aboutsummaryrefslogtreecommitdiff
path: root/node_modules/mongodb-core/lib/auth
diff options
context:
space:
mode:
Diffstat (limited to 'node_modules/mongodb-core/lib/auth')
-rw-r--r--node_modules/mongodb-core/lib/auth/gssapi.js277
-rw-r--r--node_modules/mongodb-core/lib/auth/mongocr.js192
-rw-r--r--node_modules/mongodb-core/lib/auth/plain.js173
-rw-r--r--node_modules/mongodb-core/lib/auth/scram.js345
-rw-r--r--node_modules/mongodb-core/lib/auth/sspi.js267
-rw-r--r--node_modules/mongodb-core/lib/auth/x509.js168
6 files changed, 0 insertions, 1422 deletions
diff --git a/node_modules/mongodb-core/lib/auth/gssapi.js b/node_modules/mongodb-core/lib/auth/gssapi.js
deleted file mode 100644
index c3bd6bd..0000000
--- a/node_modules/mongodb-core/lib/auth/gssapi.js
+++ /dev/null
@@ -1,277 +0,0 @@
-"use strict";
-
-var f = require('util').format
- , crypto = require('crypto')
- , require_optional = require('require_optional')
- , Query = require('../connection/commands').Query
- , MongoError = require('../error');
-
-var AuthSession = function(db, username, password, options) {
- this.db = db;
- this.username = username;
- this.password = password;
- this.options = options;
-}
-
-AuthSession.prototype.equal = function(session) {
- return session.db == this.db
- && session.username == this.username
- && session.password == this.password;
-}
-
-// Kerberos class
-var Kerberos = null;
-var MongoAuthProcess = null;
-
-// Try to grab the Kerberos class
-try {
- Kerberos = require_optional('kerberos').Kerberos;
- // Authentication process for Mongo
- MongoAuthProcess = require_optional('kerberos').processes.MongoAuthProcess
-} catch(err) {}
-
-/**
- * Creates a new GSSAPI authentication mechanism
- * @class
- * @return {GSSAPI} A cursor instance
- */
-var GSSAPI = function(bson) {
- this.bson = bson;
- this.authStore = [];
-}
-
-/**
- * Authenticate
- * @method
- * @param {{Server}|{ReplSet}|{Mongos}} server Topology the authentication method is being called on
- * @param {[]Connections} connections Connections to authenticate using this authenticator
- * @param {string} db Name of the database
- * @param {string} username Username
- * @param {string} password Password
- * @param {authResultCallback} callback The callback to return the result from the authentication
- * @return {object}
- */
-GSSAPI.prototype.auth = function(server, connections, db, username, password, options, callback) {
- var self = this;
- // We don't have the Kerberos library
- if(Kerberos == null) return callback(new Error("Kerberos library is not installed"));
- var gssapiServiceName = options['gssapiServiceName'] || 'mongodb';
- // Total connections
- var count = connections.length;
- if(count == 0) return callback(null, null);
-
- // Valid connections
- var numberOfValidConnections = 0;
- var credentialsValid = false;
- var errorObject = null;
-
- // For each connection we need to authenticate
- while(connections.length > 0) {
- // Execute MongoCR
- var execute = function(connection) {
- // Start Auth process for a connection
- GSSAPIInitialize(self, db, username, password, db, gssapiServiceName, server, connection, options, function(err, r) {
- // Adjust count
- count = count - 1;
-
- // If we have an error
- if(err) {
- errorObject = err;
- } else if(r.result['$err']) {
- errorObject = r.result;
- } else if(r.result['errmsg']) {
- errorObject = r.result;
- } else {
- credentialsValid = true;
- numberOfValidConnections = numberOfValidConnections + 1;
- }
-
- // We have authenticated all connections
- if(count == 0 && numberOfValidConnections > 0) {
- // Store the auth details
- addAuthSession(self.authStore, new AuthSession(db, username, password, options));
- // Return correct authentication
- callback(null, true);
- } else if(count == 0) {
- if(errorObject == null) errorObject = new MongoError(f("failed to authenticate using mongocr"));
- callback(errorObject, false);
- }
- });
- }
-
- var _execute = function(_connection) {
- process.nextTick(function() {
- execute(_connection);
- });
- }
-
- _execute(connections.shift());
- }
-}
-
-//
-// Initialize step
-var GSSAPIInitialize = function(self, db, username, password, authdb, gssapiServiceName, server, connection, options, callback) {
- // Create authenticator
- var mongo_auth_process = new MongoAuthProcess(connection.host, connection.port, gssapiServiceName, options);
-
- // Perform initialization
- mongo_auth_process.init(username, password, function(err, context) {
- if(err) return callback(err, false);
-
- // Perform the first step
- mongo_auth_process.transition('', function(err, payload) {
- if(err) return callback(err, false);
-
- // Call the next db step
- MongoDBGSSAPIFirstStep(self, mongo_auth_process, payload, db, username, password, authdb, server, connection, callback);
- });
- });
-}
-
-//
-// Perform first step against mongodb
-var MongoDBGSSAPIFirstStep = function(self, mongo_auth_process, payload, db, username, password, authdb, server, connection, callback) {
- // Build the sasl start command
- var command = {
- saslStart: 1
- , mechanism: 'GSSAPI'
- , payload: payload
- , autoAuthorize: 1
- };
-
- // Write the commmand on the connection
- server(connection, new Query(self.bson, "$external.$cmd", command, {
- numberToSkip: 0, numberToReturn: 1
- }).toBin(), function(err, r) {
- // // Execute first sasl step
- // server.command("$external.$cmd"
- // , command
- // , { connection: connection }, function(err, r) {
- if(err) return callback(err, false);
- var doc = r.result;
- // Execute mongodb transition
- mongo_auth_process.transition(r.result.payload, function(err, payload) {
- if(err) return callback(err, false);
-
- // MongoDB API Second Step
- MongoDBGSSAPISecondStep(self, mongo_auth_process, payload, doc, db, username, password, authdb, server, connection, callback);
- });
- });
-}
-
-//
-// Perform first step against mongodb
-var MongoDBGSSAPISecondStep = function(self, mongo_auth_process, payload, doc, db, username, password, authdb, server, connection, callback) {
- // Build Authentication command to send to MongoDB
- var command = {
- saslContinue: 1
- , conversationId: doc.conversationId
- , payload: payload
- };
-
- // Execute the command
- // Write the commmand on the connection
- server(connection, new Query(self.bson, "$external.$cmd", command, {
- numberToSkip: 0, numberToReturn: 1
- }).toBin(), function(err, r) {
- // server.command("$external.$cmd"
- // , command
- // , { connection: connection }, function(err, r) {
- if(err) return callback(err, false);
- var doc = r.result;
- // Call next transition for kerberos
- mongo_auth_process.transition(doc.payload, function(err, payload) {
- if(err) return callback(err, false);
-
- // Call the last and third step
- MongoDBGSSAPIThirdStep(self, mongo_auth_process, payload, doc, db, username, password, authdb, server, connection, callback);
- });
- });
-}
-
-var MongoDBGSSAPIThirdStep = function(self, mongo_auth_process, payload, doc, db, username, password, authdb, server, connection, callback) {
- // Build final command
- var command = {
- saslContinue: 1
- , conversationId: doc.conversationId
- , payload: payload
- };
-
- // Execute the command
- // server.command("$external.$cmd"
- // , command
- // , { connection: connection }, function(err, r) {
- // Write the commmand on the connection
- server(connection, new Query(self.bson, "$external.$cmd", command, {
- numberToSkip: 0, numberToReturn: 1
- }).toBin(), function(err, r) {
- if(err) return callback(err, false);
- mongo_auth_process.transition(null, function(err, payload) {
- if(err) return callback(err, null);
- callback(null, r);
- });
- });
-}
-
-// Add to store only if it does not exist
-var addAuthSession = function(authStore, session) {
- var found = false;
-
- for(var i = 0; i < authStore.length; i++) {
- if(authStore[i].equal(session)) {
- found = true;
- break;
- }
- }
-
- if(!found) authStore.push(session);
-}
-
-/**
- * Remove authStore credentials
- * @method
- * @param {string} db Name of database we are removing authStore details about
- * @return {object}
- */
-GSSAPI.prototype.logout = function(dbName) {
- this.authStore = this.authStore.filter(function(x) {
- return x.db != dbName;
- });
-}
-
-/**
- * Re authenticate pool
- * @method
- * @param {{Server}|{ReplSet}|{Mongos}} server Topology the authentication method is being called on
- * @param {[]Connections} connections Connections to authenticate using this authenticator
- * @param {authResultCallback} callback The callback to return the result from the authentication
- * @return {object}
- */
-GSSAPI.prototype.reauthenticate = function(server, connections, callback) {
- var authStore = this.authStore.slice(0);
- var err = null;
- var count = authStore.length;
- if(count == 0) return callback(null, null);
- // Iterate over all the auth details stored
- for(var i = 0; i < authStore.length; i++) {
- this.auth(server, connections, authStore[i].db, authStore[i].username, authStore[i].password, authStore[i].options, function(err, r) {
- if(err) err = err;
- count = count - 1;
- // Done re-authenticating
- if(count == 0) {
- callback(err, null);
- }
- });
- }
-}
-
-/**
- * This is a result from a authentication strategy
- *
- * @callback authResultCallback
- * @param {error} error An error object. Set to null if no error present
- * @param {boolean} result The result of the authentication process
- */
-
-module.exports = GSSAPI;
diff --git a/node_modules/mongodb-core/lib/auth/mongocr.js b/node_modules/mongodb-core/lib/auth/mongocr.js
deleted file mode 100644
index 1f5a670..0000000
--- a/node_modules/mongodb-core/lib/auth/mongocr.js
+++ /dev/null
@@ -1,192 +0,0 @@
-"use strict";
-
-var f = require('util').format
- , crypto = require('crypto')
- , Query = require('../connection/commands').Query
- , MongoError = require('../error');
-
-var AuthSession = function(db, username, password) {
- this.db = db;
- this.username = username;
- this.password = password;
-}
-
-AuthSession.prototype.equal = function(session) {
- return session.db == this.db
- && session.username == this.username
- && session.password == this.password;
-}
-
-/**
- * Creates a new MongoCR authentication mechanism
- * @class
- * @return {MongoCR} A cursor instance
- */
-var MongoCR = function(bson) {
- this.bson = bson;
- this.authStore = [];
-}
-
-// Add to store only if it does not exist
-var addAuthSession = function(authStore, session) {
- var found = false;
-
- for(var i = 0; i < authStore.length; i++) {
- if(authStore[i].equal(session)) {
- found = true;
- break;
- }
- }
-
- if(!found) authStore.push(session);
-}
-
-/**
- * Authenticate
- * @method
- * @param {{Server}|{ReplSet}|{Mongos}} server Topology the authentication method is being called on
- * @param {[]Connections} connections Connections to authenticate using this authenticator
- * @param {string} db Name of the database
- * @param {string} username Username
- * @param {string} password Password
- * @param {authResultCallback} callback The callback to return the result from the authentication
- * @return {object}
- */
-MongoCR.prototype.auth = function(server, connections, db, username, password, callback) {
- var self = this;
- // Total connections
- var count = connections.length;
- if(count == 0) return callback(null, null);
-
- // Valid connections
- var numberOfValidConnections = 0;
- var credentialsValid = false;
- var errorObject = null;
-
- // For each connection we need to authenticate
- while(connections.length > 0) {
- // Execute MongoCR
- var executeMongoCR = function(connection) {
- // Write the commmand on the connection
- server(connection, new Query(self.bson, f("%s.$cmd", db), {
- getnonce:1
- }, {
- numberToSkip: 0, numberToReturn: 1
- }).toBin(), function(err, r) {
- // // Let's start the process
- // server.command(f("%s.$cmd", db)
- // , { getnonce: 1 }
- // , { connection: connection }, function(err, r) {
- var nonce = null;
- var key = null;
-
- // Adjust the number of connections left
- // Get nonce
- if(err == null) {
- nonce = r.result.nonce;
- // Use node md5 generator
- var md5 = crypto.createHash('md5');
- // Generate keys used for authentication
- md5.update(username + ":mongo:" + password, 'utf8');
- var hash_password = md5.digest('hex');
- // Final key
- md5 = crypto.createHash('md5');
- md5.update(nonce + username + hash_password, 'utf8');
- key = md5.digest('hex');
- }
-
- // Execute command
- // Write the commmand on the connection
- server(connection, new Query(self.bson, f("%s.$cmd", db), {
- authenticate: 1, user: username, nonce: nonce, key:key
- }, {
- numberToSkip: 0, numberToReturn: 1
- }).toBin(), function(err, r) {
- // server.command(f("%s.$cmd", db)
- // , { authenticate: 1, user: username, nonce: nonce, key:key}
- // , { connection: connection }, function(err, r) {
- count = count - 1;
-
- // If we have an error
- if(err) {
- errorObject = err;
- } else if(r.result['$err']) {
- errorObject = r.result;
- } else if(r.result['errmsg']) {
- errorObject = r.result;
- } else {
- credentialsValid = true;
- numberOfValidConnections = numberOfValidConnections + 1;
- }
-
- // We have authenticated all connections
- if(count == 0 && numberOfValidConnections > 0) {
- // Store the auth details
- addAuthSession(self.authStore, new AuthSession(db, username, password));
- // Return correct authentication
- callback(null, true);
- } else if(count == 0) {
- if(errorObject == null) errorObject = new MongoError(f("failed to authenticate using mongocr"));
- callback(errorObject, false);
- }
- });
- });
- }
-
- var _execute = function(_connection) {
- process.nextTick(function() {
- executeMongoCR(_connection);
- });
- }
-
- _execute(connections.shift());
- }
-}
-
-/**
- * Remove authStore credentials
- * @method
- * @param {string} db Name of database we are removing authStore details about
- * @return {object}
- */
-MongoCR.prototype.logout = function(dbName) {
- this.authStore = this.authStore.filter(function(x) {
- return x.db != dbName;
- });
-}
-
-/**
- * Re authenticate pool
- * @method
- * @param {{Server}|{ReplSet}|{Mongos}} server Topology the authentication method is being called on
- * @param {[]Connections} connections Connections to authenticate using this authenticator
- * @param {authResultCallback} callback The callback to return the result from the authentication
- * @return {object}
- */
-MongoCR.prototype.reauthenticate = function(server, connections, callback) {
- var authStore = this.authStore.slice(0);
- var err = null;
- var count = authStore.length;
- if(count == 0) return callback(null, null);
- // Iterate over all the auth details stored
- for(var i = 0; i < authStore.length; i++) {
- this.auth(server, connections, authStore[i].db, authStore[i].username, authStore[i].password, function(err, r) {
- if(err) err = err;
- count = count - 1;
- // Done re-authenticating
- if(count == 0) {
- callback(err, null);
- }
- });
- }
-}
-
-/**
- * This is a result from a authentication strategy
- *
- * @callback authResultCallback
- * @param {error} error An error object. Set to null if no error present
- * @param {boolean} result The result of the authentication process
- */
-
-module.exports = MongoCR;
diff --git a/node_modules/mongodb-core/lib/auth/plain.js b/node_modules/mongodb-core/lib/auth/plain.js
deleted file mode 100644
index 70210cb..0000000
--- a/node_modules/mongodb-core/lib/auth/plain.js
+++ /dev/null
@@ -1,173 +0,0 @@
-"use strict";
-
-var f = require('util').format
- , crypto = require('crypto')
- , Binary = require('bson').Binary
- , Query = require('../connection/commands').Query
- , MongoError = require('../error');
-
-var AuthSession = function(db, username, password) {
- this.db = db;
- this.username = username;
- this.password = password;
-}
-
-AuthSession.prototype.equal = function(session) {
- return session.db == this.db
- && session.username == this.username
- && session.password == this.password;
-}
-
-/**
- * Creates a new Plain authentication mechanism
- * @class
- * @return {Plain} A cursor instance
- */
-var Plain = function(bson) {
- this.bson = bson;
- this.authStore = [];
-}
-
-/**
- * Authenticate
- * @method
- * @param {{Server}|{ReplSet}|{Mongos}} server Topology the authentication method is being called on
- * @param {[]Connections} connections Connections to authenticate using this authenticator
- * @param {string} db Name of the database
- * @param {string} username Username
- * @param {string} password Password
- * @param {authResultCallback} callback The callback to return the result from the authentication
- * @return {object}
- */
-Plain.prototype.auth = function(server, connections, db, username, password, callback) {
- var self = this;
- // Total connections
- var count = connections.length;
- if(count == 0) return callback(null, null);
-
- // Valid connections
- var numberOfValidConnections = 0;
- var credentialsValid = false;
- var errorObject = null;
-
- // For each connection we need to authenticate
- while(connections.length > 0) {
- // Execute MongoCR
- var execute = function(connection) {
- // Create payload
- var payload = new Binary(f("\x00%s\x00%s", username, password));
-
- // Let's start the sasl process
- var command = {
- saslStart: 1
- , mechanism: 'PLAIN'
- , payload: payload
- , autoAuthorize: 1
- };
-
- // Let's start the process
- server(connection, new Query(self.bson, "$external.$cmd", command, {
- numberToSkip: 0, numberToReturn: 1
- }).toBin(), function(err, r) {
- // server.command("$external.$cmd"
- // , command
- // , { connection: connection }, function(err, r) {
- // Adjust count
- count = count - 1;
-
- // If we have an error
- if(err) {
- errorObject = err;
- } else if(r.result['$err']) {
- errorObject = r.result;
- } else if(r.result['errmsg']) {
- errorObject = r.result;
- } else {
- credentialsValid = true;
- numberOfValidConnections = numberOfValidConnections + 1;
- }
-
- // We have authenticated all connections
- if(count == 0 && numberOfValidConnections > 0) {
- // Store the auth details
- addAuthSession(self.authStore, new AuthSession(db, username, password));
- // Return correct authentication
- callback(null, true);
- } else if(count == 0) {
- if(errorObject == null) errorObject = new MongoError(f("failed to authenticate using mongocr"));
- callback(errorObject, false);
- }
- });
- }
-
- var _execute = function(_connection) {
- process.nextTick(function() {
- execute(_connection);
- });
- }
-
- _execute(connections.shift());
- }
-}
-
-// Add to store only if it does not exist
-var addAuthSession = function(authStore, session) {
- var found = false;
-
- for(var i = 0; i < authStore.length; i++) {
- if(authStore[i].equal(session)) {
- found = true;
- break;
- }
- }
-
- if(!found) authStore.push(session);
-}
-
-/**
- * Remove authStore credentials
- * @method
- * @param {string} db Name of database we are removing authStore details about
- * @return {object}
- */
-Plain.prototype.logout = function(dbName) {
- this.authStore = this.authStore.filter(function(x) {
- return x.db != dbName;
- });
-}
-
-/**
- * Re authenticate pool
- * @method
- * @param {{Server}|{ReplSet}|{Mongos}} server Topology the authentication method is being called on
- * @param {[]Connections} connections Connections to authenticate using this authenticator
- * @param {authResultCallback} callback The callback to return the result from the authentication
- * @return {object}
- */
-Plain.prototype.reauthenticate = function(server, connections, callback) {
- var authStore = this.authStore.slice(0);
- var err = null;
- var count = authStore.length;
- if(count == 0) return callback(null, null);
- // Iterate over all the auth details stored
- for(var i = 0; i < authStore.length; i++) {
- this.auth(server, connections, authStore[i].db, authStore[i].username, authStore[i].password, function(err, r) {
- if(err) err = err;
- count = count - 1;
- // Done re-authenticating
- if(count == 0) {
- callback(err, null);
- }
- });
- }
-}
-
-/**
- * This is a result from a authentication strategy
- *
- * @callback authResultCallback
- * @param {error} error An error object. Set to null if no error present
- * @param {boolean} result The result of the authentication process
- */
-
-module.exports = Plain;
diff --git a/node_modules/mongodb-core/lib/auth/scram.js b/node_modules/mongodb-core/lib/auth/scram.js
deleted file mode 100644
index cdb6507..0000000
--- a/node_modules/mongodb-core/lib/auth/scram.js
+++ /dev/null
@@ -1,345 +0,0 @@
-"use strict";
-
-var f = require('util').format
- , crypto = require('crypto')
- , Query = require('../connection/commands').Query
- , Binary = require('bson').Binary
- , MongoError = require('../error');
-
-var AuthSession = function(db, username, password) {
- this.db = db;
- this.username = username;
- this.password = password;
-}
-
-AuthSession.prototype.equal = function(session) {
- return session.db == this.db
- && session.username == this.username
- && session.password == this.password;
-}
-
-var id = 0;
-
-/**
- * Creates a new ScramSHA1 authentication mechanism
- * @class
- * @return {ScramSHA1} A cursor instance
- */
-var ScramSHA1 = function(bson) {
- this.bson = bson;
- this.authStore = [];
- this.id = id++;
-}
-
-var parsePayload = function(payload) {
- var dict = {};
- var parts = payload.split(',');
-
- for(var i = 0; i < parts.length; i++) {
- var valueParts = parts[i].split('=');
- dict[valueParts[0]] = valueParts[1];
- }
-
- return dict;
-}
-
-var passwordDigest = function(username, password) {
- if(typeof username != 'string') throw new MongoError("username must be a string");
- if(typeof password != 'string') throw new MongoError("password must be a string");
- if(password.length == 0) throw new MongoError("password cannot be empty");
- // Use node md5 generator
- var md5 = crypto.createHash('md5');
- // Generate keys used for authentication
- md5.update(username + ":mongo:" + password, 'utf8');
- return md5.digest('hex');
-}
-
-// XOR two buffers
-var xor = function(a, b) {
- if (!Buffer.isBuffer(a)) a = new Buffer(a)
- if (!Buffer.isBuffer(b)) b = new Buffer(b)
- var res = []
- if (a.length > b.length) {
- for (var i = 0; i < b.length; i++) {
- res.push(a[i] ^ b[i])
- }
- } else {
- for (var i = 0; i < a.length; i++) {
- res.push(a[i] ^ b[i])
- }
- }
- return new Buffer(res);
-}
-
-// Create a final digest
-var hi = function(data, salt, iterations) {
- // Create digest
- var digest = function(msg) {
- var hmac = crypto.createHmac('sha1', data);
- hmac.update(msg);
- return new Buffer(hmac.digest('base64'), 'base64');
- }
-
- // Create variables
- salt = Buffer.concat([salt, new Buffer('\x00\x00\x00\x01')])
- var ui = digest(salt);
- var u1 = ui;
-
- for(var i = 0; i < iterations - 1; i++) {
- u1 = digest(u1);
- ui = xor(ui, u1);
- }
-
- return ui;
-}
-
-/**
- * Authenticate
- * @method
- * @param {{Server}|{ReplSet}|{Mongos}} server Topology the authentication method is being called on
- * @param {[]Connections} connections Connections to authenticate using this authenticator
- * @param {string} db Name of the database
- * @param {string} username Username
- * @param {string} password Password
- * @param {authResultCallback} callback The callback to return the result from the authentication
- * @return {object}
- */
-ScramSHA1.prototype.auth = function(server, connections, db, username, password, callback) {
- var self = this;
- // Total connections
- var count = connections.length;
- if(count == 0) return callback(null, null);
-
- // Valid connections
- var numberOfValidConnections = 0;
- var credentialsValid = false;
- var errorObject = null;
-
- // Execute MongoCR
- var executeScram = function(connection) {
- // Clean up the user
- username = username.replace('=', "=3D").replace(',', '=2C');
-
- // Create a random nonce
- var nonce = crypto.randomBytes(24).toString('base64');
- // var nonce = 'MsQUY9iw0T9fx2MUEz6LZPwGuhVvWAhc'
- var firstBare = f("n=%s,r=%s", username, nonce);
-
- // Build command structure
- var cmd = {
- saslStart: 1
- , mechanism: 'SCRAM-SHA-1'
- , payload: new Binary(f("n,,%s", firstBare))
- , autoAuthorize: 1
- }
-
- // Handle the error
- var handleError = function(err, r) {
- if(err) {
- numberOfValidConnections = numberOfValidConnections - 1;
- errorObject = err; return false;
- } else if(r.result['$err']) {
- errorObject = r.result; return false;
- } else if(r.result['errmsg']) {
- errorObject = r.result; return false;
- } else {
- credentialsValid = true;
- numberOfValidConnections = numberOfValidConnections + 1;
- }
-
- return true
- }
-
- // Finish up
- var finish = function(_count, _numberOfValidConnections) {
- if(_count == 0 && _numberOfValidConnections > 0) {
- // Store the auth details
- addAuthSession(self.authStore, new AuthSession(db, username, password));
- // Return correct authentication
- return callback(null, true);
- } else if(_count == 0) {
- if(errorObject == null) errorObject = new MongoError(f("failed to authenticate using scram"));
- return callback(errorObject, false);
- }
- }
-
- var handleEnd = function(_err, _r) {
- // Handle any error
- handleError(_err, _r)
- // Adjust the number of connections
- count = count - 1;
- // Execute the finish
- finish(count, numberOfValidConnections);
- }
-
- // Write the commmand on the connection
- server(connection, new Query(self.bson, f("%s.$cmd", db), cmd, {
- numberToSkip: 0, numberToReturn: 1
- }).toBin(), function(err, r) {
- // Do we have an error, handle it
- if(handleError(err, r) == false) {
- count = count - 1;
-
- if(count == 0 && numberOfValidConnections > 0) {
- // Store the auth details
- addAuthSession(self.authStore, new AuthSession(db, username, password));
- // Return correct authentication
- return callback(null, true);
- } else if(count == 0) {
- if(errorObject == null) errorObject = new MongoError(f("failed to authenticate using scram"));
- return callback(errorObject, false);
- }
-
- return;
- }
-
- // Get the dictionary
- var dict = parsePayload(r.result.payload.value())
-
- // Unpack dictionary
- var iterations = parseInt(dict.i, 10);
- var salt = dict.s;
- var rnonce = dict.r;
-
- // Set up start of proof
- var withoutProof = f("c=biws,r=%s", rnonce);
- var passwordDig = passwordDigest(username, password);
- var saltedPassword = hi(passwordDig
- , new Buffer(salt, 'base64')
- , iterations);
-
- // Create the client key
- var hmac = crypto.createHmac('sha1', saltedPassword);
- hmac.update(new Buffer("Client Key"));
- var clientKey = new Buffer(hmac.digest('base64'), 'base64');
-
- // Create the stored key
- var hash = crypto.createHash('sha1');
- hash.update(clientKey);
- var storedKey = new Buffer(hash.digest('base64'), 'base64');
-
- // Create the authentication message
- var authMsg = [firstBare, r.result.payload.value().toString('base64'), withoutProof].join(',');
-
- // Create client signature
- var hmac = crypto.createHmac('sha1', storedKey);
- hmac.update(new Buffer(authMsg));
- var clientSig = new Buffer(hmac.digest('base64'), 'base64');
-
- // Create client proof
- var clientProof = f("p=%s", new Buffer(xor(clientKey, clientSig)).toString('base64'));
-
- // Create client final
- var clientFinal = [withoutProof, clientProof].join(',');
-
- // Generate server key
- var hmac = crypto.createHmac('sha1', saltedPassword);
- hmac.update(new Buffer('Server Key'))
- var serverKey = new Buffer(hmac.digest('base64'), 'base64');
-
- // Generate server signature
- var hmac = crypto.createHmac('sha1', serverKey);
- hmac.update(new Buffer(authMsg))
- var serverSig = new Buffer(hmac.digest('base64'), 'base64');
-
- //
- // Create continue message
- var cmd = {
- saslContinue: 1
- , conversationId: r.result.conversationId
- , payload: new Binary(new Buffer(clientFinal))
- }
-
- //
- // Execute sasl continue
- // Write the commmand on the connection
- server(connection, new Query(self.bson, f("%s.$cmd", db), cmd, {
- numberToSkip: 0, numberToReturn: 1
- }).toBin(), function(err, r) {
- if(r && r.result.done == false) {
- var cmd = {
- saslContinue: 1
- , conversationId: r.result.conversationId
- , payload: new Buffer(0)
- }
-
- // Write the commmand on the connection
- server(connection, new Query(self.bson, f("%s.$cmd", db), cmd, {
- numberToSkip: 0, numberToReturn: 1
- }).toBin(), function(err, r) {
- handleEnd(err, r);
- });
- } else {
- handleEnd(err, r);
- }
- });
- });
- }
-
- var _execute = function(_connection) {
- process.nextTick(function() {
- executeScram(_connection);
- });
- }
-
- // For each connection we need to authenticate
- while(connections.length > 0) {
- _execute(connections.shift());
- }
-}
-
-// Add to store only if it does not exist
-var addAuthSession = function(authStore, session) {
- var found = false;
-
- for(var i = 0; i < authStore.length; i++) {
- if(authStore[i].equal(session)) {
- found = true;
- break;
- }
- }
-
- if(!found) authStore.push(session);
-}
-
-/**
- * Remove authStore credentials
- * @method
- * @param {string} db Name of database we are removing authStore details about
- * @return {object}
- */
-ScramSHA1.prototype.logout = function(dbName) {
- this.authStore = this.authStore.filter(function(x) {
- return x.db != dbName;
- });
-}
-
-/**
- * Re authenticate pool
- * @method
- * @param {{Server}|{ReplSet}|{Mongos}} server Topology the authentication method is being called on
- * @param {[]Connections} connections Connections to authenticate using this authenticator
- * @param {authResultCallback} callback The callback to return the result from the authentication
- * @return {object}
- */
-ScramSHA1.prototype.reauthenticate = function(server, connections, callback) {
- var authStore = this.authStore.slice(0);
- var count = authStore.length;
- var err = null;
- // No connections
- if(count == 0) return callback(null, null);
- // Iterate over all the auth details stored
- for(var i = 0; i < authStore.length; i++) {
- this.auth(server, connections, authStore[i].db, authStore[i].username, authStore[i].password, function(err, r) {
- if(err) err = err;
- count = count - 1;
- // Done re-authenticating
- if(count == 0) {
- callback(err, null);
- }
- });
- }
-}
-
-
-module.exports = ScramSHA1;
diff --git a/node_modules/mongodb-core/lib/auth/sspi.js b/node_modules/mongodb-core/lib/auth/sspi.js
deleted file mode 100644
index 60d744f..0000000
--- a/node_modules/mongodb-core/lib/auth/sspi.js
+++ /dev/null
@@ -1,267 +0,0 @@
-"use strict";
-
-var f = require('util').format
- , crypto = require('crypto')
- , require_optional = require('require_optional')
- , Query = require('../connection/commands').Query
- , MongoError = require('../error');
-
-var AuthSession = function(db, username, password, options) {
- this.db = db;
- this.username = username;
- this.password = password;
- this.options = options;
-}
-
-AuthSession.prototype.equal = function(session) {
- return session.db == this.db
- && session.username == this.username
- && session.password == this.password;
-}
-
-// Kerberos class
-var Kerberos = null;
-var MongoAuthProcess = null;
-
-// Try to grab the Kerberos class
-try {
- Kerberos = require_optional('kerberos').Kerberos
- // Authentication process for Mongo
- MongoAuthProcess = require_optional('kerberos').processes.MongoAuthProcess
-} catch(err) {}
-
-/**
- * Creates a new SSPI authentication mechanism
- * @class
- * @return {SSPI} A cursor instance
- */
-var SSPI = function(bson) {
- this.bson = bson;
- this.authStore = [];
-}
-
-/**
- * Authenticate
- * @method
- * @param {{Server}|{ReplSet}|{Mongos}} server Topology the authentication method is being called on
- * @param {[]Connections} connections Connections to authenticate using this authenticator
- * @param {string} db Name of the database
- * @param {string} username Username
- * @param {string} password Password
- * @param {authResultCallback} callback The callback to return the result from the authentication
- * @return {object}
- */
-SSPI.prototype.auth = function(server, connections, db, username, password, options, callback) {
- var self = this;
- // We don't have the Kerberos library
- if(Kerberos == null) return callback(new Error("Kerberos library is not installed"));
- var gssapiServiceName = options['gssapiServiceName'] || 'mongodb';
- // Total connections
- var count = connections.length;
- if(count == 0) return callback(null, null);
-
- // Valid connections
- var numberOfValidConnections = 0;
- var credentialsValid = false;
- var errorObject = null;
-
- // For each connection we need to authenticate
- while(connections.length > 0) {
- // Execute MongoCR
- var execute = function(connection) {
- // Start Auth process for a connection
- SSIPAuthenticate(self, username, password, gssapiServiceName, server, connection, options, function(err, r) {
- // Adjust count
- count = count - 1;
-
- // If we have an error
- if(err) {
- errorObject = err;
- } else if(r && typeof r == 'object' && r.result['$err']) {
- errorObject = r.result;
- } else if(r && typeof r == 'object' && r.result['errmsg']) {
- errorObject = r.result;
- } else {
- credentialsValid = true;
- numberOfValidConnections = numberOfValidConnections + 1;
- }
-
- // We have authenticated all connections
- if(count == 0 && numberOfValidConnections > 0) {
- // Store the auth details
- addAuthSession(self.authStore, new AuthSession(db, username, password, options));
- // Return correct authentication
- callback(null, true);
- } else if(count == 0) {
- if(errorObject == null) errorObject = new MongoError(f("failed to authenticate using mongocr"));
- callback(errorObject, false);
- }
- });
- }
-
- var _execute = function(_connection) {
- process.nextTick(function() {
- execute(_connection);
- });
- }
-
- _execute(connections.shift());
- }
-}
-
-var SSIPAuthenticate = function(self, username, password, gssapiServiceName, server, connection, options, callback) {
- // Build Authentication command to send to MongoDB
- var command = {
- saslStart: 1
- , mechanism: 'GSSAPI'
- , payload: ''
- , autoAuthorize: 1
- };
-
- // Create authenticator
- var mongo_auth_process = new MongoAuthProcess(connection.host, connection.port, gssapiServiceName, options);
-
- // Execute first sasl step
- server(connection, new Query(self.bson, "$external.$cmd", command, {
- numberToSkip: 0, numberToReturn: 1
- }).toBin(), function(err, r) {
- // server.command("$external.$cmd"
- // , command
- // , { connection: connection }, function(err, r) {
- if(err) return callback(err, false);
- var doc = r.result;
-
- mongo_auth_process.init(username, password, function(err) {
- if(err) return callback(err);
-
- mongo_auth_process.transition(doc.payload, function(err, payload) {
- if(err) return callback(err);
-
- // Perform the next step against mongod
- var command = {
- saslContinue: 1
- , conversationId: doc.conversationId
- , payload: payload
- };
-
- // Execute the command
- server(connection, new Query(self.bson, "$external.$cmd", command, {
- numberToSkip: 0, numberToReturn: 1
- }).toBin(), function(err, r) {
- // server.command("$external.$cmd"
- // , command
- // , { connection: connection }, function(err, r) {
- if(err) return callback(err, false);
- var doc = r.result;
-
- mongo_auth_process.transition(doc.payload, function(err, payload) {
- if(err) return callback(err);
-
- // Perform the next step against mongod
- var command = {
- saslContinue: 1
- , conversationId: doc.conversationId
- , payload: payload
- };
-
- // Execute the command
- server(connection, new Query(self.bson, "$external.$cmd", command, {
- numberToSkip: 0, numberToReturn: 1
- }).toBin(), function(err, r) {
- // server.command("$external.$cmd"
- // , command
- // , { connection: connection }, function(err, r) {
- if(err) return callback(err, false);
- var doc = r.result;
-
- mongo_auth_process.transition(doc.payload, function(err, payload) {
- // Perform the next step against mongod
- var command = {
- saslContinue: 1
- , conversationId: doc.conversationId
- , payload: payload
- };
-
- // Execute the command
- server(connection, new Query(self.bson, "$external.$cmd", command, {
- numberToSkip: 0, numberToReturn: 1
- }).toBin(), function(err, r) {
- // server.command("$external.$cmd"
- // , command
- // , { connection: connection }, function(err, r) {
- if(err) return callback(err, false);
- var doc = r.result;
-
- if(doc.done) return callback(null, true);
- callback(new Error("Authentication failed"), false);
- });
- });
- });
- });
- });
- });
- });
- });
-}
-
-// Add to store only if it does not exist
-var addAuthSession = function(authStore, session) {
- var found = false;
-
- for(var i = 0; i < authStore.length; i++) {
- if(authStore[i].equal(session)) {
- found = true;
- break;
- }
- }
-
- if(!found) authStore.push(session);
-}
-
-/**
- * Remove authStore credentials
- * @method
- * @param {string} db Name of database we are removing authStore details about
- * @return {object}
- */
-SSPI.prototype.logout = function(dbName) {
- this.authStore = this.authStore.filter(function(x) {
- return x.db != dbName;
- });
-}
-
-/**
- * Re authenticate pool
- * @method
- * @param {{Server}|{ReplSet}|{Mongos}} server Topology the authentication method is being called on
- * @param {[]Connections} connections Connections to authenticate using this authenticator
- * @param {authResultCallback} callback The callback to return the result from the authentication
- * @return {object}
- */
-SSPI.prototype.reauthenticate = function(server, connections, callback) {
- var authStore = this.authStore.slice(0);
- var err = null;
- var count = authStore.length;
- if(count == 0) return callback(null, null);
- // Iterate over all the auth details stored
- for(var i = 0; i < authStore.length; i++) {
- this.auth(server, connections, authStore[i].db, authStore[i].username, authStore[i].password, authStore[i].options, function(err, r) {
- if(err) err = err;
- count = count - 1;
- // Done re-authenticating
- if(count == 0) {
- callback(err, null);
- }
- });
- }
-}
-
-/**
- * This is a result from a authentication strategy
- *
- * @callback authResultCallback
- * @param {error} error An error object. Set to null if no error present
- * @param {boolean} result The result of the authentication process
- */
-
-module.exports = SSPI;
diff --git a/node_modules/mongodb-core/lib/auth/x509.js b/node_modules/mongodb-core/lib/auth/x509.js
deleted file mode 100644
index b1b8287..0000000
--- a/node_modules/mongodb-core/lib/auth/x509.js
+++ /dev/null
@@ -1,168 +0,0 @@
-"use strict";
-
-var f = require('util').format
- , crypto = require('crypto')
- , Query = require('../connection/commands').Query
- , MongoError = require('../error');
-
-var AuthSession = function(db, username, password) {
- this.db = db;
- this.username = username;
- this.password = password;
-}
-
-AuthSession.prototype.equal = function(session) {
- return session.db == this.db
- && session.username == this.username
- && session.password == this.password;
-}
-
-/**
- * Creates a new X509 authentication mechanism
- * @class
- * @return {X509} A cursor instance
- */
-var X509 = function(bson) {
- this.bson = bson;
- this.authStore = [];
-}
-
-/**
- * Authenticate
- * @method
- * @param {{Server}|{ReplSet}|{Mongos}} server Topology the authentication method is being called on
- * @param {[]Connections} connections Connections to authenticate using this authenticator
- * @param {string} db Name of the database
- * @param {string} username Username
- * @param {string} password Password
- * @param {authResultCallback} callback The callback to return the result from the authentication
- * @return {object}
- */
-X509.prototype.auth = function(server, connections, db, username, password, callback) {
- var self = this;
- // Total connections
- var count = connections.length;
- if(count == 0) return callback(null, null);
-
- // Valid connections
- var numberOfValidConnections = 0;
- var credentialsValid = false;
- var errorObject = null;
-
- // For each connection we need to authenticate
- while(connections.length > 0) {
- // Execute MongoCR
- var execute = function(connection) {
- // Let's start the sasl process
- var command = {
- authenticate: 1
- , mechanism: 'MONGODB-X509'
- , user: username
- };
-
- // Let's start the process
- server(connection, new Query(self.bson, "$external.$cmd", command, {
- numberToSkip: 0, numberToReturn: 1
- }).toBin(), function(err, r) {
- // server.command("$external.$cmd"
- // , command
- // , { connection: connection }, function(err, r) {
- // Adjust count
- count = count - 1;
-
- // If we have an error
- if(err) {
- errorObject = err;
- } else if(r.result['$err']) {
- errorObject = r.result;
- } else if(r.result['errmsg']) {
- errorObject = r.result;
- } else {
- credentialsValid = true;
- numberOfValidConnections = numberOfValidConnections + 1;
- }
-
- // We have authenticated all connections
- if(count == 0 && numberOfValidConnections > 0) {
- // Store the auth details
- addAuthSession(self.authStore, new AuthSession(db, username, password));
- // Return correct authentication
- callback(null, true);
- } else if(count == 0) {
- if(errorObject == null) errorObject = new MongoError(f("failed to authenticate using mongocr"));
- callback(errorObject, false);
- }
- });
- }
-
- var _execute = function(_connection) {
- process.nextTick(function() {
- execute(_connection);
- });
- }
-
- _execute(connections.shift());
- }
-}
-
-// Add to store only if it does not exist
-var addAuthSession = function(authStore, session) {
- var found = false;
-
- for(var i = 0; i < authStore.length; i++) {
- if(authStore[i].equal(session)) {
- found = true;
- break;
- }
- }
-
- if(!found) authStore.push(session);
-}
-
-/**
- * Remove authStore credentials
- * @method
- * @param {string} db Name of database we are removing authStore details about
- * @return {object}
- */
-X509.prototype.logout = function(dbName) {
- this.authStore = this.authStore.filter(function(x) {
- return x.db != dbName;
- });
-}
-
-/**
- * Re authenticate pool
- * @method
- * @param {{Server}|{ReplSet}|{Mongos}} server Topology the authentication method is being called on
- * @param {[]Connections} connections Connections to authenticate using this authenticator
- * @param {authResultCallback} callback The callback to return the result from the authentication
- * @return {object}
- */
-X509.prototype.reauthenticate = function(server, connections, callback) {
- var authStore = this.authStore.slice(0);
- var err = null;
- var count = authStore.length;
- if(count == 0) return callback(null, null);
- // Iterate over all the auth details stored
- for(var i = 0; i < authStore.length; i++) {
- this.auth(server, connections, authStore[i].db, authStore[i].username, authStore[i].password, function(err, r) {
- if(err) err = err;
- count = count - 1;
- // Done re-authenticating
- if(count == 0) {
- callback(err, null);
- }
- });
- }
-}
-
-/**
- * This is a result from a authentication strategy
- *
- * @callback authResultCallback
- * @param {error} error An error object. Set to null if no error present
- * @param {boolean} result The result of the authentication process
- */
-
-module.exports = X509;
generated by cgit v1.2.3 (git 2.25.1) at 2026-08-02 09:55:51 +0000