如何将身份验证添加到控制器测试弹簧中？

Question

我在应用程序中的春季应用中添加了一个基本验证。

  #Security
  security:
    user:
      name: admin
      password: admin

我还添加了Spring-boot-Starter-Security使其正常工作。现在，我很好奇我如何需要重构控制器测试，就像我实现基本AUTH后所有这些测试返回401状态之后一样。我正在使用Junit5和Mockito。这是ControlerTests类：

@RunWith(SpringRunner.class)
@SpringBootTest(classes = BooksApplication.class)
@AutoConfigureMockMvc
class BookControllerTests {
@Autowired
MockMvc mockMvc;

@Autowired
ObjectMapper mapper;
@MockBean
BookController bookController;

@Autowired
private BookConverter converter;

@Test
public void createBook_success() throws Exception {
    Book book = Book.builder().name("Great book").author("Ivan")
            .pagesNumber(340).publisher("New Publisher").build();
    BookDto dto = converter.toDto(book);

    given(bookController.createBook(dto)).willReturn(dto);

    mockMvc.perform(post("/api/books/create")
                    .contentType(MediaType.APPLICATION_JSON).content(asJsonString(book)))
            .andExpect(status().isCreated());
}

@Test
public void getAllBooks_success() throws Exception {

    Book book1 = Book.builder().name("New book").author("Ivan").build();
    Book book2 = Book.builder().name("This book").author("Whatever").build();

    List<Book> bookList = new ArrayList<>(Arrays.asList(book1, book2));

    Mockito.when(bookController.getAllBooks()).thenReturn(bookList);

    mockMvc.perform(MockMvcRequestBuilders.get("/api/books/all")
                    .contentType(MediaType.APPLICATION_JSON))
            .andExpect(status().isOk())
            .andExpect(jsonPath("$", hasSize(2)))
            .andExpect(jsonPath("$[0].name", is("New book")));
}

@Test
public void findByTitle_success() throws Exception {
    Book book = Book.builder().name("New book").author("Ivan")
            .pagesNumber(340).publisher("New Publisher").build();

    BookDto dto = converter.toDto(book);

    Mockito.when(bookController.findByTitle(book.getName())).thenReturn(dto);

    LinkedMultiValueMap<String, String> requestParams = new LinkedMultiValueMap<>();
    requestParams.add("name", "New book");

    mockMvc.perform(MockMvcRequestBuilders.get("/api/books/byTitle").params(requestParams)
                    .contentType(MediaType.APPLICATION_JSON))
            .andExpect(status().isOk());
}
private String asJsonString(final Object obj){
    try{
        return new ObjectMapper().writeValueAsString(obj);
    } catch (Exception e){
        throw new RuntimeException(e);
    }
}
}

PS是否有有关在测试中实施身份验证的文章或文档？将不胜感激。

Answer 1

检查弹簧安全文档 - https://docs.spring.io/spring-security/referenty/5.6.5/servlet/test/method.html#test-method-method-withmockuser

您可以使用@withmockuser 注释，它提供用户名 - 用户和密码 - 密码以及角色-COARE_USER的默认凭据