@mongodb-js/connection-form 0.2.0 → 0.5.0

package/dist/utils/csfle-handler.js

@@ -0,0 +1,171 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.adjustCSFLEParams = exports.encryptedFieldConfigToText = exports.textToEncryptedFieldConfig = exports.hasAnyCsfleOption = exports.handleUpdateCsfleKmsTlsParam = exports.handleUpdateCsfleKmsParam = exports.handleUpdateCsfleParam = exports.handleUpdateCsfleStoreCredentials = void 0;
+const lodash_1 = require("lodash");
+const mongodb_query_parser_1 = __importDefault(require("mongodb-query-parser"));
+const DEFAULT_FLE_OPTIONS = {
+    storeCredentials: false,
+    autoEncryption: {},
+};
+function handleUpdateCsfleStoreCredentials({ action, connectionOptions, }) {
+    connectionOptions = (0, lodash_1.cloneDeep)(connectionOptions);
+    return {
+        connectionOptions: {
+            ...connectionOptions,
+            fleOptions: {
+                ...DEFAULT_FLE_OPTIONS,
+                ...connectionOptions.fleOptions,
+                storeCredentials: action.value,
+            },
+        },
+    };
+}
+exports.handleUpdateCsfleStoreCredentials = handleUpdateCsfleStoreCredentials;
+function handleUpdateCsfleParam({ action, connectionOptions, }) {
+    var _a;
+    connectionOptions = (0, lodash_1.cloneDeep)(connectionOptions);
+    const autoEncryption = {
+        ...(_a = connectionOptions.fleOptions) === null || _a === void 0 ? void 0 : _a.autoEncryption,
+    };
+    if (!action.value) {
+        delete autoEncryption[action.key];
+    }
+    else {
+        autoEncryption[action.key] = action.value;
+    }
+    return {
+        connectionOptions: {
+            ...connectionOptions,
+            fleOptions: {
+                ...DEFAULT_FLE_OPTIONS,
+                ...connectionOptions.fleOptions,
+                autoEncryption,
+            },
+        },
+    };
+}
+exports.handleUpdateCsfleParam = handleUpdateCsfleParam;
+function handleUpdateCsfleKmsParam({ action, connectionOptions, }) {
+    var _a, _b, _c, _d;
+    connectionOptions = (0, lodash_1.cloneDeep)(connectionOptions);
+    const autoEncryption = (_b = (_a = connectionOptions.fleOptions) === null || _a === void 0 ? void 0 : _a.autoEncryption) !== null && _b !== void 0 ? _b : {};
+    let kms = {
+        ...((_d = (_c = autoEncryption.kmsProviders) === null || _c === void 0 ? void 0 : _c[action.kmsProvider]) !== null && _d !== void 0 ? _d : {}),
+    };
+    if (!action.value) {
+        delete kms[action.key];
+    }
+    else {
+        kms[action.key] = action.value;
+    }
+    if (Object.keys(kms).length === 0) {
+        kms = undefined;
+    }
+    return {
+        connectionOptions: {
+            ...connectionOptions,
+            fleOptions: {
+                ...DEFAULT_FLE_OPTIONS,
+                ...connectionOptions.fleOptions,
+                autoEncryption: {
+                    ...autoEncryption,
+                    kmsProviders: {
+                        ...autoEncryption.kmsProviders,
+                        [action.kmsProvider]: kms,
+                    },
+                },
+            },
+        },
+    };
+}
+exports.handleUpdateCsfleKmsParam = handleUpdateCsfleKmsParam;
+function handleUpdateCsfleKmsTlsParam({ action, connectionOptions, }) {
+    var _a, _b, _c, _d;
+    connectionOptions = (0, lodash_1.cloneDeep)(connectionOptions);
+    const autoEncryption = (_b = (_a = connectionOptions.fleOptions) === null || _a === void 0 ? void 0 : _a.autoEncryption) !== null && _b !== void 0 ? _b : {};
+    let tls = { ...((_d = (_c = autoEncryption.tlsOptions) === null || _c === void 0 ? void 0 : _c[action.kmsProvider]) !== null && _d !== void 0 ? _d : {}) };
+    if (!action.value) {
+        delete tls[action.key];
+    }
+    else {
+        tls[action.key] = action.value;
+    }
+    if (Object.keys(tls).length === 0) {
+        tls = undefined;
+    }
+    return {
+        connectionOptions: {
+            ...connectionOptions,
+            fleOptions: {
+                ...DEFAULT_FLE_OPTIONS,
+                ...connectionOptions.fleOptions,
+                autoEncryption: {
+                    ...autoEncryption,
+                    tlsOptions: {
+                        ...autoEncryption.tlsOptions,
+                        [action.kmsProvider]: tls,
+                    },
+                },
+            },
+        },
+    };
+}
+exports.handleUpdateCsfleKmsTlsParam = handleUpdateCsfleKmsTlsParam;
+function hasAnyCsfleOption(o) {
+    var _a, _b;
+    return !!(o.bypassAutoEncryption ||
+        o.keyVaultNamespace ||
+        o.schemaMap ||
+        [
+            ...Object.values((_a = o.tlsOptions) !== null && _a !== void 0 ? _a : {}),
+            ...Object.values((_b = o.kmsProviders) !== null && _b !== void 0 ? _b : {}),
+        ]
+            .flatMap((o) => Object.values(o))
+            .filter(Boolean).length > 0);
+}
+exports.hasAnyCsfleOption = hasAnyCsfleOption;
+function textToEncryptedFieldConfig(text) {
+    if (!text.trim()) {
+        return undefined;
+    }
+    let parsed = {};
+    try {
+        parsed = (0, mongodb_query_parser_1.default)(text);
+        if (!parsed || typeof parsed !== 'object') {
+            parsed = {};
+            throw new Error('Field contained invalid input');
+        }
+        parsed['$compass.error'] = null;
+    }
+    catch (err) {
+        parsed['$compass.error'] = err.message;
+    }
+    parsed['$compass.rawText'] = text;
+    return parsed;
+}
+exports.textToEncryptedFieldConfig = textToEncryptedFieldConfig;
+function encryptedFieldConfigToText(config) {
+    if (!config) {
+        return '';
+    }
+    if (config['$compass.rawText']) {
+        return config['$compass.rawText'];
+    }
+    const withoutCompassKeys = Object.fromEntries(Object.entries(config).filter(([key]) => !key.startsWith('$compass.')));
+    return mongodb_query_parser_1.default.toJSString(withoutCompassKeys);
+}
+exports.encryptedFieldConfigToText = encryptedFieldConfigToText;
+function adjustCSFLEParams(connectionOptions) {
+    var _a, _b;
+    connectionOptions = (0, lodash_1.cloneDeep)(connectionOptions);
+    const autoEncryptionOptions = (_a = connectionOptions.fleOptions) === null || _a === void 0 ? void 0 : _a.autoEncryption;
+    if (((_b = autoEncryptionOptions === null || autoEncryptionOptions === void 0 ? void 0 : autoEncryptionOptions.schemaMap) === null || _b === void 0 ? void 0 : _b['$compass.error']) === null) {
+        autoEncryptionOptions.schemaMap = textToEncryptedFieldConfig(autoEncryptionOptions.schemaMap['$compass.rawText']);
+    }
+    return connectionOptions;
+}
+exports.adjustCSFLEParams = adjustCSFLEParams;
+//# sourceMappingURL=csfle-handler.js.map

package/dist/utils/csfle-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csfle-handler.js","sourceRoot":"","sources":["../../src/utils/csfle-handler.ts"],"names":[],"mappings":";;;;;;AAAA,mCAAmC;AAQnC,gFAA+C;AAE/C,MAAM,mBAAmB,GAAiD;IACxE,gBAAgB,EAAE,KAAK;IACvB,cAAc,EAAE,EAAE;CACnB,CAAC;AA8BF,SAAgB,iCAAiC,CAAC,EAChD,MAAM,EACN,iBAAiB,GAIlB;IAGC,iBAAiB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC,CAAC;IACjD,OAAO;QACL,iBAAiB,EAAE;YACjB,GAAG,iBAAiB;YACpB,UAAU,EAAE;gBACV,GAAG,mBAAmB;gBACtB,GAAG,iBAAiB,CAAC,UAAU;gBAC/B,gBAAgB,EAAE,MAAM,CAAC,KAAK;aAC/B;SACF;KACF,CAAC;AACJ,CAAC;AApBD,8EAoBC;AAED,SAAgB,sBAAsB,CAAC,EACrC,MAAM,EACN,iBAAiB,GAIlB;;IAGC,iBAAiB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC,CAAC;IAEjD,MAAM,cAAc,GAAQ;QAC1B,GAAG,MAAA,iBAAiB,CAAC,UAAU,0CAAE,cAAc;KAChD,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;QACjB,OAAO,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KACnC;SAAM;QACL,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;KAC3C;IACD,OAAO;QACL,iBAAiB,EAAE;YACjB,GAAG,iBAAiB;YACpB,UAAU,EAAE;gBACV,GAAG,mBAAmB;gBACtB,GAAG,iBAAiB,CAAC,UAAU;gBAC/B,cAAc;aACf;SACF;KACF,CAAC;AACJ,CAAC;AA7BD,wDA6BC;AAED,SAAgB,yBAAyB,CAAC,EACxC,MAAM,EACN,iBAAiB,GAIlB;;IAGC,iBAAiB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,MAAA,MAAA,iBAAiB,CAAC,UAAU,0CAAE,cAAc,mCAAI,EAAE,CAAC;IAE1E,IAAI,GAAG,GAAQ;QACb,GAAG,CAAC,MAAA,MAAA,cAAc,CAAC,YAAY,0CAAG,MAAM,CAAC,WAAW,CAAC,mCAAI,EAAE,CAAC;KAC7D,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;QACjB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KACxB;SAAM;QACL,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;KAChC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE;QACjC,GAAG,GAAG,SAAS,CAAC;KACjB;IACD,OAAO;QACL,iBAAiB,EAAE;YACjB,GAAG,iBAAiB;YACpB,UAAU,EAAE;gBACV,GAAG,mBAAmB;gBACtB,GAAG,iBAAiB,CAAC,UAAU;gBAC/B,cAAc,EAAE;oBACd,GAAG,cAAc;oBACjB,YAAY,EAAE;wBACZ,GAAG,cAAc,CAAC,YAAY;wBAC9B,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG;qBAC1B;iBACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAvCD,8DAuCC;AAED,SAAgB,4BAA4B,CAAC,EAC3C,MAAM,EACN,iBAAiB,GAIlB;;IAGC,iBAAiB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,MAAA,MAAA,iBAAiB,CAAC,UAAU,0CAAE,cAAc,mCAAI,EAAE,CAAC;IAE1E,IAAI,GAAG,GAAQ,EAAE,GAAG,CAAC,MAAA,MAAA,cAAc,CAAC,UAAU,0CAAG,MAAM,CAAC,WAAW,CAAC,mCAAI,EAAE,CAAC,EAAE,CAAC;IAC9E,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;QACjB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KACxB;SAAM;QACL,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;KAChC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE;QACjC,GAAG,GAAG,SAAS,CAAC;KACjB;IACD,OAAO;QACL,iBAAiB,EAAE;YACjB,GAAG,iBAAiB;YACpB,UAAU,EAAE;gBACV,GAAG,mBAAmB;gBACtB,GAAG,iBAAiB,CAAC,UAAU;gBAC/B,cAAc,EAAE;oBACd,GAAG,cAAc;oBACjB,UAAU,EAAE;wBACV,GAAG,cAAc,CAAC,UAAU;wBAC5B,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG;qBAC1B;iBACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AArCD,oEAqCC;AAED,SAAgB,iBAAiB,CAAC,CAAkC;;IAClE,OAAO,CAAC,CAAC,CACP,CAAC,CAAC,oBAAoB;QACtB,CAAC,CAAC,iBAAiB;QACnB,CAAC,CAAC,SAAS;QACX;YACE,GAAG,MAAM,CAAC,MAAM,CAAC,MAAA,CAAC,CAAC,UAAU,mCAAI,EAAE,CAAC;YACpC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAA,CAAC,CAAC,YAAY,mCAAI,EAAE,CAAC;SACvC;aACE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;aAChC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAC9B,CAAC;AACJ,CAAC;AAZD,8CAYC;AAED,SAAgB,0BAA0B,CAAC,IAAY;IACrD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE;QAChB,OAAO,SAAS,CAAC;KAClB;IAMD,IAAI,MAAM,GAAa,EAAE,CAAC;IAC1B,IAAI;QACF,MAAM,GAAG,IAAA,8BAAW,EAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;YAQzC,MAAM,GAAG,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;SAClD;QACD,MAAM,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC;KACjC;IAAC,OAAO,GAAY,EAAE;QACrB,MAAM,CAAC,gBAAgB,CAAC,GAAI,GAAa,CAAC,OAAO,CAAC;KACnD;IAED,MAAM,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AA9BD,gEA8BC;AAED,SAAgB,0BAA0B,CACxC,MAAsC;IAEtC,IAAI,CAAC,MAAM,EAAE;QACX,OAAO,EAAE,CAAC;KACX;IACD,IAAI,MAAM,CAAC,kBAAkB,CAAC,EAAE;QAC9B,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC;KACnC;IACD,MAAM,kBAAkB,GAAG,MAAM,CAAC,WAAW,CAC3C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CACvE,CAAC;IACF,OAAO,8BAAW,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;AACpD,CAAC;AAbD,gEAaC;AAMD,SAAgB,iBAAiB,CAC/B,iBAA8C;;IAE9C,iBAAiB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC,CAAC;IACjD,MAAM,qBAAqB,GAAG,MAAA,iBAAiB,CAAC,UAAU,0CAAE,cAAc,CAAC;IAE3E,IAAI,CAAA,MAAA,qBAAqB,aAArB,qBAAqB,uBAArB,qBAAqB,CAAE,SAAS,0CAAG,gBAAgB,CAAC,MAAK,IAAI,EAAE;QACjE,qBAAqB,CAAC,SAAS,GAAG,0BAA0B,CAC1D,qBAAqB,CAAC,SAAS,CAAC,kBAAkB,CAAC,CACpD,CAAC;KACH;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAZD,8CAYC"}

package/dist/utils/csfle-kms-fields.d.ts

@@ -0,0 +1,25 @@
+import type { AutoEncryptionOptions } from 'mongodb';
+import type { ConnectionFormError } from './validation';
+declare type KeysOfUnion<T> = T extends T ? keyof T : never;
+export declare type KMSProviders = NonNullable<AutoEncryptionOptions['kmsProviders']>;
+export declare type KMSProviderName = keyof KMSProviders;
+export declare type KMSOption<KMSProvider extends KMSProviderName> = KeysOfUnion<NonNullable<KMSProviders[KMSProvider]>>;
+export interface KMSField<KMSProvider extends KMSProviderName> {
+    name: KMSOption<KMSProvider>;
+    label: string;
+    type: 'password' | 'text' | 'textarea';
+    optional: boolean;
+    value: (autoEncryption: AutoEncryptionOptions) => string;
+    errorMessage?: (errors: ConnectionFormError[]) => string | undefined;
+    state: 'error' | 'none' | ((errors: ConnectionFormError[]) => 'error' | 'none');
+    description?: string;
+}
+export declare const KMSProviderFields: {
+    local: KMSField<"local">[];
+    azure: KMSField<"azure">[];
+    gcp: KMSField<"gcp">[];
+    aws: KMSField<"aws">[];
+    kmip: KMSField<"kmip">[];
+};
+export {};
+//# sourceMappingURL=csfle-kms-fields.d.ts.map

package/dist/utils/csfle-kms-fields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csfle-kms-fields.d.ts","sourceRoot":"","sources":["../../src/utils/csfle-kms-fields.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGxD,aAAK,WAAW,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC;AACpD,oBAAY,YAAY,GAAG,WAAW,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC,CAAC;AAC9E,oBAAY,eAAe,GAAG,MAAM,YAAY,CAAC;AACjD,oBAAY,SAAS,CAAC,WAAW,SAAS,eAAe,IAAI,WAAW,CACtE,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CACvC,CAAC;AAEF,MAAM,WAAW,QAAQ,CAAC,WAAW,SAAS,eAAe;IAC3D,IAAI,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,CAAC;IACvC,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,CAAC,cAAc,EAAE,qBAAqB,KAAK,MAAM,CAAC;IACzD,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,mBAAmB,EAAE,KAAK,MAAM,GAAG,SAAS,CAAC;IACrE,KAAK,EACD,OAAO,GACP,MAAM,GACN,CAAC,CAAC,MAAM,EAAE,mBAAmB,EAAE,KAAK,OAAO,GAAG,MAAM,CAAC,CAAC;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA8ID,eAAO,MAAM,iBAAiB;;;;;;CAM7B,CAAC"}

package/dist/utils/csfle-kms-fields.js

@@ -0,0 +1,132 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KMSProviderFields = void 0;
+const validation_1 = require("./validation");
+const GCPFields = [
+    {
+        name: 'email',
+        label: 'Service Account E-Mail',
+        type: 'text',
+        optional: false,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.gcp) === null || _b === void 0 ? void 0 : _b.email) !== null && _c !== void 0 ? _c : ''; },
+        state: 'none',
+        description: 'The service account email to authenticate.',
+    },
+    {
+        name: 'privateKey',
+        label: 'Private Key',
+        type: 'textarea',
+        optional: false,
+        value: (autoEncryption) => { var _a, _b, _c, _d; return (_d = (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.gcp) === null || _b === void 0 ? void 0 : _b.privateKey) === null || _c === void 0 ? void 0 : _c.toString('base64')) !== null && _d !== void 0 ? _d : ''; },
+        state: 'none',
+        description: 'A base64-encoded PKCS#8 private key.',
+    },
+    {
+        name: 'endpoint',
+        label: 'Endpoint',
+        type: 'text',
+        optional: true,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.gcp) === null || _b === void 0 ? void 0 : _b.endpoint) !== null && _c !== void 0 ? _c : ''; },
+        state: 'none',
+        description: 'A host with an optional port.',
+    },
+];
+const AWSFields = [
+    {
+        name: 'accessKeyId',
+        label: 'Access Key ID',
+        type: 'text',
+        optional: false,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.aws) === null || _b === void 0 ? void 0 : _b.accessKeyId) !== null && _c !== void 0 ? _c : ''; },
+        state: 'none',
+        description: 'The access key used for the AWS KMS provider.',
+    },
+    {
+        name: 'secretAccessKey',
+        label: 'Secret Access Key',
+        type: 'password',
+        optional: false,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.aws) === null || _b === void 0 ? void 0 : _b.secretAccessKey) !== null && _c !== void 0 ? _c : ''; },
+        state: 'none',
+        description: 'The secret access key used for the AWS KMS provider.',
+    },
+    {
+        name: 'sessionToken',
+        label: 'Session Token',
+        type: 'password',
+        optional: true,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.aws) === null || _b === void 0 ? void 0 : _b.sessionToken) !== null && _c !== void 0 ? _c : ''; },
+        state: 'none',
+        description: 'An optional AWS session token that will be used as the X-Amz-Security-Token header for AWS requests.',
+    },
+];
+const AzureFields = [
+    {
+        name: 'tenantId',
+        label: 'Tenant ID',
+        type: 'text',
+        optional: false,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.azure) === null || _b === void 0 ? void 0 : _b.tenantId) !== null && _c !== void 0 ? _c : ''; },
+        state: 'none',
+        description: 'The tenant ID identifies the organization for the account.',
+    },
+    {
+        name: 'clientId',
+        label: 'Client ID',
+        type: 'text',
+        optional: false,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.azure) === null || _b === void 0 ? void 0 : _b.clientId) !== null && _c !== void 0 ? _c : ''; },
+        state: 'none',
+        description: 'The client ID to authenticate a registered application.',
+    },
+    {
+        name: 'clientSecret',
+        label: 'Client Secret',
+        type: 'password',
+        optional: false,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.azure) === null || _b === void 0 ? void 0 : _b.clientSecret) !== null && _c !== void 0 ? _c : ''; },
+        state: 'none',
+        description: 'The client secret to authenticate a registered application.',
+    },
+    {
+        name: 'identityPlatformEndpoint',
+        label: 'Identity Platform Endpoint',
+        type: 'text',
+        optional: true,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.azure) === null || _b === void 0 ? void 0 : _b.identityPlatformEndpoint) !== null && _c !== void 0 ? _c : ''; },
+        state: 'none',
+        description: 'A host with an optional port.',
+    },
+];
+const KMIPFields = [
+    {
+        name: 'endpoint',
+        label: 'Endpoint',
+        type: 'text',
+        optional: false,
+        value: (autoEncryption) => { var _a, _b, _c; return (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.kmip) === null || _b === void 0 ? void 0 : _b.endpoint) !== null && _c !== void 0 ? _c : ''; },
+        errorMessage: (errors) => (0, validation_1.errorMessageByFieldName)(errors, 'kmip.endpoint'),
+        state: (errors) => (0, validation_1.fieldNameHasError)(errors, 'kmip.endpoint') ? 'error' : 'none',
+        description: 'The endpoint consists of a hostname and port separated by a colon.',
+    },
+];
+const LocalFields = [
+    {
+        name: 'key',
+        label: 'Key',
+        type: 'text',
+        optional: false,
+        value: (autoEncryption) => { var _a, _b, _c, _d; return (_d = (_c = (_b = (_a = autoEncryption === null || autoEncryption === void 0 ? void 0 : autoEncryption.kmsProviders) === null || _a === void 0 ? void 0 : _a.local) === null || _b === void 0 ? void 0 : _b.key) === null || _c === void 0 ? void 0 : _c.toString('base64')) !== null && _d !== void 0 ? _d : ''; },
+        errorMessage: (errors) => (0, validation_1.errorMessageByFieldName)(errors, 'local.key'),
+        state: (errors) => (0, validation_1.fieldNameHasError)(errors, 'local.key') ? 'error' : 'none',
+        description: 'A 96-byte long base64-encoded string.',
+    },
+];
+exports.KMSProviderFields = {
+    local: LocalFields,
+    azure: AzureFields,
+    gcp: GCPFields,
+    aws: AWSFields,
+    kmip: KMIPFields,
+};
+//# sourceMappingURL=csfle-kms-fields.js.map

package/dist/utils/csfle-kms-fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csfle-kms-fields.js","sourceRoot":"","sources":["../../src/utils/csfle-kms-fields.ts"],"names":[],"mappings":";;;AAEA,6CAA0E;AAuB1E,MAAM,SAAS,GAAsB;IACnC;QACE,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,wBAAwB;QAC/B,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBAAC,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,GAAG,0CAAE,KAAK,mCAAI,EAAE,CAAA,EAAA;QACzE,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,4CAA4C;KAC1D;IACD;QACE,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,uBACxB,OAAA,MAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,GAAG,0CAAE,UAAU,0CAAE,QAAQ,CAAC,QAAQ,CAAC,mCAAI,EAAE,CAAA,EAAA;QACzE,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,sCAAsC;KACpD;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBACxB,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,GAAG,0CAAE,QAAQ,mCAAI,EAAE,CAAA,EAAA;QACnD,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,+BAA+B;KAC7C;CACF,CAAC;AAEF,MAAM,SAAS,GAAsB;IACnC;QACE,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBACxB,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,GAAG,0CAAE,WAAW,mCAAI,EAAE,CAAA,EAAA;QACtD,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,+CAA+C;KAC7D;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBACxB,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,GAAG,0CAAE,eAAe,mCAAI,EAAE,CAAA,EAAA;QAC1D,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,sDAAsD;KACpE;IACD;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBACxB,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,GAAG,0CAAE,YAAY,mCAAI,EAAE,CAAA,EAAA;QACvD,KAAK,EAAE,MAAM;QACb,WAAW,EACT,sGAAsG;KACzG;CACF,CAAC;AAEF,MAAM,WAAW,GAAwB;IACvC;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,WAAW;QAClB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBACxB,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,KAAK,0CAAE,QAAQ,mCAAI,EAAE,CAAA,EAAA;QACrD,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,4DAA4D;KAC1E;IACD;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,WAAW;QAClB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBACxB,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,KAAK,0CAAE,QAAQ,mCAAI,EAAE,CAAA,EAAA;QACrD,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,yDAAyD;KACvE;IACD;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBACxB,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,KAAK,0CAAE,YAAY,mCAAI,EAAE,CAAA,EAAA;QACzD,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,6DAA6D;KAC3E;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,4BAA4B;QACnC,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBACxB,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,KAAK,0CAAE,wBAAwB,mCAAI,EAAE,CAAA,EAAA;QACrE,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,+BAA+B;KAC7C;CACF,CAAC;AAEF,MAAM,UAAU,GAAuB;IACrC;QACE,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,mBACxB,OAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,IAAI,0CAAE,QAAQ,mCAAI,EAAE,CAAA,EAAA;QACpD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAA,oCAAuB,EAAC,MAAM,EAAE,eAAe,CAAC;QAC1E,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,CAChB,IAAA,8BAAiB,EAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;QAC/D,WAAW,EACT,oEAAoE;KACvE;CACF,CAAC;AAEF,MAAM,WAAW,GAAwB;IACvC;QACE,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,CAAC,cAAc,EAAE,EAAE,uBACxB,OAAA,MAAA,MAAA,MAAA,MAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,YAAY,0CAAE,KAAK,0CAAE,GAAG,0CAAE,QAAQ,CAAC,QAAQ,CAAC,mCAAI,EAAE,CAAA,EAAA;QACpE,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAA,oCAAuB,EAAC,MAAM,EAAE,WAAW,CAAC;QACtE,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,CAChB,IAAA,8BAAiB,EAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;QAC3D,WAAW,EAAE,uCAAuC;KACrD;CACF,CAAC;AAEW,QAAA,iBAAiB,GAAG;IAC/B,KAAK,EAAE,WAAW;IAClB,KAAK,EAAE,WAAW;IAClB,GAAG,EAAE,SAAS;IACd,GAAG,EAAE,SAAS;IACd,IAAI,EAAE,UAAU;CACjB,CAAC"}

package/dist/utils/tls-handler.d.ts

@@ -2,7 +2,7 @@ import type ConnectionStringUrl from 'mongodb-connection-string-url';
 import type { ConnectionOptions } from 'mongodb-data-service';
 import type { MongoClientOptions } from 'mongodb';
 export declare type TLS_OPTIONS = 'DEFAULT' | 'ON' | 'OFF';
-export declare type TLSOptionName = keyof Pick<MongoClientOptions, 'tlsCAFile' | 'tlsCertificateKeyFile' | 'tlsCertificateKeyFilePassword' | 'tlsInsecure' | 'tlsAllowInvalidHostnames' | 'tlsAllowInvalidCertificates'>;
+export declare type TLSOptionName = keyof Pick<MongoClientOptions, 'tlsCAFile' | 'tlsCertificateKeyFile' | 'tlsCertificateKeyFilePassword' | 'tlsInsecure' | 'tlsAllowInvalidHostnames' | 'tlsAllowInvalidCertificates'> | 'useSystemCA';
 export interface UpdateTlsAction {
     type: 'update-tls';
     tlsOption: TLS_OPTIONS;

package/dist/utils/tls-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tls-handler.d.ts","sourceRoot":"","sources":["../../src/utils/tls-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,mBAAmB,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAGlD,oBAAY,WAAW,GAAG,SAAS,GAAG,IAAI,GAAG,KAAK,CAAC;AACnD,oBAAY,aAAa,GAAG,MAAM,IAAI,CACpC,kBAAkB,EAChB,WAAW,GACX,uBAAuB,GACvB,+BAA+B,GAC/B,aAAa,GACb,0BAA0B,GAC1B,6BAA6B,CAChC,CAAC;AACF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,CAAC;IACnB,SAAS,EAAE,WAAW,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,GAAG,EAAE,aAAa,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,wBAAgB,eAAe,CAAC,EAC9B,MAAM,EACN,mBAAmB,EACnB,iBAAiB,GAClB,EAAE;IACD,MAAM,EAAE,eAAe,CAAC;IACxB,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,GAAG;IACF,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CAsBA;AAED,wBAAgB,qBAAqB,CAAC,EACpC,MAAM,EACN,mBAAmB,EACnB,iBAAiB,GAClB,EAAE;IACD,MAAM,EAAE,qBAAqB,CAAC;IAC9B,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,GAAG;IACF,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CAsBA"}
+{"version":3,"file":"tls-handler.d.ts","sourceRoot":"","sources":["../../src/utils/tls-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,mBAAmB,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAGlD,oBAAY,WAAW,GAAG,SAAS,GAAG,IAAI,GAAG,KAAK,CAAC;AACnD,oBAAY,aAAa,GACrB,MAAM,IAAI,CACR,kBAAkB,EAChB,WAAW,GACX,uBAAuB,GACvB,+BAA+B,GAC/B,aAAa,GACb,0BAA0B,GAC1B,6BAA6B,CAChC,GACD,aAAa,CAAC;AAClB,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,CAAC;IACnB,SAAS,EAAE,WAAW,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,GAAG,EAAE,aAAa,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,wBAAgB,eAAe,CAAC,EAC9B,MAAM,EACN,mBAAmB,EACnB,iBAAiB,GAClB,EAAE;IACD,MAAM,EAAE,eAAe,CAAC;IACxB,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,GAAG;IACF,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CAsBA;AAED,wBAAgB,qBAAqB,CAAC,EACpC,MAAM,EACN,mBAAmB,EACnB,iBAAiB,GAClB,EAAE;IACD,MAAM,EAAE,qBAAqB,CAAC;IAC9B,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,GAAG;IACF,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CAkCA"}

package/dist/utils/tls-handler.js

@@ -26,19 +26,32 @@ function handleUpdateTls({ action, connectionStringUrl, connectionOptions, }) {
 }
 exports.handleUpdateTls = handleUpdateTls;
 function handleUpdateTlsOption({ action, connectionStringUrl, connectionOptions, }) {
+    const updatedConnectionOptions = (0, lodash_1.cloneDeep)(connectionOptions);
     const updatedConnectionString = connectionStringUrl.clone();
     const updatedSearchParams = updatedConnectionString.typedSearchParams();
-    if (!action.value) {
+    if (action.key === 'useSystemCA') {
+        if (action.value) {
+            updatedSearchParams.delete('tlsCAFile');
+            updatedConnectionOptions.useSystemCA = true;
+        }
+        else {
+            delete updatedConnectionOptions.useSystemCA;
+        }
+    }
+    else if (!action.value) {
         updatedSearchParams.delete(action.key);
     }
     else {
         updatedSearchParams.delete('ssl');
         updatedSearchParams.set('tls', 'true');
         updatedSearchParams.set(action.key, action.value);
+        if (action.key === 'tlsCAFile') {
+            delete updatedConnectionOptions.useSystemCA;
+        }
     }
     return {
         connectionOptions: {
-            ...(0, lodash_1.cloneDeep)(connectionOptions),
+            ...updatedConnectionOptions,
             connectionString: updatedConnectionString.toString(),
         },
     };

package/dist/utils/tls-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"tls-handler.js","sourceRoot":"","sources":["../../src/utils/tls-handler.ts"],"names":[],"mappings":";;;AAGA,mCAAmC;AAuBnC,SAAgB,eAAe,CAAC,EAC9B,MAAM,EACN,mBAAmB,EACnB,iBAAiB,GAKlB;IAGC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAC5D,MAAM,mBAAmB,GACvB,uBAAuB,CAAC,iBAAiB,EAAsB,CAAC;IAElE,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE;QAC7B,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;KACxC;SAAM,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE;QACrC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;KACzC;SAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE;QACzC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KACnC;IAED,OAAO;QACL,iBAAiB,EAAE;YACjB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC;YAC/B,gBAAgB,EAAE,uBAAuB,CAAC,QAAQ,EAAE;SACrD;KACF,CAAC;AACJ,CAAC;AAhCD,0CAgCC;AAED,SAAgB,qBAAqB,CAAC,EACpC,MAAM,EACN,mBAAmB,EACnB,iBAAiB,GAKlB;IAGC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAC5D,MAAM,mBAAmB,GACvB,uBAAuB,CAAC,iBAAiB,EAAsB,CAAC;IAElE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;QACjB,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KACxC;SAAM;QAGL,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAEvC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;KACnD;IAED,OAAO;QACL,iBAAiB,EAAE;YACjB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC;YAC/B,gBAAgB,EAAE,uBAAuB,CAAC,QAAQ,EAAE;SACrD;KACF,CAAC;AACJ,CAAC;AAhCD,sDAgCC"}
+{"version":3,"file":"tls-handler.js","sourceRoot":"","sources":["../../src/utils/tls-handler.ts"],"names":[],"mappings":";;;AAGA,mCAAmC;AAyBnC,SAAgB,eAAe,CAAC,EAC9B,MAAM,EACN,mBAAmB,EACnB,iBAAiB,GAKlB;IAGC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAC5D,MAAM,mBAAmB,GACvB,uBAAuB,CAAC,iBAAiB,EAAsB,CAAC;IAElE,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE;QAC7B,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;KACxC;SAAM,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE;QACrC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;KACzC;SAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE;QACzC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KACnC;IAED,OAAO;QACL,iBAAiB,EAAE;YACjB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC;YAC/B,gBAAgB,EAAE,uBAAuB,CAAC,QAAQ,EAAE;SACrD;KACF,CAAC;AACJ,CAAC;AAhCD,0CAgCC;AAED,SAAgB,qBAAqB,CAAC,EACpC,MAAM,EACN,mBAAmB,EACnB,iBAAiB,GAKlB;IAGC,MAAM,wBAAwB,GAAG,IAAA,kBAAS,EAAC,iBAAiB,CAAC,CAAC;IAC9D,MAAM,uBAAuB,GAAG,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAC5D,MAAM,mBAAmB,GACvB,uBAAuB,CAAC,iBAAiB,EAAsB,CAAC;IAElE,IAAI,MAAM,CAAC,GAAG,KAAK,aAAa,EAAE;QAChC,IAAI,MAAM,CAAC,KAAK,EAAE;YAChB,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACxC,wBAAwB,CAAC,WAAW,GAAG,IAAI,CAAC;SAC7C;aAAM;YACL,OAAO,wBAAwB,CAAC,WAAW,CAAC;SAC7C;KACF;SAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;QACxB,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KACxC;SAAM;QAGL,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAEvC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAElD,IAAI,MAAM,CAAC,GAAG,KAAK,WAAW,EAAE;YAC9B,OAAO,wBAAwB,CAAC,WAAW,CAAC;SAC7C;KACF;IAED,OAAO;QACL,iBAAiB,EAAE;YACjB,GAAG,wBAAwB;YAC3B,gBAAgB,EAAE,uBAAuB,CAAC,QAAQ,EAAE;SACrD;KACF,CAAC;AACJ,CAAC;AA5CD,sDA4CC"}

package/dist/utils/url-options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"url-options.d.ts","sourceRoot":"","sources":["../../src/utils/url-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,kBAAkB,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,kBAAkB;;;GA4C9B,CAAC"}
+{"version":3,"file":"url-options.d.ts","sourceRoot":"","sources":["../../src/utils/url-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,kBAAkB,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,kBAAkB;;;GAkD9B,CAAC"}

package/dist/utils/url-options.js

@@ -43,7 +43,13 @@ exports.editableUrlOptions = [
     },
     {
         title: 'Miscellaneous Configuration',
-        values: ['appName', 'retryReads', 'retryWrites', 'uuidRepresentation'],
+        values: [
+            'appName',
+            'retryReads',
+            'retryWrites',
+            'srvMaxHosts',
+            'uuidRepresentation',
+        ],
     },
 ];
 //# sourceMappingURL=url-options.js.map

package/dist/utils/url-options.js.map

@@ -1 +1 @@
-{"version":3,"file":"url-options.js","sourceRoot":"","sources":["../../src/utils/url-options.ts"],"names":[],"mappings":";;;AAOa,QAAA,kBAAkB,GAAG;IAChC;QACE,KAAK,EAAE,4BAA4B;QACnC,MAAM,EAAE,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;KAChD;IACD;QACE,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EAAE,CAAC,aAAa,EAAE,sBAAsB,CAAC;KAChD;IACD;QACE,KAAK,EAAE,yBAAyB;QAChC,MAAM,EAAE;YACN,aAAa;YACb,aAAa;YACb,eAAe;YACf,mBAAmB;YACnB,oBAAoB;SACrB;KACF;IACD;QACE,KAAK,EAAE,uBAAuB;QAC9B,MAAM,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,SAAS,CAAC;KACvC;IACD;QACE,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,CAAC,kBAAkB,CAAC;KAC7B;IACD;QACE,KAAK,EAAE,0BAA0B;QACjC,MAAM,EAAE,CAAC,qBAAqB,EAAE,oBAAoB,CAAC;KACtD;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE;YACN,kBAAkB;YAClB,0BAA0B;YAC1B,wBAAwB;YACxB,sBAAsB;SACvB;KACF;IACD;QACE,KAAK,EAAE,6BAA6B;QACpC,MAAM,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,oBAAoB,CAAC;KACvE;CACF,CAAC"}
+{"version":3,"file":"url-options.js","sourceRoot":"","sources":["../../src/utils/url-options.ts"],"names":[],"mappings":";;;AAOa,QAAA,kBAAkB,GAAG;IAChC;QACE,KAAK,EAAE,4BAA4B;QACnC,MAAM,EAAE,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;KAChD;IACD;QACE,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EAAE,CAAC,aAAa,EAAE,sBAAsB,CAAC;KAChD;IACD;QACE,KAAK,EAAE,yBAAyB;QAChC,MAAM,EAAE;YACN,aAAa;YACb,aAAa;YACb,eAAe;YACf,mBAAmB;YACnB,oBAAoB;SACrB;KACF;IACD;QACE,KAAK,EAAE,uBAAuB;QAC9B,MAAM,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,SAAS,CAAC;KACvC;IACD;QACE,KAAK,EAAE,sBAAsB;QAC7B,MAAM,EAAE,CAAC,kBAAkB,CAAC;KAC7B;IACD;QACE,KAAK,EAAE,0BAA0B;QACjC,MAAM,EAAE,CAAC,qBAAqB,EAAE,oBAAoB,CAAC;KACtD;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE;YACN,kBAAkB;YAClB,0BAA0B;YAC1B,wBAAwB;YACxB,sBAAsB;SACvB;KACF;IACD;QACE,KAAK,EAAE,6BAA6B;QACpC,MAAM,EAAE;YACN,SAAS;YACT,YAAY;YACZ,aAAa;YACb,aAAa;YACb,oBAAoB;SACrB;KACF;CACF,CAAC"}

package/dist/utils/validation.d.ts

@@ -1,7 +1,8 @@
 import type { ConnectionOptions } from 'mongodb-data-service';
 import ConnectionString from 'mongodb-connection-string-url';
-export declare type FieldName = 'connectionString' | 'hostname' | 'hosts' | 'isSrv' | 'kerberosPrincipal' | 'password' | 'schema' | 'proxyHostname' | 'sshHostname' | 'sshIdentityKeyFile' | 'sshPassword' | 'sshUsername' | 'tls' | 'tlsCertificateKeyFile' | 'username';
-export declare type TabId = 'general' | 'authentication' | 'tls' | 'proxy' | 'advanced';
+import type { ConnectionStringParsingOptions } from 'mongodb-connection-string-url';
+export declare type FieldName = 'connectionString' | 'hostname' | 'hosts' | 'isSrv' | 'kerberosPrincipal' | 'keyVaultNamespace' | 'kmip.endpoint' | 'local.key' | 'password' | 'schema' | 'proxyHostname' | 'schemaMap' | 'sshHostname' | 'sshIdentityKeyFile' | 'sshPassword' | 'sshUsername' | 'tls' | 'tlsCertificateKeyFile' | 'username';
+export declare type TabId = 'general' | 'authentication' | 'tls' | 'proxy' | 'csfle' | 'advanced';
 declare type ConnectionFormErrorWithField = {
     fieldName: FieldName;
     fieldTab: TabId;
@@ -22,8 +23,7 @@ export declare function errorsByFieldTab(errors: ConnectionFormError[], tabId: T
 export declare function errorMessageByFieldName(errors: ConnectionFormError[], fieldName: FieldName): string | undefined;
 export declare function fieldNameHasError(errors: ConnectionFormError[], fieldName: FieldName): boolean;
 export declare function errorMessageByFieldNameAndIndex(errors: ConnectionFormError[], fieldName: FieldName, fieldIndex: number): string | undefined;
-export declare function validateConnectionOptionsErrors(connectionOptions: ConnectionOptions): ConnectionFormError[];
-export declare function getConnectionString(connectionOptions: ConnectionOptions): ConnectionString;
+export declare function validateConnectionOptionsErrors(connectionOptions: ConnectionOptions, parsingOptions?: ConnectionStringParsingOptions): ConnectionFormError[];
 export declare function isSecure(connectionString: ConnectionString): boolean;
 export declare function validateConnectionOptionsWarnings(connectionOptions: ConnectionOptions): ConnectionFormWarning[];
 export {};

package/dist/utils/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,gBAAgB,MAAM,+BAA+B,CAAC;AAE7D,oBAAY,SAAS,GACjB,kBAAkB,GAClB,UAAU,GACV,OAAO,GACP,OAAO,GACP,mBAAmB,GACnB,UAAU,GACV,QAAQ,GACR,eAAe,GACf,aAAa,GACb,oBAAoB,GACpB,aAAa,GACb,aAAa,GACb,KAAK,GACL,uBAAuB,GACvB,UAAU,CAAC;AAEf,oBAAY,KAAK,GAAG,SAAS,GAAG,gBAAgB,GAAG,KAAK,GAAG,OAAO,GAAG,UAAU,CAAC;AAEhF,aAAK,4BAA4B,GAAG;IAClC,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,KAAK,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AACF,aAAK,+BAA+B,GAAG;IACrC,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,QAAQ,CAAC,EAAE,KAAK,CAAC;IACjB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AACF,oBAAY,mBAAmB,GAC3B,4BAA4B,GAC5B,+BAA+B,CAAC;AACpC,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,mBAAmB,EAAE,EAC7B,KAAK,EAAE,KAAK,GACX,mBAAmB,EAAE,CAEvB;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,mBAAmB,EAAE,EAC7B,SAAS,EAAE,SAAS,GACnB,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,mBAAmB,EAAE,EAC7B,SAAS,EAAE,SAAS,GACnB,OAAO,CAET;AAED,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,mBAAmB,EAAE,EAC7B,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,SAAS,CAIpB;AAED,wBAAgB,+BAA+B,CAC7C,iBAAiB,EAAE,iBAAiB,GACnC,mBAAmB,EAAE,CASvB;AA4JD,wBAAgB,mBAAmB,CACjC,iBAAiB,EAAE,iBAAiB,GACnC,gBAAgB,CAElB;AAED,wBAAgB,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,OAAO,CAQpE;AAED,wBAAgB,iCAAiC,CAC/C,iBAAiB,EAAE,iBAAiB,GACnC,qBAAqB,EAAE,CAYzB"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,gBAAgB,MAAM,+BAA+B,CAAC;AAC7D,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAGpF,oBAAY,SAAS,GACjB,kBAAkB,GAClB,UAAU,GACV,OAAO,GACP,OAAO,GACP,mBAAmB,GACnB,mBAAmB,GACnB,eAAe,GACf,WAAW,GACX,UAAU,GACV,QAAQ,GACR,eAAe,GACf,WAAW,GACX,aAAa,GACb,oBAAoB,GACpB,aAAa,GACb,aAAa,GACb,KAAK,GACL,uBAAuB,GACvB,UAAU,CAAC;AAEf,oBAAY,KAAK,GACb,SAAS,GACT,gBAAgB,GAChB,KAAK,GACL,OAAO,GACP,OAAO,GACP,UAAU,CAAC;AAEf,aAAK,4BAA4B,GAAG;IAClC,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,KAAK,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AACF,aAAK,+BAA+B,GAAG;IACrC,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,QAAQ,CAAC,EAAE,KAAK,CAAC;IACjB,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AACF,oBAAY,mBAAmB,GAC3B,4BAA4B,GAC5B,+BAA+B,CAAC;AACpC,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,mBAAmB,EAAE,EAC7B,KAAK,EAAE,KAAK,GACX,mBAAmB,EAAE,CAEvB;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,mBAAmB,EAAE,EAC7B,SAAS,EAAE,SAAS,GACnB,MAAM,GAAG,SAAS,CAEpB;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,mBAAmB,EAAE,EAC7B,SAAS,EAAE,SAAS,GACnB,OAAO,CAET;AAED,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,mBAAmB,EAAE,EAC7B,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,MAAM,GACjB,MAAM,GAAG,SAAS,CAIpB;AAED,wBAAgB,+BAA+B,CAC7C,iBAAiB,EAAE,iBAAiB,EACpC,cAAc,CAAC,EAAE,8BAA8B,GAC9C,mBAAmB,EAAE,CAavB;AAyND,wBAAgB,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,OAAO,CAQpE;AAED,wBAAgB,iCAAiC,CAC/C,iBAAiB,EAAE,iBAAiB,GACnC,qBAAqB,EAAE,CAwBzB"}

package/dist/utils/validation.js

@@ -3,9 +3,10 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateConnectionOptionsWarnings = exports.isSecure = exports.getConnectionString = exports.validateConnectionOptionsErrors = exports.errorMessageByFieldNameAndIndex = exports.fieldNameHasError = exports.errorMessageByFieldName = exports.errorsByFieldTab = void 0;
+exports.validateConnectionOptionsWarnings = exports.isSecure = exports.validateConnectionOptionsErrors = exports.errorMessageByFieldNameAndIndex = exports.fieldNameHasError = exports.errorMessageByFieldName = exports.errorsByFieldTab = void 0;
 const mongodb_build_info_1 = require("mongodb-build-info");
 const mongodb_connection_string_url_1 = __importDefault(require("mongodb-connection-string-url"));
+const csfle_handler_1 = require("../utils/csfle-handler");
 function errorsByFieldTab(errors, tabId) {
     return errors.filter((error) => error.fieldTab === tabId);
 }
@@ -24,10 +25,12 @@ function errorMessageByFieldNameAndIndex(errors, fieldName, fieldIndex) {
     return (_a = (errors || []).find((err) => err.fieldName === fieldName && err.fieldIndex === fieldIndex)) === null || _a === void 0 ? void 0 : _a.message;
 }
 exports.errorMessageByFieldNameAndIndex = errorMessageByFieldNameAndIndex;
-function validateConnectionOptionsErrors(connectionOptions) {
-    const connectionString = getConnectionString(connectionOptions);
+function validateConnectionOptionsErrors(connectionOptions, parsingOptions) {
+    var _a, _b;
+    const connectionString = new mongodb_connection_string_url_1.default(connectionOptions.connectionString, { looseValidation: true, ...parsingOptions });
     return [
         ...validateAuthMechanismErrors(connectionString),
+        ...validateCSFLEErrors((_b = (_a = connectionOptions.fleOptions) === null || _a === void 0 ? void 0 : _a.autoEncryption) !== null && _b !== void 0 ? _b : {}),
         ...(connectionOptions.sshTunnel
             ? validateSSHTunnelErrors(connectionOptions.sshTunnel)
             : validateSocksProxyErrors(connectionString)),
@@ -157,10 +160,52 @@ function validateSocksProxyErrors(connectionString) {
     }
     return errors;
 }
-function getConnectionString(connectionOptions) {
-    return new mongodb_connection_string_url_1.default(connectionOptions.connectionString);
+function validateCSFLEErrors(autoEncryptionOptions) {
+    var _a, _b, _c, _d, _e;
+    const errors = [];
+    const encryptedFieldConfigError = (_a = autoEncryptionOptions.schemaMap) === null || _a === void 0 ? void 0 : _a['$compass.error'];
+    if (encryptedFieldConfigError) {
+        errors.push({
+            fieldTab: 'csfle',
+            fieldName: 'schemaMap',
+            message: `EncryptedFieldConfig is invalid: ${encryptedFieldConfigError}`,
+        });
+    }
+    if (autoEncryptionOptions.keyVaultNamespace &&
+        !autoEncryptionOptions.keyVaultNamespace.includes('.')) {
+        errors.push({
+            fieldTab: 'csfle',
+            fieldName: 'keyVaultNamespace',
+            message: 'Key Vault namespace must be of the format <db>.<collection>',
+        });
+    }
+    if (!autoEncryptionOptions.keyVaultNamespace &&
+        (0, csfle_handler_1.hasAnyCsfleOption)(autoEncryptionOptions)) {
+        errors.push({
+            fieldTab: 'csfle',
+            fieldName: 'keyVaultNamespace',
+            message: 'Key Vault namespace must be specified for CSFLE-enabled connections',
+        });
+    }
+    const kmsProviders = (_b = autoEncryptionOptions.kmsProviders) !== null && _b !== void 0 ? _b : {};
+    if (typeof ((_c = kmsProviders.local) === null || _c === void 0 ? void 0 : _c.key) === 'string' &&
+        !/[a-zA-Z0-9+/-_=]{128}/.test(kmsProviders.local.key)) {
+        errors.push({
+            fieldTab: 'csfle',
+            fieldName: 'local.key',
+            message: 'Local key must be a Base64-encoded 96-byte string',
+        });
+    }
+    if (typeof ((_d = kmsProviders.kmip) === null || _d === void 0 ? void 0 : _d.endpoint) === 'string' &&
+        !((_e = kmsProviders.kmip) === null || _e === void 0 ? void 0 : _e.endpoint.includes(':'))) {
+        errors.push({
+            fieldTab: 'csfle',
+            fieldName: 'kmip.endpoint',
+            message: 'KMIP endpoint must be of the format <host>:<port>',
+        });
+    }
+    return errors;
 }
-exports.getConnectionString = getConnectionString;
 function isSecure(connectionString) {
     const sslParam = connectionString.searchParams.get('ssl');
     const tlsParam = connectionString.searchParams.get('tls');
@@ -171,7 +216,15 @@ function isSecure(connectionString) {
 }
 exports.isSecure = isSecure;
 function validateConnectionOptionsWarnings(connectionOptions) {
-    const connectionString = getConnectionString(connectionOptions);
+    let connectionString;
+    try {
+        connectionString = new mongodb_connection_string_url_1.default(connectionOptions.connectionString, {
+            looseValidation: true,
+        });
+    }
+    catch (err) {
+        return [];
+    }
     return [
         ...validateReadPreferenceWarnings(connectionString),
         ...validateDeprecatedOptionsWarnings(connectionString),
@@ -181,17 +234,31 @@ function validateConnectionOptionsWarnings(connectionOptions) {
         ...validateDirectConnectionAndMultiHostWarnings(connectionString),
         ...validateTLSAndHostWarnings(connectionString),
         ...validateSocksWarnings(connectionString),
+        ...validateCSFLEWarnings(connectionOptions),
     ];
 }
 exports.validateConnectionOptionsWarnings = validateConnectionOptionsWarnings;
+function validateCSFLEWarnings(connectionOptions) {
+    var _a;
+    const warnings = [];
+    if ((_a = connectionOptions.fleOptions) === null || _a === void 0 ? void 0 : _a.storeCredentials) {
+        warnings.push({
+            message: 'CSFLE KMS provider credentials will be stored to disk.',
+        });
+    }
+    return warnings;
+}
 function validateCertificateValidationWarnings(connectionString) {
     const warnings = [];
-    if (isSecure(connectionString) &&
-        (connectionString.searchParams.has('tlsInsecure') ||
-            connectionString.searchParams.has('tlsAllowInvalidHostnames') ||
-            connectionString.searchParams.has('tlsAllowInvalidCertificates'))) {
+    if (!isSecure(connectionString)) {
+        return [];
+    }
+    const tlsInsecure = connectionString.searchParams.get('tlsInsecure') === 'true';
+    const tlsAllowInvalidHostnames = connectionString.searchParams.get('tlsAllowInvalidHostnames') === 'true';
+    const tlsAllowInvalidCertificates = connectionString.searchParams.get('tlsAllowInvalidCertificates') === 'true';
+    if (tlsInsecure || tlsAllowInvalidHostnames || tlsAllowInvalidCertificates) {
         warnings.push({
-            message: 'Disabling certificate validation is not recommended as it may create a security vulnerability',
+            message: `TLS/SSL certificate validation is disabled. If possible, enable certificate validation to avoid security vulnerabilities.`,
         });
     }
     return warnings;
@@ -257,7 +324,7 @@ function validateTLSAndHostWarnings(connectionString) {
     const nonLocalhostsCount = connectionString.hosts.filter((host) => !(0, mongodb_build_info_1.isLocalhost)(host)).length;
     if (nonLocalhostsCount && !isSecure(connectionString)) {
         warnings.push({
-            message: 'Connecting without tls is not recommended as it may create a security vulnerability.',
+            message: 'TLS/SSL is disabled. If possible, enable TLS/SSL to avoid security vulnerabilities.',
         });
     }
     return warnings;