Skip to content

Add support for auth with custom schemes #62

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
antepusic wants to merge 14 commits into
base: master
Choose a base branch
from
Open

Add support for auth with custom schemes #62

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
14 commits
Select commit Hold shift + click to select a range
16e12ca
Add the schema and credentials parameters
antepusic May 20, 2024
0cc6927
Make custom auth logic simpler & conform to Bolt message requirements
antepusic May 29, 2024
192c9ed
Fix clang-tidy and build error
antepusic Jun 10, 2024
96aec59
Comply with clang-tidy
antepusic Jun 10, 2024
6d2a046
Remove whitespace
antepusic Jun 10, 2024
55de52e
Fix logic
antepusic Jun 18, 2024
adeaa28
Clarify comment
antepusic Jun 18, 2024
263a84f
Add test while avoiding code repetition
antepusic Jun 18, 2024
d7561ad
A few fixes WIP
gitbuda Aug 30, 2024
89724e3
Merge branch 'master' into add-custom-auth
gitbuda Aug 30, 2024
6616b4e
A few more changes
gitbuda Aug 30, 2024
6008a28
Merge branch 'master' into add-custom-auth
gitbuda May 26, 2026
53d6fe1
Some AI-driven improvements
gitbuda May 26, 2026
c92902f
Add removed v1 tests from master
gitbuda May 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions include/mgclient.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1255,6 +1255,8 @@ MGCLIENT_EXPORT void mg_session_params_set_host(mg_session_params *,
const char *host);
MGCLIENT_EXPORT void mg_session_params_set_port(mg_session_params *,
uint16_t port);
MGCLIENT_EXPORT void mg_session_params_set_scheme(mg_session_params *,
const char *scheme);
MGCLIENT_EXPORT void mg_session_params_set_username(mg_session_params *,
const char *username);
MGCLIENT_EXPORT void mg_session_params_set_password(mg_session_params *,
Expand Down
18 changes: 15 additions & 3 deletions mgclient_cpp/include/mgclient.hpp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -57,6 +57,7 @@ class Client {
struct Params {
std::string host = "127.0.0.1";
uint16_t port = 7687;
std::string scheme = "none";
std::string username = "";
std::string password = "";
bool use_ssl = false;
Expand Down Expand Up @@ -148,13 +149,24 @@ inline std::unique_ptr<Client> Client::Connect(const Client::Params &params) {
if (!mg_params) {
return nullptr;
}
mg_session_params_set_host(mg_params, params.host.c_str());
mg_session_params_set_port(mg_params, params.port);
if (!params.host.empty()) {
mg_session_params_set_host(mg_params, params.host.c_str());
}
if (params.port != 0) {
mg_session_params_set_port(mg_params, params.port);
}
if (!params.scheme.empty()) {
mg_session_params_set_scheme(mg_params, params.scheme.c_str());
}
if (!params.username.empty()) {
mg_session_params_set_username(mg_params, params.username.c_str());
}
if (!params.password.empty()) {
mg_session_params_set_password(mg_params, params.password.c_str());
}
mg_session_params_set_user_agent(mg_params, params.user_agent.c_str());
if (!params.user_agent.empty()) {
mg_session_params_set_user_agent(mg_params, params.user_agent.c_str());
}
mg_session_params_set_sslmode(
mg_params, params.use_ssl ? MG_SSLMODE_REQUIRE : MG_SSLMODE_DISABLE);

Expand Down
48 changes: 34 additions & 14 deletions src/mgclient.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -67,6 +67,7 @@ typedef struct mg_session_params {
const char *address;
const char *host;
uint16_t port;
const char *scheme;
const char *username;
const char *password;
const char *user_agent;
Expand All @@ -87,6 +88,7 @@ mg_session_params *mg_session_params_make(void) {
params->address = NULL;
params->host = NULL;
params->port = 0;
params->scheme = NULL;
params->username = NULL;
params->password = NULL;
params->user_agent = MG_USER_AGENT;
Expand Down Expand Up @@ -118,6 +120,11 @@ void mg_session_params_set_port(mg_session_params *params, uint16_t port) {
params->port = port;
}

void mg_session_params_set_scheme(mg_session_params *params,
const char *scheme) {
params->scheme = scheme;
}

void mg_session_params_set_username(mg_session_params *params,
const char *username) {
params->username = username;
Expand Down Expand Up @@ -364,8 +371,8 @@ int mg_bolt_init_v1(mg_session *session, const mg_session_params *params) {
return status;
}

static mg_map *build_hello_extra(const char *user_agent, const char *username,
const char *password) {
static mg_map *build_hello_extra(const char *user_agent, const char *scheme,
const char *username, const char *password) {
mg_map *extra = mg_map_make_empty(4);
if (!extra) {
return NULL;
Expand All @@ -379,40 +386,53 @@ static mg_map *build_hello_extra(const char *user_agent, const char *username,
}
}

assert((username && password) || (!username && !password));
if (username) {
mg_value *scheme = mg_value_make_string("basic");
if (!scheme || mg_map_insert_unsafe(extra, "scheme", scheme) != 0) {
// The "basic" scheme requires a username and a password/credential within the
// HELLO message. Other schemes (save for "kerberos", which is not supported
// by Memgraph) do not have such requirements:
// https://neo4j.com/docs/bolt/current/bolt/message/#messages-hello
// https://neo4j.com/docs/bolt/current/bolt/message/#messages-logon
// NOTE: HELLO message does NOT contain schema after Bolt 5.0.
if (scheme && strcmp(scheme, "basic") == 0) {
assert(username && password);
}

if (!username && !password) {
mg_value *scheme_ = mg_value_make_string("none");
if (!scheme_ || mg_map_insert_unsafe(extra, "scheme", scheme_) != 0) {
goto cleanup;
}
return extra;
}

mg_value *scheme_ = mg_value_make_string(scheme ? scheme : "none"); // NOTE: Makes none default.
if (!scheme_ || mg_map_insert_unsafe(extra, "scheme", scheme_) != 0) {
goto cleanup;
}

if (username) {
Copy link
Copy Markdown

@as51340 as51340 Jun 26, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

So the change is also that username and password won't be inserted to extra if empty?

Copy link
Copy Markdown
Member

@gitbuda gitbuda Aug 30, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What do you mean here?

mg_value *principal = mg_value_make_string(username);
if (!principal || mg_map_insert_unsafe(extra, "principal", principal)) {
goto cleanup;
}
}

if (password) {
mg_value *credentials = mg_value_make_string(password);
if (!credentials ||
mg_map_insert_unsafe(extra, "credentials", credentials)) {
goto cleanup;
}
} else {
mg_value *scheme = mg_value_make_string("none");
if (!scheme || mg_map_insert_unsafe(extra, "scheme", scheme) != 0) {
goto cleanup;
}
}

return extra;

cleanup:
mg_map_destroy(extra);
return NULL;
}

int mg_bolt_init_v4(mg_session *session, const mg_session_params *params) {
mg_map *extra =
build_hello_extra(params->user_agent, params->username, params->password);
mg_map *extra = build_hello_extra(params->user_agent, params->scheme,
params->username, params->password);
if (!extra) {
return MG_ERROR_OOM;
}
Expand Down
Loading
Loading