summaryrefslogtreecommitdiff
path: root/jstests/auth/pre_auth_commands_with_sessions.js
blob: 49e6cc6d711fe4c8d323d0397a2a164355d5db53 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
(function() {
'use strict';

var conn = MongoRunner.runMongod({auth: ""});
var admin = conn.getDB("admin");
var db = conn.getDB("otherdb");

admin.createUser({user: "admin", pwd: "pwd", roles: jsTest.adminUserRoles});
admin.auth("admin", "pwd");
db.createUser({user: "lily", pwd: "pwd", roles: jsTest.basicUserRoles});
admin.logout();

var testCommand = function(cmd) {
    // Test that we can run a pre-auth command without authenticating.
    var command = {[cmd]: 1};

    assert.commandWorked(admin.runCommand(command));

    // Test that we can authenticate and start a session
    db.auth("lily", "pwd");
    var res = admin.runCommand({startSession: 1});
    assert.commandWorked(res);
    var id = res.id;

    var commandWithSession = {[cmd]: 1, lsid: res.id};

    // Test that we can run a pre-auth command with a session while
    // the session owner is logged in (and the session gets ignored)
    assert.commandWorked(db.runCommand(command),
                         "failed to run command " + cmd + " while logged in");
    assert.commandWorked(db.runCommand(commandWithSession),
                         "failed to run command " + cmd + " with session while logged in");

    // Test that we can run a pre-auth command with a session while
    // nobody is logged in (and the session gets ignored)
    db.logout();
    assert.commandWorked(db.runCommand(command),
                         "failed to run command " + cmd + " without being logged in");
    assert.commandWorked(db.runCommand(commandWithSession),
                         "failed to run command " + cmd + " with session without being logged in");

    db.logout();
    admin.logout();
};

var commands = ["ping", "hello"];
for (var i = 0; i < commands.length; i++) {
    testCommand(commands[i]);
}
MongoRunner.stopMongod(conn, null, {user: "admin", pwd: "pwd"});
})();