniformInterfaceException)actual;
+ assertEquals( 400, uie.getResponse().getStatus() );
+ String errorMsg = uie.getResponse().getEntity( JsonNode.class ).get( "error_description" ).toString();
+ assertTrue( errorMsg.contains( "Admin Users must signup via" ) );
}
@@ -673,16 +674,14 @@ public class MUUserResourceIT extends AbstractRestIT {
fail( "Create org and admin user should fail" );
- } catch ( UniformInterfaceException actual ) {
- assertEquals( 400, actual.getResponse().getStatus() );
- assertTrue( actual.getResponse().getEntity( JsonNode.class ).get( "error_description" )
- .toString().startsWith( "Organization / Admin Users must be created via http://localhost:" ));
-
- } catch ( Exception e ) {
- fail("We expected a UniformInterfaceException");
+ } catch ( Exception actual ) {
+ assertTrue( actual instanceof UniformInterfaceException );
+ UniformInterfaceException uie = (UniformInterfaceException)actual;
+ assertEquals( 400, uie.getResponse().getStatus() );
+ String errorMsg = uie.getResponse().getEntity( JsonNode.class ).get( "error_description" ).toString();
+ assertTrue( errorMsg.contains( "Organization / Admin Users must be created via" ) );
}
-
// turn off validate external tokens by un-setting the usergrid.central.url
props.put( USERGRID_CENTRAL_URL, "" );
[8/8] incubator-usergrid git commit: Merge branch 'USERGRID-575' of
https://github.com/apache/incubator-usergrid
Posted by gr...@apache.org.
Merge branch 'USERGRID-575' of https://github.com/apache/incubator-usergrid
Project: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/commit/2e90f39c
Tree: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/tree/2e90f39c
Diff: http://git-wip-us.apache.org/repos/asf/incubator-usergrid/diff/2e90f39c
Branch: refs/heads/master
Commit: 2e90f39cea164f0e1f84c7a5db88fddb6d656fa1
Parents: 61b492b 23febdf
Author: GERey <gr...@apigee.com>
Authored: Mon Apr 20 09:17:45 2015 -0700
Committer: GERey <gr...@apigee.com>
Committed: Mon Apr 20 09:17:45 2015 -0700
----------------------------------------------------------------------
.../main/resources/usergrid-default.properties | 27 +++--
.../organizations/OrganizationsResource.java | 18 +++-
.../rest/management/users/UserResource.java | 42 ++++++++
.../rest/management/users/UsersResource.java | 16 ++-
.../rest/management/ManagementResourceIT.java | 29 ++++--
.../rest/management/users/MUUserResourceIT.java | 101 +++++++++++++++++--
6 files changed, 199 insertions(+), 34 deletions(-)
----------------------------------------------------------------------