Spring Security & Testing Flashcards

What is the purpose of @MockBean in a Spring Boot test?

Answer: Adds a Mockito mock to the Spring application context, replacing any existing bean of that type

@MockBean registers a Mockito mock in the Spring ApplicationContext, replacing any existing real bean of the same type for the duration of the test.

Which annotation is used to test only the JPA layer (repositories) in Spring Boot?

Answer: @DataJpaTest

@DataJpaTest configures an in-memory database, scans for @Entity classes, and configures Spring Data JPA repositories without loading the full context.

What does the MockMvc.perform() method do in Spring MVC tests?

Answer: Simulates an HTTP request to a controller without starting a real server

MockMvc.perform() simulates HTTP requests against Spring MVC controllers in-process without requiring an actual HTTP server, enabling fast controller tests.

In Spring Security, what does the 'remember-me' feature do?

Answer: Allows users to remain authenticated across browser sessions using a persistent token

The remember-me feature issues a persistent cookie to the user, allowing them to be automatically re-authenticated in future sessions without logging in again.

What is the purpose of @Transactional in Spring data access tests?

Answer: Rolls back database changes after each test method by default

In Spring tests, @Transactional causes each test to run in a transaction that is automatically rolled back after the test, keeping the database clean.

Which Spring Security mechanism protects against session fixation attacks?

Answer: Creating a new session upon successful authentication

Spring Security mitigates session fixation attacks by creating a new HTTP session (or migrating attributes) upon successful authentication, invalidating any pre-authentication session ID.