Vulnerable code sample

import requests
from redshift_connector import connect, BrowserAzureOAuth2CredentialsProvider

# Simulate a vulnerable BrowserAzureOAuth2CredentialsProvider (pre-2.1.7)
class InsecureBrowserAzureOAuth2CredentialsProvider(BrowserAzureOAuth2CredentialsProvider):
    def _get_access_token(self):
        """
        This is a simplified and VULNERABLE example.  The real vulnerability 
        involves the SSLContext used by requests, specifically when fetching 
        the token from the Azure Identity Provider.  This example focuses on
        *demonstrating* the lack of SSL verification.

        DO NOT USE THIS IN PRODUCTION.  It is for educational purposes only.
        """
        # In a real scenario, this URL would be the Azure token endpoint.
        token_endpoint = "https://example.com/token"  # Intentionally using example.com

        # Vulnerable code:  SSL verification is explicitly disabled!
        response = requests.get(token_endpoint, verify=False) # <--- VULNERABLE LINE

        if response.status_code == 200:
            return response.json().get("access_token")
        else:
            raise Exception(f"Failed to retrieve token: {response.status_code} - {response.text}")


# Redshift connection parameters
host = "your_redshift_host"
port = 5439
database = "your_database"
user = "your_user"

# Use the vulnerable credential provider
credentials_provider = InsecureBrowserAzureOAuth2CredentialsProvider()

# Attempt to connect (demonstrates that the connection can be established)
try:
    with connect(
        host=host,
        port=port,
        database=database,
        user=user,
        credentials_provider=credentials_provider
    ) as connection:
        with connection.cursor() as cursor:
            cursor.execute("SELECT 1")
            result = cursor.fetchone()
            print(f"Successfully connected. Result: {result}")

except Exception as e:
    print(f"Connection failed: {e}")