mirror of https://github.com/mongodb/mongo
19 lines
640 B
JavaScript
19 lines
640 B
JavaScript
// Helper script used to validate login as x509 auth with a certificate with roles works.
|
|
|
|
// Auth as user in certificate
|
|
let ret = db.getSiblingDB("$external").auth({
|
|
mechanism: "MONGODB-X509",
|
|
user: "CN=Kernel Client Peer Role,OU=Kernel Users,O=MongoDB,L=New York City,ST=New York,C=US",
|
|
});
|
|
assert.eq(ret, 1, "Auth failed");
|
|
|
|
// Validate active roles
|
|
let connStatus = db.runCommand("connectionStatus");
|
|
assert.commandWorked(connStatus);
|
|
|
|
let expectedRoles = [
|
|
{"role": "backup", "db": "admin"},
|
|
{"role": "readAnyDatabase", "db": "admin"},
|
|
];
|
|
assert.sameMembers(connStatus.authInfo.authenticatedUserRoles, expectedRoles);
|