Merge pull request #5 from qbicsoftware/patch/security

Enables secured endpoints

pom.xml

@@ -4,7 +4,7 @@
 	<modelVersion>4.0.0</modelVersion>
 	<!--groupId>life.qbic</groupId -->
 	<artifactId>sampletracking</artifactId>
-	<version>1.0.0-SNAPSHOT</version>
+	<version>1.0.1-SNAPSHOT</version>
 	<parent>
 		<groupId>life.qbic</groupId>
 		<artifactId>service-parent-pom</artifactId>

src/main/resources/application-test.yml

@@ -1,6 +1,11 @@
 micronaut:
     application:
         name: sampletracking
+    security:
+        enabled: true
+        endpoints:
+            login:
+                enabled: true
 datasources:
         default:
             url: jdbc:hsqldb:mem:mymemdb;shutdown=true/test?maxPoolSize=150&pool

src/main/resources/application.yml

@@ -3,6 +3,11 @@ micronaut:
         name: sampletracking
     server:
         port: ${tr-server-port:8080}
+    security:
+        enabled: true
+        endpoints:
+            login:
+                enabled: true
 datasources:
     default:
         url: jdbc:mariadb://${tr-db-host}/${tr-db-name}

src/test/groovy/life/qbic/controller/SamplesControllerIntegrationTest.groovy

@@ -95,6 +95,18 @@ class SamplesControllerIntegrationTest {
     assertEquals(error, "Bad Request")
   }
 
+  @Test
+  void testAuthenticationRequired() throws Exception {
+    HttpRequest request = HttpRequest.GET("/samples/" + validCode1)
+    def statusCode
+    try {
+      HttpResponse response = client.toBlocking().exchange(request)
+    } catch (HttpClientResponseException e) {
+      statusCode = e.getStatus().code
+    }
+    assertEquals(401, statusCode)
+  }
+
   @Test
   void testSample() throws Exception {
     String email1 = "person1@mail.de"
@@ -264,7 +276,7 @@ class SamplesControllerIntegrationTest {
     String body = client.toBlocking().retrieve(request)
     assertEquals(body, "Sample status updated.")
 
-    request = HttpRequest.GET("/samples/"+validCode2)
+    request = HttpRequest.GET("/samples/"+validCode2).basicAuth("servicewriter", "123456!")
     body = client.toBlocking().retrieve(request)
     JSONObject json = new JSONObject(body);
     json = json.get("current_location")