content: /*
   * Licensed to the Apache Software Foundation (ASF) under one or more
   * contributor license agreements. See the NOTICE file distributed with
   * this work for additional information regarding copyright ownership.
   * The ASF licenses this file to You under the Apache License, Version 2.0
   * (the "License"); you may not use this file except in compliance with
   * the License. You may obtain a copy of the License at
   *
   *     http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS,
   * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   * See the License for the specific language governing permissions and
   * limitations under the License.
   */
  package org.apache.activemq.artemis.cli.commands;
  
  import java.util.HashMap;
  import java.util.Map;
  
  import org.apache.activemq.artemis.core.config.Configuration;
  import org.apache.activemq.artemis.utils.DefaultSensitiveStringCodec;
  import org.apache.activemq.artemis.utils.PasswordMaskingUtil;
  import org.apache.activemq.artemis.utils.SensitiveDataCodec;
  import picocli.CommandLine.Command;
  import picocli.CommandLine.Option;
  import picocli.CommandLine.Parameters;
  
  @Command(name = "mask", description = "Mask a password and print it out.")
  public class Mask extends ActionAbstract {
  
     @Parameters(description = "The password to be masked.")
     String password;
  
     @Option(names = "--hash", description = "Whether to use a hash (one-way). Default: false.")
     boolean hash = false;
  
     @Option(names = "--key", description = "The key (Blowfish) to mask a password.")
     String key;
  
     @Option(names = "--password-codec", description = "Whether to use the password codec defined in the configuration. Default: false")
     boolean passwordCodec = false;
  
     private SensitiveDataCodec<String> codec;
  
     @Override
     public Object execute(ActionContext context) throws Exception {
        Map<String, String> params = new HashMap<>();
  
        if (hash) {
           params.put(DefaultSensitiveStringCodec.ALGORITHM, DefaultSensitiveStringCodec.ONE_WAY);
        }
  
        if (key != null) {
           if (hash) {
              context.out.println("Option --key ignored in case of hashing");
           } else {
              params.put(DefaultSensitiveStringCodec.BLOWFISH_KEY, key);
           }
        }
  
        if (passwordCodec) {
           Configuration brokerConfiguration = getBrokerConfiguration();
           codec = PasswordMaskingUtil.getCodec(brokerConfiguration.getPasswordCodec());
        } else {
           codec = PasswordMaskingUtil.getDefaultCodec(params);
        }
  
        String masked = codec.encode(password);
        context.out.println("result: " + masked);
        return masked;
     }
  
     @Override
     public boolean isVerbose() {
        return false;
     }
  
     public void setPassword(String password) {
        this.password = password;
     }
  
     public void setHash(boolean hash) {
        this.hash = hash;
     }
  
     public void setKey(String key) {
        this.key = key;
     }
  
     public void setPasswordCodec(boolean passwordCodec) {
        this.passwordCodec = passwordCodec;
     }
  
     public SensitiveDataCodec<String> getCodec() {
        return codec;
     }
  
  }
  