SCBC-496: Support mTLS Certs Refresh (without restart)

Add an `authenticator()` method to Cluster and
AsyncCluster.

Change-Id: I5bbbb01943d323f91b4de98b36020a7224407d49
Reviewed-on: https://review.couchbase.org/c/couchbase-jvm-clients/+/236088
Tested-by: Build Bot <[email protected]>
Reviewed-by: David Nault <[email protected]>

Author: programmatix

scala-client/src/main/scala/com/couchbase/client/scala/AsyncClusterBase.scala

@@ -20,7 +20,7 @@ import com.couchbase.client.core.annotation.Stability
 import com.couchbase.client.core.annotation.Stability.Uncommitted
 import com.couchbase.client.core.api.CoreCouchbaseOps
 import com.couchbase.client.core.diagnostics._
-import com.couchbase.client.core.env.Authenticator
+import com.couchbase.client.core.env.{Authenticator, DelegatingAuthenticator}
 import com.couchbase.client.core.protostellar.CoreProtostellarUtil
 import com.couchbase.client.core.service.ServiceType
 import com.couchbase.client.core.transaction.CoreTransactionsReactive
@@ -67,12 +67,14 @@ import scala.util.{Failure, Success, Try}
   */
 trait AsyncClusterBase { this: AsyncCluster =>
   private[scala] implicit lazy val ec: ExecutionContext = environment.ec
+  private[scala] val delegatingAuthenticator            =
+    DelegatingAuthenticator.create(environment.coreEnv.securityConfig().tlsEnabled(), authenticator)
 
   /** The environment used to create this cluster */
   val env: ClusterEnvironment = environment
 
   private[scala] val couchbaseOps =
-    CoreCouchbaseOps.create(environment.coreEnv, authenticator, connectionString)
+    CoreCouchbaseOps.create(environment.coreEnv, delegatingAuthenticator, connectionString)
 
   // Only used by tests now
   private[couchbase] def core: Core = couchbaseOps match {
@@ -106,6 +108,16 @@ trait AsyncClusterBase { this: AsyncCluster =>
     new AsyncBucket(bucketName, couchbaseOps, environment)
   }
 
+  /** Sets a new authenticator, that will be used for any future connections created to Couchbase services.
+    *
+    * Note that existing connections will not be terminated.
+    *
+    * This method is thread-safe.
+    */
+  def authenticator(authenticator: Authenticator): Try[Unit] = {
+    Try(delegatingAuthenticator.setDelegate(authenticator))
+  }
+
   private[scala] def performGlobalConnect(): Unit = {
     couchbaseOps match {
       case core: Core => core.initGlobalConfig()

scala-client/src/main/scala/com/couchbase/client/scala/ClusterBase.scala

@@ -82,4 +82,13 @@ trait ClusterBase { this: Cluster =>
     new Bucket(async.bucket(bucketName))
   }
 
+  /** Sets a new authenticator, that will be used for any future connections created to Couchbase services.
+   *
+   * Note that existing connections will not be terminated.
+   *
+   * This method is thread-safe.
+   */
+  def authenticator(authenticator: Authenticator): Try[Unit] = {
+    async.authenticator(authenticator)
+  }
 }