oxygen-cli 1.40.2-beta.1 → 1.40.2

package/transpiled/mongodb/lib/cmap/auth/mongodb_oidc/human_callback_workflow.js

@@ -1,138 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.HumanCallbackWorkflow = void 0;
-
-const bson_1 = require("../../../bson");
-
-const error_1 = require("../../../error");
-
-const timeout_1 = require("../../../timeout");
-
-const mongodb_oidc_1 = require("../mongodb_oidc");
-
-const callback_workflow_1 = require("./callback_workflow");
-/**
- * Class implementing behaviour for the non human callback workflow.
- * @internal
- */
-
-
-class HumanCallbackWorkflow extends callback_workflow_1.CallbackWorkflow {
-  /**
-   * Instantiate the human callback workflow.
-   */
-  constructor(cache, callback) {
-    super(cache, callback);
-  }
-  /**
-   * Execute the OIDC human callback workflow.
-   */
-
-
-  async execute(connection, credentials) {
-    // Check if the Client Cache has an access token.
-    // If it does, cache the access token in the Connection Cache and perform a One-Step SASL conversation
-    // using the access token. If the server returns an Authentication error (18),
-    // invalidate the access token token from the Client Cache, clear the Connection Cache,
-    // and restart the authentication flow. Raise any other errors to the user. On success, exit the algorithm.
-    if (this.cache.hasAccessToken) {
-      const token = this.cache.getAccessToken();
-      connection.accessToken = token;
-
-      try {
-        return await this.finishAuthentication(connection, credentials, token);
-      } catch (error) {
-        if (error instanceof error_1.MongoError && error.code === error_1.MONGODB_ERROR_CODES.AuthenticationFailed) {
-          this.cache.removeAccessToken();
-          delete connection.accessToken;
-          return await this.execute(connection, credentials);
-        } else {
-          throw error;
-        }
-      }
-    } // Check if the Client Cache has a refresh token.
-    // If it does, call the OIDC Human Callback with the cached refresh token and IdpInfo to get a
-    // new access token. Cache the new access token in the Client Cache and Connection Cache.
-    // Perform a One-Step SASL conversation using the new access token. If the the server returns
-    // an Authentication error (18), clear the refresh token, invalidate the access token from the
-    // Client Cache, clear the Connection Cache, and restart the authentication flow. Raise any other
-    // errors to the user. On success, exit the algorithm.
-
-
-    if (this.cache.hasRefreshToken) {
-      const refreshToken = this.cache.getRefreshToken();
-      const result = await this.fetchAccessToken(this.cache.getIdpInfo(), credentials, refreshToken);
-      this.cache.put(result);
-      connection.accessToken = result.accessToken;
-
-      try {
-        return await this.finishAuthentication(connection, credentials, result.accessToken);
-      } catch (error) {
-        if (error instanceof error_1.MongoError && error.code === error_1.MONGODB_ERROR_CODES.AuthenticationFailed) {
-          this.cache.removeRefreshToken();
-          delete connection.accessToken;
-          return await this.execute(connection, credentials);
-        } else {
-          throw error;
-        }
-      }
-    } // Start a new Two-Step SASL conversation.
-    // Run a PrincipalStepRequest to get the IdpInfo.
-    // Call the OIDC Human Callback with the new IdpInfo to get a new access token and optional refresh
-    // token. Drivers MUST NOT pass a cached refresh token to the callback when performing
-    // a new Two-Step conversation. Cache the new IdpInfo and refresh token in the Client Cache and the
-    // new access token in the Client Cache and Connection Cache.
-    // Attempt to authenticate using a JwtStepRequest with the new access token. Raise any errors to the user.
-
-
-    const startResponse = await this.startAuthentication(connection, credentials);
-    const conversationId = startResponse.conversationId;
-    const idpInfo = bson_1.BSON.deserialize(startResponse.payload.buffer);
-    const callbackResponse = await this.fetchAccessToken(idpInfo, credentials);
-    this.cache.put(callbackResponse, idpInfo);
-    connection.accessToken = callbackResponse.accessToken;
-    return await this.finishAuthentication(connection, credentials, callbackResponse.accessToken, conversationId);
-  }
-  /**
-   * Fetches an access token using the callback.
-   */
-
-
-  async fetchAccessToken(idpInfo, credentials, refreshToken) {
-    const controller = new AbortController();
-    const params = {
-      timeoutContext: controller.signal,
-      version: mongodb_oidc_1.OIDC_VERSION,
-      idpInfo: idpInfo
-    };
-
-    if (credentials.username) {
-      params.username = credentials.username;
-    }
-
-    if (refreshToken) {
-      params.refreshToken = refreshToken;
-    }
-
-    const timeout = timeout_1.Timeout.expires(callback_workflow_1.HUMAN_TIMEOUT_MS);
-
-    try {
-      return await Promise.race([this.executeAndValidateCallback(params), timeout]);
-    } catch (error) {
-      if (timeout_1.TimeoutError.is(error)) {
-        controller.abort();
-        throw new error_1.MongoOIDCError(`OIDC callback timed out after ${callback_workflow_1.HUMAN_TIMEOUT_MS}ms.`);
-      }
-
-      throw error;
-    } finally {
-      timeout.clear();
-    }
-  }
-
-}
-
-exports.HumanCallbackWorkflow = HumanCallbackWorkflow;

package/transpiled/mongodb/lib/cmap/auth/mongodb_oidc/k8s_machine_workflow.js

@@ -1,42 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.callback = void 0;
-
-const promises_1 = require("fs/promises");
-/** The fallback file name */
-
-
-const FALLBACK_FILENAME = '/var/run/secrets/kubernetes.io/serviceaccount/token';
-/** The azure environment variable for the file name. */
-
-const AZURE_FILENAME = 'AZURE_FEDERATED_TOKEN_FILE';
-/** The AWS environment variable for the file name. */
-
-const AWS_FILENAME = 'AWS_WEB_IDENTITY_TOKEN_FILE';
-/**
- * The callback function to be used in the automated callback workflow.
- * @param params - The OIDC callback parameters.
- * @returns The OIDC response.
- */
-
-const callback = async () => {
-  let filename;
-
-  if (process.env[AZURE_FILENAME]) {
-    filename = process.env[AZURE_FILENAME];
-  } else if (process.env[AWS_FILENAME]) {
-    filename = process.env[AWS_FILENAME];
-  } else {
-    filename = FALLBACK_FILENAME;
-  }
-
-  const token = await (0, promises_1.readFile)(filename, 'utf8');
-  return {
-    accessToken: token
-  };
-};
-
-exports.callback = callback;

package/transpiled/mongodb/lib/cmap/auth/mongodb_oidc/token_cache.js

@@ -1,71 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.TokenCache = void 0;
-
-const error_1 = require("../../../error");
-
-class MongoOIDCError extends error_1.MongoDriverError {}
-/** @internal */
-
-
-class TokenCache {
-  get hasAccessToken() {
-    return !!this.accessToken;
-  }
-
-  get hasRefreshToken() {
-    return !!this.refreshToken;
-  }
-
-  get hasIdpInfo() {
-    return !!this.idpInfo;
-  }
-
-  getAccessToken() {
-    if (!this.accessToken) {
-      throw new MongoOIDCError('Attempted to get an access token when none exists.');
-    }
-
-    return this.accessToken;
-  }
-
-  getRefreshToken() {
-    if (!this.refreshToken) {
-      throw new MongoOIDCError('Attempted to get a refresh token when none exists.');
-    }
-
-    return this.refreshToken;
-  }
-
-  getIdpInfo() {
-    if (!this.idpInfo) {
-      throw new MongoOIDCError('Attempted to get IDP information when none exists.');
-    }
-
-    return this.idpInfo;
-  }
-
-  put(response, idpInfo) {
-    this.accessToken = response.accessToken;
-    this.refreshToken = response.refreshToken;
-    this.expiresInSeconds = response.expiresInSeconds;
-
-    if (idpInfo) {
-      this.idpInfo = idpInfo;
-    }
-  }
-
-  removeAccessToken() {
-    this.accessToken = undefined;
-  }
-
-  removeRefreshToken() {
-    this.refreshToken = undefined;
-  }
-
-}
-
-exports.TokenCache = TokenCache;

package/transpiled/mongodb/lib/cmap/auth/mongodb_oidc/token_machine_workflow.js

@@ -1,34 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.callback = void 0;
-
-const fs = require("fs");
-
-const error_1 = require("../../../error");
-/** Error for when the token is missing in the environment. */
-
-
-const TOKEN_MISSING_ERROR = 'OIDC_TOKEN_FILE must be set in the environment.';
-/**
- * The callback function to be used in the automated callback workflow.
- * @param params - The OIDC callback parameters.
- * @returns The OIDC response.
- */
-
-const callback = async () => {
-  const tokenFile = process.env.OIDC_TOKEN_FILE;
-
-  if (!tokenFile) {
-    throw new error_1.MongoAWSError(TOKEN_MISSING_ERROR);
-  }
-
-  const token = await fs.promises.readFile(tokenFile, 'utf8');
-  return {
-    accessToken: token
-  };
-};
-
-exports.callback = callback;

package/transpiled/mongodb/lib/cmap/auth/mongodb_oidc.js

@@ -1,111 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.MongoDBOIDC = exports.OIDC_WORKFLOWS = exports.OIDC_VERSION = void 0;
-
-const error_1 = require("../../error");
-
-const auth_provider_1 = require("./auth_provider");
-
-const automated_callback_workflow_1 = require("./mongodb_oidc/automated_callback_workflow");
-
-const azure_machine_workflow_1 = require("./mongodb_oidc/azure_machine_workflow");
-
-const gcp_machine_workflow_1 = require("./mongodb_oidc/gcp_machine_workflow");
-
-const k8s_machine_workflow_1 = require("./mongodb_oidc/k8s_machine_workflow");
-
-const token_cache_1 = require("./mongodb_oidc/token_cache");
-
-const token_machine_workflow_1 = require("./mongodb_oidc/token_machine_workflow");
-/** Error when credentials are missing. */
-
-
-const MISSING_CREDENTIALS_ERROR = 'AuthContext must provide credentials.';
-/** The current version of OIDC implementation. */
-
-exports.OIDC_VERSION = 1;
-/** @internal */
-
-exports.OIDC_WORKFLOWS = new Map();
-exports.OIDC_WORKFLOWS.set('test', () => new automated_callback_workflow_1.AutomatedCallbackWorkflow(new token_cache_1.TokenCache(), token_machine_workflow_1.callback));
-exports.OIDC_WORKFLOWS.set('azure', () => new automated_callback_workflow_1.AutomatedCallbackWorkflow(new token_cache_1.TokenCache(), azure_machine_workflow_1.callback));
-exports.OIDC_WORKFLOWS.set('gcp', () => new automated_callback_workflow_1.AutomatedCallbackWorkflow(new token_cache_1.TokenCache(), gcp_machine_workflow_1.callback));
-exports.OIDC_WORKFLOWS.set('k8s', () => new automated_callback_workflow_1.AutomatedCallbackWorkflow(new token_cache_1.TokenCache(), k8s_machine_workflow_1.callback));
-/**
- * OIDC auth provider.
- */
-
-class MongoDBOIDC extends auth_provider_1.AuthProvider {
-  /**
-   * Instantiate the auth provider.
-   */
-  constructor(workflow) {
-    super();
-
-    if (!workflow) {
-      throw new error_1.MongoInvalidArgumentError('No workflow provided to the OIDC auth provider.');
-    }
-
-    this.workflow = workflow;
-  }
-  /**
-   * Authenticate using OIDC
-   */
-
-
-  async auth(authContext) {
-    const {
-      connection,
-      reauthenticating,
-      response
-    } = authContext;
-
-    if (response?.speculativeAuthenticate?.done && !reauthenticating) {
-      return;
-    }
-
-    const credentials = getCredentials(authContext);
-
-    if (reauthenticating) {
-      await this.workflow.reauthenticate(connection, credentials);
-    } else {
-      await this.workflow.execute(connection, credentials, response);
-    }
-  }
-  /**
-   * Add the speculative auth for the initial handshake.
-   */
-
-
-  async prepare(handshakeDoc, authContext) {
-    const {
-      connection
-    } = authContext;
-    const credentials = getCredentials(authContext);
-    const result = await this.workflow.speculativeAuth(connection, credentials);
-    return { ...handshakeDoc,
-      ...result
-    };
-  }
-
-}
-
-exports.MongoDBOIDC = MongoDBOIDC;
-/**
- * Get credentials from the auth context, throwing if they do not exist.
- */
-
-function getCredentials(authContext) {
-  const {
-    credentials
-  } = authContext;
-
-  if (!credentials) {
-    throw new error_1.MongoMissingCredentialsError(MISSING_CREDENTIALS_ERROR);
-  }
-
-  return credentials;
-}

package/transpiled/mongodb/lib/cmap/auth/plain.js

@@ -1,43 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.Plain = void 0;
-
-const bson_1 = require("../../bson");
-
-const error_1 = require("../../error");
-
-const utils_1 = require("../../utils");
-
-const auth_provider_1 = require("./auth_provider");
-
-class Plain extends auth_provider_1.AuthProvider {
-  async auth(authContext) {
-    const {
-      connection,
-      credentials
-    } = authContext;
-
-    if (!credentials) {
-      throw new error_1.MongoMissingCredentialsError('AuthContext must provide credentials.');
-    }
-
-    const {
-      username,
-      password
-    } = credentials;
-    const payload = new bson_1.Binary(Buffer.from(`\x00${username}\x00${password}`));
-    const command = {
-      saslStart: 1,
-      mechanism: 'PLAIN',
-      payload: payload,
-      autoAuthorize: 1
-    };
-    await connection.command((0, utils_1.ns)('$external.$cmd'), command, undefined);
-  }
-
-}
-
-exports.Plain = Plain;

package/transpiled/mongodb/lib/cmap/auth/providers.js

@@ -1,22 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.AUTH_MECHS_AUTH_SRC_EXTERNAL = exports.AuthMechanism = void 0;
-/** @public */
-
-exports.AuthMechanism = Object.freeze({
-  MONGODB_AWS: 'MONGODB-AWS',
-  MONGODB_CR: 'MONGODB-CR',
-  MONGODB_DEFAULT: 'DEFAULT',
-  MONGODB_GSSAPI: 'GSSAPI',
-  MONGODB_PLAIN: 'PLAIN',
-  MONGODB_SCRAM_SHA1: 'SCRAM-SHA-1',
-  MONGODB_SCRAM_SHA256: 'SCRAM-SHA-256',
-  MONGODB_X509: 'MONGODB-X509',
-  MONGODB_OIDC: 'MONGODB-OIDC'
-});
-/** @internal */
-
-exports.AUTH_MECHS_AUTH_SRC_EXTERNAL = new Set([exports.AuthMechanism.MONGODB_GSSAPI, exports.AuthMechanism.MONGODB_AWS, exports.AuthMechanism.MONGODB_OIDC, exports.AuthMechanism.MONGODB_X509]);