Method testLogoutBadCsrf

src/test/java/servlets/LogoutTest.java:183–223

This test logs the user in and then calls the logout function

()

	 * This test logs the user in and then calls the logout function
	 */
	@Test
	public void testLogoutBadCsrf()
	{
		String userName = "logoutUser2";
		try
		{
			//Verify User Exists in DB
			GetterTest.verifyTestUser(applicationRoot, userName, userName);
			//Sign in as Normal User
			log.debug("Signing in as User Through LoginServlet");
			loginDoPost(userName, userName, null);
			log.debug("Login Servlet Complete, Getting CSRF Token");
			if(response.getCookie("token") == null)
				fail("No CSRF Token Was Returned from Login Servlet");
			String csrfToken = response.getCookie("token").getValue();
			if(csrfToken.isEmpty())
			{
				String message = new String("No CSRF token returned from Login Servlet");
				log.fatal(message);
				fail(message);
			}
			else
			{
				//Add Cookies from Response to outgoing request
				request.setCookies(response.getCookies());
				logoutDoPost("wrongCsrfToken");
				HttpSession ses = request.getSession();
				if(ses.getAttribute("userStamp") == null)
					fail("User's Session is Cleared After CSRF'd Logout");
				else
				{
					log.debug("User Not Logged Out! Pass!");
				}
			}
		}
		catch(Exception e)
		{
			log.fatal("Could not Complete testLogoutBadCsrf: " + e.toString());
			fail("Could not Complete testLogoutBadCsrf");
		}
	}
}