mongo 2.12.4 → 2.13.0.beta1

data/spec/integration/client_authentication_options_spec.rb

@@ -256,43 +256,6 @@ describe 'Client authentication options' do
         expect(client.options[:auth_mech_properties]).to eq({ 'service_name' => 'mongodb' })
       end
     end
-
-    context 'when properties are given but not service name' do
-      context 'with URI options' do
-        let(:credentials) { "#{user}:#{pwd}@" }
-
-        context 'with default auth mech properties' do
-          let(:options) { '?authMechanism=GSSAPI&authMechanismProperties=service_realm:foo' }
-
-          it 'sets service name to mongodb' do
-            expect(client.options[:auth_mech_properties]).to eq(
-              'service_name' => 'mongodb',
-              'service_realm' => 'foo',
-            )
-          end
-        end
-      end
-
-      context 'with client options' do
-        let(:client_opts) do
-          {
-            auth_mech: :gssapi,
-            user: user,
-            password: pwd,
-            auth_mech_properties: {
-              service_realm: 'foo',
-            }.freeze,
-          }.freeze
-        end
-
-        it 'sets default auth mech properties' do
-          expect(client.options[:auth_mech_properties]).to eq(
-            'service_name' => 'mongodb',
-            'service_realm' => 'foo',
-          )
-        end
-      end
-    end
   end
 
   context 'with PLAIN auth mechanism' do

data/spec/integration/client_construction_aws_auth_spec.rb

@@ -0,0 +1,191 @@
+require 'spec_helper'
+
+describe 'Client construction with AWS auth' do
+  require_aws_auth
+
+  let(:client) do
+    new_local_client(SpecConfig.instance.addresses,
+      SpecConfig.instance.ssl_options.merge(
+        auth_mech: :aws,
+        connect_timeout: 3.44, socket_timeout: 3.45,
+        server_selection_timeout: 3.46))
+  end
+
+  let(:authenticated_user_info) do
+    # https://stackoverflow.com/questions/21414608/mongodb-show-current-user
+    info = client.database.command(connectionStatus: 1).documents.first
+    info[:authInfo][:authenticatedUsers].first
+  end
+
+  let(:authenticated_user_name) { authenticated_user_info[:user] }
+
+  shared_examples_for 'connects successfully' do
+    it 'connects successfully' do
+      client['foo'].insert_one(test: true)
+    end
+  end
+
+  context 'credentials specified explicitly' do
+
+    let(:username) { ENV.fetch('MONGO_RUBY_DRIVER_AWS_AUTH_ACCESS_KEY_ID') }
+    let(:password) { ENV.fetch('MONGO_RUBY_DRIVER_AWS_AUTH_SECRET_ACCESS_KEY') }
+    let(:session_token) { ENV.fetch('MONGO_RUBY_DRIVER_AWS_AUTH_SESSION_TOKEN') }
+    let(:address_strs) { SpecConfig.instance.addresses.join(',') }
+
+    context 'regular credentials' do
+      require_auth 'aws-regular'
+
+      context 'via Ruby options' do
+        let(:client) do
+          new_local_client(SpecConfig.instance.addresses,
+            SpecConfig.instance.ssl_options.merge(
+              auth_mech: :aws,
+              user: username,
+              password: password,
+              connect_timeout: 3.34, socket_timeout: 3.35,
+              server_selection_timeout: 3.36))
+        end
+
+        it_behaves_like 'connects successfully'
+
+        it 'uses the expected user' do
+          puts "Authenticated as #{authenticated_user_name}"
+          authenticated_user_name.should =~ /^arn:aws:iam:/
+        end
+      end
+
+      context 'via URI' do
+        let(:client) do
+          new_local_client("mongodb://#{CGI.escape(username)}:#{CGI.escape(password)}@#{address_strs}/test?authMechanism=MONGODB-AWS&serverSelectionTimeoutMS=3.26")
+        end
+
+        it_behaves_like 'connects successfully'
+
+        it 'uses the expected user' do
+          puts "Authenticated as #{authenticated_user_name}"
+          authenticated_user_name.should =~ /^arn:aws:iam:/
+        end
+      end
+    end
+
+    context 'temporary credentials' do
+      require_auth 'aws-assume-role'
+
+      context 'via Ruby options' do
+        let(:client) do
+          new_local_client(SpecConfig.instance.addresses,
+            SpecConfig.instance.ssl_options.merge(
+              auth_mech: :aws,
+              user: username,
+              password: password,
+              auth_mech_properties: {
+                aws_session_token: session_token,
+              },
+              connect_timeout: 3.34, socket_timeout: 3.35,
+              server_selection_timeout: 3.36))
+        end
+
+        it_behaves_like 'connects successfully'
+
+        it 'uses the expected user' do
+          puts "Authenticated as #{authenticated_user_name}"
+          authenticated_user_name.should =~ /^arn:aws:sts:/
+        end
+      end
+
+      context 'via URI' do
+        let(:client) do
+          new_local_client("mongodb://#{CGI.escape(username)}:#{CGI.escape(password)}@#{address_strs}/test?authMechanism=MONGODB-AWS&serverSelectionTimeoutMS=3.26&authMechanismProperties=AWS_SESSION_TOKEN:#{CGI.escape(session_token)}")
+        end
+
+        it_behaves_like 'connects successfully'
+
+        it 'uses the expected user' do
+          puts "Authenticated as #{authenticated_user_name}"
+          authenticated_user_name.should =~ /^arn:aws:sts:/
+        end
+      end
+    end
+  end
+
+  context 'credentials specified via environment' do
+    require_auth 'aws-regular', 'aws-assume-role'
+
+    context 'no credentials given explicitly to Client constructor' do
+      context 'credentials not provided in environment' do
+        local_env(
+          'AWS_ACCESS_KEY_ID' => nil,
+          'AWS_SECRET_ACCESS_KEY' => nil,
+          'AWS_SESSION_TOKEN' => nil,
+        )
+
+        it 'does not connect' do
+          lambda do
+            client['foo'].insert_one(test: true)
+          end.should raise_error(Mongo::Auth::InvalidConfiguration, /Could not locate AWS credentials/)
+        end
+      end
+
+      context 'credentials provided in environment' do
+        local_env do
+          {
+            'AWS_ACCESS_KEY_ID' => ENV.fetch('MONGO_RUBY_DRIVER_AWS_AUTH_ACCESS_KEY_ID'),
+            'AWS_SECRET_ACCESS_KEY' => ENV.fetch('MONGO_RUBY_DRIVER_AWS_AUTH_SECRET_ACCESS_KEY'),
+            'AWS_SESSION_TOKEN' => ENV['MONGO_RUBY_DRIVER_AWS_AUTH_SESSION_TOKEN'],
+          }
+        end
+
+        it_behaves_like 'connects successfully'
+
+        context 'when using regular credentials' do
+          require_auth 'aws-regular'
+
+          it 'uses the expected user' do
+            puts "Authenticated as #{authenticated_user_name}"
+            authenticated_user_name.should =~ /^arn:/
+            authenticated_user_name.should_not =~ /^arn:.*assumed-role/
+          end
+        end
+
+        context 'when using assume role credentials' do
+          require_auth 'aws-assume-role'
+
+          it 'uses the expected user' do
+            puts "Authenticated as #{authenticated_user_name}"
+            authenticated_user_name.should =~ /^arn:.*assumed-role/
+          end
+        end
+      end
+    end
+  end
+
+  context 'credentials specified via instance/task metadata' do
+    require_auth 'aws-ec2', 'aws-ecs'
+
+    before(:all) do
+      # No explicit credentials are expected in the tested configurations
+      ENV['AWS_ACCESS_KEY_ID'].should be_nil
+    end
+
+    it_behaves_like 'connects successfully'
+
+    context 'when using ec2 instance role' do
+      require_auth 'aws-ec2'
+
+      it 'uses the expected user' do
+        puts "Authenticated as #{authenticated_user_name}"
+        authenticated_user_name.should =~ /^arn:aws:sts:.*assumed-role.*instance_profile_role/
+      end
+    end
+
+    context 'when using ecs task role' do
+      require_auth 'aws-ecs'
+
+      it 'uses the expected user' do
+        puts "Authenticated as #{authenticated_user_name}"
+        authenticated_user_name.should =~ /^arn:aws:sts:.*assumed-role.*ecstaskexecutionrole/i
+      end
+    end
+  end
+
+end

data/spec/integration/client_construction_spec.rb

@@ -7,7 +7,7 @@ describe 'Client construction' do
     SpecConfig.instance.test_options.merge(
       server_selection_timeout: 5,
       database: SpecConfig.instance.test_db,
-    ).merge(SpecConfig.instance.credentials_or_x509(
+    ).merge(SpecConfig.instance.credentials_or_external_user(
       user: SpecConfig.instance.test_user.name,
       password: SpecConfig.instance.test_user.password,
     ))

data/spec/integration/client_side_encryption/auto_encryption_bulk_writes_spec.rb

@@ -113,7 +113,7 @@ describe 'Bulk writes with auto-encryption enabled' do
         it 'raises an exception' do
           expect do
             bulk_write.execute
-          end.to raise_error(Mongo::Error::MaxBSONSize, /The document exceeds maximum allowed BSON object size after serialization/)
+          end.to raise_error(Mongo::Error::MaxBSONSize, /maximum allowed size: 16777216 bytes/)
         end
       end
     end
@@ -162,19 +162,15 @@ describe 'Bulk writes with auto-encryption enabled' do
       context 'when one operation is larger than 16MiB' do
         let(:requests) do
           [
-            { update_one: { filter: { _id: 1 }, update: { ssn: 'a' * (Mongo::Server::ConnectionBase::DEFAULT_MAX_BSON_OBJECT_SIZE) } } },
+            { update_one: { filter: { _id: 1 }, update: { ssn: 'a' * (Mongo::Server::ConnectionBase::DEFAULT_MAX_BSON_OBJECT_SIZE - 100) } } },
             { update_one: { filter: { _id: 2 }, update: { ssn: 'a' * size_limit } } },
           ]
         end
 
-        before do
-          expect(requests.first.to_bson.length).to be > Mongo::Server::ConnectionBase::DEFAULT_MAX_BSON_OBJECT_SIZE
-        end
-
         it 'raises an exception' do
           expect do
             bulk_write.execute
-          end.to raise_error(Mongo::Error::MaxBSONSize, /The document exceeds maximum allowed BSON object size after serialization/)
+          end.to raise_error(Mongo::Error::MaxBSONSize, /maximum allowed size: 16777216 bytes/)
         end
       end
     end
@@ -259,7 +255,7 @@ describe 'Bulk writes with auto-encryption enabled' do
         it 'raises an exception' do
           expect do
             bulk_write.execute
-          end.to raise_error(Mongo::Error::MaxBSONSize, /The document exceeds maximum allowed BSON object size after serialization/)
+          end.to raise_error(Mongo::Error::MaxBSONSize, /maximum allowed size: 16777216 bytes/)
         end
       end
     end
@@ -350,7 +346,7 @@ describe 'Bulk writes with auto-encryption enabled' do
       it 'raises an exception' do
         expect do
           perform_bulk_write
-        end.to raise_error(Mongo::Error::MaxBSONSize, /The document exceeds maximum allowed BSON object size after serialization/)
+        end.to raise_error(Mongo::Error::MaxBSONSize, /maximum allowed size: 16777216 bytes/)
       end
     end
   end

data/spec/integration/collection_indexes_prose_spec.rb

@@ -0,0 +1,55 @@
+require 'spec_helper'
+
+describe 'Mongo::Collection#indexes / listIndexes prose tests' do
+  let(:collection) do
+    authorized_client['list-indexes-prose']
+  end
+
+  before do
+    collection.drop
+    collection.create
+    collection.indexes.create_one({name: 1}, name: 'simple')
+    collection.indexes.create_one({hello: 1, world: -1}, name: 'compound')
+    collection.indexes.create_one({test: 1}, unique: true, name: 'unique')
+    collection.insert_one(
+      name: 'Stanley',
+      hello: 'Yes',
+      world: 'No',
+      test: 'Always',
+    )
+  end
+
+  let(:index_list) do
+    collection.indexes.to_a
+  end
+
+  it 'returns all index names' do
+    %w(simple compound unique).each do |name|
+      index_list.detect do |spec|
+        spec['name'] = name
+      end.should be_a(Hash)
+    end
+  end
+
+  it 'does not return duplicate or nonexistent index names' do
+    # There are 4 total indexes: 3 that we explicitly defined + the
+    # implicit index on _id.
+    index_list.length.should == 4
+  end
+
+  it 'returns the unique flag for unique index' do
+    unique_index = index_list.detect do |spec|
+      spec['name'] == 'unique'
+    end
+    unique_index['unique'].should be true
+  end
+
+  it 'does not return the unique flag for non-unique index' do
+    %w(simple compound).each do |name|
+      index = index_list.detect do |spec|
+        spec['name'] == name
+      end
+      index['unique'].should be nil
+    end
+  end
+end

data/spec/integration/command_monitoring_spec.rb

@@ -73,13 +73,37 @@ describe 'Command monitoring' do
     min_server_fcv '3.6'
 
     # X.509 auth uses authenticate instead of sasl* commands
-    require_no_x509_auth
+    require_no_external_user
+
+    shared_examples_for 'does not nest auth and find' do
+      it 'does not nest auth and find' do
+        expect(subscriber.started_events.length).to eq 0
+        client['test-collection'].find(a: 1).first
+        command_names = subscriber.started_events.map(&:command_name)
+        command_names.should == expected_command_names
+      end
+    end
+
+    context 'pre-4.4 servers' do
+      max_server_version '4.2'
+
+      let(:expected_command_names) do
+        # Long SCRAM conversation.
+        %w(saslStart saslContinue saslContinue find)
+      end
+
+      it_behaves_like 'does not nest auth and find'
+    end
+
+    context '4.4+ servers' do
+      min_server_fcv '4.4'
+
+      let(:expected_command_names) do
+        # Speculative auth + short SCRAM conversation.
+        %w(saslContinue find)
+      end
 
-    it 'does not nest auth and find' do
-      expect(subscriber.started_events.length).to eq 0
-      client['test-collection'].find(a: 1).first
-      command_names = subscriber.started_events.map(&:command_name)
-      expect(command_names).to eq %w(saslStart saslContinue saslContinue find)
+      it_behaves_like 'does not nest auth and find'
     end
   end
 

data/spec/integration/command_spec.rb

@@ -8,16 +8,18 @@ describe 'Command' do
     let(:server) { authorized_client.cluster.next_primary }
 
     let(:payload) do
-      command.send(:final_operation, server).send(:message, server).payload.dup.tap do |payload|
-        if payload['request_id'].is_a?(Integer)
-          payload['request_id'] = 42
+      server.with_connection do |connection|
+        command.send(:final_operation, connection).send(:message, connection).payload.dup.tap do |payload|
+          if payload['request_id'].is_a?(Integer)
+            payload['request_id'] = 42
+          end
+          # $clusterTime may be present depending on the client's state
+          payload['command'].delete('$clusterTime')
+          # 3.6+ servers also return a payload field, earlier ones do not.
+          # The contents of this field duplicates the rest of the response
+          # so we can get rid of it without losing information.
+          payload.delete('reply')
         end
-        # $clusterTime may be present depending on the client's state
-        payload['command'].delete('$clusterTime')
-        # 3.6+ servers also return a payload field, earlier ones do not.
-        # The contents of this field duplicates the rest of the response
-        # so we can get rid of it without losing information.
-        payload.delete('reply')
       end
     end
 

data/spec/integration/connect_single_rs_name_spec.rb

@@ -41,10 +41,11 @@ describe 'Direct connection with RS name' do
 
       it_behaves_like 'passes RS name to topology'
 
-      it 'creates a client which raises on every operation' do
+      it 'creates a client which does not find a suitable server' do
+        # TODO When RUBY-2197 is implemented, assert the error message also
         expect do
           client.database.command(ismaster: 1)
-        end.to raise_error(Mongo::Error::NoServerAvailable, "Cluster topology specifies replica set name wrong, but the server has replica set name #{ClusterConfig.instance.replica_set_name}")
+        end.to raise_error(Mongo::Error::NoServerAvailable)
       end
     end
   end
@@ -58,9 +59,10 @@ describe 'Direct connection with RS name' do
       it_behaves_like 'passes RS name to topology'
 
       it 'creates a client which raises on every operation' do
+        # TODO When RUBY-2197 is implemented, assert the error message also
         expect do
           client.database.command(ismaster: 1)
-        end.to raise_error(Mongo::Error::NoServerAvailable, 'Cluster topology specifies replica set name any, but the server has replica set name <nil>')
+        end.to raise_error(Mongo::Error::NoServerAvailable)
       end
     end
   end