1 files changed, 100 insertions, 0 deletions
diff --git a/jstests/noPassthrough/telemetry/documentSourceTelemetry_redaction_parameters.js b/jstests/noPassthrough/telemetry/documentSourceTelemetry_redaction_parameters.js
new file mode 100644
index 00000000000..c4f785abf6a
--- /dev/null
+++ b/jstests/noPassthrough/telemetry/documentSourceTelemetry_redaction_parameters.js
@@ -0,0 +1,100 @@
+/**
+ * Test the $telemetry hmac properties.
+ * @tags: [featureFlagTelemetry]
+ */
+
+load("jstests/aggregation/extras/utils.js");  // For assertAdminDBErrCodeAndErrMsgContains.
+load("jstests/libs/telemetry_utils.js");
+
+(function() {
+"use strict";
+
+// Assert the expected telemetry key with no hmac.
+function assertTelemetryKeyWithoutHmac(telemetryKey) {
+    assert.eq(telemetryKey.filter, {"foo": {"$lte": "?number"}});
+    assert.eq(telemetryKey.sort, {"bar": -1});
+    assert.eq(telemetryKey.limit, "?number");
+}
+
+function runTest(conn) {
+    const testDB = conn.getDB('test');
+    var coll = testDB[jsTestName()];
+    coll.drop();
+
+    coll.insert({foo: 1});
+    coll.find({foo: {$lte: 2}}).sort({bar: -1}).limit(2).toArray();
+    // Default is no hmac.
+    assertTelemetryKeyWithoutHmac(getTelemetry(conn)[0].key.queryShape);
+
+    // Turning on hmac should apply hmac to all field names on all entries, even previously cached
+    // ones.
+    const telemetryKey = getTelemetryRedacted(conn)[0]["key"];
+    assert.eq(telemetryKey.queryShape.filter,
+              {"fNWkKfogMv6MJ77LpBcuPrO7Nq+R+7TqtD+Lgu3Umc4=": {"$lte": "?number"}});
+    assert.eq(telemetryKey.queryShape.sort, {"CDDQIXZmDehLKmQcRxtdOQjMqoNqfI2nGt2r4CgJ52o=": -1});
+    assert.eq(telemetryKey.queryShape.limit, "?number");
+
+    // Turning hmac back off should preserve field names on all entries, even previously cached
+    // ones.
+    assertTelemetryKeyWithoutHmac(getTelemetry(conn)[0]["key"].queryShape);
+
+    // Explicitly set applyHmacToIdentifiers to false.
+    assertTelemetryKeyWithoutHmac(getTelemetryRedacted(conn, false)[0]["key"].queryShape);
+
+    // Wrong parameter name throws error.
+    let pipeline = [{$telemetry: {redactFields: true}}];
+    assertAdminDBErrCodeAndErrMsgContains(
+        coll,
+        pipeline,
+        ErrorCodes.FailedToParse,
+        "$telemetry parameters object may only contain 'applyHmacToIdentifiers' or 'hmacKey' options. Found: redactFields");
+
+    // Wrong parameter type throws error.
+    pipeline = [{$telemetry: {applyHmacToIdentifiers: 1}}];
+    assertAdminDBErrCodeAndErrMsgContains(
+        coll,
+        pipeline,
+        ErrorCodes.FailedToParse,
+        "$telemetry applyHmacToIdentifiers parameter must be boolean. Found type: double");
+
+    pipeline = [{$telemetry: {hmacKey: 1}}];
+    assertAdminDBErrCodeAndErrMsgContains(
+        coll,
+        pipeline,
+        ErrorCodes.FailedToParse,
+        "$telemetry hmacKey parameter must be bindata of length 32 or greater. Found type: double");
+
+    // Parameter object with unrecognized key throws error.
+    pipeline = [{$telemetry: {applyHmacToIdentifiers: true, hmacStrategy: "on"}}];
+    assertAdminDBErrCodeAndErrMsgContains(
+        coll,
+        pipeline,
+        ErrorCodes.FailedToParse,
+        "$telemetry parameters object may only contain 'applyHmacToIdentifiers' or 'hmacKey' options. Found: hmacStrategy");
+}
+
+const conn = MongoRunner.runMongod({
+    setParameter: {
+        internalQueryConfigureTelemetrySamplingRate: -1,
+        featureFlagTelemetry: true,
+    }
+});
+runTest(conn);
+MongoRunner.stopMongod(conn);
+
+const st = new ShardingTest({
+    mongos: 1,
+    shards: 1,
+    config: 1,
+    rs: {nodes: 1},
+    mongosOptions: {
+        setParameter: {
+            internalQueryConfigureTelemetrySamplingRate: -1,
+            featureFlagTelemetry: true,
+            'failpoint.skipClusterParameterRefresh': "{'mode':'alwaysOn'}"
+        }
+    },
+});
+runTest(st.s);
+st.stop();
+}());