added test for access token removal

Change-Id: I392b435e81e920818a0f3615ec289050e663abc6

java/com.sap.sse.security.test/src/com/sap/sse/security/jaxrs/api/SecurityResourceTest.java

@@ -83,6 +83,10 @@ public class SecurityResourceTest {
         return accessToken;
     }
 
+    private void removeAccessToken() {
+        assertEquals(Response.Status.OK.getStatusCode(), servlet.respondToRemoveAccessTokenForUser("admin").getStatus());
+    }
+
     @Test
     public void createAccessTokenAndAuthenticate() throws ParseException {
         String accessToken = getOrCreateAccessToken();
@@ -109,4 +113,12 @@ public class SecurityResourceTest {
         User user = service.getUserByAccessToken(accessToken);
         assertNull(user); // the old access token is expected to have been obsoleted by obtaining a new one
     }
+
+    @Test
+    public void ensureOldBearerTokenIsInvalidatedByRequestingItsRemoval() throws ParseException {
+        String accessToken = getOrCreateAccessToken();
+        removeAccessToken();
+        User user = service.getUserByAccessToken(accessToken);
+        assertNull(user); // the old access token is expected to have been obsoleted by obtaining a new one
+    }
 }