com.singlestore.jdbc.plugin.authentication.standard

Class NativePasswordPlugin

java.lang.Object

com.singlestore.jdbc.plugin.authentication.standard.NativePasswordPlugin

All Implemented Interfaces:

AuthenticationPlugin

public class NativePasswordPlugin
extends Object
implements AuthenticationPlugin

Field Summary

Fields

Modifier and Type	Field and Description
static String	TYPE

Constructor Summary

Constructors

Constructor and Description
NativePasswordPlugin()

Method Summary

Modifier and Type	Method and Description
static byte[]	encryptPassword(CharSequence password, byte[] seed) Encrypts a password.
void	initialize(String authenticationData, byte[] seed, Configuration conf) Initialized data.
com.singlestore.jdbc.client.ReadableByteBuf	process(PacketWriter out, PacketReader in, Context context) Process native password plugin authentication.
String	type() Authentication plugin type.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

TYPE

public static final String TYPE

See Also:

Constant Field Values

Constructor Detail

NativePasswordPlugin

public NativePasswordPlugin()

Method Detail

encryptPassword

public static byte[] encryptPassword(CharSequence password,
                                     byte[] seed)

Encrypts a password.

protocol for authentication is like this: 1. Server sends a random array of bytes (the seed) 2. client makes a sha1 digest of the password 3. client hashes the output of 2 4. client digests the seed 5. client updates the digest with the output from 3 6. an xor of the output of 5 and 2 is sent to server 7. server does the same thing and verifies that the scrambled passwords match

Parameters:

password - the password to encrypt

seed - the seed to use

Returns:

a scrambled password

type

public String type()

Description copied from interface: AuthenticationPlugin

Authentication plugin type.

Specified by:

type in interface AuthenticationPlugin

Returns:

authentication plugin type. ex: mysql_native_password

initialize

public void initialize(String authenticationData,
                       byte[] seed,
                       Configuration conf)

Initialized data.

Specified by:

initialize in interface AuthenticationPlugin

Parameters:

authenticationData - authentication data (password/token)

seed - server provided seed

conf - Connection string options

process

public com.singlestore.jdbc.client.ReadableByteBuf process(PacketWriter out,
                                                           PacketReader in,
                                                           Context context)
                                                    throws IOException

Process native password plugin authentication. see https://mariadb.com/kb/en/library/authentication-plugin-mysql_native_password/

Specified by:

process in interface AuthenticationPlugin

Parameters:

out - out stream

in - in stream

context - connection context

Returns:

response packet

Throws:

IOException - if socket error