mongo/jstests/auth/repl_auth.js

73 lines
2.6 KiB
JavaScript

/**
* Test that the replica set connections to the secondaries will have the right auth credentials
* even when these connections are shared within the same connection pool.
* @tags: [requires_replication]
*/
import {ReplSetTest} from "jstests/libs/replsettest.js";
let NUM_NODES = 3;
let rsTest = new ReplSetTest({nodes: NUM_NODES});
rsTest.startSet({oplogSize: 10, keyFile: "jstests/libs/key1"});
rsTest.initiate();
rsTest.awaitSecondaryNodes();
let setupConn = rsTest.getPrimary();
let admin = setupConn.getDB("admin");
// Setup initial data
admin.createUser({user: "admin", pwd: "password", roles: jsTest.adminUserRoles});
admin.auth("admin", "password");
setupConn.getDB("foo").createUser({user: "foo", pwd: "foopwd", roles: jsTest.basicUserRoles}, {w: NUM_NODES});
setupConn.getDB("foo").logout();
setupConn.getDB("bar").createUser({user: "bar", pwd: "barpwd", roles: jsTest.basicUserRoles}, {w: NUM_NODES});
setupConn.getDB("bar").logout();
let replConn0 = new Mongo(rsTest.getURL());
let replConn1 = new Mongo(rsTest.getURL());
let fooDB0 = replConn0.getDB("foo");
let barDB0 = replConn0.getDB("bar");
let fooDB1 = replConn1.getDB("foo");
let barDB1 = replConn1.getDB("bar");
fooDB0.auth("foo", "foopwd");
barDB1.auth("bar", "barpwd");
assert.commandWorked(fooDB0.user.insert({x: 1}, {writeConcern: {w: NUM_NODES}}));
assert.writeError(barDB0.user.insert({x: 1}, {writeConcern: {w: NUM_NODES}}));
assert.writeError(fooDB1.user.insert({x: 2}, {writeConcern: {w: NUM_NODES}}));
assert.commandWorked(barDB1.user.insert({x: 2}, {writeConcern: {w: NUM_NODES}}));
// Make sure replica set connection in the shell is ready.
_awaitRSHostViaRSMonitor(rsTest.getPrimary().name, {ok: true, ismaster: true}, rsTest.name);
rsTest.getSecondaries().forEach(function (sec) {
_awaitRSHostViaRSMonitor(sec.name, {ok: true, secondary: true}, rsTest.name);
});
// Note: secondary nodes are selected randomly and connections will only be returned to the
// pool if a different secondary is selected from the previous one so we have to iterate
// a couple of times.
for (let x = 0; x < 20; x++) {
var explain = fooDB0.user.find().readPref("secondary").explain("executionStats");
assert.eq(1, explain.executionStats.nReturned);
assert.throws(function () {
explain = barDB0.user.find().readPref("secondary").explain("executionStats");
});
assert.throws(function () {
explain = fooDB1.user.find().readPref("secondary").explain("executionStats");
});
explain = barDB1.user.find().readPref("secondary").explain("executionStats");
assert.eq(1, explain.executionStats.nReturned);
}
admin.logout();
fooDB0.logout();
barDB1.logout();
rsTest.stopSet();