过滤器单元测试 class

Question

我正在尝试为以下过滤器 class 编写单元测试，但我不确定如何完成。 我正在从事一个 Spring 项目并试图修复一个漏洞，这就是我使用这个 class 的原因。

public class HSTSFilter implements Filter {
    private static final String HEADER_NAME = "Strict-Transport-Security";
    private static final String MAX_AGE_DIRECTIVE = "max-age=%s";
    private static final String INCLUDE_SUB_DOMAINS_DIRECTIVE = "includeSubDomains";
    private static final Logger logger = LoggerFactory.getLogger(HSTSFilter.class);

    private int maxAgeSeconds = 0;
    private boolean includeSubDomains = false;
    private String directives;

    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
            throws IOException, ServletException {
        logger.info("request.isSecure() :: {}" , request.isSecure());

        if (request.isSecure() && response instanceof HttpServletResponse) {
            HttpServletResponse res = (HttpServletResponse) response;
            res.addHeader(HEADER_NAME, this.directives);
        }
        chain.doFilter(request, response);
    }

    public void init(FilterConfig filterConfig) throws ServletException {
        maxAgeSeconds = Integer.parseInt(filterConfig.getInitParameter("maxAgeSeconds"));
        includeSubDomains = "true".equals(filterConfig.getInitParameter("includeSubDomains"));

        if (this.maxAgeSeconds <= 0) {
            throw new ServletException("Invalid maxAgeSeconds value :: " + maxAgeSeconds);
        }

        this.directives = String.format(MAX_AGE_DIRECTIVE, this.maxAgeSeconds);
        if (this.includeSubDomains) {
            this.directives += (" ; " + INCLUDE_SUB_DOMAINS_DIRECTIVE);
        }
    }

    @Override
    public void destroy() {
    }
}

Answer 1

在您的单元测试中，创建 ServletRequest、ServletResponse 和 FilterChain 的模拟 object。 使用这些模拟对象调用 doFilter。