mongo 2.20.1 → 2.21.1

data/spec/mongo/crypt/binding_unloaded_spec.rb

@@ -1,37 +0,0 @@
-# frozen_string_literal: true
-# rubocop:todo all
-
-require 'lite_spec_helper'
-
-describe 'Mongo::Crypt::Binding' do
-  require_no_libmongocrypt
-
-  before(:all) do
-    if ENV['FLE'] == 'helper'
-      skip 'FLE=helper is incompatible with unloaded binding tests'
-    end
-  end
-
-  context 'when load fails' do
-
-    # JRuby 9.3.2.0 converts our custom LoadErrors to generic NameErrors
-    # and trashes the exception messages.
-    # https://github.com/jruby/jruby/issues/7070
-    # JRuby 9.2 works correctly, this test is skipped on all JRuby versions
-    # because we intend to remove JRuby support altogether and therefore
-    # adding logic to condition on JRuby versions does not make sense.
-    fails_on_jruby
-
-    it 'retries loading at the next reference' do
-      lambda do
-        Mongo::Crypt::Binding
-      end.should raise_error(LoadError, /no path to libmongocrypt specified/)
-
-      # second load should also be attempted and should fail with the
-      # LoadError exception
-      lambda do
-        Mongo::Crypt::Binding
-      end.should raise_error(LoadError, /no path to libmongocrypt specified/)
-    end
-  end
-end

data/spec/mongo/crypt/data_key_context_spec.rb

@@ -1,144 +0,0 @@
-# frozen_string_literal: true
-# rubocop:todo all
-
-require 'mongo'
-require 'base64'
-require 'lite_spec_helper'
-
-describe Mongo::Crypt::DataKeyContext do
-  require_libmongocrypt
-  include_context 'define shared FLE helpers'
-
-  let(:credentials) { Mongo::Crypt::KMS::Credentials.new(kms_providers) }
-
-  let(:kms_tls_options) do
-    {}
-  end
-
-  let(:mongocrypt) do
-    Mongo::Crypt::Handle.new(credentials, kms_tls_options)
-  end
-
-  let(:io) { double("Mongo::Crypt::EncryptionIO") }
-
-  let(:key_alt_names) { [] }
-
-  let(:context) { described_class.new(mongocrypt, io, key_document, key_alt_names, nil) }
-
-  describe '#initialize' do
-    shared_examples 'it properly sets key_alt_names' do
-      context 'with one key_alt_names' do
-        let(:key_alt_names) { ['keyAltName1'] }
-
-        it 'does not raise an exception' do
-          expect do
-            context
-          end.not_to raise_error
-        end
-      end
-
-      context 'with multiple key_alt_names' do
-        let(:key_alt_names) { ['keyAltName1', 'keyAltName2'] }
-
-        it 'does not raise an exception' do
-          expect do
-            context
-          end.not_to raise_error
-        end
-      end
-
-      context 'with empty key_alt_names' do
-        let(:key_alt_names) { [] }
-
-        it 'does not raise an exception' do
-          expect do
-            context
-          end.not_to raise_error
-        end
-      end
-
-      context 'with invalid key_alt_names' do
-        let(:key_alt_names) { ['keyAltName1', 3] }
-
-        it 'does raises an exception' do
-          expect do
-            context
-          end.to raise_error(ArgumentError, /All values of the :key_alt_names option Array must be Strings/)
-        end
-      end
-
-      context 'with non-array key_alt_names' do
-        let(:key_alt_names) { "keyAltName1" }
-
-        it 'does raises an exception' do
-          expect do
-            context
-          end.to raise_error(ArgumentError, /key_alt_names option must be an Array/)
-        end
-      end
-    end
-
-    context 'with aws kms provider' do
-      include_context 'with AWS kms_providers'
-
-      let(:key_document) do
-        Mongo::Crypt::KMS::MasterKeyDocument.new(
-          'aws',
-          { master_key: { region: 'us-east-2', key: 'arn' } }
-        )
-      end
-
-      it_behaves_like 'it properly sets key_alt_names'
-
-      context 'with valid options' do
-        it 'does not raise an exception' do
-          expect do
-            context
-          end.not_to raise_error
-        end
-      end
-
-      context 'with valid endpoint' do
-        let(:key_document) do
-          Mongo::Crypt::KMS::MasterKeyDocument.new(
-            'aws',
-            {
-              master_key: {
-                region: 'us-east-2',
-                key: 'arn',
-                endpoint: 'kms.us-east-2.amazonaws.com:443'
-              }
-            }
-          )
-        end
-
-        it 'does not raise an exception' do
-          expect do
-            context
-          end.not_to raise_error
-        end
-      end
-    end
-  end
-
-  describe '#run_state_machine' do
-    # TODO: test with AWS KMS provider
-
-    context 'with local KMS provider' do
-      include_context 'with local kms_providers'
-
-      let(:key_document) do
-        Mongo::Crypt::KMS::MasterKeyDocument.new(
-          'local',
-          {
-            master_key: { key: 'MASTER-KEY' }
-          }
-        )
-      end
-
-      it 'creates a data key' do
-        expect(context.run_state_machine).to be_a_kind_of(Hash)
-      end
-    end
-  end
-end

data/spec/mongo/crypt/encryption_io_spec.rb

@@ -1,141 +0,0 @@
-# frozen_string_literal: true
-# rubocop:todo all
-
-require 'mongo'
-require 'spec_helper'
-
-describe Mongo::Crypt::EncryptionIO do
-  let(:subject) do
-    described_class.new(
-      key_vault_namespace: 'foo.bar',
-      key_vault_client: authorized_client,
-      metadata_client: authorized_client.with(auto_encryption_options: nil),
-      mongocryptd_options: mongocryptd_options,
-    )
-  end
-
-  describe '#spawn_mongocryptd' do
-    context 'no spawn path' do
-      let(:mongocryptd_options) do
-        {
-          mongocryptd_spawn_args: ['test'],
-        }
-      end
-
-      it 'fails with an exception' do
-        lambda do
-          subject.send(:spawn_mongocryptd)
-        end.should raise_error(ArgumentError, /Cannot spawn mongocryptd process when no.*mongocryptd_spawn_path/)
-      end
-    end
-
-    context 'no spawn args' do
-      let(:mongocryptd_options) do
-        {
-          mongocryptd_spawn_path: 'echo',
-        }
-      end
-
-      it 'fails with an exception' do
-        lambda do
-          subject.send(:spawn_mongocryptd)
-        end.should raise_error(ArgumentError, /Cannot spawn mongocryptd process when no.*mongocryptd_spawn_args/)
-      end
-    end
-
-    context 'empty array for spawn args' do
-      let(:mongocryptd_options) do
-        {
-          mongocryptd_spawn_path: 'echo',
-          mongocryptd_spawn_args: [],
-        }
-      end
-
-      it 'fails with an exception' do
-        lambda do
-          subject.send(:spawn_mongocryptd)
-        end.should raise_error(ArgumentError, /Cannot spawn mongocryptd process when no.*mongocryptd_spawn_args/)
-      end
-    end
-
-    context 'good spawn path and args' do
-      let(:mongocryptd_options) do
-        {
-          mongocryptd_spawn_path: 'echo',
-          mongocryptd_spawn_args: ['hi'],
-        }
-      end
-
-      it 'spawns' do
-        subject.send(:spawn_mongocryptd)
-      end
-    end
-
-    context '-- for args to emulate no args' do
-      let(:mongocryptd_options) do
-        {
-          mongocryptd_spawn_path: 'echo',
-          mongocryptd_spawn_args: ['--'],
-        }
-      end
-
-      it 'spawns' do
-        subject.send(:spawn_mongocryptd)
-      end
-    end
-  end
-
-  describe '#mark_command' do
-    let(:mock_client) do
-      double('mongocryptd client').tap do |client|
-        database = double('mock database')
-        expect(database).to receive(:command).and_raise(Mongo::Error::NoServerAvailable.new(Mongo::ServerSelector::Primary.new, nil, 'test message'))
-        allow(database).to receive(:command).and_return([])
-        expect(client).to receive(:database).at_least(:once).and_return(database)
-      end
-    end
-
-    let(:base_options) do
-      {
-        mongocryptd_spawn_path: 'echo',
-        mongocryptd_spawn_args: ['--'],
-      }
-    end
-
-    let(:subject) do
-      described_class.new(
-        mongocryptd_client: mock_client,
-        key_vault_namespace: 'foo.bar',
-        key_vault_client: authorized_client,
-        metadata_client: authorized_client.with(auto_encryption_options: nil),
-        mongocryptd_options: mongocryptd_options,
-      )
-    end
-
-    context ':mongocryptd_bypass_spawn not given' do
-      let(:mongocryptd_options) do
-        base_options
-      end
-
-      it 'spawns' do
-        expect(subject).to receive(:spawn_mongocryptd)
-        subject.mark_command({})
-      end
-    end
-
-    context ':mongocryptd_bypass_spawn given' do
-      let(:mongocryptd_options) do
-        base_options.merge(
-          mongocryptd_bypass_spawn: true,
-        )
-      end
-
-      it 'does not spawn' do
-        expect(subject).not_to receive(:spawn_mongocryptd)
-        lambda do
-          subject.mark_command({})
-        end.should raise_error(Mongo::Error::NoServerAvailable, /test message/)
-      end
-    end
-  end
-end

data/spec/mongo/crypt/explicit_decryption_context_spec.rb

@@ -1,106 +0,0 @@
-# frozen_string_literal: true
-# rubocop:todo all
-
-require 'mongo'
-require 'lite_spec_helper'
-
-describe Mongo::Crypt::ExplicitDecryptionContext do
-  require_libmongocrypt
-  include_context 'define shared FLE helpers'
-
-  let(:credentials) { Mongo::Crypt::KMS::Credentials.new(kms_providers) }
-  let(:mongocrypt) { Mongo::Crypt::Handle.new(credentials, logger: logger) }
-  let(:context) { described_class.new(mongocrypt, io, value) }
-  let(:logger) { nil }
-  let(:io) { double("Mongo::ClientEncryption::IO") }
-
-  # A binary string representing a value previously encrypted by libmongocrypt
-  let(:encrypted_data) do
-    "\x01\xDF2~\x89\xD2+N}\x84;i(\xE5\xF4\xBF \x024\xE5\xD2\n\x9E\x97\x9F\xAF\x9D\xC7\xC9\x1A\a\x87z\xAE_;r\xAC\xA9\xF6n\x1D\x0F\xB5\xB1#O\xB7\xCA\xEE$/\xF1\xFA\b\xA7\xEC\xDB\xB6\xD4\xED\xEAMw3+\xBBv\x18\x97\xF9\x99\xD5\x13@\x80y\n{\x19R\xD3\xF0\xA1C\x05\xF7)\x93\x9Bh\x8AA.\xBB\xD3&\xEA"
-  end
-
-  let(:value) do
-    { 'v': BSON::Binary.new(encrypted_data, :ciphertext) }
-  end
-
-  describe '#initialize' do
-    context 'when mongocrypt is initialized with local KMS provider options' do
-      include_context 'with local kms_providers'
-
-      it 'initializes context' do
-        expect do
-          context
-        end.not_to raise_error
-      end
-    end
-
-    context 'when mongocrypt is initialized with AWS KMS provider options' do
-      include_context 'with AWS kms_providers'
-
-      it 'initializes context' do
-        expect do
-          context
-        end.not_to raise_error
-      end
-    end
-
-    context 'when mongocrypt is initialized with Azure KMS provider options' do
-      include_context 'with Azure kms_providers'
-
-      it 'initializes context' do
-        expect do
-          context
-        end.not_to raise_error
-      end
-    end
-
-    context 'when mongocrypt is initialized with GCP KMS provider options' do
-      include_context 'with GCP kms_providers'
-
-      it 'initializes context' do
-        expect do
-          context
-        end.not_to raise_error
-      end
-    end
-
-    context 'when mongocrypt is initialized with KMIP KMS provider options' do
-      include_context 'with KMIP kms_providers'
-
-      it 'initializes context' do
-        expect do
-          context
-        end.not_to raise_error
-      end
-    end
-
-    context 'with verbose logging' do
-      include_context 'with local kms_providers'
-
-      before(:all) do
-        # Logging from libmongocrypt requires the C library to be built with the -DENABLE_TRACE=ON
-        # option; none of the pre-built packages on Evergreen have been built with logging enabled.
-        #
-        # It is still useful to be able to run these tests locally to confirm that logging is working
-        # while debugging any problems.
-        #
-        # For now, skip this test by default and revisit once we have determined how we want to
-        # package libmongocrypt with the Ruby driver (see: https://jira.mongodb.org/browse/RUBY-1966)
-        skip "These tests require libmongocrypt to be built with the '-DENABLE_TRACE=ON' cmake option." +
-          " They also require the MONGOCRYPT_TRACE environment variable to be set to 'ON'."
-      end
-
-      let(:logger) do
-        ::Logger.new(STDOUT).tap do |logger|
-          logger.level = ::Logger::DEBUG
-        end
-      end
-
-      it 'receives log messages from libmongocrypt' do
-        expect(logger).to receive(:debug).with(/mongocrypt_ctx_explicit_decrypt_init/)
-
-        context
-      end
-    end
-  end
-end

data/spec/mongo/crypt/explicit_encryption_context_spec.rb

@@ -1,266 +0,0 @@
-# frozen_string_literal: true
-# rubocop:todo all
-
-require 'mongo'
-require 'lite_spec_helper'
-
-describe Mongo::Crypt::ExplicitEncryptionContext do
-  require_libmongocrypt
-  include_context 'define shared FLE helpers'
-
-  let(:credentials) { Mongo::Crypt::KMS::Credentials.new(kms_providers) }
-  let(:mongocrypt) { Mongo::Crypt::Handle.new(credentials, logger: logger) }
-  let(:context) { described_class.new(mongocrypt, io, value, options) }
-
-  let(:logger) { nil }
-
-  let(:io) { double("Mongo::ClientEncryption::IO") }
-  let(:value) { { 'v': 'Hello, world!' } }
-
-  let(:options) do
-    {
-      key_id: key_id,
-      key_alt_name: key_alt_name,
-      algorithm: algorithm
-    }
-  end
-
-  describe '#initialize' do
-    shared_examples 'a functioning ExplicitEncryptionContext' do
-      context 'with nil key_id and key_alt_name options' do
-        let(:key_id) { nil }
-        let(:key_alt_name) { nil }
-
-        it 'raises an exception' do
-          expect do
-            context
-          end.to raise_error(ArgumentError, /:key_id and :key_alt_name options cannot both be nil/)
-        end
-      end
-
-      context 'with both key_id and key_alt_name options' do
-        it 'raises an exception' do
-          expect do
-            context
-          end.to raise_error(ArgumentError, /:key_id and :key_alt_name options cannot both be present/)
-        end
-      end
-
-      context 'with invalid key_id' do
-        let(:key_id) { 'random string' }
-        let(:key_alt_name) { nil }
-
-        it 'raises an exception' do
-          expect do
-            context
-          end.to raise_error(ArgumentError, /Expected the :key_id option to be a BSON::Binary object/)
-        end
-      end
-
-      context 'with invalid key_alt_name' do
-        let(:key_id) { nil }
-        let(:key_alt_name) { 5 }
-
-        it 'raises an exception' do
-          expect do
-            context
-          end.to raise_error(ArgumentError, /key_alt_name option must be a String/)
-        end
-      end
-
-      context 'with valid key_alt_name' do
-        let(:key_id) { nil }
-
-        context 'with nil algorithm' do
-          let(:algorithm) { nil }
-
-          it 'raises exception' do
-            expect do
-              context
-            end.to raise_error(Mongo::Error::CryptError, /passed null algorithm/)
-          end
-        end
-
-        context 'with invalid algorithm' do
-          let(:algorithm) { 'unsupported-algorithm' }
-
-          it 'raises an exception' do
-            expect do
-              context
-            end.to raise_error(Mongo::Error::CryptError, /unsupported algorithm/)
-          end
-        end
-
-        it 'initializes context' do
-          expect do
-            context
-          end.not_to raise_error
-        end
-      end
-
-      context 'with valid key_id' do
-        let(:key_alt_name) { nil }
-
-        context 'with nil algorithm' do
-          let(:algorithm) { nil }
-
-          it 'raises exception' do
-            expect do
-              context
-            end.to raise_error(Mongo::Error::CryptError, /passed null algorithm/)
-          end
-        end
-
-        context 'with invalid algorithm' do
-          let(:algorithm) { 'unsupported-algorithm' }
-
-          it 'raises an exception' do
-            expect do
-              context
-            end.to raise_error(Mongo::Error::CryptError, /unsupported algorithm/)
-          end
-        end
-
-        it 'initializes context' do
-          expect do
-            context
-          end.not_to raise_error
-        end
-      end
-
-      context 'with query_type' do
-        let(:key_alt_name) { nil }
-
-        it 'raises exception' do
-          expect do
-            described_class.new(
-              mongocrypt,
-              io,
-              value,
-              options.merge(query_type: "equality")
-            )
-          end.to raise_error(ArgumentError, /query_type is allowed only for "Indexed" or "RangePreview" algorithm/)
-        end
-      end
-
-      context 'with contention_factor' do
-        let(:key_alt_name) { nil }
-
-        it 'raises exception' do
-          expect do
-            described_class.new(
-              mongocrypt,
-              io,
-              value,
-              options.merge(contention_factor: 10)
-            )
-          end.to raise_error(ArgumentError, /contention_factor is allowed only for "Indexed" or "RangePreview" algorithm/)
-        end
-      end
-
-      context 'with Indexed algorithm' do
-        let(:algorithm) do
-          'Indexed'
-        end
-
-        let(:key_alt_name) do
-          nil
-        end
-
-        it 'initializes context' do
-          expect do
-            described_class.new(
-              mongocrypt,
-              io,
-              value,
-              options.merge(contention_factor: 0)
-            )
-          end.not_to raise_error
-        end
-
-        context 'with query_type' do
-          it 'initializes context' do
-            expect do
-              described_class.new(
-                mongocrypt,
-                io,
-                value,
-                options.merge(query_type: "equality", contention_factor: 0)
-              )
-            end.not_to raise_error
-          end
-        end
-
-        context 'with contention_factor' do
-          it 'initializes context' do
-            expect do
-              described_class.new(
-                mongocrypt,
-                io,
-                value,
-                options.merge(contention_factor: 10)
-              )
-            end.not_to raise_error
-          end
-        end
-      end
-    end
-
-    context 'when mongocrypt is initialized with AWS KMS provider options' do
-      include_context 'with AWS kms_providers'
-      it_behaves_like 'a functioning ExplicitEncryptionContext'
-    end
-
-    context 'when mongocrypt is initialized with Azure KMS provider options' do
-      include_context 'with Azure kms_providers'
-      it_behaves_like 'a functioning ExplicitEncryptionContext'
-    end
-
-    context 'when mongocrypt is initialized with GCP KMS provider options' do
-      include_context 'with GCP kms_providers'
-      it_behaves_like 'a functioning ExplicitEncryptionContext'
-    end
-
-    context 'when mongocrypt is initialized with KMIP KMS provider options' do
-      include_context 'with KMIP kms_providers'
-      it_behaves_like 'a functioning ExplicitEncryptionContext'
-    end
-
-    context 'when mongocrypt is initialized with local KMS provider options' do
-      include_context 'with local kms_providers'
-      it_behaves_like 'a functioning ExplicitEncryptionContext'
-    end
-
-    context 'with verbose logging' do
-      include_context 'with local kms_providers'
-
-      before(:all) do
-        # Logging from libmongocrypt requires the C library to be built with the -DENABLE_TRACE=ON
-        # option; none of the pre-built packages on Evergreen have been built with logging enabled.
-        #
-        # It is still useful to be able to run these tests locally to confirm that logging is working
-        # while debugging any problems.
-        #
-        # For now, skip this test by default and revisit once we have determined how we want to
-        # package libmongocrypt with the Ruby driver (see: https://jira.mongodb.org/browse/RUBY-1966)
-        skip "These tests require libmongocrypt to be built with the '-DENABLE_TRACE=ON' cmake option." +
-          " They also require the MONGOCRYPT_TRACE environment variable to be set to 'ON'."
-      end
-
-      let(:key_alt_name) { nil }
-      let(:logger) do
-        ::Logger.new(STDOUT).tap do |logger|
-          logger.level = ::Logger::DEBUG
-        end
-      end
-
-      it 'receives log messages from libmongocrypt' do
-        expect(logger).to receive(:debug).with(/mongocrypt_ctx_setopt_key_id/)
-        expect(logger).to receive(:debug).with(/mongocrypt_ctx_setopt_algorithm/)
-        expect(logger).to receive(:debug).with(/mongocrypt_ctx_explicit_encrypt_init/)
-
-        context
-      end
-    end
-  end
-end