code: package eu.wdaqua.qanary.web;
  
  import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
  import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.redirectedUrl;
  
  import org.junit.jupiter.api.Test;
  import org.springframework.beans.factory.annotation.Autowired;
  import org.springframework.boot.test.autoconfigure.web.servlet.AutoConfigureMockMvc;
  import org.springframework.boot.test.context.SpringBootTest;
  import org.springframework.boot.test.context.SpringBootTest.WebEnvironment;
  import org.springframework.boot.test.mock.mockito.MockBean;
  import org.springframework.http.MediaType;
  import org.springframework.test.context.ContextConfiguration;
  import org.springframework.test.context.TestPropertySource;
  import org.springframework.test.web.servlet.MockMvc;
  import org.springframework.test.web.servlet.request.MockMvcRequestBuilders;
  
  import eu.wdaqua.qanary.commons.triplestoreconnectors.QanaryTripleStoreConnector;
  
  @SpringBootTest(webEnvironment = WebEnvironment.RANDOM_PORT)
  @AutoConfigureMockMvc
  @ContextConfiguration(name = "contextWithFakeBean")
  @TestPropertySource(properties={"configuration.username=qanary","configuration.password=mySecret" })
  class QanaryPipelineConfigurationAccessTest {
  
  	@Autowired
      private MockMvc mvc;
  
  	@MockBean
  	private QanaryTripleStoreConnector mockedQanaryTripleStoreConnector;
  
  //    static {
  //        System.setProperty("configuration.username", "qanary");
  //        System.setProperty("configuration.password", "mySecret");
  //    }
  
      @Test
      void testQanaryConfigurationAccessControl() throws Exception {
          mvc.perform(
                  MockMvcRequestBuilders.get("/configuration").accept(MediaType.APPLICATION_JSON))
                  .andExpect(status().is(302))
                  .andExpect(status().is3xxRedirection())
                  .andExpect(redirectedUrl("http://localhost/login")); 
  
          mvc.perform(
                  MockMvcRequestBuilders.post("/login")
                  .contentType(MediaType.APPLICATION_FORM_URLENCODED)
                  .content("username=qanary&password=mySecret"))
              .andExpect(status().is3xxRedirection())
              .andExpect(redirectedUrl("/"))
              .andReturn();
      }
  }
  