test(pqc): add unit tests for PQC Conscrypt transport configuration in GAX and Core HTTP

Author: lqiu96

sdk-platform-java/gax-java/gax-httpjson/src/test/java/com/google/api/gax/httpjson/InstantiatingHttpJsonChannelProviderTest.java

@@ -198,7 +198,14 @@ protected Object getMtlsObjectFromTransportChannel(
   }
 
   @Test
-  void testCreateHttpTransport_returnsValidTransport() throws Exception {
+  void testCreateHttpTransport_pqcConfigured() throws Exception {
+    boolean conscryptAvailable = false;
+    try {
+      org.conscrypt.Conscrypt.newProvider();
+      conscryptAvailable = org.conscrypt.Conscrypt.isAvailable();
+    } catch (Throwable t) {
+      // Conscrypt JNI native shared library is not available on this host environment
+    }
     InstantiatingHttpJsonChannelProvider channelProvider =
         InstantiatingHttpJsonChannelProvider.newBuilder()
             .setEndpoint("localhost:8080")
@@ -207,6 +214,14 @@ void testCreateHttpTransport_returnsValidTransport() throws Exception {
             .build();
     NetHttpTransport transport = (NetHttpTransport) channelProvider.createHttpTransport();
     assertThat(transport).isNotNull();
+    if (conscryptAvailable) {
+      Object factory = getPrivateField(transport, "sslSocketFactory");
+      assertThat(factory).isNotNull();
+      assertThat(factory.getClass().getName())
+          .isEqualTo("com.google.api.client.http.javanet.ConfigurableSSLSocketFactory");
+      Object configurator = getPrivateField(factory, "configurator");
+      assertThat(configurator).isNotNull();
+    }
   }
 
   @Test
@@ -216,4 +231,10 @@ void testDefaultPqcGroups_containsExpectedGroups() {
         .containsExactly("X25519MLKEM768", "SecP256r1MLKEM768", "X25519")
         .inOrder();
   }
+
+  private static Object getPrivateField(Object obj, String fieldName) throws Exception {
+    java.lang.reflect.Field field = obj.getClass().getDeclaredField(fieldName);
+    field.setAccessible(true);
+    return field.get(obj);
+  }
 }

sdk-platform-java/java-core/google-cloud-core-http/src/test/java/com/google/cloud/http/HttpTransportOptionsTest.java

@@ -118,6 +118,30 @@ void testBuilder() {
     assertEquals(-1, DEFAULT_OPTIONS.getReadTimeout());
   }
 
+  @Test
+  void testDefaultHttpTransportFactory_createPqcConfiguredTransport() throws Exception {
+    boolean conscryptAvailable = false;
+    try {
+      org.conscrypt.Conscrypt.newProvider();
+      conscryptAvailable = org.conscrypt.Conscrypt.isAvailable();
+    } catch (Throwable t) {
+      // Conscrypt JNI native shared library is not available on this host environment
+    }
+    DefaultHttpTransportFactory factory = new DefaultHttpTransportFactory();
+    HttpTransport transport = factory.create();
+    assertTrue(transport instanceof com.google.api.client.http.javanet.NetHttpTransport);
+    if (conscryptAvailable) {
+      java.lang.reflect.Field field =
+          com.google.api.client.http.javanet.NetHttpTransport.class.getDeclaredField(
+              "sslSocketFactory");
+      field.setAccessible(true);
+      Object sslSocketFactory = field.get(transport);
+      assertEquals(
+          "com.google.api.client.http.javanet.ConfigurableSSLSocketFactory",
+          sslSocketFactory.getClass().getName());
+    }
+  }
+
   @Test
   void testBaseEquals() {
     assertEquals(OPTIONS, OPTIONS_COPY);
@@ -166,7 +190,9 @@ void testHttpRequestInitializer_defaultUniverseDomainSettings_customCredentials(
             UnauthenticatedException.class,
             () -> httpRequestInitializer.initialize(defaultHttpRequest));
     assertEquals(
-        "The configured universe domain (googleapis.com) does not match the universe domain found in the credentials (random.com). If you haven't configured the universe domain explicitly, `googleapis.com` is the default.",
+        "The configured universe domain (googleapis.com) does not match the universe domain found"
+            + " in the credentials (random.com). If you haven't configured the universe domain"
+            + " explicitly, `googleapis.com` is the default.",
         exception.getCause().getMessage());
   }
 
@@ -181,7 +207,9 @@ void testHttpRequestInitializer_customUniverseDomainSettings_defaultCredentials(
             UnauthenticatedException.class,
             () -> httpRequestInitializer.initialize(defaultHttpRequest));
     assertEquals(
-        "The configured universe domain (random.com) does not match the universe domain found in the credentials (googleapis.com). If you haven't configured the universe domain explicitly, `googleapis.com` is the default.",
+        "The configured universe domain (random.com) does not match the universe domain found in"
+            + " the credentials (googleapis.com). If you haven't configured the universe domain"
+            + " explicitly, `googleapis.com` is the default.",
         exception.getCause().getMessage());
   }
 
@@ -219,7 +247,9 @@ void testHttpRequestInitializer_customUniverseDomainSettings_noCredentials() {
             UnauthenticatedException.class,
             () -> httpRequestInitializer.initialize(defaultHttpRequest));
     assertEquals(
-        "The configured universe domain (random.com) does not match the universe domain found in the credentials (googleapis.com). If you haven't configured the universe domain explicitly, `googleapis.com` is the default.",
+        "The configured universe domain (random.com) does not match the universe domain found in"
+            + " the credentials (googleapis.com). If you haven't configured the universe domain"
+            + " explicitly, `googleapis.com` is the default.",
         exception.getCause().getMessage());
   }