Method parseAuthenticationClause

parser/parse_system.go:539–599

(pos Pos)

}

func (p *Parser) parseAuthenticationClause(pos Pos) (*AuthenticationClause, error) {
	auth := &AuthenticationClause{AuthPos: pos}

	if p.tryConsumeKeywords(KeywordNot) {
		if err := p.expectKeyword(KeywordIdentified); err != nil {
			return nil, err
		}
		auth.NotIdentified = true
		auth.AuthEnd = p.last().End
		return auth, nil
	}

	if err := p.expectKeyword(KeywordIdentified); err != nil {
		return nil, err
	}
	auth.AuthEnd = p.last().End

	if p.tryConsumeKeywords(KeywordWith) {
		if p.matchKeyword(KeywordLdap) {
			_ = p.lexer.consumeToken()
			if err := p.expectKeyword(KeywordServer); err != nil {
				return nil, err
			}
			server, err := p.parseString(p.Pos())
			if err != nil {
				return nil, err
			}
			auth.LdapServer = server
			auth.AuthEnd = server.End()
		} else if p.matchKeyword(KeywordKerberos) {
			_ = p.lexer.consumeToken()
			auth.IsKerberos = true
			auth.AuthEnd = p.last().End
			if p.tryConsumeKeywords(KeywordRealm) {
				realm, err := p.parseString(p.Pos())
				if err != nil {
					return nil, err
				}
				auth.KerberosRealm = realm
				auth.AuthEnd = realm.End()
			}
		} else if p.matchTokenKind(TokenKindIdent) {
			// Auth types like no_password, plaintext_password, etc.
			authType := p.last().String
			_ = p.lexer.consumeToken()
			auth.AuthType = authType
			auth.AuthEnd = p.last().End

			if p.tryConsumeKeywords(KeywordBy) {
				value, err := p.parseString(p.Pos())
				if err != nil {
					return nil, err
				}
				auth.AuthValue = value
				auth.AuthEnd = value.End()
			}
		}
	}