com.mongodb.internal.connection.X509Authenticator Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of mongodb-driver-core Show documentation
Show all versions of mongodb-driver-core Show documentation
The Java operations layer for the MongoDB Java Driver.
Third parties can wrap this layer to provide custom higher-level APIs
/*
* Copyright 2008-present MongoDB, Inc.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package com.mongodb.internal.connection;
import com.mongodb.AuthenticationMechanism;
import com.mongodb.MongoCommandException;
import com.mongodb.MongoSecurityException;
import com.mongodb.async.SingleResultCallback;
import com.mongodb.connection.ConnectionDescription;
import com.mongodb.connection.ServerVersion;
import org.bson.BsonDocument;
import org.bson.BsonInt32;
import org.bson.BsonString;
import static com.mongodb.internal.connection.CommandHelper.executeCommand;
import static com.mongodb.internal.connection.CommandHelper.executeCommandAsync;
class X509Authenticator extends Authenticator {
X509Authenticator(final MongoCredentialWithCache credential) {
super(credential);
}
@Override
void authenticate(final InternalConnection connection, final ConnectionDescription connectionDescription) {
try {
validateUserName(connectionDescription);
BsonDocument authCommand = getAuthCommand(getMongoCredential().getUserName());
executeCommand(getMongoCredential().getSource(), authCommand, connection);
} catch (MongoCommandException e) {
throw new MongoSecurityException(getMongoCredential(), "Exception authenticating", e);
}
}
@Override
void authenticateAsync(final InternalConnection connection, final ConnectionDescription connectionDescription,
final SingleResultCallback callback) {
try {
validateUserName(connectionDescription);
executeCommandAsync(getMongoCredential().getSource(), getAuthCommand(getMongoCredential().getUserName()), connection,
new SingleResultCallback() {
@Override
public void onResult(final BsonDocument nonceResult, final Throwable t) {
if (t != null) {
callback.onResult(null, translateThrowable(t));
} else {
callback.onResult(null, null);
}
}
});
} catch (Throwable t) {
callback.onResult(null, t);
}
}
private BsonDocument getAuthCommand(final String userName) {
BsonDocument cmd = new BsonDocument();
cmd.put("authenticate", new BsonInt32(1));
if (userName != null) {
cmd.put("user", new BsonString(userName));
}
cmd.put("mechanism", new BsonString(AuthenticationMechanism.MONGODB_X509.getMechanismName()));
return cmd;
}
private Throwable translateThrowable(final Throwable t) {
if (t instanceof MongoCommandException) {
return new MongoSecurityException(getMongoCredential(), "Exception authenticating", t);
} else {
return t;
}
}
private void validateUserName(final ConnectionDescription connectionDescription) {
if (getMongoCredential().getUserName() == null && connectionDescription.getServerVersion().compareTo(new ServerVersion(3, 4)) < 0) {
throw new MongoSecurityException(getMongoCredential(), "User name is required for the MONGODB-X509 authentication mechanism "
+ "on server versions less than 3.4");
}
}
}