com.mongodb.internal.authentication.GcpCredentialHelper Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of mongodb-driver-core Show documentation
Show all versions of mongodb-driver-core Show documentation
The Java operations layer for the MongoDB Java Driver.
Third parties can wrap this layer to provide custom higher-level APIs
/*
* Copyright 2008-present MongoDB, Inc.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package com.mongodb.internal.authentication;
import com.mongodb.MongoClientException;
import org.bson.BsonDocument;
import java.time.Duration;
import java.util.HashMap;
import java.util.Map;
import static com.mongodb.internal.authentication.AzureCredentialHelper.getEncoded;
import static com.mongodb.internal.authentication.HttpHelper.getHttpContents;
/**
* Utility class for working with GCP authentication.
*
* This class is not part of the public API and may be removed or changed at any time
*/
public final class GcpCredentialHelper {
public static BsonDocument obtainFromEnvironment() {
String endpoint = "http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/token";
Map header = new HashMap<>();
header.put("Metadata-Flavor", "Google");
String response = getHttpContents("GET", endpoint, header);
BsonDocument responseDocument = BsonDocument.parse(response);
if (responseDocument.containsKey("access_token")) {
return new BsonDocument("accessToken", responseDocument.get("access_token"));
} else {
throw new MongoClientException("access_token is missing from GCE metadata response. Full response is ''" + response);
}
}
public static CredentialInfo fetchGcpCredentialInfo(final String audience) {
String endpoint = "http://metadata/computeMetadata/v1/instance/service-accounts/default/identity?audience="
+ getEncoded(audience);
Map header = new HashMap<>();
header.put("Metadata-Flavor", "Google");
String response = getHttpContents("GET", endpoint, header);
return new CredentialInfo(
response,
Duration.ZERO);
}
private GcpCredentialHelper() {
}
}
© 2015 - 2024 Weber Informatics LLC | Privacy Policy