Merge pull request #17 from companieshouse/feature/security-interceptor-for-psc

added security interceptor for web security config

Author: sohaibsid

pom.xml

@@ -27,6 +27,7 @@
         <!-- Internal -->
         <structured-logging.version>1.9.12</structured-logging.version>
         <private-api-sdk-java.version>2.0.247</private-api-sdk-java.version>
+        <api-security-java.version>0.4.1</api-security-java.version>
         <api-sdk-manager-java-library.version>1.0.4</api-sdk-manager-java-library.version>
         <api-helper-java-library.version>1.4.5</api-helper-java-library.version>
 
@@ -120,6 +121,12 @@
             <artifactId>junit-jupiter</artifactId>
             <scope>test</scope>
         </dependency>
+
+        <dependency>
+            <groupId>uk.gov.companieshouse</groupId>
+            <artifactId>api-security-java</artifactId>
+            <version>${api-security-java.version}</version>
+        </dependency>
     </dependencies>
 
     <build>

src/main/java/uk/gov/companieshouse/pscdataapi/config/WebSecurityConfig.java

@@ -0,0 +1,21 @@
+package uk.gov.companieshouse.pscdataapi.config;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+import uk.gov.companieshouse.api.interceptor.InternalUserInterceptor;
+
+@Configuration
+public class WebSecurityConfig implements WebMvcConfigurer {
+
+    @Override
+    public void addInterceptors(InterceptorRegistry registry) {
+        registry.addInterceptor(internalUserInterceptor());
+    }
+
+    @Bean
+    public InternalUserInterceptor internalUserInterceptor() {
+        return new InternalUserInterceptor();
+    }
+}

src/test/java/uk/gov/companieshouse/pscdataapi/controller/CompanyPscControllerTest.java

@@ -46,6 +46,9 @@ void callPutRequest() throws Exception {
         mockMvc.perform(put(PUT_URL)
                 .contentType(APPLICATION_JSON)
                 .header("x-request-id", X_REQUEST_ID)
+                .header("ERIC-Identity", "test")
+                .header("ERIC-Identity-Type", "key")
+                .header("ERIC-Authorised-Key-Roles", "*")
                 .content(TestHelper.createJsonPayload()))
                 .andExpect(status().isCreated());
     }