import net.oauth.SimpleOAuthValidator; //导入依赖的package包/类
@Provides
@Singleton
protected OAuthValidator provideOAuthValidator() {
  // TODO(ljvderijk): This isn't an industrial strength validator, it grows
  // over time. It should be replaced or cleaned out on a regular interval.
  return new SimpleOAuthValidator();
}
 

import net.oauth.SimpleOAuthValidator; //导入依赖的package包/类
/**
 * Initializes the filter with the given key manager
 * 
 * @param keyManager The key manager instance to be used
 */
private void initializeFilter(KeyManager keyManager) {
  this.keyManager = keyManager;
  provider = new OAuthServiceProvider(null, null, null);
  validator = new SimpleOAuthValidator();
  logger.info("Initialized OAuth filter with key manager: "
      + keyManager.getClass().getName());
}
 

import net.oauth.SimpleOAuthValidator; //导入依赖的package包/类
@Test
public void testValidateMessageFailOnValidateMessageIOException() throws Exception {

    SimpleOAuthValidator sov = Mockito.mock(SimpleOAuthValidator.class);
    PowerMockito.whenNew(SimpleOAuthValidator.class).withNoArguments().thenReturn(sov);
    Mockito.doThrow(new IOException("failed")).when(sov).validateMessage(Matchers.any(OAuthMessage.class), Matchers.any(OAuthAccessor.class));
    PowerMockito.mockStatic(OAuthSignatureMethod.class);
    PowerMockito.when(OAuthSignatureMethod.getBaseString(Matchers.any(OAuthMessage.class))).thenReturn("");

    LtiVerificationResult result = BasicLTIUtil.validateMessage(Mockito.mock(HttpServletRequest.class), "https://example.com/lti-launch", "secret");        

    Assert.assertEquals(LtiError.BAD_REQUEST, result.getError());
    Assert.assertEquals(Boolean.FALSE, result.getSuccess());
    Assert.assertEquals(null, result.getLtiLaunchResult());
}
 

import net.oauth.SimpleOAuthValidator; //导入依赖的package包/类
@Test
public void testValidateMessageFailOnValidateMessageOAuthException() throws Exception {

    SimpleOAuthValidator sov = Mockito.mock(SimpleOAuthValidator.class);
    PowerMockito.whenNew(SimpleOAuthValidator.class).withNoArguments().thenReturn(sov);
    Mockito.doThrow(new OAuthException("failed")).when(sov).validateMessage(Matchers.any(OAuthMessage.class), Matchers.any(OAuthAccessor.class));
    PowerMockito.mockStatic(OAuthSignatureMethod.class);
    PowerMockito.when(OAuthSignatureMethod.getBaseString(Matchers.any(OAuthMessage.class))).thenReturn("");

    LtiVerificationResult result = BasicLTIUtil.validateMessage(Mockito.mock(HttpServletRequest.class), "https://example.com/lti-launch", "secret");

    Assert.assertEquals(LtiError.BAD_REQUEST, result.getError());
    Assert.assertEquals(Boolean.FALSE, result.getSuccess());
    Assert.assertEquals(null, result.getLtiLaunchResult());
}
 

import net.oauth.SimpleOAuthValidator; //导入依赖的package包/类
@Test
public void testValidateMessageFailOnValidateMessageURISyntaxException() throws Exception {

    SimpleOAuthValidator sov = Mockito.mock(SimpleOAuthValidator.class);
    PowerMockito.whenNew(SimpleOAuthValidator.class).withNoArguments().thenReturn(sov);
    Mockito.doThrow(new URISyntaxException("failed", "failed")).when(sov).validateMessage(Matchers.any(OAuthMessage.class), Matchers.any(OAuthAccessor.class));
    PowerMockito.mockStatic(OAuthSignatureMethod.class);
    PowerMockito.when(OAuthSignatureMethod.getBaseString(Matchers.any(OAuthMessage.class))).thenReturn("");

    LtiVerificationResult result = BasicLTIUtil.validateMessage(Mockito.mock(HttpServletRequest.class), "https://example.com/lti-launch", "secret");        

    Assert.assertEquals(LtiError.BAD_REQUEST, result.getError());
    Assert.assertEquals(Boolean.FALSE, result.getSuccess());
    Assert.assertEquals(null, result.getLtiLaunchResult());
}
 

import net.oauth.SimpleOAuthValidator; //导入依赖的package包/类
@Test
public void testValidateMessagePass() throws Exception {

    SimpleOAuthValidator sov = Mockito.mock(SimpleOAuthValidator.class);
    PowerMockito.whenNew(SimpleOAuthValidator.class).withNoArguments().thenReturn(sov);
    Mockito.doNothing().when(sov).validateMessage(Matchers.any(OAuthMessage.class), Matchers.any(OAuthAccessor.class));
    PowerMockito.mockStatic(OAuthSignatureMethod.class);
    PowerMockito.when(OAuthSignatureMethod.getBaseString(Matchers.any(OAuthMessage.class))).thenReturn("");
    
    HttpServletRequest req = Mockito.mock(HttpServletRequest.class);
    Mockito.when(req.getParameter("user_id")).thenReturn("pgray");
    Mockito.when(req.getParameter("roles")).thenReturn("instructor, teacher,administrator");
    Mockito.when(req.getParameter("lti_version")).thenReturn("lpv1");
    Mockito.when(req.getParameter("lti_message_type")).thenReturn("lti");
    Mockito.when(req.getParameter("resource_link_id")).thenReturn("12345");
    Mockito.when(req.getParameter("context_id")).thenReturn("9876");
    Mockito.when(req.getParameter("launch_presentation_return_url")).thenReturn("http://example.com/return");
    Mockito.when(req.getParameter("tool_consumer_instance_guid")).thenReturn("instance_id");

    LtiVerificationResult result = BasicLTIUtil.validateMessage(req, "https://example.com/lti-launch", "secret1");        

    Assert.assertEquals(null, result.getError());
    Assert.assertEquals(Boolean.TRUE, result.getSuccess());
    Assert.assertNotNull(result.getLtiLaunchResult());
    
    Assert.assertEquals("pgray", result.getLtiLaunchResult().getUser().getId());
    Assert.assertEquals(3, result.getLtiLaunchResult().getUser().getRoles().size());
    Assert.assertTrue(result.getLtiLaunchResult().getUser().getRoles().contains("instructor"));
    Assert.assertTrue(result.getLtiLaunchResult().getUser().getRoles().contains("teacher"));
    Assert.assertTrue(result.getLtiLaunchResult().getUser().getRoles().contains("administrator"));
    
    Assert.assertEquals("lpv1", result.getLtiLaunchResult().getVersion());
    Assert.assertEquals("lti", result.getLtiLaunchResult().getMessageType());
    Assert.assertEquals("12345", result.getLtiLaunchResult().getResourceLinkId());
    Assert.assertEquals("9876", result.getLtiLaunchResult().getContextId());
    Assert.assertEquals("http://example.com/return", result.getLtiLaunchResult().getLaunchPresentationReturnUrl());
    Assert.assertEquals("instance_id", result.getLtiLaunchResult().getToolConsumerInstanceGuid());
    
}