mongo 1.12.5 → 2.0.0

data/spec/mongo/address_spec.rb

@@ -0,0 +1,206 @@
+require 'spec_helper'
+
+describe Mongo::Address do
+
+  describe '#==' do
+
+    context 'when the other host and port are the same' do
+
+      let(:address) do
+        described_class.new('127.0.0.1:27017')
+      end
+
+      let(:other) do
+        described_class.new('127.0.0.1:27017')
+      end
+
+      it 'returns true' do
+        expect(address).to eq(other)
+      end
+    end
+
+    context 'when the other port is different' do
+
+      let(:address) do
+        described_class.new('127.0.0.1:27017')
+      end
+
+      let(:other) do
+        described_class.new('127.0.0.1:27018')
+      end
+
+      it 'returns false' do
+        expect(address).to_not eq(other)
+      end
+    end
+
+    context 'when the other host is different' do
+
+      let(:address) do
+        described_class.new('127.0.0.1:27017')
+      end
+
+      let(:other) do
+        described_class.new('127.0.0.2:27017')
+      end
+
+      it 'returns false' do
+        expect(address).to_not eq(other)
+      end
+    end
+
+    context 'when the other object is not an address' do
+
+      let(:address) do
+        described_class.new('127.0.0.1:27017')
+      end
+
+      it 'returns false' do
+        expect(address).to_not eq('test')
+      end
+    end
+
+    context 'when the addresses are identical unix sockets' do
+
+      let(:address) do
+        described_class.new('/path/to/socket.sock')
+      end
+
+      let(:other) do
+        described_class.new('/path/to/socket.sock')
+      end
+
+      it 'returns true' do
+        expect(address).to eq(other)
+      end
+    end
+  end
+
+  describe '#hash' do
+
+    let(:address) do
+      described_class.new('127.0.0.1:27017')
+    end
+
+    it 'hashes on the host and port' do
+      expect(address.hash).to eq([ '127.0.0.1', 27017 ].hash)
+    end
+  end
+
+  describe '#initialize' do
+
+    context 'when providing an ipv4 host' do
+
+      context 'when a port is provided' do
+
+        let(:address) do
+          described_class.new('127.0.0.1:27017')
+        end
+
+        it 'sets the port' do
+          expect(address.port).to eq(27017)
+        end
+
+        it 'sets the host' do
+          expect(address.host).to eq('127.0.0.1')
+        end
+      end
+
+      context 'when no port is provided' do
+
+        let(:address) do
+          described_class.new('127.0.0.1')
+        end
+
+        it 'sets the port to 27017' do
+          expect(address.port).to eq(27017)
+        end
+
+        it 'sets the host' do
+          expect(address.host).to eq('127.0.0.1')
+        end
+      end
+    end
+
+    context 'when providing an ipv6 host' do
+
+      context 'when a port is provided' do
+
+        let(:address) do
+          described_class.new('[::1]:27017')
+        end
+
+        it 'sets the port' do
+          expect(address.port).to eq(27017)
+        end
+
+        it 'sets the host' do
+          expect(address.host).to eq('::1')
+        end
+      end
+
+      context 'when no port is provided' do
+
+        let(:address) do
+          described_class.new('[::1]')
+        end
+
+        it 'sets the port to 27017' do
+          expect(address.port).to eq(27017)
+        end
+
+        it 'sets the host' do
+          expect(address.host).to eq('::1')
+        end
+      end
+    end
+
+    context 'when providing a DNS entry' do
+
+      context 'when a port is provided' do
+
+        let(:address) do
+          described_class.new('localhost:27017')
+        end
+
+        it 'sets the port' do
+          expect(address.port).to eq(27017)
+        end
+
+        it 'sets the host' do
+          expect(address.host).to eq('localhost')
+        end
+      end
+
+      context 'when a port is not provided' do
+
+        let(:address) do
+          described_class.new('localhost')
+        end
+
+        it 'sets the port to 27017' do
+          expect(address.port).to eq(27017)
+        end
+
+        it 'sets the host' do
+          expect(address.host).to eq('localhost')
+        end
+      end
+    end
+
+    context 'when providing a socket path' do
+
+      let(:address) do
+        described_class.new('/path/to/socket.sock')
+      end
+
+      it 'sets the port to nil' do
+        expect(address.port).to be_nil
+      end
+
+      it 'sets the host' do
+        expect(address.host).to eq('/path/to/socket.sock')
+      end
+    end
+  end
+end

data/spec/mongo/auth/cr_spec.rb

@@ -0,0 +1,59 @@
+require 'spec_helper'
+
+describe Mongo::Auth::CR do
+
+  let(:address) do
+    Mongo::Address.new(DEFAULT_ADDRESS)
+  end
+
+  let(:server) do
+    Mongo::Server.new(address, Mongo::Event::Listeners.new)
+  end
+
+  let(:connection) do
+    Mongo::Server::Connection.new(server)
+  end
+
+  describe '#login' do
+
+    context 'when the user is not authorized' do
+
+      let(:user) do
+        Mongo::Auth::User.new(
+          database: 'driver',
+          user: 'notauser',
+          password: 'password'
+        )
+      end
+
+      let(:cr) do
+        described_class.new(user)
+      end
+
+      let(:login) do
+        cr.login(connection).documents[0]
+      end
+
+      it 'raises an exception' do
+        expect {
+          cr.login(connection)
+        }.to raise_error(Mongo::Auth::Unauthorized)
+      end
+    end
+  end
+
+  context 'when the user is authorized for the database' do
+
+    let(:cr) do
+      described_class.new(root_user)
+    end
+
+    let(:login) do
+      cr.login(connection).documents[0]
+    end
+
+    it 'logs the user into the connection', unless: scram_sha_1_enabled? do
+      expect(cr.login(connection).documents[0]['ok']).to eq(1)
+    end
+  end
+end

data/spec/mongo/auth/ldap_spec.rb

@@ -0,0 +1,40 @@
+require 'spec_helper'
+
+describe Mongo::Auth::LDAP do
+
+  let(:address) do
+    Mongo::Address.new(DEFAULT_ADDRESS)
+  end
+
+  let(:server) do
+    Mongo::Server.new(address, Mongo::Event::Listeners.new)
+  end
+
+  let(:connection) do
+    Mongo::Server::Connection.new(server)
+  end
+
+  let(:user) do
+    Mongo::Auth::User.new(database: TEST_DB, user: 'driver', password: 'password')
+  end
+
+  describe '#login' do
+
+    context 'when the user is not authorized for the database' do
+
+      let(:cr) do
+        described_class.new(user)
+      end
+
+      let(:login) do
+        cr.login(connection).documents[0]
+      end
+
+      it 'logs the user into the connection' do
+        expect {
+          cr.login(connection)
+        }.to raise_error(Mongo::Auth::Unauthorized)
+      end
+    end
+  end
+end

data/spec/mongo/auth/scram/conversation_spec.rb

@@ -0,0 +1,197 @@
+require 'spec_helper'
+
+describe Mongo::Auth::SCRAM::Conversation do
+
+  let(:user) do
+    Mongo::Auth::User.new(
+      database: Mongo::Database::ADMIN,
+      user: 'user',
+      password: 'pencil'
+    )
+  end
+
+  let(:conversation) do
+    described_class.new(user)
+  end
+
+  describe '#start' do
+
+    let(:query) do
+      conversation.start
+    end
+
+    before do
+      expect(SecureRandom).to receive(:base64).once.and_return('NDA2NzU3MDY3MDYwMTgy')
+    end
+
+    let(:selector) do
+      query.selector
+    end
+
+    it 'sets the sasl start flag' do
+      expect(selector[:saslStart]).to eq(1)
+    end
+
+    it 'sets the auto authorize flag' do
+      expect(selector[:autoAuthorize]).to eq(1)
+    end
+
+    it 'sets the mechanism' do
+      expect(selector[:mechanism]).to eq('SCRAM-SHA-1')
+    end
+
+    it 'sets the payload' do
+      expect(selector[:payload].data).to eq('n,,n=user,r=NDA2NzU3MDY3MDYwMTgy')
+    end
+  end
+
+  describe '#continue' do
+
+    let(:reply) do
+      Mongo::Protocol::Reply.new
+    end
+
+    let(:documents) do
+      [{
+        'conversationId' => 1,
+        'done' => false,
+        'payload' => payload,
+        'ok' => 1.0
+      }]
+    end
+
+    before do
+      expect(SecureRandom).to receive(:base64).once.and_return('NDA2NzU3MDY3MDYwMTgy')
+      reply.instance_variable_set(:@documents, documents)
+    end
+
+    context 'when the server rnonce starts with the nonce' do
+
+      let(:payload) do
+        BSON::Binary.new(
+          'r=NDA2NzU3MDY3MDYwMTgyt7/+IWaw1HaZZ5NmPJUTWapLpH2Gg+d8,s=AVvQXzAbxweH2RYDICaplw==,i=10000'
+        )
+      end
+
+      let(:query) do
+        conversation.continue(reply)
+      end
+
+      let(:selector) do
+        query.selector
+      end
+
+      it 'sets the conversation id' do
+        expect(selector[:conversationId]).to eq(1)
+      end
+
+      it 'sets the payload' do
+        expect(selector[:payload].data).to eq(
+          'c=biws,r=NDA2NzU3MDY3MDYwMTgyt7/+IWaw1HaZZ5NmPJUTWapLpH2Gg+d8,p=qYUYNy6SQ9Jucq9rFA9nVgXQdbM='
+        )
+      end
+
+      it 'sets the continue flag' do
+        expect(selector[:saslContinue]).to eq(1)
+      end
+    end
+
+    context 'when the server nonce does not start with the nonce' do
+
+      let(:payload) do
+        BSON::Binary.new(
+          'r=NDA2NzU4MDY3MDYwMTgyt7/+IWaw1HaZZ5NmPJUTWapLpH2Gg+d8,s=AVvQXzAbxweH2RYDICaplw==,i=10000'
+        )
+      end
+
+      it 'raises an error' do
+        expect {
+          conversation.continue(reply)
+        }.to raise_error(Mongo::Error::InvalidNonce)
+      end
+    end
+  end
+
+  describe '#finalize' do
+
+    let(:continue_reply) do
+      Mongo::Protocol::Reply.new
+    end
+
+    let(:continue_documents) do
+      [{
+        'conversationId' => 1,
+        'done' => false,
+        'payload' => continue_payload,
+        'ok' => 1.0
+      }]
+    end
+
+    let(:continue_payload) do
+      BSON::Binary.new(
+        'r=NDA2NzU3MDY3MDYwMTgyt7/+IWaw1HaZZ5NmPJUTWapLpH2Gg+d8,s=AVvQXzAbxweH2RYDICaplw==,i=10000'
+      )
+    end
+
+    let(:reply) do
+      Mongo::Protocol::Reply.new
+    end
+
+    let(:documents) do
+      [{
+        'conversationId' => 1,
+        'done' => false,
+        'payload' => payload,
+        'ok' => 1.0
+      }]
+    end
+
+    before do
+      expect(SecureRandom).to receive(:base64).once.and_return('NDA2NzU3MDY3MDYwMTgy')
+      continue_reply.instance_variable_set(:@documents, continue_documents)
+      reply.instance_variable_set(:@documents, documents)
+    end
+
+    context 'when the verifier matches the server signature' do
+
+      let(:payload) do
+        BSON::Binary.new('v=gwo9E8+uifshm7ixj441GvIfuUY=')
+      end
+
+      let(:query) do
+        conversation.continue(continue_reply)
+        conversation.finalize(reply)
+      end
+
+      let(:selector) do
+        query.selector
+      end
+
+      it 'sets the conversation id' do
+        expect(selector[:conversationId]).to eq(1)
+      end
+
+      it 'sets the empty payload' do
+        expect(selector[:payload].data).to eq('')
+      end
+
+      it 'sets the continue flag' do
+        expect(selector[:saslContinue]).to eq(1)
+      end
+    end
+
+    context 'when the verifier does not match the server signature' do
+
+      let(:payload) do
+        BSON::Binary.new('v=LQ+8yhQeVL2a3Dh+TDJ7xHz4Srk=')
+      end
+
+      it 'raises an error' do
+        expect {
+          conversation.continue(continue_reply)
+          conversation.finalize(reply)
+        }.to raise_error(Mongo::Error::InvalidSignature)
+      end
+    end
+  end
+end

data/spec/mongo/auth/scram_spec.rb

@@ -0,0 +1,55 @@
+require 'spec_helper'
+
+describe Mongo::Auth::SCRAM do
+
+  let(:address) do
+    Mongo::Address.new(DEFAULT_ADDRESS)
+  end
+
+  let(:server) do
+    Mongo::Server.new(address, Mongo::Event::Listeners.new)
+  end
+
+  let(:connection) do
+    Mongo::Server::Connection.new(server)
+  end
+
+  describe '#login' do
+
+    context 'when the user is not authorized' do
+
+      let(:user) do
+        Mongo::Auth::User.new(
+          database: 'driver',
+          user: 'notauser',
+          password: 'password'
+        )
+      end
+
+      let(:cr) do
+        described_class.new(user)
+      end
+
+      it 'raises an exception', if: list_command_enabled? do
+        expect {
+          cr.login(connection)
+        }.to raise_error(Mongo::Auth::Unauthorized)
+      end
+    end
+  end
+
+  context 'when the user is authorized for the database' do
+
+    let(:cr) do
+      described_class.new(root_user)
+    end
+
+    let(:login) do
+      cr.login(connection).documents[0]
+    end
+
+    it 'logs the user into the connection', if: list_command_enabled? do
+      expect(login['ok']).to eq(1)
+    end
+  end
+end

data/spec/mongo/auth/user/view_spec.rb

@@ -0,0 +1,76 @@
+require 'spec_helper'
+
+describe Mongo::Auth::User::View do
+
+  let(:view) do
+    described_class.new(root_authorized_client.database)
+  end
+
+  describe '#create' do
+
+    let!(:response) do
+      view.create(
+        'durran',
+        password: 'password', roles: [ Mongo::Auth::Roles::READ_WRITE ]
+      )
+    end
+
+    after do
+      view.remove('durran')
+    end
+
+    context 'when user creation was successful' do
+
+      it 'saves the user in the database' do
+        expect(response).to be_successful
+      end
+    end
+
+    context 'when creation was not successful' do
+
+      it 'raises an exception' do
+        expect {
+          view.create('durran', password: 'password')
+        }.to raise_error(Mongo::Error::OperationFailure)
+      end
+    end
+  end
+
+  describe '#remove' do
+
+    context 'when user removal was successful' do
+
+      before do
+        view.create(
+          'durran',
+          password: 'password', roles: [ Mongo::Auth::Roles::READ_WRITE ]
+        )
+      end
+
+      let(:response) do
+        view.remove('durran')
+      end
+
+      it 'saves the user in the database' do
+        expect(response).to be_successful
+      end
+    end
+
+    context 'when removal was not successful' do
+
+      it 'raises an exception', if: write_command_enabled? do
+        expect {
+          view.remove('notauser')
+        }.to raise_error(Mongo::Error::OperationFailure)
+      end
+
+      it 'does not raise an exception', unless: write_command_enabled? do
+        expect(view.remove('notauser').written_count).to eq(0)
+      end
+    end
+  end
+
+  describe '#update' do
+
+  end
+end