You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
110 lines
4.0 KiB
JavaScript
110 lines
4.0 KiB
JavaScript
/*
|
|
* Copyright DataStax, Inc.
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
'use strict';
|
|
const util = require('util');
|
|
const { AuthProvider } = require('./provider');
|
|
const BaseDseAuthenticator = require('./base-dse-authenticator');
|
|
const utils = require('../utils');
|
|
|
|
const mechanism = utils.allocBufferFromString('PLAIN');
|
|
const separatorBuffer = utils.allocBufferFromArray([0]);
|
|
const initialServerChallenge = 'PLAIN-START';
|
|
|
|
/**
|
|
* Creates a new instance of <code>DsePlainTextAuthProvider</code>.
|
|
* @classdesc
|
|
* AuthProvider that provides plain text authenticator instances for clients to connect
|
|
* to DSE clusters secured with the DseAuthenticator.
|
|
* @param {String} username The username; cannot be <code>null</code>.
|
|
* @param {String} password The password; cannot be <code>null</code>.
|
|
* @param {String} [authorizationId] The optional authorization ID. Providing an authorization ID allows the currently
|
|
* authenticated user to act as a different user (a.k.a. proxy authentication).
|
|
* @extends AuthProvider
|
|
* @alias module:auth~DsePlainTextAuthProvider
|
|
* @example
|
|
* const client = new cassandra.Client({
|
|
* contactPoints: ['h1', 'h2'],
|
|
* authProvider: new cassandra.auth.DsePlainTextAuthProvider('user', 'p@ssword1');
|
|
* });
|
|
* @constructor
|
|
*/
|
|
function DsePlainTextAuthProvider(username, password, authorizationId) {
|
|
if (typeof username !== 'string' || typeof password !== 'string') {
|
|
// Validate for null and undefined
|
|
throw new TypeError('Username and password must be a string');
|
|
}
|
|
this.username = username;
|
|
this.password = password;
|
|
this.authorizationId = authorizationId;
|
|
}
|
|
|
|
util.inherits(DsePlainTextAuthProvider, AuthProvider);
|
|
|
|
/**
|
|
* Returns an Authenticator instance to be used by the driver when connecting to a host.
|
|
* @param {String} endpoint The IP address and port number in the format ip:port.
|
|
* @param {String} name Authenticator name.
|
|
* @override
|
|
* @returns {Authenticator}
|
|
*/
|
|
DsePlainTextAuthProvider.prototype.newAuthenticator = function (endpoint, name) {
|
|
return new PlainTextAuthenticator(name, this.username, this.password, this.authorizationId);
|
|
};
|
|
|
|
/**
|
|
* @param {String} authenticatorName
|
|
* @param {String} authenticatorId
|
|
* @param {String} password
|
|
* @param {String} authorizationId
|
|
* @extends BaseDseAuthenticator
|
|
* @constructor
|
|
* @private
|
|
*/
|
|
function PlainTextAuthenticator(authenticatorName, authenticatorId, password, authorizationId) {
|
|
BaseDseAuthenticator.call(this, authenticatorName);
|
|
this.authenticatorId = utils.allocBufferFromString(authenticatorId);
|
|
this.password = utils.allocBufferFromString(password);
|
|
this.authorizationId = utils.allocBufferFromString(authorizationId || '');
|
|
}
|
|
|
|
util.inherits(PlainTextAuthenticator, BaseDseAuthenticator);
|
|
|
|
/** @override */
|
|
PlainTextAuthenticator.prototype.getMechanism = function () {
|
|
return mechanism;
|
|
};
|
|
|
|
/** @override */
|
|
PlainTextAuthenticator.prototype.getInitialServerChallenge = function () {
|
|
return utils.allocBufferFromString(initialServerChallenge);
|
|
};
|
|
|
|
/** @override */
|
|
PlainTextAuthenticator.prototype.evaluateChallenge = function (challenge, callback) {
|
|
if (!challenge || challenge.toString() !== initialServerChallenge) {
|
|
return callback(new Error('Incorrect SASL challenge from server'));
|
|
}
|
|
// The SASL plain text format is authorizationId 0 username 0 password
|
|
callback(null, Buffer.concat([
|
|
this.authorizationId,
|
|
separatorBuffer,
|
|
this.authenticatorId,
|
|
separatorBuffer,
|
|
this.password
|
|
]));
|
|
};
|
|
|
|
module.exports = DsePlainTextAuthProvider; |