- * POST: Allowed to override as PUT or PATCH request - * GET: Allowed to override as DELETE request - *

- * The header name as well as the method override mapping can be defined using the constructor - * HTTPMethodOverrideFilter#HTTPMethodOverrideFilter(string, map) - *

- * For example the method PUT is blocked .. - * Send the request with POST and the header X-HTTP-Method-Override: PUT - *

- * Activated WebFilter by only 'nexus.api.backend.filter.httpoverride.enabled=true' in the configuration - */ -@Component -@ConditionalOnProperty(value = "nexus.api.backend.filter.httpoverride.enabled") -public class HTTPMethodOverrideFilter extends OncePerRequestFilter { - - private static final Logger logger = LoggerFactory.getLogger(HTTPMethodOverrideFilter.class); - - private static final String DEFAULT_HEADER_NAME = "X-HTTP-Method-Override"; - - private static final Map> DEFAULT_METHOD_MAPPING; - - static { - final Map> defaultMethodMapping = new HashMap<>(); - defaultMethodMapping.put(HttpMethod.POST, Set.of(HttpMethod.PATCH, HttpMethod.PUT)); - defaultMethodMapping.put(HttpMethod.GET, Set.copyOf(Collections.singletonList(HttpMethod.DELETE))); - DEFAULT_METHOD_MAPPING = Collections.unmodifiableMap(defaultMethodMapping); - } - - private final String headerName; - - private final Map> methodMapping; - - public HTTPMethodOverrideFilter() { this(DEFAULT_HEADER_NAME, DEFAULT_METHOD_MAPPING); } - - public HTTPMethodOverrideFilter(String headerName, Map> methodMapping) { - Assert.hasText(headerName, "headerName may not be null!"); - this.headerName = headerName; - this.methodMapping = convertMethodMapping(methodMapping); - logger.info("Started MethodOverride OncePerRequest Filter"); - } - - private Map> convertMethodMapping(Map> methodMapping) { - - if (methodMapping != null && !methodMapping.isEmpty()) { - final Map> converted = new HashMap<>(); - for (Map.Entry> entry : methodMapping.entrySet()) { - final Set overriddenHttpMethods = entry.getValue(); - if (overriddenHttpMethods != null && !overriddenHttpMethods.isEmpty()) { - Set convertedOverridings = new HashSet<>(overriddenHttpMethods.size()); - for (HttpMethod method : overriddenHttpMethods) { - convertedOverridings.add(method.name()); - } - converted.put(entry.getKey().name(), convertedOverridings); - } - } - if (!converted.isEmpty()) - return converted; - } - return null; - } - - - @Override - protected void doFilterInternal(HttpServletRequest request, @NonNull HttpServletResponse response, - @NonNull FilterChain filterChain) throws ServletException, IOException { - String overriddenMethod = request.getHeader(headerName); - if (shouldApplyMethodOverriding(overriddenMethod, request)) { - filterChain.doFilter(new HttpMethodRequestWrapper(request, overriddenMethod), response); - } else { - filterChain.doFilter(request, response); - } - } - - private boolean shouldApplyMethodOverriding(String overriddenMethod, HttpServletRequest request) { - if (methodMapping != null) { - if (!ObjectUtils.isEmpty(overriddenMethod)) { - final String requestMethod = request.getMethod(); - final Set allowedOverridingMethod = methodMapping.get(requestMethod); - if (allowedOverridingMethod != null) { - if (allowedOverridingMethod.contains(overriddenMethod)) { - logger.debug("Valid overridden http-request-method found for this request {}. Method id '{}'", - request.getRequestURI(), overriddenMethod); - return true; - } - logger.debug("Invalid overridden http-request-method detected for request {} {}."+ - "Method id '{}' but should be one of this '{}'", requestMethod, - request.getRequestURI(), overriddenMethod, allowedOverridingMethod); - - } else if (logger.isDebugEnabled()) { - logger.debug("No overridden http-request-method allowed for request {} {}. But found: {} ", - requestMethod, request.getRequestURI(), overriddenMethod); - } - } else if (logger.isDebugEnabled()) { - logger.debug("No overridden http-request-method found for request {} {}", request.getMethod(), - request.getRequestURI()); - } - } - return false; - } - - private static class HttpMethodRequestWrapper extends HttpServletRequestWrapper { - - private final String method; - - HttpMethodRequestWrapper(HttpServletRequest request, String method) { - super(request); - this.method = method; - } - - public String getMethod() { - return this.method; - } - } -} diff --git a/src/main/java/com/jservlet/nexus/shared/web/filter/WAFFilter.java b/src/main/java/com/jservlet/nexus/shared/web/filter/WAFFilter.java deleted file mode 100644 index 0e83e5b..0000000 --- a/src/main/java/com/jservlet/nexus/shared/web/filter/WAFFilter.java +++ /dev/null @@ -1,503 +0,0 @@ -/* - * Copyright (C) 2001-2025 JServlet.com Franck Andriano. - * - * This program is free software: you can redistribute it and/or modify - * it under the terms of the GNU General Public License as - * published by the Free Software Foundation, either version 3 of the - * License, or (at your option) any later version. - * - * This program is distributed in the hope that it will be useful, - * but WITHOUT ANY WARRANTY; without even the implied warranty of - * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the - * GNU General Public License for more details. - * - * You should have received a copy of the GNU General Public - * License along with this program. If not, see - * . - */ - -package com.jservlet.nexus.shared.web.filter; - -import com.fasterxml.jackson.databind.ObjectMapper; -import com.jservlet.nexus.shared.web.controller.ApiBase; -import org.apache.commons.io.IOUtils; -import org.apache.commons.lang3.StringUtils; -import org.slf4j.Logger; -import org.slf4j.LoggerFactory; -import org.springframework.beans.factory.annotation.Value; -import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty; -import org.springframework.core.log.LogFormatUtils; -import org.springframework.http.HttpStatus; -import org.springframework.http.MediaType; -import org.springframework.lang.NonNull; -import org.springframework.security.web.firewall.RequestRejectedException; -import org.springframework.stereotype.Component; -import org.springframework.util.LinkedMultiValueMap; -import org.springframework.util.MultiValueMap; -import org.springframework.web.multipart.MultipartFile; -import org.springframework.web.multipart.MultipartRequest; - -import javax.annotation.PostConstruct; -import javax.servlet.*; -import javax.servlet.http.Cookie; -import javax.servlet.http.HttpServletRequest; -import javax.servlet.http.HttpServletResponse; -import java.io.ByteArrayInputStream; -import java.io.IOException; -import java.io.InputStream; -import java.nio.charset.StandardCharsets; -import java.util.*; -import java.util.regex.Pattern; - -/** - * WebFilter class implements a secure WAF protection for request Body.
- * Http request Cookies, Headers, Parameters and Body can be filtered. - *

- * Un-normalized requests are automatically rejected by the StrictHttpFirewall, - * and path parameters and duplicate slashes are removed for matching purposes.
- * Noted the valid characters are defined in RFC 7230 and RFC 3986 are checked - * by the Apache Coyote http11 processor (see coyote Error parsing HTTP request header)
- *

- * Default reactive mode is STRICT mode - *

- *
• STRICT: StrictHttpFirewall + Rejects requests with malicious patterns.
- *
• PASSIVE: StrictHttpFirewall + Cleans malicious patterns from request body and parameters.
- *
• UNSAFE: StrictHttpFirewall + No checks on request body.
- *

- * Activated WebFilter by only 'nexus.api.backend.filter.waf.enabled=true' in the configuration - */ -@Component -@ConditionalOnProperty(value = "nexus.api.backend.filter.waf.enabled") -public class WAFFilter extends ApiBase implements Filter { - - private static final Logger logger = LoggerFactory.getLogger(WAFFilter.class); - - private static final String SOURCE = "INTERNAL-WAF-NEXUS-BACKEND"; - - public enum Reactive { - STRICT, // Rejects requests with malicious patterns. - PASSIVE, // Cleans malicious patterns from the request. - UNSAFE // Performs no checks on the request body. - } - - @Value("${nexus.api.backend.filter.waf.reactive.mode:STRICT}") - private Reactive reactiveMode; - - @Value("${nexus.api.backend.filter.waf.deepscan.cookie:false}") - private boolean isDeepScanCookie; - - // Max WAF file scan limit (ex: 15MB) to prevent RAM OutOfMemory (DoS attack) - @Value("${nexus.api.backend.filter.waf.maxInMemoryFileSize:15728640}") - private long maxInMemoryFileSize = 15 * 1024 * 1024; - - private final WAFPredicate wafPredicate; - private final ObjectMapper objectMapper; - - // Set xml MimeTypes - private final Set xmlMimeTypes = new HashSet<>(); - - // Map magic numbers binaries files - private final Map magicNumbers = new HashMap<>(); - - public WAFFilter(WAFPredicate wafPredicate, ObjectMapper objectMapper) { - super(SOURCE); - this.wafPredicate = wafPredicate; - this.objectMapper = objectMapper; - } - - @PostConstruct - private void postConstruct() { - xmlMimeTypes.addAll(Arrays.asList("image/svg+xml", "text/xml", "application/xml", "application/vnd.mozilla.xul+xml")); - - magicNumbers.put("FFD8FF", "image/jpeg"); - magicNumbers.put("47494638", "image/gif"); - magicNumbers.put("89504E47", "image/png"); // Simplified PNG magic number for matching - magicNumbers.put("424D", "image/bmp"); - magicNumbers.put("255044462D", "application/pdf"); - magicNumbers.put("504B0304", "application/zip"); - } - - @Override - public void init(FilterConfig filterConfig) { - logger.info("Starting WAF Filter with reactive mode: {}", reactiveMode); - } - - @Override - public void doFilter(final ServletRequest request, final ServletResponse response, final FilterChain chain) - throws IOException, ServletException { - final HttpServletRequest req = (HttpServletRequest) request; - final HttpServletResponse resp = (HttpServletResponse) response; - - try { - if (reactiveMode == Reactive.UNSAFE) { // WARN UNSAFE mode bypasses all checks. - chain.doFilter(req, resp); - return; - } - - // Wrap the request to allow reading input stream multiple times and modifying parameters - WAFRequestWrapper wrappedRequest = new WAFRequestWrapper(req); - - // Validate Hostname & User-Agent (Gateways must check Host headers) - validateHostAndUserAgent(wrappedRequest); - - // Wrap & Scan Multipart Files safely - HttpServletRequest processedRequest = scanAndWrapMultipartFiles(wrappedRequest); - - // Apply WAF Policies - if (reactiveMode == Reactive.STRICT) { - handleStrict(processedRequest); - } else if (reactiveMode == Reactive.PASSIVE) { - handlePassive(processedRequest); - } - - // Continue the filter chain with the (potentially wrapped) request. - chain.doFilter(processedRequest, response); - - } catch (RequestRejectedException ex) { - handleRequestRejected(ex, req, resp); - } - } - - /** - * Scans and wraps multipart files. Reads the file content into memory to - * avoid FileNotFoundException in subsequent filters or controllers. - * - * @param request The current HttpServletRequest. - * @return A new HttpServletRequest wrapper with processed multipart files. - * @throws IOException IO error - */ - private HttpServletRequest scanAndWrapMultipartFiles(HttpServletRequest request) throws IOException { - if (request instanceof MultipartRequest) { - MultipartRequest originalMultipartRequest = (MultipartRequest) request; - MultiValueMap newMultipartFiles = new LinkedMultiValueMap<>(); - - for (Map.Entry> entry : originalMultipartRequest.getMultiFileMap().entrySet()) { - for (MultipartFile file : entry.getValue()) { - if (file.isEmpty()) continue; - - // ANTI-DOS: Prevent loading massive files into RAM - if (file.getSize() > maxInMemoryFileSize) { - throw new RequestRejectedException("Request rejected: File size exceeds WAF inspection limit."); - } - // Check magic numbers and file type - byte[] fileContent = file.getBytes(); - String declaredContentType = file.getContentType(); - - // Magic Number Validation - if (fileContent.length >= 4) { - String hexHeader = bytesToHex(Arrays.copyOfRange(fileContent, 0, 8)); - String magicMimeType = magicNumbers.entrySet().stream() - .filter(e -> hexHeader.toUpperCase().startsWith(e.getKey())) - .map(Map.Entry::getValue) - .findFirst().orElse(null); - - if (magicMimeType != null && declaredContentType != null && !magicMimeType.equals(declaredContentType)) { - throw new RequestRejectedException("Request rejected: Mime-type spoofing detected for file '" + file.getOriginalFilename() + "'."); - } - } - - // XML/SVG Injection Validation - if (declaredContentType != null && xmlMimeTypes.contains(declaredContentType.toLowerCase())) { - String content = new String(fileContent, StandardCharsets.UTF_8); - // Using WAF Parameter validation for file content - if (!wafPredicate.getWAFParameterValues().test(content)) { - throw new RequestRejectedException("Request rejected: Disallowed pattern found in XML file '" + file.getOriginalFilename() + "'."); - } - } - - newMultipartFiles.add(entry.getKey(), new WAFTempMultipartFile(file.getName(), file.getOriginalFilename(), declaredContentType, fileContent)); - } - } - return new WAFMultipartRequestWrapper(request, newMultipartFiles); - } - return request; - } - - /** - * Handles STRICT mode. Rejects requests on pattern match. - * - * @param request The processed HttpServletRequest. - */ - private void handleStrict(HttpServletRequest request) throws IOException { - // Validate http headers (Critical for Log4Shell/SpEL/Deserialization) - Enumeration headerNames = request.getHeaderNames(); - while (headerNames != null && headerNames.hasMoreElements()) { - String headerName = headerNames.nextElement(); - if (!wafPredicate.getWAFHeaderNames().test(headerName)) { - throw new RequestRejectedException("Request rejected: Disallowed pattern in Header name."); - } - Enumeration headers = request.getHeaders(headerName); - while (headers != null && headers.hasMoreElements()) { - if (!wafPredicate.getWAFHeaderValues().test(headers.nextElement())) { - throw new RequestRejectedException("Request rejected: Disallowed pattern in Header value (" + headerName + ")."); - } - } - } - - // Validate url / form parameters (XSS, SQLi in Query String) - for (Map.Entry entry : request.getParameterMap().entrySet()) { - if (!wafPredicate.getWAFParameterNames().test(entry.getKey())) { - throw new RequestRejectedException("Request rejected: Disallowed pattern in Parameter name."); - } - for (String value : entry.getValue()) { - if (!wafPredicate.getWAFParameterValues().test(value)) { - throw new RequestRejectedException("Request rejected: Disallowed pattern in Parameter value."); - } - } - } - - // Validate cookies - if (isDeepScanCookie) { - validateCookies(request); - } - - // Validate json/rest body - String body = IOUtils.toString(request.getReader()); - if (!StringUtils.isBlank(body)) { - // Note: Assume you added getWAFRestApiBody() in WAFPredicate as suggested, otherwise use getWAFParameterValues() - if (!wafPredicate.getWAFParameterValues().test(body)) { - throw new RequestRejectedException("Request rejected: Disallowed WAF pattern found in Request Body."); - } - } - } - - /** - * Handles PASSIVE mode. Cleans the request on pattern match. - * - * @param request The processed HttpServletRequest. - */ - private void handlePassive(HttpServletRequest request) throws IOException { - // Warning: Sanitizing input by stripping patterns (Regex replaceAll) can lead to bypasses (e.g. ", - HttpMethod.GET, backendService.createResponseType(Data.class), null, null); - System.out.println(objError); - } catch (NexusHttpException | NexusIllegalUrlException | HttpStatusCodeException e) { - System.out.println("Failed to GET EntityError entity/entities on backend: " + e.getMessage()); - } catch (NexusResourceNotFoundException ex) { - System.out.println("ResourceNotFound: " + ex.getMessage()); - } - } - - - @Test - public void testGetString() { - try { - // get String - String obj = backendService.doRequest("/mock/v1/dataList", HttpMethod.GET, - backendService.createResponseType(String.class), null, null); - System.out.println(obj); - } catch (NexusHttpException | NexusIllegalUrlException | HttpStatusCodeException e) { - System.out.println("Failed to GET String entity/entities on backend: " + e.getMessage()); - } catch (NexusResourceNotFoundException ex) { - System.out.println("ResourceNotFound: " + ex.getMessage()); - } - } - - @Test - public void testGetArrayList() { - try { - // get ArrayList - Object obj = backendService.doRequest("/mock/v1/dataList", HttpMethod.GET, - backendService.createResponseType(Object.class), null, null); - if (obj instanceof ArrayList) { - System.out.println(obj); - } - } catch (NexusHttpException | NexusIllegalUrlException | HttpStatusCodeException e) { - System.out.println("Failed to GET ArrayList entity/entities on backend: " + e.getMessage()); - } catch (NexusResourceNotFoundException ex) { - System.out.println("ResourceNotFound: " + ex.getMessage()); - } - } - - - @Test - public void testGetResource() { - try { - // get Resource file in ByteArray! - HttpHeaders headers = new HttpHeaders(); - headers.setAccept(Collections.singletonList(MediaType.APPLICATION_OCTET_STREAM)); - Resource resource = backendService.doRequest("/mock/v1/datafile", HttpMethod.GET, - backendService.createResponseType(Resource.class), null, headers); // WARN mandatory typed Resource.class - String data = StreamUtils.copyToString(resource.getInputStream(), Charset.defaultCharset()); - System.out.println(data); - } - catch (NexusHttpException | NexusIllegalUrlException | HttpStatusCodeException e) { - System.out.println("Failed to GET Resource entity/entities on backend: " + e.getMessage()); - } catch (NexusResourceNotFoundException | IOException e) { - System.out.println("ResourceNotFound: " + e.getMessage()); - } - } - - - @Test - public void testGetByteArray() { - try { - // get data in ByteArray! - byte[] obj = backendService.doRequest("/mock/v1/dataBytes", HttpMethod.GET, - backendService.createResponseType(byte[].class), null, null); // WARN mandatory typed byte[].class - System.out.println(new String(obj, StandardCharsets.UTF_8)); - } catch (NexusHttpException | NexusIllegalUrlException | HttpStatusCodeException e) { - System.out.println("Failed to GET Bytes entity/entities on backend: " + e.getMessage()); - } catch (NexusResourceNotFoundException ex) { - System.out.println("ResourceNotFound: " + ex.getMessage()); - } - } - - @Test - public void testEchoProxy() { - try { - HttpHeaders headers = new HttpHeaders(); - headers.add("Content-Type", MediaType.APPLICATION_FORM_URLENCODED_VALUE); - // get Echo data in ByteArray through the proxy! - byte[] obj = backendService.doRequest("/mock/v1/proxy", HttpMethod.POST, - backendService.createResponseType(byte[].class), "echo=Hello Proxy! Héhè hàhâ ", headers); // WARN mandatory typed byte[].class - System.out.println(new String(obj, StandardCharsets.UTF_8)); - } catch (NexusHttpException | NexusIllegalUrlException | HttpStatusCodeException e) { - System.out.println("Failed to POST Echo Bytes entity/entities on backend: " + e.getMessage()); - } catch (NexusResourceNotFoundException ex) { - System.out.println("ResourceNotFound: " + ex.getMessage()); - } - } - - @Test - public void testGetEchoEntityProxy() { - try { - // get Echo data in ByteArray through the proxy! - byte[] obj = backendService.doRequest("/mock/v1/echo?echo=Hello+Proxy!", HttpMethod.GET, - backendService.createResponseType(byte[].class), null, null); // WARN mandatory typed byte[].class - System.out.println(new String(obj, StandardCharsets.UTF_8)); - } catch (NexusHttpException | NexusIllegalUrlException | HttpStatusCodeException e) { - System.out.println("Failed to POST Echo Bytes entity/entities on backend: " + e.getMessage()); - } catch (NexusResourceNotFoundException ex) { - System.out.println("ResourceNotFound: " + ex.getMessage()); - } - } - - @Test - public void testPostEchoEntityProxy() { - try { - HttpHeaders headers = new HttpHeaders(); - headers.add("Content-Type", MediaType.APPLICATION_FORM_URLENCODED_VALUE); // WARN mandatory! - // get Echo data in ByteArray through the proxy! - byte[] obj = backendService.doRequest("/mock/v1/proxy", HttpMethod.POST, - backendService.createResponseType(byte[].class), "Hello Echo!", headers); // WARN mandatory typed byte[].class - System.out.println(new String(obj, StandardCharsets.UTF_8)); - } catch (NexusHttpException | NexusIllegalUrlException | HttpStatusCodeException e) { - System.out.println("Failed to POST Echo Bytes entity/entities on backend: " + e.getMessage()); - } catch (NexusResourceNotFoundException ex) { - System.out.println("ResourceNotFound: " + ex.getMessage()); - } - } - - @Test - public void testNotFoundGetEntity() { - try { - // get Object Entity - Object obj = backendService.doRequest("/mock/v1/dataNotFound", HttpMethod.GET, - backendService.createResponseType(Data.class), null, null); - System.out.println(obj); - } catch (NexusHttpException | NexusIllegalUrlException | HttpStatusCodeException e) { - System.out.println("Failed to GET Data entity/entities on backend: " + e.getMessage()); - } catch (NexusResourceNotFoundException ex) { - System.out.println("ResourceNotFound: " + ex.getMessage()); - } - } - - @Test - public void testXErrorBackend500() { - try { - // get Object Entity - Object obj = backendService.doRequest("/mock/v1/dataError500", HttpMethod.GET, - backendService.createResponseType(Data.class), null, null); - System.out.println(obj); - } catch (NexusHttpException | NexusIllegalUrlException | HttpStatusCodeException e) { - System.out.println("Failed to GET Data entity/entities on backend: " + e.getMessage()); - } catch (NexusResourceNotFoundException ex) { - System.out.println("ResourceNotFound: " + ex.getMessage()); - } - } - - @Test - public void testXErrorBackend401() { - try { - // get Object Entity - Object obj = backendService.doRequest("/mock/v1/dataError401", HttpMethod.GET, - backendService.createResponseType(Data.class), null, null); - System.out.println(obj); - } catch (NexusHttpException | NexusIllegalUrlException | HttpStatusCodeException e) { - System.out.println("Failed to GET Data entity/entities on backend: " + e.getMessage()); - } catch (NexusResourceNotFoundException ex) { - System.out.println("ResourceNotFound: " + ex.getMessage()); - } - } - - @Test - public void testXErrorBackend400() throws NexusGetException { - try { - // get Object Entity - Object obj = backendService.doRequest("/v1/dataError400", HttpMethod.GET, - backendService.createResponseType(Data.class), null, null); - System.out.println(obj); - } catch (NexusHttpException | NexusIllegalUrlException | HttpStatusCodeException e) { - System.out.println("Failed to GET Data entity/entities on backend: " + e.getMessage()); - } catch (NexusResourceNotFoundException ex) { - System.out.println("ResourceNotFound: " + ex.getMessage()); - //throw new NexusGetException(ex.getMessage()); - } - } - - -} diff --git a/src/test/java/com/jservlet/nexus/test/RestControllerTest.java b/src/test/java/com/jservlet/nexus/test/RestControllerTest.java deleted file mode 100644 index 1e76c44..0000000 --- a/src/test/java/com/jservlet/nexus/test/RestControllerTest.java +++ /dev/null @@ -1,286 +0,0 @@ -package com.jservlet.nexus.test; - -import com.jservlet.nexus.controller.MockController.Data; -import com.jservlet.nexus.shared.exceptions.*; -import com.jservlet.nexus.shared.service.backend.BackendService; -import com.jservlet.nexus.shared.service.backend.BackendService.ResponseType; -import com.jservlet.nexus.test.config.ApplicationTestConfig; -import junit.framework.TestCase; -import org.apache.commons.io.FileUtils; -import org.apache.commons.io.IOUtils; -import org.hamcrest.CoreMatchers; -import org.hamcrest.MatcherAssert; -import org.junit.Assert; -import org.junit.Before; -import org.junit.Ignore; -import org.junit.Test; -import org.junit.runner.RunWith; -import org.slf4j.Logger; -import org.slf4j.LoggerFactory; -import org.springframework.beans.factory.annotation.Autowired; -import org.springframework.context.ResourceLoaderAware; -import org.springframework.core.ParameterizedTypeReference; -import org.springframework.core.io.FileSystemResource; -import org.springframework.core.io.Resource; -import org.springframework.core.io.ResourceLoader; -import org.springframework.http.HttpStatus; -import org.springframework.http.ResponseEntity; -import org.springframework.lang.NonNull; -import org.springframework.test.context.ContextConfiguration; -import org.springframework.test.context.TestPropertySource; -import org.springframework.test.context.junit4.SpringJUnit4ClassRunner; -import org.springframework.test.context.web.WebAppConfiguration; -import org.springframework.web.client.HttpClientErrorException; -import org.springframework.web.client.RestClientException; -import org.springframework.web.client.RestTemplate; - -import java.io.File; -import java.io.IOException; -import java.nio.charset.StandardCharsets; -import java.util.Arrays; -import java.util.List; - -/** - * Run tests with a local Tomcat localhost:8082/nexus-backend - */ -@Ignore // Remove for unit test -@RunWith(SpringJUnit4ClassRunner.class) -@WebAppConfiguration -@ContextConfiguration(classes={ApplicationTestConfig.class}) -@TestPropertySource(properties = { "nexus.backend.url=http://localhost:8082/nexus-backend" }) -public class RestControllerTest extends TestCase implements ResourceLoaderAware { - - private static final Logger logger = LoggerFactory.getLogger(RestControllerTest.class); - - @Autowired - private BackendService backendService; - - private ResponseType NO_RESPONSE_TYPE; - private ResponseType DATA_RESPONSE_TYPE; - private ResponseType> DATA_LIST_RESPONSE_TYPE; - private ResponseType STATUS_RESPONSE_TYPE; - private ResponseType BOOL_RESPONSE_TYPE; - private ResponseType