MongoDB C#驱动程序检查身份验证状态&角色 [英] MongoDB C# Driver check Authentication status & Role

问题描述

这是我使用MongoDB身份验证机制登录MongoDB的代码.

This is my code to login to MongoDB by using MongoDB Authentication Mechanisms.

try
{
    var credential = MongoCredential.CreateMongoCRCredential("test", "admin", "123456");
    var settings = new MongoClientSettings
    {
        Credentials = new[] { credential }
    };
    var mongoClient = new MongoClient(settings);
    var _database = mongoClient.GetDatabase("test");
    var collection = _database.GetCollection<Test>("book");
    var filter = new BsonDocument();
    var document = collection.Find(new BsonDocument()).ToList();
}
catch (Exception ex)
{
}

当我们在凭据中输入错误的用户名/密码时，如何检查登录结果?当前我无法检查它，我必须等待collection.Find().ToList()抛出TimeoutException，在这种情况下，它的身份验证失败.我们必须进行CRUD检查身份验证结果(通过捕获TimeoutException).这不是检查登录状态的好方法.

When we put wrong username/password in the Credential, how to check the login result? Currently I can't check it, I have to wait to collection.Find().ToList() throw an TimeoutException , and in this context it's authentication failed. We must make a CRUD to check the authentication result (by catching TimeoutException). It's not a good manner to check login status.

当我们输入正确的用户名/密码进行身份验证时，如何检查该数据库中的帐户角色?

And when we put right username/password to authenticate, how to check the account role in this database?

推荐答案

查看C#MongoDB客户端的源代码，MongoClient构造函数不会引发任何与连接相关的异常.仅当应用程序使用MongoClient在MongoDB服务器上执行某些操作时，才会引发异常.但是，正如您所发现的那样，该异常是一个通用的超时异常，表明驱动程序未能找到合适的服务器.由于异常本身确实包含有关故障的详细信息，因此您可以使用该信息来创建一种类似于以下方法的方法，以检查是否可以对数据库运行虚拟命令.在这种方法中，我将所有超时值减少到一秒钟:

Looking at the source code for the C# MongoDB client, the MongoClient constructors do not throw any connectivity-related exceptions. It's only when an application uses the MongoClient to perform some a on the MongoDB server that an exception will be thrown. However, as you discovered, that exception is a generic time-out exception indicating that the driver failed to find a suitable server. As the exception itself does contain details regarding the failure, you can use that information to create a method like the one below to check if you can run a dummy command against the database. In this method I have reduced all the time out values to one second:

public static void CheckAuthentication(MongoCredential credential, MongoServerAddress server)
    {
        try
        {
            var clientSettings = new MongoClientSettings()
            {
                Credentials = new[] {credential},
                WaitQueueTimeout = new TimeSpan(0, 0, 0, 1),
                ConnectTimeout = new TimeSpan(0, 0, 0, 1),
                Server = server,
                ClusterConfigurator = builder =>
                {
                    //The "Normal" Timeout settings are for something different. This one here really is relevant when it is about
                    //how long it takes until we stop, when we cannot connect to the MongoDB Instance
                    //https://jira.mongodb.org/browse/CSHARP-1018, https://jira.mongodb.org/browse/CSHARP-1231
                    builder.ConfigureCluster(
                        settings => settings.With(serverSelectionTimeout: TimeSpan.FromSeconds(1)));
                }
            };

            var mongoClient = new MongoClient(clientSettings);
            var testDB = mongoClient.GetDatabase("test");
            var cmd = new BsonDocument("count", "foo");

            var result = testDB.RunCommand<BsonDocument>(cmd);
        }
        catch (TimeoutException e)
        {

            if (e.Message.Contains("auth failed"))
            {
                Console.WriteLine("Authentication failed");
            }

            throw;
        }
    }

根据您的评论，您可以使用以下代码段查询给定用户的角色:

As per your comment you can query roles for a given user, using the snippet below:

var mongoClient = new MongoClient(clientSettings);
var testDB = mongoClient.GetDatabase("test");
string userName = "test1";
var cmd = new BsonDocument("usersInfo", userName);
var queryResult = testDB.RunCommand<BsonDocument>(cmd);
var roles = (BsonArray)queryResult[0][0]["roles"];
var result = from roleDetail in roles select new {Role=roleDetail["role"].AsBsonValue.ToString(),RoleDB=roleDetail["db"].AsBsonValue.ToString()};

这篇关于MongoDB C#驱动程序检查身份验证状态&角色的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！