package com.mongodb.internal.connection;
import com.mongodb.AuthenticationMechanism;
import com.mongodb.MongoException;
import com.mongodb.MongoSecurityException;
import com.mongodb.internal.async.SingleResultCallback;
import com.mongodb.connection.ConnectionDescription;
import org.bson.BsonArray;
import org.bson.BsonDocument;
import org.bson.BsonString;
import static com.mongodb.AuthenticationMechanism.SCRAM_SHA_1;
import static com.mongodb.AuthenticationMechanism.SCRAM_SHA_256;
import static com.mongodb.assertions.Assertions.isTrueArgument;
import static com.mongodb.internal.operation.ServerVersionHelper.serverIsAtLeastVersionThreeDotZero;
import static com.mongodb.internal.operation.ServerVersionHelper.serverIsLessThanVersionFourDotZero;
import static java.lang.String.format;
class DefaultAuthenticator extends Authenticator implements SpeculativeAuthenticator {
static final int USER_NOT_FOUND_CODE = 11;
private static final BsonString DEFAULT_MECHANISM_NAME = new BsonString(SCRAM_SHA_256.getMechanismName());
private Authenticator delegate;
DefaultAuthenticator(final MongoCredentialWithCache credential) {
super(credential);
isTrueArgument("unspecified authentication mechanism", credential.getAuthenticationMechanism() == null);
}
@Override
void authenticate(final InternalConnection connection, final ConnectionDescription connectionDescription) {
if (serverIsLessThanVersionFourDotZero(connectionDescription)) {
getLegacyDefaultAuthenticator(connectionDescription)
.authenticate(connection, connectionDescription);
} else {
try {
setDelegate(connectionDescription);
delegate.authenticate(connection, connectionDescription);
} catch (Exception e) {
throw wrapException(e);
}
}
}
@Override
void authenticateAsync(final InternalConnection connection, final ConnectionDescription connectionDescription,
final SingleResultCallback<Void> callback) {
if (serverIsLessThanVersionFourDotZero(connectionDescription)) {
getLegacyDefaultAuthenticator(connectionDescription)
.authenticateAsync(connection, connectionDescription, callback);
} else {
setDelegate(connectionDescription);
delegate.authenticateAsync(connection, connectionDescription, callback);
}
}
@Override
public BsonDocument createSpeculativeAuthenticateCommand(final InternalConnection connection) {
delegate = getAuthenticatorForIsMaster();
return ((SpeculativeAuthenticator) delegate).createSpeculativeAuthenticateCommand(connection);
}
@Override
public BsonDocument getSpeculativeAuthenticateResponse() {
if (delegate != null) {
return ((SpeculativeAuthenticator) delegate).getSpeculativeAuthenticateResponse();
}
return null;
}
@Override
public void setSpeculativeAuthenticateResponse(final BsonDocument response) {
((SpeculativeAuthenticator) delegate).setSpeculativeAuthenticateResponse(response);
}
private Authenticator getLegacyDefaultAuthenticator(final ConnectionDescription connectionDescription) {
if (serverIsAtLeastVersionThreeDotZero(connectionDescription)) {
return new ScramShaAuthenticator(getMongoCredentialWithCache().withMechanism(SCRAM_SHA_1));
} else {
return new NativeAuthenticator(getMongoCredentialWithCache());
}
}
Authenticator getAuthenticatorForIsMaster() {
return new ScramShaAuthenticator(getMongoCredentialWithCache().withMechanism(SCRAM_SHA_256));
}
private void setDelegate(final ConnectionDescription connectionDescription) {
if (delegate != null && ((SpeculativeAuthenticator) delegate).getSpeculativeAuthenticateResponse() != null) {
return;
}
if (connectionDescription.getSaslSupportedMechanisms() != null) {
BsonArray saslSupportedMechs = connectionDescription.getSaslSupportedMechanisms();
AuthenticationMechanism mechanism = saslSupportedMechs.contains(DEFAULT_MECHANISM_NAME) ? SCRAM_SHA_256 : SCRAM_SHA_1;
delegate = new ScramShaAuthenticator(getMongoCredentialWithCache().withMechanism(mechanism));
} else {
delegate = getLegacyDefaultAuthenticator(connectionDescription);
}
}
private MongoException wrapException(final Throwable t) {
if (t instanceof MongoSecurityException) {
return (MongoSecurityException) t;
} else if (t instanceof MongoException && ((MongoException) t).getCode() == USER_NOT_FOUND_CODE) {
return new MongoSecurityException(getMongoCredential(), format("Exception authenticating %s", getMongoCredential()), t);
} else {
return MongoException.fromThrowable(t);
}
}
}