Skip to content

Commit 4473dca

Browse files
committed
Polish matchesRequireCsrfProtectionWhenNonStandardHTTPMethodIsUsed
Issue gh-8149
1 parent 0f92415 commit 4473dca

File tree

1 file changed

+7
-10
lines changed

1 file changed

+7
-10
lines changed

web/src/test/java/org/springframework/security/web/server/csrf/CsrfWebFilterTests.java

Lines changed: 7 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,7 @@
2727
import org.springframework.mock.http.server.reactive.MockServerHttpRequest;
2828
import org.springframework.mock.web.server.MockServerWebExchange;
2929
import org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher;
30+
import org.springframework.security.web.server.util.matcher.ServerWebExchangeMatcher.MatchResult;
3031
import org.springframework.test.web.reactive.server.WebTestClient;
3132
import org.springframework.web.bind.annotation.RequestMapping;
3233
import org.springframework.web.bind.annotation.RestController;
@@ -42,8 +43,6 @@
4243
import static org.mockito.Mockito.mock;
4344
import static org.mockito.Mockito.verifyZeroInteractions;
4445
import static org.mockito.Mockito.when;
45-
import static org.mockito.Mockito.verify;
46-
import static org.mockito.Mockito.spy;
4746
import static org.springframework.mock.web.server.MockServerWebExchange.from;
4847
import static org.springframework.web.reactive.function.BodyInserters.fromMultipartData;
4948

@@ -189,15 +188,13 @@ public void filterWhenPostAndEstablishedCsrfTokenAndHeaderValidTokenThenContinue
189188
}
190189

191190
@Test
192-
public void matchesRequireCSRFProtectionWhenNonStandardHTTPMethodIsUsed() {
193-
final String NON_STANDARD_HTTP_METHOD = "non-standard-http-method";
194-
MockServerWebExchange nonStandardHttpRequest = from(MockServerHttpRequest.method(HttpMethod.resolve(NON_STANDARD_HTTP_METHOD), "/"));
191+
// gh-8452
192+
public void matchesRequireCsrfProtectionWhenNonStandardHTTPMethodIsUsed() {
193+
HttpMethod customHttpMethod = HttpMethod.resolve("non-standard-http-method");
194+
MockServerWebExchange nonStandardHttpRequest = from(MockServerHttpRequest.method(customHttpMethod, "/"));
195195

196-
ServerWebExchangeMatcher serverWebExchangeMatcher = spy(CsrfWebFilter.DEFAULT_CSRF_MATCHER);
197-
serverWebExchangeMatcher.matches(nonStandardHttpRequest);
198-
199-
verify(serverWebExchangeMatcher).matches(nonStandardHttpRequest);
200-
assertThat(serverWebExchangeMatcher.matches(nonStandardHttpRequest).block().isMatch()).isTrue();
196+
ServerWebExchangeMatcher serverWebExchangeMatcher = CsrfWebFilter.DEFAULT_CSRF_MATCHER;
197+
assertThat(serverWebExchangeMatcher.matches(nonStandardHttpRequest).map(MatchResult::isMatch).block()).isTrue();
201198
}
202199

203200
@Test

0 commit comments

Comments
 (0)