ivankelly commented on a change in pull request #3677: PIP-30: interface and
mutual change authentication
URL: https://github.com/apache/pulsar/pull/3677#discussion_r262022910
##########
File path:
pulsar-common/src/main/java/org/apache/pulsar/common/api/Commands.java
##########
@@ -168,6 +212,52 @@ public static ByteBuf newConnected(int
clientProtocolVersion) {
return res;
}
+ public static ByteBuf newAuthChallenge(String authMethod, AuthData
brokerData, int clientProtocolVersion) {
+ CommandAuthChallenge.Builder challengeBuilder =
CommandAuthChallenge.newBuilder();
+
+ // If the broker supports a newer version of the protocol, it will
anyway advertise the max version that the
+ // client supports, to avoid confusing the client.
+ int currentProtocolVersion = getCurrentProtocolVersion();
+ int versionToAdvertise = Math.min(currentProtocolVersion,
clientProtocolVersion);
+
+ challengeBuilder.setProtocolVersion(versionToAdvertise);
+ challengeBuilder.setServerVersion("Pulsar Server");
+
+ CommandAuthChallenge challenge = challengeBuilder
+ .setChallenge(PulsarApi.AuthData.newBuilder()
+ .setAuthData(copyFrom(brokerData.getBytes()))
+ .setAuthMethodName(authMethod)
+ .build())
+ .build();
+
+ ByteBuf res =
serializeWithSize(BaseCommand.newBuilder().setType(Type.AUTH_RESPONSE).setAuthChallenge(challenge));
+ challenge.recycle();
+ challengeBuilder.recycle();
+ return res;
+ }
+
+ public static ByteBuf newAuthResponse(String authMethod,
+ AuthData clientData,
+ int clientProtocolVersion,
+ String clientVersion) {
+ CommandAuthResponse.Builder responseBuilder =
CommandAuthResponse.newBuilder();
+
+ responseBuilder.setClientVersion(clientVersion != null ? clientVersion
: "Pulsar Client");
+ responseBuilder.setProtocolVersion(clientProtocolVersion);
+
+ CommandAuthResponse response = responseBuilder
+ .setResponse(PulsarApi.AuthData.newBuilder()
+ .setAuthData(copyFrom(clientData.getBytes()))
+ .setAuthMethodName(authMethod)
+ .build())
+ .build();
+
+ ByteBuf res =
serializeWithSize(BaseCommand.newBuilder().setType(Type.AUTH_CHALLENGE).setAuthResponse(response));
Review comment:
type doesn't match the method name.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
With regards,
Apache Git Services
