couchbase-core 1.0.1

/*
 *
 *  * Copyright (c) 2025 Couchbase, Inc.
 *  *
 *  * Licensed under the Apache License, Version 2.0 (the "License");
 *  * you may not use this file except in compliance with the License.
 *  * You may obtain a copy of the License at
 *  *
 *  *    http://www.apache.org/licenses/LICENSE-2.0
 *  *
 *  * Unless required by applicable law or agreed to in writing, software
 *  * distributed under the License is distributed on an "AS IS" BASIS,
 *  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *  * See the License for the specific language governing permissions and
 *  * limitations under the License.
 *
 */

use crate::common::test_config::TestSetupConfig;
use couchbase_core::authenticator::{Authenticator, PasswordAuthenticator};
use couchbase_core::options::agent::{AgentOptions, SeedConfig};
#[cfg(feature = "rustls-tls")]
use {
    couchbase_core::insecure_certverfier::InsecureCertVerifier, std::sync::Arc,
    tokio_rustls::rustls::crypto::aws_lc_rs::default_provider,
    tokio_rustls::rustls::crypto::CryptoProvider,
};

pub async fn create_default_options(config: TestSetupConfig) -> AgentOptions {
    let tls_config = if config.use_ssl {
        #[cfg(feature = "native-tls")]
        {
            let mut builder = tokio_native_tls::native_tls::TlsConnector::builder();
            builder.danger_accept_invalid_certs(true);
            Some(builder.build().unwrap())
        }
        #[cfg(all(feature = "rustls-tls", not(feature = "native-tls")))]
        Some(get_rustls_config())
    } else {
        None
    };

    AgentOptions::new(
        SeedConfig::new().memd_addrs(config.memd_addrs.clone()),
        Authenticator::PasswordAuthenticator(PasswordAuthenticator {
            username: config.username.clone(),
            password: config.password.clone(),
        }),
    )
    .tls_config(tls_config)
    .bucket_name(config.bucket.clone())
}

pub async fn create_options_without_bucket(config: TestSetupConfig) -> AgentOptions {
    let tls_config = if config.use_ssl {
        #[cfg(feature = "native-tls")]
        {
            let mut builder = tokio_native_tls::native_tls::TlsConnector::builder();
            builder.danger_accept_invalid_certs(true);
            Some(builder.build().unwrap())
        }
        #[cfg(all(feature = "rustls-tls", not(feature = "native-tls")))]
        Some(get_rustls_config())
    } else {
        None
    };

    AgentOptions::new(
        SeedConfig::new().memd_addrs(config.memd_addrs.clone()),
        Authenticator::PasswordAuthenticator(PasswordAuthenticator {
            username: config.username.clone(),
            password: config.password.clone(),
        }),
    )
    .tls_config(tls_config)
}

#[cfg(feature = "rustls-tls")]
fn get_rustls_config() -> Arc<tokio_rustls::rustls::ClientConfig> {
    let _ = CryptoProvider::install_default(default_provider());
    Arc::new(
        tokio_rustls::rustls::ClientConfig::builder()
            .dangerous()
            .with_custom_certificate_verifier(Arc::new(InsecureCertVerifier {}))
            .with_no_client_auth(),
    )
}