@Test
 public void verifyRequestParameterTrigger() throws Exception {
   // opt-in parameter only
   assertThat(
       strategy.resolve(VALID_PROVIDERS, mockRequest(MFA_PROVIDER_ID_1), null, null).orElse(null),
       is(MFA_PROVIDER_ID_1));
   assertThat(
       strategy.resolve(VALID_PROVIDERS, mockRequest(MFA_PROVIDER_ID_2), null, null).orElse(null),
       is(MFA_PROVIDER_ID_2));
   assertThat(
       strategy.resolve(VALID_PROVIDERS, mockRequest(MFA_INVALID), null, null).isPresent(),
       is(false));
 }
 @Test
 public void verifyNoProviders() throws Exception {
   assertThat(
       strategy
           .resolve(
               NO_PROVIDERS, mockRequest(MFA_PROVIDER_ID_1), mockService(MFA_PROVIDER_ID_1), null)
           .isPresent(),
       is(false));
 }
 @Test
 public void verifyPrincipalAttributeTrigger() throws Exception {
   // Principal attribute trigger
   assertThat(
       strategy
           .resolve(VALID_PROVIDERS, null, null, mockPrincipal(P_ATTR_1, MFA_PROVIDER_ID_1))
           .orElse(null),
       is(MFA_PROVIDER_ID_1));
   assertThat(
       strategy
           .resolve(VALID_PROVIDERS, null, null, mockPrincipal(P_ATTR_1, MFA_PROVIDER_ID_2))
           .orElse(null),
       is(MFA_PROVIDER_ID_2));
   assertThat(
       strategy
           .resolve(VALID_PROVIDERS, null, null, mockPrincipal(P_ATTR_1, MFA_INVALID))
           .isPresent(),
       is(false));
 }
  @Test
  public void verifyMultipleTriggers() throws Exception {
    // opt-in overrides everything
    assertThat(
        strategy
            .resolve(
                VALID_PROVIDERS,
                mockRequest(MFA_PROVIDER_ID_1),
                mockService(MFA_PROVIDER_ID_2),
                mockPrincipal(P_ATTR_1, MFA_PROVIDER_ID_2))
            .orElse(null),
        is(MFA_PROVIDER_ID_1));

    // RegisteredService overrides Principal attribute
    assertThat(
        strategy
            .resolve(
                VALID_PROVIDERS,
                mockRequest(MFA_INVALID),
                mockService(MFA_PROVIDER_ID_1),
                mockPrincipal(P_ATTR_1, MFA_PROVIDER_ID_2))
            .orElse(null),
        is(MFA_PROVIDER_ID_1));
  }
  @Test
  public void verifyRegisteredServiceTrigger() throws Exception {
    // regular RegisteredService trigger
    assertThat(
        strategy.resolve(VALID_PROVIDERS, null, mockService(MFA_PROVIDER_ID_1), null).orElse(null),
        is(MFA_PROVIDER_ID_1));
    assertThat(
        strategy.resolve(VALID_PROVIDERS, null, mockService(MFA_PROVIDER_ID_2), null).orElse(null),
        is(MFA_PROVIDER_ID_2));

    assertThat(
        strategy
            .resolve(
                VALID_PROVIDERS,
                null,
                mockService(MFA_INVALID, MFA_PROVIDER_ID_1, MFA_PROVIDER_ID_2),
                null)
            .get(),
        is(MFA_PROVIDER_ID_1));
    assertThat(
        strategy.resolve(VALID_PROVIDERS, null, mockService(MFA_INVALID), null).isPresent(),
        is(false));

    // Principal attribute activated RegisteredService trigger - direct match
    assertThat(
        strategy
            .resolve(
                VALID_PROVIDERS,
                null,
                mockPrincipalService(MFA_PROVIDER_ID_1, RS_ATTR_1, VALUE_1),
                mockPrincipal(RS_ATTR_1, VALUE_1))
            .orElse(null),
        is(MFA_PROVIDER_ID_1));
    assertThat(
        strategy
            .resolve(
                VALID_PROVIDERS,
                null,
                mockPrincipalService(MFA_PROVIDER_ID_1, RS_ATTR_1, VALUE_1),
                mockPrincipal(RS_ATTR_1, VALUE_2))
            .orElse(null),
        nullValue());

    // Principal attribute activated RegisteredService trigger - multiple attrs
    assertThat(
        strategy
            .resolve(
                VALID_PROVIDERS,
                null,
                mockPrincipalService(MFA_PROVIDER_ID_1, RS_ATTRS_12, VALUE_1),
                mockPrincipal(RS_ATTR_1, VALUE_1))
            .orElse(null),
        is(MFA_PROVIDER_ID_1));
    assertThat(
        strategy
            .resolve(
                VALID_PROVIDERS,
                null,
                mockPrincipalService(MFA_PROVIDER_ID_1, RS_ATTRS_12, VALUE_1),
                mockPrincipal(RS_ATTR_2, VALUE_1))
            .orElse(null),
        is(MFA_PROVIDER_ID_1));
    assertThat(
        strategy
            .resolve(
                VALID_PROVIDERS,
                null,
                mockPrincipalService(MFA_PROVIDER_ID_1, RS_ATTRS_12, VALUE_1),
                mockPrincipal(RS_ATTR_3, VALUE_1))
            .orElse(null),
        nullValue());

    // Principal attribute activated RegisteredService trigger - pattern value
    assertThat(
        strategy
            .resolve(
                VALID_PROVIDERS,
                null,
                mockPrincipalService(MFA_PROVIDER_ID_1, RS_ATTRS_12, VALUE_PATTERN),
                mockPrincipal(RS_ATTR_2, VALUE_1))
            .orElse(null),
        is(MFA_PROVIDER_ID_1));
    assertThat(
        strategy
            .resolve(
                VALID_PROVIDERS,
                null,
                mockPrincipalService(MFA_PROVIDER_ID_1, RS_ATTRS_12, VALUE_PATTERN),
                mockPrincipal(RS_ATTR_2, VALUE_2))
            .orElse(null),
        is(MFA_PROVIDER_ID_1));
    assertThat(
        strategy
            .resolve(
                VALID_PROVIDERS,
                null,
                mockPrincipalService(MFA_PROVIDER_ID_1, RS_ATTRS_12, VALUE_PATTERN),
                mockPrincipal(RS_ATTR_2, VALUE_NOMATCH))
            .isPresent(),
        is(false));
  }