-
Notifications
You must be signed in to change notification settings - Fork 0
/
test-auth.sh
executable file
·77 lines (59 loc) · 3.55 KB
/
test-auth.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
#!/bin/bash
echo -n "Testing REST and SWORD access..."
### dspace 6 instance:
#DSPACE_SERVER="http://bib-test.rz.uni-ulm.de"
DSPACE_SERVER="https://demo-dspace.sara-service.org"
#SARA_USER="[email protected]"
SARA_USER="[email protected]"
SARA_PWD="SaraTest"
# set one user that exists and one that doesnt
USER1="[email protected]"
# ...and one that doesnt
USER2="[email protected]"
# ...and one that exists but has different rights
USER3="[email protected]"
echo "using $SARA_USER:$SARA_PWD on $DSPACE_SERVER"
echo "user existence check $USER1"
curl -H "on-behalf-of: $USER1" -i $DSPACE_SERVER/swordv2/servicedocument --user "$SARA_USER:$SARA_PWD" # => downloads TermsOfServices for all available collections
echo "user existence check $USER2"
curl -H "on-behalf-of: $USER2" -i $DSPACE_SERVER/swordv2/servicedocument --user "$SARA_USER:$SARA_PWD" # HTML 403
echo "user existence check $USER3"
curl -H "on-behalf-of: $USER3" -i $DSPACE_SERVER/swordv2/servicedocument --user "$SARA_USER:$SARA_PWD" # ==> downloads ToS for all available collections
# submit item with SARA submit user, on-behalf user (Nachweis, no bitstreams attached!)
cat >entry.xml <<EOF
<?xml version='1.0' encoding='UTF-8'?>
<entry xmlns="http://www.w3.org/2005/Atom"
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:dcterms="http://purl.org/dc/terms/"
xmlns:uulm="http://oparu.uni-ulm.de/namespace/metadataschema-uulm"
xmlns:dummy="http://oparu.uni-ulm.de/namespace/metadataschema-dummy"
xmlns:source="http://oparu.uni-ulm.de/namespace/metadataschema-source">
<title>CURL</title>
<id>urn:uuid:1225c695-cfb8-4ebb-aaaa-80da344efa6a</id>
<updated>2005-10-07T17:17:08Z</updated>
<author><name>Author kk</name></author>
<summary type="text">The abstract summery</summary>
<creator><name>>creator kk name</name></creator>
<subject type="text">subject 11</subject>
<bemerkung type="text">bemerkung text</bemerkung>
<!-- some embedded metadata -->
<dcterms:abstract>The abstract</dcterms:abstract>
<dcterms:type>Type Atom</dcterms:type>
<dc:type>Type Atom dc</dc:type>
<dcterms:type>Type Atom dcterms</dcterms:type>
<dcterms:alternative>alternative</dcterms:alternative>
<dcterms:creator>Creator Test dcterms</dcterms:creator>
<dcterms:subject>subject Test dcterms</dcterms:subject>
<dcterms:bemerkung>UULM bemerkung</dcterms:bemerkung>
</entry>
EOF
# no access rights :(
curl -i $DSPACE_SERVER/swordv2/collection/123456789/33 --data-binary "@entry.xml" -H "Content-Type: application/atom+xml" -H "In-Progress: true" -H "on-behalf-of: [email protected]" --user "$SARA_USER:$SARA_PWD"
# no access rights - not authorised to submit to collection!
curl -i $DSPACE_SERVER/swordv2/collection/123456789/36 --data-binary "@entry.xml" -H "Content-Type: application/atom+xml" -H "In-Progress: true" -H "on-behalf-of: $USER3" --user "$SARA_USER:$SARA_PWD"
# access succeeds!
curl -i $DSPACE_SERVER/swordv2/collection/123456789/39 --data-binary "@entry.xml" -H "Content-Type: application/atom+xml" -H "In-Progress: true" -H "on-behalf-of: $USER3" --user "$SARA_USER:$SARA_PWD"
# TODO protection for on-behalf-of (works in dspace5/dspace6)
### 0) configure access to swordv2 interface in apache for SARA service only
### 1) Patch https://github.com/DSpace/DSpace/compare/dspace-6_x...c1t4r:dspace-6.2_OboFixVariant1
### 2) Patch https://github.com/DSpace/DSpace/compare/dspace-6_x...c1t4r:dspace-6.2_OboFixVariant2