DataUtilsTest.java

package me.chanjar.weixin.common.util;

import org.testng.annotations.*;

import static org.testng.Assert.*;

/**
 * <pre>
 *  Created by BinaryWang on 2018/5/8.
 * </pre>
 *
 * @author <a href="https://github.com/binarywang">Binary Wang</a>
 */
public class DataUtilsTest {

  @Test
  public void testHandleDataWithSecret() {
    String data = "js_code=001tZveq0SMoiq1AEXeq0ECJeq0tZveZ&secret=5681022fa1643845392367ea88888888&grant_type=authorization_code&appid=wxe156d4848d999999";
    final String s = DataUtils.handleDataWithSecret(data);
    assertTrue(s.contains("&secret=******&"));
  }

  @Test
  public void testHandleDataWithSecretAtEnd() {
    // Secret is the last parameter in the query string, so there is no trailing &
    String data = "appid=wx123&secret=abc123";
    final String s = DataUtils.handleDataWithSecret(data);
    assertFalse(s.contains("abc123"), "Secret at the end of the string should be masked");
    assertTrue(s.contains("secret=******"), "Secret should be replaced with asterisks");
  }

  @Test
  public void testHandleDataWithSecretAsFirstParam() {
    // Secret is the first parameter, so there is no leading &
    String data = "secret=abc123&appid=wx123";
    final String s = DataUtils.handleDataWithSecret(data);
    assertFalse(s.contains("abc123"), "Secret as the first parameter should be masked");
    assertTrue(s.contains("secret=******"), "Secret should be replaced with asterisks");
  }

  @Test
  public void testHandleDataWithSecretEncodedValue() {
    // The secret value contains URL-encoded and non-word characters; the whole value must be masked
    String data = "appid=wx123&secret=abc%2Fdef-.+ghi&grant_type=client_credential";
    final String s = DataUtils.handleDataWithSecret(data);
    assertFalse(s.contains("def"), "The full secret value must be masked, including after non-word characters");
    assertFalse(s.contains("%2F"), "Encoded characters in the secret must be masked too");
    assertTrue(s.contains("&secret=******&"), "Secret should be replaced with asterisks");
  }

  @Test
  public void testHandleDataWithOpenidInJson() {
    String data = "{\"code\":\"phone-code\",\"openid\":\"user-openid\"}";

    String result = DataUtils.handleDataWithSecret(data);

    assertFalse(result.contains("user-openid"));
    assertTrue(result.contains("\"openid\":\"******\""));
  }
}