/*
    * Licensed to the Apache Software Foundation (ASF) under one
    * or more contributor license agreements.  See the NOTICE file
    * distributed with this work for additional information
    * regarding copyright ownership.  The ASF licenses this file
    * to you under the Apache License, Version 2.0 (the
    * "License"); you may not use this file except in compliance
    * with the License.  You may obtain a copy of the License at
    *
   *     http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  package org.apache.hadoop.hbase.security;
  
  import java.util.concurrent.ConcurrentHashMap;
  import java.util.concurrent.ConcurrentMap;
  
  import org.apache.hadoop.hbase.classification.InterfaceAudience;
  import org.apache.hadoop.hbase.protobuf.generated.AdminProtos;
  import org.apache.hadoop.hbase.protobuf.generated.AuthenticationProtos.TokenIdentifier.Kind;
  import org.apache.hadoop.hbase.protobuf.generated.MasterProtos.ClientMetaService;
  import org.apache.hadoop.hbase.protobuf.generated.ClientProtos;
  import org.apache.hadoop.hbase.protobuf.generated.MasterProtos.MasterService;
  import org.apache.hadoop.hbase.protobuf.generated.RegionServerStatusProtos;
  
  /**
   * Maps RPC protocol interfaces to required configuration
   */
  @InterfaceAudience.Private
  public class SecurityInfo {
    /** Maps RPC service names to authentication information */
    private static ConcurrentMap<String,SecurityInfo> infos = new ConcurrentHashMap<String,SecurityInfo>();
    // populate info for known services
    static {
      infos.put(AdminProtos.AdminService.getDescriptor().getName(),
          new SecurityInfo("hbase.regionserver.kerberos.principal", Kind.HBASE_AUTH_TOKEN));
      infos.put(ClientProtos.ClientService.getDescriptor().getName(),
          new SecurityInfo("hbase.regionserver.kerberos.principal", Kind.HBASE_AUTH_TOKEN));
      infos.put(MasterService.getDescriptor().getName(),
          new SecurityInfo("hbase.master.kerberos.principal", Kind.HBASE_AUTH_TOKEN));
      infos.put(ClientMetaService.getDescriptor().getName(),
          new SecurityInfo("hbase.master.kerberos.principal", Kind.HBASE_AUTH_TOKEN));
      infos.put(RegionServerStatusProtos.RegionServerStatusService.getDescriptor().getName(),
          new SecurityInfo("hbase.master.kerberos.principal", Kind.HBASE_AUTH_TOKEN));
    }
  
    /**
     * Adds a security configuration for a new service name.  Note that this will have no effect if
     * the service name was already registered.
     */
    public static void addInfo(String serviceName, SecurityInfo securityInfo) {
      infos.putIfAbsent(serviceName, securityInfo);
    }
  
    /**
     * Returns the security configuration associated with the given service name.
     */
    public static SecurityInfo getInfo(String serviceName) {
      return infos.get(serviceName);
    }
  
    private final String serverPrincipal;
    private final Kind tokenKind;
  
    public SecurityInfo(String serverPrincipal, Kind tokenKind) {
      this.serverPrincipal = serverPrincipal;
      this.tokenKind = tokenKind;
    }
  
    public String getServerPrincipal() {
      return serverPrincipal;
    }
  
    public Kind getTokenKind() {
      return tokenKind;
    }
  }