Merge pull request #55 from babylonchain/add-auth-for-mongo-2

fix: add mongo auth connection

Author: KonradStaniec

bin/init-mongo.sh

@@ -9,5 +9,15 @@ sleep 10
 # Initiate the replica set
 mongosh --eval "rs.initiate({_id: 'RS', members: [{ _id: 0, host: 'mongodb:27017' }]})"
 
+# Create the root user
+mongosh --eval "
+db = db.getSiblingDB('admin');
+db.createUser({
+  user: 'root',
+  pwd: 'example',
+  roles: [{ role: 'root', db: 'admin' }]
+});
+"
+
 # Keep the container running
 tail -f /dev/null

internal/config/db.go

@@ -7,11 +7,21 @@ import (
 )
 
 type DbConfig struct {
-	DbName  string `mapstructure:"db-name"`
-	Address string `mapstructure:"address"`
+	Username string `mapstructure:"username"`
+	Password string `mapstructure:"password"`
+	DbName   string `mapstructure:"db-name"`
+	Address  string `mapstructure:"address"`
 }
 
 func (cfg *DbConfig) Validate() error {
+	if cfg.Username == "" {
+		return fmt.Errorf("missing db username")
+	}
+
+	if cfg.Password == "" {
+		return fmt.Errorf("missing db password")
+	}
+
 	if cfg.Address == "" {
 		return fmt.Errorf("missing db address")
 	}
@@ -52,7 +62,9 @@ func (cfg *DbConfig) Validate() error {
 
 func DefaultDBConfig() *DbConfig {
 	return &DbConfig{
-		DbName:  "staking-api-service",
-		Address: "mongodb://localhost:27017",
+		Username: "root",
+		Password: "example",
+		DbName:   "staking-api-service",
+		Address:  "mongodb://localhost:27017",
 	}
 }

internal/db/dbclient.go

@@ -7,6 +7,7 @@ import (
 	"go.mongodb.org/mongo-driver/mongo"
 	"go.mongodb.org/mongo-driver/mongo/options"
 
+	"github.com/babylonchain/cli-tools/internal/config"
 	"github.com/babylonchain/cli-tools/internal/db/model"
 )
 
@@ -15,15 +16,19 @@ type Database struct {
 	Client *mongo.Client
 }
 
-func New(ctx context.Context, dbName string, dbURI string) (*Database, error) {
-	clientOps := options.Client().ApplyURI(dbURI)
+func New(ctx context.Context, cfg config.DbConfig) (*Database, error) {
+	credential := options.Credential{
+		Username: cfg.Username,
+		Password: cfg.Password,
+	}
+	clientOps := options.Client().ApplyURI(cfg.Address).SetAuth(credential)
 	client, err := mongo.Connect(ctx, clientOps)
 	if err != nil {
 		return nil, err
 	}
 
 	return &Database{
-		DbName: dbName,
+		DbName: cfg.DbName,
 		Client: client,
 	}, nil
 }

internal/services/unbonding_pipeline.go

@@ -97,7 +97,7 @@ func NewUnbondingPipelineFromConfig(
 	ret *VersionedParamsRetriever,
 ) (*UnbondingPipeline, error) {
 
-	db, err := db.New(context.TODO(), cfg.Db.DbName, cfg.Db.Address)
+	db, err := db.New(context.TODO(), cfg.Db)
 
 	if err != nil {
 		return nil, err

itest/containers/containers.go

@@ -194,6 +194,10 @@ func (m *Manager) RunMongoDbResource() (*dockertest.Resource, error) {
 		ExposedPorts: []string{
 			"27017",
 		},
+		Env: []string{
+			"MONGO_INITDB_ROOT_USERNAME=root",
+			"MONGO_INITDB_ROOT_PASSWORD=example",
+		},
 	},
 		dockerConf,
 	)

itest/e2e_test.go

@@ -214,7 +214,7 @@ func StartManager(
 	}
 
 	if runMongodb {
-		testDbConnection, err := db.New(context.TODO(), appConfig.Db.DbName, appConfig.Db.Address)
+		testDbConnection, err := db.New(context.TODO(), appConfig.Db)
 		require.NoError(t, err)
 
 		storeController := services.NewPersistentUnbondingStorage(testDbConnection)
@@ -622,7 +622,7 @@ func TestSendingFreshTransactions(t *testing.T) {
 }
 
 func (tm *TestManager) updateSchnorSigInDb(newSig *schnorr.Signature, txHash *chainhash.Hash) {
-	db, err := db.New(context.TODO(), tm.pipeLineConfig.Db.DbName, tm.pipeLineConfig.Db.Address)
+	db, err := db.New(context.TODO(), tm.pipeLineConfig.Db)
 	require.NoError(tm.t, err)
 	txHashHex := txHash.String()
 	client := db.Client.Database(db.DbName).Collection(model.UnbondingCollection)