Mongodb authentication application - db.auth()

Question

I have a node js program which uses mongodb as its dbs, which looks something like this:

show dbs
  test
  eas
use eas
show collections
  nodeurls
  nodes
  users

At this stage, everyone can access mongo shell and look at all the collections and the data in them. However, I want to add in authentication, so that someone will first have to authenticate against the mongo shell, and then will be able to view the mongo db data.

I have found this: https://docs.mongodb.com/manual/core/authentication/

And have tried to use the db.auth() method however I do not understand how this fully works.

I assume I first have to create a user (I will only want one user for the db mongo shell) and then the user will need to authenticate?

Any help on this would be appreciated!

shanmugharaj · Accepted Answer · 2016-12-08 15:46:26Z

1

For this point

However, I want to add in authentication, so that someone will first have to authenticate against the mongo shell, and then will be able to view the mongo db data.

As per the doc here I created the username/password authentication the following way.

Created the user this way in admin db.

db.CreateUser({
  "user" : "sfk",
  "db" : "admin",
  "roles" : [
          {
                  "role" : "root",
                  "db" : "admin"
          }]
})

Because of this the authentication applies to all databases. So show dbs, show collections in any database will work.

The way to connect shell is,

Start mongod with the parameter auth

C:\MongoDB\Server\3.2\bin\mongod.exe --auth --port 27017

Then open mongo shell with authentication

C:\MongoDB\Server\3.2\bin\mongo.exe --port 27017 -u "sfk" -p "sfk" --authenticationDatabase "admin"

where u - username, p - password

Now we can issue any commands on any database.

We can also authenticate users for specific databases as shown in the docs.

db.createUser(
  {
    user: "reportsUser",
    pwd: "12345678",
    roles: [
       { role: "read", db: "reporting" },
       { role: "read", db: "products" },
       { role: "read", db: "sales" },
       { role: "readWrite", db: "accounts" }
    ]
  }
)

To use db.auth

start mongo shell without authentication. Then move to admin db.

use admin
db.auth("username", "psw")

Now the user is authenticated.

Please post in comments if any extra detail required.

edited Dec 8, 2016 at 15:46

answered Dec 8, 2016 at 15:36

shanmugharaj

3,9347 gold badges48 silver badges71 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

deeveeABC Over a year ago

I have applied the above, and have a node js program where my dbs url is stored in a config file : module.exports = { 'url' : 'mongodb://testuser:testing@localhost/mydbs' }; This works however is there a way to hash this password?

shanmugharaj Over a year ago

If this answer the question please consider accepting answer if you feel

Kip Over a year ago

use admin is the secret step they don't bother to tell you on the official documentation... thanks!

Collectives™ on Stack Overflow

Mongodb authentication application - db.auth()

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related