45 lines
1.5 KiB
JavaScript
45 lines
1.5 KiB
JavaScript
// Ensure that attempting to use SCRAM-SHA-1 auth on a
|
|
// user with invalid SCRAM-SHA-1 credentials fails gracefully.
|
|
|
|
(function() {
|
|
'use strict';
|
|
|
|
function runTest(mongod) {
|
|
assert(mongod);
|
|
const admin = mongod.getDB('admin');
|
|
const test = mongod.getDB('test');
|
|
|
|
admin.createUser({user: 'admin', pwd: 'pass', roles: jsTest.adminUserRoles});
|
|
assert(admin.auth('admin', 'pass'));
|
|
|
|
test.createUser({user: 'user', pwd: 'pass', roles: jsTest.basicUserRoles});
|
|
|
|
// Give the test user an invalid set of SCRAM-SHA-1 credentials.
|
|
assert.eq(admin.system.users
|
|
.update({_id: "test.user"}, {
|
|
$set: {
|
|
"credentials.SCRAM-SHA-1": {
|
|
salt: "AAAA",
|
|
storedKey: "AAAA",
|
|
serverKey: "AAAA",
|
|
iterationCount: 10000
|
|
}
|
|
}
|
|
})
|
|
.nModified,
|
|
1,
|
|
"Should have updated one document for user@test");
|
|
admin.logout();
|
|
|
|
const error = assert.throws(function() {
|
|
test._authOrThrow({user: 'user', pwd: 'pass'});
|
|
});
|
|
|
|
assert.eq(error, "Error: credential document SCRAM-SHA-1 failed validation");
|
|
}
|
|
|
|
const mongod = MongoRunner.runMongod({auth: "", useLogFiles: true});
|
|
runTest(mongod);
|
|
MongoRunner.stopMongod(mongod);
|
|
})();
|