SNOW-847342: Add connection property for setting browser timeout value

src/main/java/net/snowflake/client/core/SFLoginInput.java

@@ -51,11 +51,21 @@ public class SFLoginInput {
   private boolean disableConsoleLogin = true;
   private boolean disableSamlURLCheck = false;
 
+  private Duration browserResponseTimeout;
+
   // Additional headers to add for Snowsight.
   Map<String, String> additionalHttpHeadersForSnowsight;
 
   SFLoginInput() {}
 
+  public Duration getBrowserResponseTimeout() {
+    return browserResponseTimeout;
+  }
+
+  public void setBrowserResponseTimeout(int browserResponseTimeout) {
+    this.browserResponseTimeout = Duration.ofSeconds(browserResponseTimeout);
+  }
+
   public String getServerUrl() {
     return serverUrl;
   }

src/main/java/net/snowflake/client/core/SFSession.java

@@ -141,6 +141,13 @@ public class SFSession extends SFBaseSession {
    */
   private int retryTimeout = 300;
 
+  /**
+   * Max timeout for external browser authentication in seconds
+   *
+   * <p>Default: 120
+   */
+  private int browserResponseTimeout = 120;
+
   // This constructor is used only by tests with no real connection.
   // For real connections, the other constructor is always used.
   @VisibleForTesting
@@ -485,6 +492,10 @@ public void addSFSessionProperty(String propertyName, Object propertyValue) thro
             setJdbcArrowTreatDecimalAsInt(getBooleanValue(propertyValue));
           }
           break;
+        case BROWSER_RESPONSE_TIMEOUT:
+          if (propertyValue != null) {
+            browserResponseTimeout = (Integer) propertyValue;
+          }
 
         default:
           break;
@@ -527,7 +538,7 @@ public synchronized void open() throws SFException, SnowflakeSQLException {
             + " application: {}, app id: {}, app version: {}, login timeout: {}, retry timeout: {}, network timeout: {},"
             + " query timeout: {}, tracing: {}, private key file: {}, private key file pwd is {},"
             + " enable_diagnostics: {}, diagnostics_allowlist_path: {},"
-            + " session parameters: client store temporary credential: {}, gzip disabled: {}",
+            + " session parameters: client store temporary credential: {}, gzip disabled: {}, browser response timeout: {}",
         connectionPropertiesMap.get(SFSessionProperty.SERVER_URL),
         connectionPropertiesMap.get(SFSessionProperty.ACCOUNT),
         connectionPropertiesMap.get(SFSessionProperty.USER),
@@ -559,7 +570,8 @@ public synchronized void open() throws SFException, SnowflakeSQLException {
         connectionPropertiesMap.get(SFSessionProperty.ENABLE_DIAGNOSTICS),
         connectionPropertiesMap.get(SFSessionProperty.DIAGNOSTICS_ALLOWLIST_FILE),
         sessionParametersMap.get(CLIENT_STORE_TEMPORARY_CREDENTIAL),
-        connectionPropertiesMap.get(SFSessionProperty.GZIP_DISABLED));
+        connectionPropertiesMap.get(SFSessionProperty.GZIP_DISABLED),
+        connectionPropertiesMap.get(SFSessionProperty.BROWSER_RESPONSE_TIMEOUT));
 
     HttpClientSettingsKey httpClientSettingsKey = getHttpClientKey();
     logger.debug(
@@ -617,7 +629,8 @@ public synchronized void open() throws SFException, SnowflakeSQLException {
             connectionPropertiesMap.get(SFSessionProperty.DISABLE_SAML_URL_CHECK) != null
                 ? getBooleanValue(
                     connectionPropertiesMap.get(SFSessionProperty.DISABLE_SAML_URL_CHECK))
-                : false);
+                : false)
+        .setBrowserResponseTimeout(browserResponseTimeout);
 
     // Enable or disable OOB telemetry based on connection parameter. Default is disabled.
     // The value may still change later when session parameters from the server are read.

src/main/java/net/snowflake/client/core/SFSessionProperty.java

@@ -85,7 +85,9 @@ public enum SFSessionProperty {
   DISABLE_GCS_DEFAULT_CREDENTIALS("disableGcsDefaultCredentials", false, Boolean.class),
 
   JDBC_ARROW_TREAT_DECIMAL_AS_INT("JDBC_ARROW_TREAT_DECIMAL_AS_INT", false, Boolean.class),
-  DISABLE_SAML_URL_CHECK("disableSamlURLCheck", false, Boolean.class);
+  DISABLE_SAML_URL_CHECK("disableSamlURLCheck", false, Boolean.class),
+
+  BROWSER_RESPONSE_TIMEOUT("BROWSER_RESPONSE_TIMEOUT", false, Integer.class);
 
   // property key in string
   private String propertyKey;

src/main/java/net/snowflake/client/core/SessionUtilExternalBrowser.java

@@ -256,6 +256,10 @@ private String generateProofKey() {
     return Base64.getEncoder().encodeToString(randomness);
   }
 
+  private int getBrowserResponseTimeout() {
+    return (int) loginInput.getBrowserResponseTimeout().toMillis();
+  }
+
   /**
    * Authenticate
    *
@@ -265,6 +269,7 @@ private String generateProofKey() {
   void authenticate() throws SFException, SnowflakeSQLException {
     ServerSocket ssocket = this.getServerSocket();
     try {
+      ssocket.setSoTimeout(getBrowserResponseTimeout());
       // main procedure
       int port = this.getLocalPort(ssocket);
       logger.debug("Listening localhost: {}", port);

src/main/java/net/snowflake/client/jdbc/SnowflakeBasicDataSource.java

@@ -231,4 +231,16 @@ public void setPrivateKeyFile(String location, String password) {
   public void setTracing(String tracing) {
     this.properties.put("tracing", tracing);
   }
+
+  public void setBrowserResponseTimeout(int seconds) {
+    this.properties.put("BROWSER_RESPONSE_TIMEOUT", Integer.toString(seconds));
+  }
+
+  public int getBrowserResponseTimeout() {
+    try {
+      return Integer.parseInt(properties.getProperty("BROWSER_RESPONSE_TIMEOUT"));
+    } catch (NumberFormatException e) {
+      return 0;
+    }
+  }
 }

src/test/java/net/snowflake/client/jdbc/SnowflakeBasicDataSourceTest.java

@@ -19,4 +19,12 @@ public void testSetLoginTimeout() throws SQLException {
     ds.setLoginTimeout(10);
     assertThat(ds.getLoginTimeout(), is(10));
   }
+
+  @Test
+  public void testSetBrowserResponseTimeout() throws SQLException {
+    SnowflakeBasicDataSource ds = new SnowflakeBasicDataSource();
+
+    ds.setBrowserResponseTimeout(10);
+    assertThat(ds.getBrowserResponseTimeout(), is(10));
+  }
 }