Wala shell

Advanced PHP File Manager

Server IP: 127.0.0.1 | PHP Version: 8.3.30 | Domains Hosted: 54

Name	Size	Last Modified	Actions
📁 ..	-	2025-05-25 12:27
📄 README.rst ========== Auth Tests ========== The YAML and JSON files in this directory tree are platform-independent tests that drivers can use to prove their conformance to the Auth Spec at least with respect to connection string URI input. Drivers should do additional unit testing if there are alternate ways of configuring credentials on a client. Driver must also conduct the prose tests in the Auth Spec test plan section. Format ------ Each YAML file contains an object with a single ``tests`` key. This key is an array of test case objects, each of which have the following keys: - ``description``: A string describing the test. - ``uri``: A string containing the URI to be parsed. - ``valid:`` A boolean indicating if the URI should be considered valid. - ``credential``: If null, the credential must not be considered configured for the the purpose of deciding if the driver should authenticate to the topology. If non-null, it is an object containing one or more of the following properties of a credential: - ``username``: A string containing the username. For auth mechanisms that do not utilize a password, this may be the entire ``userinfo`` token from the connection string. - ``password``: A string containing the password. - ``source``: A string containing the authentication database. - ``mechanism``: A string containing the authentication mechanism. A null value for this key is used to indicate that a mechanism wasn't specified and that mechanism negotiation is required. Test harnesses should modify the mechanism test as needed to assert this condition. - ``mechanism_properties``: A document containing mechanism-specific properties. It specifies a subset of properties that must match. If a key exists in the test data, it must exist with the corresponding value in the credential. Other values may exist in the credential without failing the test. If any key is missing, no assertion about that key is necessary. Except as specified explicitly above, if a key is present, but the test value is null, the observed value for that key must be uninitialized (whatever that means for a given driver and data type). Implementation notes ==================== Testing whether a URI is valid or not should simply be a matter of checking whether URI parsing (or MongoClient construction) raises an error or exception. If a credential is configured, its properties must be compared to the ``credential`` field.	2.42 KB	2025-05-25 12:27
📄 connection-string.json { "tests": [ { "description": "should use the default source and mechanism", "uri": "mongodb://user:password@localhost", "valid": true, "credential": { "username": "user", "password": "password", "source": "admin", "mechanism": null, "mechanism_properties": null } }, { "description": "should use the database when no authSource is specified", "uri": "mongodb://user:password@localhost/foo", "valid": true, "credential": { "username": "user", "password": "password", "source": "foo", "mechanism": null, "mechanism_properties": null } }, { "description": "should use the authSource when specified", "uri": "mongodb://user:password@localhost/foo?authSource=bar", "valid": true, "credential": { "username": "user", "password": "password", "source": "bar", "mechanism": null, "mechanism_properties": null } }, { "description": "should recognise the mechanism (GSSAPI)", "uri": "mongodb://user%40DOMAIN.COM@localhost/?authMechanism=GSSAPI", "valid": true, "credential": { "username": "user@DOMAIN.COM", "password": null, "source": "$external", "mechanism": "GSSAPI", "mechanism_properties": { "SERVICE_NAME": "mongodb" } } }, { "description": "should ignore the database (GSSAPI)", "uri": "mongodb://user%40DOMAIN.COM@localhost/foo?authMechanism=GSSAPI", "valid": true, "credential": { "username": "user@DOMAIN.COM", "password": null, "source": "$external", "mechanism": "GSSAPI", "mechanism_properties": { "SERVICE_NAME": "mongodb" } } }, { "description": "should accept valid authSource (GSSAPI)", "uri": "mongodb://user%40DOMAIN.COM@localhost/?authMechanism=GSSAPI&authSource=$external", "valid": true, "credential": { "username": "user@DOMAIN.COM", "password": null, "source": "$external", "mechanism": "GSSAPI", "mechanism_properties": { "SERVICE_NAME": "mongodb" } } }, { "description": "should accept generic mechanism property (GSSAPI)", "uri": "mongodb://user%40DOMAIN.COM@localhost/?authMechanism=GSSAPI&authMechanismProperties=SERVICE_NAME:other,CANONICALIZE_HOST_NAME:true", "valid": true, "credential": { "username": "user@DOMAIN.COM", "password": null, "source": "$external", "mechanism": "GSSAPI", "mechanism_properties": { "SERVICE_NAME": "other", "CANONICALIZE_HOST_NAME": true } } }, { "description": "should accept the password (GSSAPI)", "uri": "mongodb://user%40DOMAIN.COM:password@localhost/?authMechanism=GSSAPI&authSource=$external", "valid": true, "credential": { "username": "user@DOMAIN.COM", "password": "password", "source": "$external", "mechanism": "GSSAPI", "mechanism_properties": { "SERVICE_NAME": "mongodb" } } }, { "description": "must raise an error when the authSource is empty", "uri": "mongodb://user:password@localhost/foo?authSource=", "valid": false }, { "description": "must raise an error when the authSource is empty without credentials", "uri": "mongodb://localhost/admin?authSource=", "valid": false }, { "description": "should throw an exception if authSource is invalid (GSSAPI)", "uri": "mongodb://user%40DOMAIN.COM@localhost/?authMechanism=GSSAPI&authSource=foo", "valid": false }, { "description": "should throw an exception if no username (GSSAPI)", "uri": "mongodb://localhost/?authMechanism=GSSAPI", "valid": false }, { "description": "should recognize the mechanism (MONGODB-CR)", "uri": "mongodb://user:password@localhost/?authMechanism=MONGODB-CR", "valid": true, "credential": { "username": "user", "password": "password", "source": "admin", "mechanism": "MONGODB-CR", "mechanism_properties": null } }, { "description": "should use the database when no authSource is specified (MONGODB-CR)", "uri": "mongodb://user:password@localhost/foo?authMechanism=MONGODB-CR", "valid": true, "credential": { "username": "user", "password": "password", "source": "foo", "mechanism": "MONGODB-CR", "mechanism_properties": null } }, { "description": "should use the authSource when specified (MONGODB-CR)", "uri": "mongodb://user:password@localhost/foo?authMechanism=MONGODB-CR&authSource=bar", "valid": true, "credential": { "username": "user", "password": "password", "source": "bar", "mechanism": "MONGODB-CR", "mechanism_properties": null } }, { "description": "should throw an exception if no username is supplied (MONGODB-CR)", "uri": "mongodb://localhost/?authMechanism=MONGODB-CR", "valid": false }, { "description": "should recognize the mechanism (MONGODB-X509)", "uri": "mongodb://CN%3DmyName%2COU%3DmyOrgUnit%2CO%3DmyOrg%2CL%3DmyLocality%2CST%3DmyState%2CC%3DmyCountry@localhost/?authMechanism=MONGODB-X509", "valid": true, "credential": { "username": "CN=myName,OU=myOrgUnit,O=myOrg,L=myLocality,ST=myState,C=myCountry", "password": null, "source": "$external", "mechanism": "MONGODB-X509", "mechanism_properties": null } }, { "description": "should ignore the database (MONGODB-X509)", "uri": "mongodb://CN%3DmyName%2COU%3DmyOrgUnit%2CO%3DmyOrg%2CL%3DmyLocality%2CST%3DmyState%2CC%3DmyCountry@localhost/foo?authMechanism=MONGODB-X509", "valid": true, "credential": { "username": "CN=myName,OU=myOrgUnit,O=myOrg,L=myLocality,ST=myState,C=myCountry", "password": null, "source": "$external", "mechanism": "MONGODB-X509", "mechanism_properties": null } }, { "description": "should accept valid authSource (MONGODB-X509)", "uri": "mongodb://CN%3DmyName%2COU%3DmyOrgUnit%2CO%3DmyOrg%2CL%3DmyLocality%2CST%3DmyState%2CC%3DmyCountry@localhost/?authMechanism=MONGODB-X509&authSource=$external", "valid": true, "credential": { "username": "CN=myName,OU=myOrgUnit,O=myOrg,L=myLocality,ST=myState,C=myCountry", "password": null, "source": "$external", "mechanism": "MONGODB-X509", "mechanism_properties": null } }, { "description": "should recognize the mechanism with no username (MONGODB-X509)", "uri": "mongodb://localhost/?authMechanism=MONGODB-X509", "valid": true, "credential": { "username": null, "password": null, "source": "$external", "mechanism": "MONGODB-X509", "mechanism_properties": null } }, { "description": "should recognize the mechanism with no username when auth source is explicitly specified (MONGODB-X509)", "uri": "mongodb://localhost/?authMechanism=MONGODB-X509&authSource=$external", "valid": true, "credential": { "username": null, "password": null, "source": "$external", "mechanism": "MONGODB-X509", "mechanism_properties": null } }, { "description": "should throw an exception if supplied a password (MONGODB-X509)", "uri": "mongodb://user:password@localhost/?authMechanism=MONGODB-X509", "valid": false }, { "description": "should throw an exception if authSource is invalid (MONGODB-X509)", "uri": "mongodb://CN%3DmyName%2COU%3DmyOrgUnit%2CO%3DmyOrg%2CL%3DmyLocality%2CST%3DmyState%2CC%3DmyCountry@localhost/foo?authMechanism=MONGODB-X509&authSource=bar", "valid": false }, { "description": "should recognize the mechanism (PLAIN)", "uri": "mongodb://user:password@localhost/?authMechanism=PLAIN", "valid": true, "credential": { "username": "user", "password": "password", "source": "$external", "mechanism": "PLAIN", "mechanism_properties": null } }, { "description": "should use the database when no authSource is specified (PLAIN)", "uri": "mongodb://user:password@localhost/foo?authMechanism=PLAIN", "valid": true, "credential": { "username": "user", "password": "password", "source": "foo", "mechanism": "PLAIN", "mechanism_properties": null } }, { "description": "should use the authSource when specified (PLAIN)", "uri": "mongodb://user:password@localhost/foo?authMechanism=PLAIN&authSource=bar", "valid": true, "credential": { "username": "user", "password": "password", "source": "bar", "mechanism": "PLAIN", "mechanism_properties": null } }, { "description": "should throw an exception if no username (PLAIN)", "uri": "mongodb://localhost/?authMechanism=PLAIN", "valid": false }, { "description": "should recognize the mechanism (SCRAM-SHA-1)", "uri": "mongodb://user:password@localhost/?authMechanism=SCRAM-SHA-1", "valid": true, "credential": { "username": "user", "password": "password", "source": "admin", "mechanism": "SCRAM-SHA-1", "mechanism_properties": null } }, { "description": "should use the database when no authSource is specified (SCRAM-SHA-1)", "uri": "mongodb://user:password@localhost/foo?authMechanism=SCRAM-SHA-1", "valid": true, "credential": { "username": "user", "password": "password", "source": "foo", "mechanism": "SCRAM-SHA-1", "mechanism_properties": null } }, { "description": "should accept valid authSource (SCRAM-SHA-1)", "uri": "mongodb://user:password@localhost/foo?authMechanism=SCRAM-SHA-1&authSource=bar", "valid": true, "credential": { "username": "user", "password": "password", "source": "bar", "mechanism": "SCRAM-SHA-1", "mechanism_properties": null } }, { "description": "should throw an exception if no username (SCRAM-SHA-1)", "uri": "mongodb://localhost/?authMechanism=SCRAM-SHA-1", "valid": false }, { "description": "should recognize the mechanism (SCRAM-SHA-256)", "uri": "mongodb://user:password@localhost/?authMechanism=SCRAM-SHA-256", "valid": true, "credential": { "username": "user", "password": "password", "source": "admin", "mechanism": "SCRAM-SHA-256", "mechanism_properties": null } }, { "description": "should use the database when no authSource is specified (SCRAM-SHA-256)", "uri": "mongodb://user:password@localhost/foo?authMechanism=SCRAM-SHA-256", "valid": true, "credential": { "username": "user", "password": "password", "source": "foo", "mechanism": "SCRAM-SHA-256", "mechanism_properties": null } }, { "description": "should accept valid authSource (SCRAM-SHA-256)", "uri": "mongodb://user:password@localhost/foo?authMechanism=SCRAM-SHA-256&authSource=bar", "valid": true, "credential": { "username": "user", "password": "password", "source": "bar", "mechanism": "SCRAM-SHA-256", "mechanism_properties": null } }, { "description": "should throw an exception if no username (SCRAM-SHA-256)", "uri": "mongodb://localhost/?authMechanism=SCRAM-SHA-256", "valid": false }, { "description": "URI with no auth-related info doesn't create credential", "uri": "mongodb://localhost/", "valid": true, "credential": null }, { "description": "database in URI path doesn't create credentials", "uri": "mongodb://localhost/foo", "valid": true, "credential": null }, { "description": "authSource without username doesn't create credential (default mechanism)", "uri": "mongodb://localhost/?authSource=foo", "valid": true, "credential": null }, { "description": "should throw an exception if no username provided (userinfo implies default mechanism)", "uri": "mongodb://@localhost.com/", "valid": false }, { "description": "should throw an exception if no username/password provided (userinfo implies default mechanism)", "uri": "mongodb://:@localhost.com/", "valid": false }, { "description": "should recognise the mechanism (MONGODB-AWS)", "uri": "mongodb://localhost/?authMechanism=MONGODB-AWS", "valid": true, "credential": { "username": null, "password": null, "source": "$external", "mechanism": "MONGODB-AWS", "mechanism_properties": null } }, { "description": "should recognise the mechanism when auth source is explicitly specified (MONGODB-AWS)", "uri": "mongodb://localhost/?authMechanism=MONGODB-AWS&authSource=$external", "valid": true, "credential": { "username": null, "password": null, "source": "$external", "mechanism": "MONGODB-AWS", "mechanism_properties": null } }, { "description": "should throw an exception if username and no password (MONGODB-AWS)", "uri": "mongodb://user@localhost/?authMechanism=MONGODB-AWS", "valid": false, "credential": null }, { "description": "should use username and password if specified (MONGODB-AWS)", "uri": "mongodb://user%21%40%23%24%25%5E%26%2A%28%29_%2B:pass%21%40%23%24%25%5E%26%2A%28%29_%2B@localhost/?authMechanism=MONGODB-AWS", "valid": true, "credential": { "username": "user!@#$%^&()_+", "password": "pass!@#$%^&()_+", "source": "$external", "mechanism": "MONGODB-AWS", "mechanism_properties": null } }, { "description": "should use username, password and session token if specified (MONGODB-AWS)", "uri": "mongodb://user:password@localhost/?authMechanism=MONGODB-AWS&authMechanismProperties=AWS_SESSION_TOKEN:token%21%40%23%24%25%5E%26%2A%28%29_%2B", "valid": true, "credential": { "username": "user", "password": "password", "source": "$external", "mechanism": "MONGODB-AWS", "mechanism_properties": { "AWS_SESSION_TOKEN": "token!@#$%^&*()_+" } } } ] }	14.73 KB	2025-05-25 12:27
📄 connection-string.yml tests: - description: "should use the default source and mechanism" uri: "mongodb://user:password@localhost" valid: true credential: username: "user" password: "password" source: "admin" mechanism: ~ mechanism_properties: ~ - description: "should use the database when no authSource is specified" uri: "mongodb://user:password@localhost/foo" valid: true credential: username: "user" password: "password" source: "foo" mechanism: ~ mechanism_properties: ~ - description: "should use the authSource when specified" uri: "mongodb://user:password@localhost/foo?authSource=bar" valid: true credential: username: "user" password: "password" source: "bar" mechanism: ~ mechanism_properties: ~ - description: "should recognise the mechanism (GSSAPI)" uri: "mongodb://user%40DOMAIN.COM@localhost/?authMechanism=GSSAPI" valid: true credential: username: "user@DOMAIN.COM" password: ~ source: "$external" mechanism: "GSSAPI" mechanism_properties: SERVICE_NAME: "mongodb" - description: "should ignore the database (GSSAPI)" uri: "mongodb://user%40DOMAIN.COM@localhost/foo?authMechanism=GSSAPI" valid: true credential: username: "user@DOMAIN.COM" password: ~ source: "$external" mechanism: "GSSAPI" mechanism_properties: SERVICE_NAME: "mongodb" - description: "should accept valid authSource (GSSAPI)" uri: "mongodb://user%40DOMAIN.COM@localhost/?authMechanism=GSSAPI&authSource=$external" valid: true credential: username: "user@DOMAIN.COM" password: ~ source: "$external" mechanism: "GSSAPI" mechanism_properties: SERVICE_NAME: "mongodb" - description: "should accept generic mechanism property (GSSAPI)" uri: "mongodb://user%40DOMAIN.COM@localhost/?authMechanism=GSSAPI&authMechanismProperties=SERVICE_NAME:other,CANONICALIZE_HOST_NAME:true" valid: true credential: username: "user@DOMAIN.COM" password: ~ source: "$external" mechanism: "GSSAPI" mechanism_properties: SERVICE_NAME: "other" CANONICALIZE_HOST_NAME: true - description: "should accept the password (GSSAPI)" uri: "mongodb://user%40DOMAIN.COM:password@localhost/?authMechanism=GSSAPI&authSource=$external" valid: true credential: username: "user@DOMAIN.COM" password: "password" source: "$external" mechanism: "GSSAPI" mechanism_properties: SERVICE_NAME: "mongodb" - description: "must raise an error when the authSource is empty" uri: "mongodb://user:password@localhost/foo?authSource=" valid: false - description: "must raise an error when the authSource is empty without credentials" uri: "mongodb://localhost/admin?authSource=" valid: false - description: "should throw an exception if authSource is invalid (GSSAPI)" uri: "mongodb://user%40DOMAIN.COM@localhost/?authMechanism=GSSAPI&authSource=foo" valid: false - description: "should throw an exception if no username (GSSAPI)" uri: "mongodb://localhost/?authMechanism=GSSAPI" valid: false - description: "should recognize the mechanism (MONGODB-CR)" uri: "mongodb://user:password@localhost/?authMechanism=MONGODB-CR" valid: true credential: username: "user" password: "password" source: "admin" mechanism: "MONGODB-CR" mechanism_properties: ~ - description: "should use the database when no authSource is specified (MONGODB-CR)" uri: "mongodb://user:password@localhost/foo?authMechanism=MONGODB-CR" valid: true credential: username: "user" password: "password" source: "foo" mechanism: "MONGODB-CR" mechanism_properties: ~ - description: "should use the authSource when specified (MONGODB-CR)" uri: "mongodb://user:password@localhost/foo?authMechanism=MONGODB-CR&authSource=bar" valid: true credential: username: "user" password: "password" source: "bar" mechanism: "MONGODB-CR" mechanism_properties: ~ - description: "should throw an exception if no username is supplied (MONGODB-CR)" uri: "mongodb://localhost/?authMechanism=MONGODB-CR" valid: false - description: "should recognize the mechanism (MONGODB-X509)" uri: "mongodb://CN%3DmyName%2COU%3DmyOrgUnit%2CO%3DmyOrg%2CL%3DmyLocality%2CST%3DmyState%2CC%3DmyCountry@localhost/?authMechanism=MONGODB-X509" valid: true credential: username: "CN=myName,OU=myOrgUnit,O=myOrg,L=myLocality,ST=myState,C=myCountry" password: ~ source: "$external" mechanism: "MONGODB-X509" mechanism_properties: ~ - description: "should ignore the database (MONGODB-X509)" uri: "mongodb://CN%3DmyName%2COU%3DmyOrgUnit%2CO%3DmyOrg%2CL%3DmyLocality%2CST%3DmyState%2CC%3DmyCountry@localhost/foo?authMechanism=MONGODB-X509" valid: true credential: username: "CN=myName,OU=myOrgUnit,O=myOrg,L=myLocality,ST=myState,C=myCountry" password: ~ source: "$external" mechanism: "MONGODB-X509" mechanism_properties: ~ - description: "should accept valid authSource (MONGODB-X509)" uri: "mongodb://CN%3DmyName%2COU%3DmyOrgUnit%2CO%3DmyOrg%2CL%3DmyLocality%2CST%3DmyState%2CC%3DmyCountry@localhost/?authMechanism=MONGODB-X509&authSource=$external" valid: true credential: username: "CN=myName,OU=myOrgUnit,O=myOrg,L=myLocality,ST=myState,C=myCountry" password: ~ source: "$external" mechanism: "MONGODB-X509" mechanism_properties: ~ - description: "should recognize the mechanism with no username (MONGODB-X509)" uri: "mongodb://localhost/?authMechanism=MONGODB-X509" valid: true credential: username: ~ password: ~ source: "$external" mechanism: "MONGODB-X509" mechanism_properties: ~ - description: "should recognize the mechanism with no username when auth source is explicitly specified (MONGODB-X509)" uri: "mongodb://localhost/?authMechanism=MONGODB-X509&authSource=$external" valid: true credential: username: ~ password: ~ source: "$external" mechanism: "MONGODB-X509" mechanism_properties: ~ - description: "should throw an exception if supplied a password (MONGODB-X509)" uri: "mongodb://user:password@localhost/?authMechanism=MONGODB-X509" valid: false - description: "should throw an exception if authSource is invalid (MONGODB-X509)" uri: "mongodb://CN%3DmyName%2COU%3DmyOrgUnit%2CO%3DmyOrg%2CL%3DmyLocality%2CST%3DmyState%2CC%3DmyCountry@localhost/foo?authMechanism=MONGODB-X509&authSource=bar" valid: false - description: "should recognize the mechanism (PLAIN)" uri: "mongodb://user:password@localhost/?authMechanism=PLAIN" valid: true credential: username: "user" password: "password" source: "$external" mechanism: "PLAIN" mechanism_properties: ~ - description: "should use the database when no authSource is specified (PLAIN)" uri: "mongodb://user:password@localhost/foo?authMechanism=PLAIN" valid: true credential: username: "user" password: "password" source: "foo" mechanism: "PLAIN" mechanism_properties: ~ - description: "should use the authSource when specified (PLAIN)" uri: "mongodb://user:password@localhost/foo?authMechanism=PLAIN&authSource=bar" valid: true credential: username: "user" password: "password" source: "bar" mechanism: "PLAIN" mechanism_properties: ~ - description: "should throw an exception if no username (PLAIN)" uri: "mongodb://localhost/?authMechanism=PLAIN" valid: false - description: "should recognize the mechanism (SCRAM-SHA-1)" uri: "mongodb://user:password@localhost/?authMechanism=SCRAM-SHA-1" valid: true credential: username: "user" password: "password" source: "admin" mechanism: "SCRAM-SHA-1" mechanism_properties: ~ - description: "should use the database when no authSource is specified (SCRAM-SHA-1)" uri: "mongodb://user:password@localhost/foo?authMechanism=SCRAM-SHA-1" valid: true credential: username: "user" password: "password" source: "foo" mechanism: "SCRAM-SHA-1" mechanism_properties: ~ - description: "should accept valid authSource (SCRAM-SHA-1)" uri: "mongodb://user:password@localhost/foo?authMechanism=SCRAM-SHA-1&authSource=bar" valid: true credential: username: "user" password: "password" source: "bar" mechanism: "SCRAM-SHA-1" mechanism_properties: ~ - description: "should throw an exception if no username (SCRAM-SHA-1)" uri: "mongodb://localhost/?authMechanism=SCRAM-SHA-1" valid: false - description: "should recognize the mechanism (SCRAM-SHA-256)" uri: "mongodb://user:password@localhost/?authMechanism=SCRAM-SHA-256" valid: true credential: username: "user" password: "password" source: "admin" mechanism: "SCRAM-SHA-256" mechanism_properties: ~ - description: "should use the database when no authSource is specified (SCRAM-SHA-256)" uri: "mongodb://user:password@localhost/foo?authMechanism=SCRAM-SHA-256" valid: true credential: username: "user" password: "password" source: "foo" mechanism: "SCRAM-SHA-256" mechanism_properties: ~ - description: "should accept valid authSource (SCRAM-SHA-256)" uri: "mongodb://user:password@localhost/foo?authMechanism=SCRAM-SHA-256&authSource=bar" valid: true credential: username: "user" password: "password" source: "bar" mechanism: "SCRAM-SHA-256" mechanism_properties: ~ - description: "should throw an exception if no username (SCRAM-SHA-256)" uri: "mongodb://localhost/?authMechanism=SCRAM-SHA-256" valid: false - description: "URI with no auth-related info doesn't create credential" uri: "mongodb://localhost/" valid: true credential: ~ - description: "database in URI path doesn't create credentials" uri: "mongodb://localhost/foo" valid: true credential: ~ - description: "authSource without username doesn't create credential (default mechanism)" uri: "mongodb://localhost/?authSource=foo" valid: true credential: ~ - description: "should throw an exception if no username provided (userinfo implies default mechanism)" uri: "mongodb://@localhost.com/" valid: false - description: "should throw an exception if no username/password provided (userinfo implies default mechanism)" uri: "mongodb://:@localhost.com/" valid: false - description: "should recognise the mechanism (MONGODB-AWS)" uri: "mongodb://localhost/?authMechanism=MONGODB-AWS" valid: true credential: username: ~ password: ~ source: "$external" mechanism: "MONGODB-AWS" mechanism_properties: ~ - description: "should recognise the mechanism when auth source is explicitly specified (MONGODB-AWS)" uri: "mongodb://localhost/?authMechanism=MONGODB-AWS&authSource=$external" valid: true credential: username: ~ password: ~ source: "$external" mechanism: "MONGODB-AWS" mechanism_properties: ~ - description: "should throw an exception if username and no password (MONGODB-AWS)" uri: "mongodb://user@localhost/?authMechanism=MONGODB-AWS" valid: false credential: ~ - description: "should use username and password if specified (MONGODB-AWS)" uri: "mongodb://user%21%40%23%24%25%5E%26%2A%28%29_%2B:pass%21%40%23%24%25%5E%26%2A%28%29_%2B@localhost/?authMechanism=MONGODB-AWS" valid: true credential: username: "user!@#$%^&()_+" password: "pass!@#$%^&()_+" source: "$external" mechanism: "MONGODB-AWS" mechanism_properties: ~ - description: "should use username, password and session token if specified (MONGODB-AWS)" uri: "mongodb://user:password@localhost/?authMechanism=MONGODB-AWS&authMechanismProperties=AWS_SESSION_TOKEN:token%21%40%23%24%25%5E%26%2A%28%29_%2B" valid: true credential: username: "user" password: "password" source: "$external" mechanism: "MONGODB-AWS" mechanism_properties: AWS_SESSION_TOKEN: "token!@#$%^&*()_+"	13.96 KB	2025-05-25 12:27
📄 mongodb-aws.rst =========== MongoDB AWS =========== There are 5 scenarios drivers MUST test: #. ``Regular Credentials``: Auth via an ``ACCESS_KEY_ID`` and ``SECRET_ACCESS_KEY`` pair #. ``EC2 Credentials``: Auth from an EC2 instance via temporary credentials assigned to the machine #. ``ECS Credentials``: Auth from an ECS instance via temporary credentials assigned to the task #. ``Assume Role``: Auth via temporary credentials obtained from an STS AssumeRole request #. ``AWS Lambda``: Auth via environment variables ``AWS_ACCESS_KEY_ID``, ``AWS_SECRET_ACCESS_KEY``, and ``AWS_SESSION_TOKEN``. For brevity, this section gives the values ``<AccessKeyId>``, ``<SecretAccessKey>`` and ``<Token>`` in place of a valid access key ID, secret access key and session token (also known as a security token). Note that if these values are passed into the URI they MUST be URL encoded. Sample values are below. .. code-block:: AccessKeyId=AKIAI44QH8DHBEXAMPLE SecretAccessKey=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY Token=AQoDYXdzEJr...<remainder of security token> \| .. sectnum:: Regular credentials ====================== Drivers MUST be able to authenticate by providing a valid access key id and secret access key pair as the username and password, respectively, in the MongoDB URI. An example of a valid URI would be: .. code-block:: mongodb://<AccessKeyId>:<SecretAccessKey>@localhost/?authMechanism=MONGODB-AWS \| EC2 Credentials =============== Drivers MUST be able to authenticate from an EC2 instance via temporary credentials assigned to the machine. A sample URI on an EC2 machine would be: .. code-block:: mongodb://localhost/?authMechanism=MONGODB-AWS \| .. note:: No username, password or session token is passed into the URI. Drivers MUST query the EC2 instance endpoint to obtain these credentials. ECS instance ============ Drivers MUST be able to authenticate from an ECS container via temporary credentials. A sample URI in an ECS container would be: .. code-block:: mongodb://localhost/?authMechanism=MONGODB-AWS \| .. note:: No username, password or session token is passed into the URI. Drivers MUST query the ECS container endpoint to obtain these credentials. AssumeRole ========== Drivers MUST be able to authenticate using temporary credentials returned from an assume role request. These temporary credentials consist of an access key ID, a secret access key, and a security token passed into the URI. A sample URI would be: .. code-block:: mongodb://<AccessKeyId>:<SecretAccessKey>@localhost/?authMechanism=MONGODB-AWS&authMechanismProperties=AWS_SESSION_TOKEN:<Token> \| AWS Lambda ========== Drivers MUST be able to authenticate via an access key ID, secret access key and optional session token taken from the environment variables, respectively: .. code-block:: AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY AWS_SESSION_TOKEN \| Sample URIs both with and without optional session tokens set are shown below. Drivers MUST test both cases. .. code-block:: bash # without a session token export AWS_ACCESS_KEY_ID="<AccessKeyId>" export AWS_SECRET_ACCESS_KEY="<SecretAccessKey>" URI="mongodb://localhost/?authMechanism=MONGODB-AWS" \| .. code-block:: bash # with a session token export AWS_ACCESS_KEY_ID="<AccessKeyId>" export AWS_SECRET_ACCESS_KEY="<SecretAccessKey>" export AWS_SESSION_TOKEN="<Token>" URI="mongodb://localhost/?authMechanism=MONGODB-AWS" \| .. note:: No username, password or session token is passed into the URI. Drivers MUST check the environment variables listed above for these values. If the session token is set Drivers MUST use it.	3.53 KB	2025-05-25 12:27

Terminal