[ https://issues.apache.org/jira/browse/PHOENIX-3598?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16065008#comment-16065008 ]
ASF GitHub Bot commented on PHOENIX-3598: ----------------------------------------- Github user joshelser commented on a diff in the pull request: https://github.com/apache/phoenix/pull/265#discussion_r124312271 --- Diff: phoenix-queryserver/src/test/java/org/apache/phoenix/queryserver/server/PhoenixRemoteUserExtractorTest.java --- @@ -0,0 +1,102 @@ +/* + * Licensed to the Apache Software Foundation (ASF) under one or more + * contributor license agreements. See the NOTICE file distributed with + * this work for additional information regarding copyright ownership. + * The ASF licenses this file to you under the Apache License, Version 2.0 + * (the "License"); you may not use this file except in compliance with + * the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, software + * distributed under the License is distributed on an "AS IS" BASIS, + * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + * See the License for the specific language governing permissions and + * limitations under the License. + */ +package org.apache.phoenix.queryserver.server; + +import static org.junit.Assert.assertEquals; +import static org.mockito.Mockito.mock; +import static org.mockito.Mockito.when; + +import org.apache.calcite.avatica.server.RemoteUserExtractionException; +import org.apache.hadoop.conf.Configuration; +import org.apache.hadoop.security.UserGroupInformation; +import org.apache.hadoop.security.authorize.AuthorizationException; +import org.apache.hadoop.security.authorize.ProxyUsers; +import org.apache.phoenix.queryserver.server.QueryServer.PhoenixRemoteUserExtractor; +import org.junit.Test; +import org.slf4j.Logger; +import org.slf4j.LoggerFactory; + +import javax.servlet.http.HttpServletRequest; + +/** + * Tests for the RemoteUserExtractor Method Avatica provides for Phoenix to implement. + */ +public class PhoenixRemoteUserExtractorTest { + private static final Logger LOG = LoggerFactory.getLogger(PhoenixRemoteUserExtractorTest.class); + + @Test + public void testUseDoAsSuccess() { + HttpServletRequest request = mock(HttpServletRequest.class); + when(request.getRemoteUser()).thenReturn("proxyserver"); + when(request.getParameter("doAs")).thenReturn("enduser"); + when(request.getRemoteAddr()).thenReturn("localhost:1234"); + + Configuration conf = new Configuration(false); + conf.set("hadoop.proxyuser.proxyserver.groups", "*"); + conf.set("hadoop.proxyuser.proxyserver.hosts", "*"); + conf.set("phoenix.queryserver.doAs.enabled", "true"); + ProxyUsers.refreshSuperUserGroupsConfiguration(conf); + + PhoenixRemoteUserExtractor extractor = new PhoenixRemoteUserExtractor(conf); + try { + assertEquals("enduser", extractor.extract(request)); + } catch (RemoteUserExtractionException e) { + LOG.info(e.getMessage()); + } + } + + @Test + public void testDoNotUseDoAs() { --- End diff -- No, there is no getter on the builder to verify it's called. Instead you can use the `Mockito.verify(builder)` method. Something like: ```java Configuration conf = createTestConfiguration(); Builder b = Mockito.mock(Builder.class); Mockito.when(b.withRemoteUserExtractor(Mockito.any(PhoenixRemoteUserExtractor.class))).thenReturn(b); setRemoteUserExtractorIfNecessary(b, conf); Mockito.verify(b); ``` This should essentially verify that `withRemoteUserExtractor` was invoked by `setRemoteUserExtractorIfNecessary` > Enable proxy access to Phoenix query server for third party on behalf of end > users > ---------------------------------------------------------------------------------- > > Key: PHOENIX-3598 > URL: https://issues.apache.org/jira/browse/PHOENIX-3598 > Project: Phoenix > Issue Type: Improvement > Reporter: Jerry He > Assignee: Shi Wang > Attachments: 0001-PHOENIX-3598.patch > > > This JIRA tracks the follow-on work of CALCITE-1539 needed on Phoenix query > server side. -- This message was sent by Atlassian JIRA (v6.4.14#64029)