RFR 8050427 LoginContext tests to cover JDK-4703361

Amanda Jiang amanda.jiang at oracle.com
Tue Sep 22 15:49:17 UTC 2015


Hi Max,

Thanks for your comments ,please check updated webrev and my replies 
inline.
webrev: http://cr.openjdk.java.net/~amjiang/8050427/webrev.02/

Regards,
Amanda

On 8/17/15, 12:29 AM, Weijun Wang wrote:
> There are something I don't understand.
>
> MyConfiguration.java:
>
> - optionOrder: Is it possible to make this an argument of the 
> constructor?
     Fixed, made this an argument of the constructor.
>
> - getConfiguration/setConfiguration: If these are useless, why adding 
> these methods?
     Removed useless methods.
>
> SmartLoginModule.java:
>
> - initialize: Why don't you use the callbackHandler argument?
     See below.
>
> - shouldSucceed: It is always very confusing to make a field 
> accessible from outside a class.
     Originally the test tried to test with different password , 
"shouldSucceed" is used to control which password will be set.
     MycallbackHandler is called in initialize( ) method and 
"shouldSucceed" is parsed as an argument to control which password would 
be set to "PasswdCallback"

  123         this.callbackHandler = new MyCallbackHandler(myUsername, myPassword,
  124                 shouldSucceed);

  341     public MyCallbackHandler(String username, char[] password, boolean action) {
  342         super();
  343         userName = username;
  344         this.password = password;
  345         this.action = action;
  346     }

  361                 PasswordCallback pc = (PasswordCallback) callback;
  362                 if (action) {
  363                     pc.setPassword(password);
  364                 } else {
  365                     pc.setPassword(wrongpd);
  366                 }

     I agree with you this may be confusing, so I simplify this test, 
"shouldSucceed" value is remove, please check updated webrev.
>
> DynamicConfigurationTest.java:
>
> - test: why the if checks are based on both isNegative and success? 
> Why not only on isNegative? If you want to test 2 stages (initialize 
> and login), you can provide 2 isNegative flags.
          "success" was for controlling correct/wrong passwords, 
"isNegative" was for checking if exception is expected.
           Tests are re-organized , so I do not use these two flags 
now,  please check updated webrev.
>
> Thanks
> Max
>
>
> On 08/17/2015 01:39 PM, Amanda Jiang wrote:
>> Hi All,
>>
>> Please be free to review these new tests for Dynamic configuration of
>> authentication modules.
>>
>> Bug: https://bugs.openjdk.java.net/browse/JDK-8050427
>> webrev:http://cr.openjdk.java.net/~amjiang/8050427/webrev.01/
>>
>>
>> Thanks,
>> Amanda
>>
>>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20150922/ba1c92ef/attachment.htm>


More information about the security-dev mailing list