com.singlestore.jdbc.plugin.authentication.standard

Class CachingSha2PasswordPlugin

java.lang.Object

com.singlestore.jdbc.plugin.authentication.standard.CachingSha2PasswordPlugin

All Implemented Interfaces:

AuthenticationPlugin

public class CachingSha2PasswordPlugin
extends Object
implements AuthenticationPlugin

Field Summary

Fields

Modifier and Type	Field and Description
static String	TYPE

Constructor Summary

Constructors

Constructor and Description
CachingSha2PasswordPlugin()

Method Summary

Modifier and Type	Method and Description
static byte[]	encrypt(PublicKey publicKey, String password, byte[] seed) Encode password with seed and public key.
static PublicKey	generatePublicKey(byte[] publicKeyBytes) Read public pem key from String.
void	initialize(String authenticationData, byte[] seed, Configuration conf) Initialized data.
com.singlestore.jdbc.client.ReadableByteBuf	process(PacketWriter out, PacketReader in, Context context) Process native password plugin authentication.
static PublicKey	readPublicKeyFromFile(String serverRsaPublicKeyFile) Read public Key from file.
static byte[]	sha256encryptPassword(CharSequence password, byte[] seed) Send a SHA-2 encrypted password.
String	type() Authentication plugin type.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

TYPE

public static final String TYPE

See Also:

Constant Field Values

Constructor Detail

CachingSha2PasswordPlugin

public CachingSha2PasswordPlugin()

Method Detail

sha256encryptPassword

public static byte[] sha256encryptPassword(CharSequence password,
                                           byte[] seed)

Send a SHA-2 encrypted password. encryption XOR(SHA256(password), SHA256(seed, SHA256(SHA256(password))))

Parameters:

password - password

seed - seed

Returns:

encrypted pwd

type

public String type()

Description copied from interface: AuthenticationPlugin

Authentication plugin type.

Specified by:

type in interface AuthenticationPlugin

Returns:

authentication plugin type. ex: mysql_native_password

initialize

public void initialize(String authenticationData,
                       byte[] seed,
                       Configuration conf)

Initialized data.

Specified by:

initialize in interface AuthenticationPlugin

Parameters:

authenticationData - authentication data (password/token)

seed - server provided seed

conf - Connection string options

process

public com.singlestore.jdbc.client.ReadableByteBuf process(PacketWriter out,
                                                           PacketReader in,
                                                           Context context)
                                                    throws IOException,
                                                           SQLException

Process native password plugin authentication. see https://mariadb.com/kb/en/library/authentication-plugin-mysql_native_password/

Specified by:

process in interface AuthenticationPlugin

Parameters:

out - out stream

in - in stream

context - connection context

Returns:

response packet

Throws:

IOException - if socket error

SQLException - if plugin exception

readPublicKeyFromFile

public static PublicKey readPublicKeyFromFile(String serverRsaPublicKeyFile)
                                       throws SQLException

Read public Key from file.

Parameters:

serverRsaPublicKeyFile - RSA public key file

Returns:

public key

Throws:

SQLException - if cannot read file or file content is not a public key.

generatePublicKey

public static PublicKey generatePublicKey(byte[] publicKeyBytes)
                                   throws SQLException

Read public pem key from String.

Parameters:

publicKeyBytes - public key bytes value

Returns:

public key

Throws:

SQLException - if key cannot be parsed

encrypt

public static byte[] encrypt(PublicKey publicKey,
                             String password,
                             byte[] seed)
                      throws SQLException

Encode password with seed and public key.

Parameters:

publicKey - public key

password - password

seed - seed

Returns:

encoded password

Throws:

SQLException - if cannot encode password