bypass_mongocryptd_spawn_spec.rb

# frozen_string_literal: true
# rubocop:todo all

require 'spec_helper'

describe 'Client-Side Encryption' do
  describe 'Prose tests: Bypass mongocryptd spawn' do
    require_libmongocrypt
    require_enterprise

    include_context 'define shared FLE helpers'

    # Choose a different port for mongocryptd than the one used by all the other
    # tests to avoid failures caused by other tests spawning mongocryptd.
    let(:mongocryptd_port) { 27091 }

    context 'via mongocryptdBypassSpawn' do
      let(:test_schema_map) do
        BSON::ExtJSON.parse(File.read('spec/support/crypt/external/external-schema.json'))
      end

      let(:client) do
        new_local_client(
          SpecConfig.instance.addresses,
          SpecConfig.instance.test_options.merge(
            auto_encryption_options: {
              kms_providers: local_kms_providers,
              key_vault_namespace: 'keyvault.datakeys',
              schema_map: { 'db.coll' => test_schema_map },
              extra_options: {
                mongocryptd_bypass_spawn: true,
                mongocryptd_uri: "mongodb://localhost:#{mongocryptd_port}/db?serverSelectionTimeoutMS=1000",
                mongocryptd_spawn_args: [ "--pidfilepath=bypass-spawning-mongocryptd.pid", "--port=#{mongocryptd_port}"],
                disable_crypt_shared_lib_search: true,
              },
            },
            database: 'db'
          ),
        )
      end

      it 'does not spawn' do
        lambda do
          client['coll'].insert_one(encrypted: 'test')
        end.should raise_error(Mongo::Error::NoServerAvailable, /Server address=localhost:#{Regexp.quote(mongocryptd_port.to_s)} UNKNOWN/)
      end
    end

    context 'via bypassAutoEncryption' do
      let(:client) do
        new_local_client(
          SpecConfig.instance.addresses,
          SpecConfig.instance.test_options.merge(
            auto_encryption_options: {
              kms_providers: local_kms_providers,
              key_vault_namespace: 'keyvault.datakeys',
              bypass_auto_encryption: true,
              extra_options: {
                mongocryptd_spawn_args: [ "--pidfilepath=bypass-spawning-mongocryptd.pid", "--port=#{mongocryptd_port}"],
                disable_crypt_shared_lib_search: true,
              },
            },
            database: 'db'
          ),
        )
      end

      let(:mongocryptd_client) do
        new_local_client(["localhost:#{mongocryptd_port}"], server_selection_timeout: 1)
      end

      it 'does not spawn' do
        lambda do
          client['coll'].insert_one(encrypted: 'test')
        end.should_not raise_error
        lambda do
          mongocryptd_client.database.command(hello: 1)
        end.should raise_error(Mongo::Error::NoServerAvailable)
      end
    end
  end
end