Add some access-control unit tests

apps/backend-api-springboot3/pom.xml

@@ -43,6 +43,12 @@
             <artifactId>spring-boot-starter-test</artifactId>
             <scope>test</scope>
         </dependency>
+        <dependency>
+            <groupId>com.c4-soft.springaddons</groupId>
+            <artifactId>spring-addons-oauth2-test</artifactId>
+            <version>6.0.12</version>
+            <scope>test</scope>
+        </dependency>
     </dependencies>
 
     <build>

apps/backend-api-springboot3/src/test/java/com/acme/backend/springboot/users/web/UsersControllerTest.java

@@ -0,0 +1,36 @@
+package com.acme.backend.springboot.users.web;
+
+import static org.hamcrest.CoreMatchers.is;
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.get;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.jsonPath;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
+
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.autoconfigure.web.servlet.WebMvcTest;
+import org.springframework.test.web.servlet.MockMvc;
+
+import com.c4_soft.springaddons.security.oauth2.test.annotations.OpenIdClaims;
+import com.c4_soft.springaddons.security.oauth2.test.annotations.WithMockJwtAuth;
+
+@WebMvcTest(controllers = UsersController.class)
+class UsersControllerTest {
+	@Autowired
+	MockMvc api;
+
+	@Test
+	void givenRequestIsAnonymous_whengetUsersMe_thenUnauthorized() throws Exception {
+		api.perform(get("/api/users/me")).andExpectAll(status().isUnauthorized());
+	}
+
+	@Test
+	@WithMockJwtAuth(claims = @OpenIdClaims(sub = "Tonton Pirate"))
+	void givenRequestIsAuthenticated_whengetUsersMe_thenOk() throws Exception {
+		// @formatter:off
+        api.perform(get("/api/users/me"))
+            .andExpect(status().isOk())
+            .andExpect(jsonPath("$.message", is("Hello Tonton Pirate")));
+        // @formatter:on
+	}
+
+}