CDRIVER-4689 Additional partial implementation of OIDC authentication#2018

Closed

ghost wants to merge 184 commits intomasterfrom

unknown repository

Commits on May 6, 2025

CDRIVER-4689 OIDC: Implement Machine Callback Mechanism

kkloberdanz
authored and
Micah Scott
committed
add structs for callback parameters and return value

kkloberdanz
authored and
Micah Scott
committed
fix function names and type signatures

kkloberdanz
authored and
Micah Scott
committed
refactor

kkloberdanz
authored and
Micah Scott
committed
can call oidc_callback stub

kkloberdanz
authored and
Micah Scott
committed
update signature for OIDC callback function

kkloberdanz
authored and
Micah Scott
committed
initialize and destroy oidc_credential within client

kkloberdanz
authored and
Micah Scott
committed
Working on OIDC SASL One Step Conversation

kkloberdanz
authored and
Micah Scott
committed
Connect to server and get a reply

kkloberdanz
authored and
Micah Scott
committed
unify error handling

kkloberdanz
authored and
Micah Scott
committed
add TODO

kkloberdanz
authored and
Micah Scott
committed
check for NULL

kkloberdanz
authored and
Micah Scott
committed
got a successful server reply

kkloberdanz
authored and
Micah Scott
committed
cleanup

kkloberdanz
authored and
Micah Scott
committed
add test with user callback

kkloberdanz
authored and
Micah Scott
committed
fix use after free

kkloberdanz
authored and
Micah Scott
committed
make this function void

kkloberdanz
authored and
Micah Scott
committed
Add OIDC token caching and retry logic

kkloberdanz
authored and
Micah Scott
committed
working on speculative auth

kkloberdanz
authored and
Micah Scott
committed
skeleton for handling requthenticaion with OIDC

kkloberdanz
authored and
Micah Scott
committed
move OIDC stuff to topology

kkloberdanz
authored and
Micah Scott
committed
Make mongoc_topology_scanner_start take a topology struct as a parameter.

kkloberdanz
authored and
Micah Scott
committed
fix mongoc_topology_t forward declaration

kkloberdanz
authored and
Micah Scott
committed
comment out unused function _mongoc_oidc_credential_destroy

kkloberdanz
authored and
Micah Scott
committed
fix no noline at end of file error

kkloberdanz
authored and
Micah Scott
committed
use the timeout and version variables

kkloberdanz
authored and
Micah Scott
committed
clang-format

kkloberdanz
authored and
Micah Scott
committed
clang-format

kkloberdanz
authored and
Micah Scott
committed
implement locking for OIDC credential

kkloberdanz
authored and
Micah Scott
committed
init and cleanup

kkloberdanz
authored and
Micah Scott
committed
fix deadlock

kkloberdanz
authored and
Micah Scott
committed
fmt

kkloberdanz
authored and
Micah Scott
committed
fmt

kkloberdanz
authored and
Micah Scott
committed
rename pthread to bson

kkloberdanz
authored and
Micah Scott
committed

Commits on May 7, 2025

fix bson mutex initialize

kkloberdanz
authored and
Micah Scott
committed
fmt

kkloberdanz
authored and
Micah Scott
committed
check for null

kkloberdanz
authored and
Micah Scott
committed
fix memory leak

kkloberdanz
authored and
Micah Scott
committed
fixup pool behavior

kkloberdanz
authored and
Micah Scott
committed
remove unused variable

kkloberdanz
authored and
Micah Scott
committed
fmt

kkloberdanz
authored and
Micah Scott
committed

Commits on May 8, 2025

make mongoc_topology_scanner_node_setup take a topology object as an argument

kkloberdanz
authored and
Micah Scott
committed
remove unused function

kkloberdanz
authored and
Micah Scott
committed
remove unused function

kkloberdanz
authored and
Micah Scott
committed
pass topology object into mongoc_topology_scanner_node_setup_tcp and _begin_hello_cmd

kkloberdanz
authored and
Micah Scott
committed
add oidc to speculative auth

kkloberdanz
authored and
Micah Scott
committed
pass topology through

kkloberdanz
authored and
Micah Scott
committed
got spec auth working

kkloberdanz
authored and
Micah Scott
committed
fix oidc spec auth

kkloberdanz
authored and
Micah Scott
committed
use portable threading library

kkloberdanz
authored and
Micah Scott
committed
debug reauthenticate

kkloberdanz
authored and
Micah Scott
committed
fmt

kkloberdanz
authored and
Micah Scott
committed
fmt

kkloberdanz
authored and
Micah Scott
committed
fmt

kkloberdanz
authored and
Micah Scott
committed

Commits on May 9, 2025

debugging unified test: mongodb-oidc-no-retry.json

kkloberdanz
authored and
Micah Scott
committed
add authMechanism support to test suite

kkloberdanz
authored and
Micah Scott
committed
remove print

kkloberdanz
authored and
Micah Scott
committed
clarify error message when an oidc_callback is not set

kkloberdanz
authored and
Micah Scott
committed
add OIDC callback function when auth mechanism is MONGODB-OIDC

kkloberdanz
authored and
Micah Scott
committed
compiling

kkloberdanz
authored and
Micah Scott
committed
working on reauth

kkloberdanz
authored and
Micah Scott
committed

Commits on May 13, 2025

fixed reauthentication

kkloberdanz
authored and
Micah Scott
committed
cleanup

kkloberdanz
authored and
Micah Scott
committed
cleanup

kkloberdanz
authored and
Micah Scott
committed
cleanup

kkloberdanz
authored and
Micah Scott
committed
debug

kkloberdanz
authored and
Micah Scott
committed
db: "$external" is needed for speculative auth but not for regular auth

kkloberdanz
authored and
Micah Scott
committed
add MONGODB-OIDC to checking if we have auth

kkloberdanz
authored and
Micah Scott
committed
fix comment

kkloberdanz
authored and
Micah Scott
committed
fixed wrong error code failure

kkloberdanz
authored and
Micah Scott
committed
fmt

kkloberdanz
authored and
Micah Scott
committed
fix compiler warnings

kkloberdanz
authored and
Micah Scott
committed
fix warning

kkloberdanz
authored and
Micah Scott
committed
fix

kkloberdanz
authored and
Micah Scott
committed
cleanup noise

kkloberdanz
authored and
Micah Scott
committed
fix happy eyeballs

kkloberdanz
authored and
Micah Scott
committed
fix test-mongoc-topology-scanner

kkloberdanz
authored and
Micah Scott
committed
a bug in older clang compilers triggers a warning when zero initializing a struct

kkloberdanz
authored and
Micah Scott
committed
fix memory leak

kkloberdanz
authored and
Micah Scott
committed
memory leaks

kkloberdanz
authored and
Micah Scott
committed
take master

kkloberdanz
authored and
Micah Scott
committed
reduce noise in tests

kkloberdanz
authored and
Micah Scott
committed
add steps to setup OIDC tokens in CI

kkloberdanz
authored and
Micah Scott
committed
add setup-oidc-token.sh CI script

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
working on bootstrap oidc

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
where is this directory?

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
OIDC scripts require Python version of at least 3.6

kkloberdanz
authored and
Micah Scott
committed
OIDC Setup scripts do not work on Z Series, skip this platform.

kkloberdanz
authored and
Micah Scott
committed
run oidc setup.sh

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
try setting env vars

kkloberdanz
authored and
Micah Scott
committed
revert this

kkloberdanz
authored and
Micah Scott
committed
expand env vars

kkloberdanz
authored and
Micah Scott
committed
add example task

kkloberdanz
authored and
Micah Scott
committed
add fetch source function

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
assume ec2 role

kkloberdanz
authored and
Micah Scott
committed
remove teardown task for now

kkloberdanz
authored and
Micah Scott
committed
try expansion

kkloberdanz
authored and
Micah Scott
committed
try without that

kkloberdanz
authored and
Micah Scott
committed
where is this stuff at?

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
remove bootstrap-oidc

kkloberdanz
authored and
Micah Scott
committed
try running tests

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
try this, fix teardown.sh

kkloberdanz
authored and
Micah Scott
committed
try this, remove teardown.sh

kkloberdanz
authored and
Micah Scott
committed
run setup stuff

kkloberdanz
authored and
Micah Scott
committed
fix yaml syntax

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
try this config

kkloberdanz
authored and
Micah Scott
committed
Revert "try this config"

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
fetch source first

kkloberdanz
authored and
Micah Scott
committed
debug this script

kkloberdanz
authored and
Micah Scott
committed
something is wrong with curl_mo.txt

kkloberdanz
authored and
Micah Scott
committed
debug

kkloberdanz
authored and
Micah Scott
committed
debug

kkloberdanz
authored and
Micah Scott
committed
debug

kkloberdanz
authored and
Micah Scott
committed
debug second curl_mo.txt

kkloberdanz
authored and
Micah Scott
committed
cat log files

kkloberdanz
authored and
Micah Scott
committed
try removing bootstrap-mongo-orchestration

kkloberdanz
authored and
Micah Scott
committed
check if AWS env vars are set

kkloberdanz
authored and
Micah Scott
committed
see if unsetting AWS_SESSION_TOKEN works

kkloberdanz
authored and
Micah Scott
committed
try limiting to OIDC tests only

kkloberdanz
authored and
Micah Scott
committed
fix sasl-cyrus-openssl-compile

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
re-add fetch-source

kkloberdanz
authored and
Micah Scott
committed
Try to fix the following error:

kkloberdanz
authored and
Micah Scott
committed
debug with netstat

kkloberdanz
authored and
Micah Scott
committed
see if mongod is running

kkloberdanz
authored and
Micah Scott
committed
try this

kkloberdanz
authored and
Micah Scott
committed
find the config file

kkloberdanz
authored and
Micah Scott
committed
check the config files

kkloberdanz
authored and
Micah Scott
committed
remove SSL

kkloberdanz
authored and
Micah Scott
committed
remove this

kkloberdanz
authored and
Micah Scott
committed
debug auth failure in CI

kkloberdanz
authored and
Micah Scott
committed
fix

kkloberdanz
authored and
Micah Scott
committed
get error message

kkloberdanz
authored and
Micah Scott
committed
add /unified/runOnRequirement-authMechanism-type.json spec test

kkloberdanz
authored and
Micah Scott
committed
add /unified/runOnRequirement-authMechanism-type.json spec test

kkloberdanz
authored and
Micah Scott
committed
add prose tests

kkloberdanz
authored and
Micah Scott
committed
working on latest version of tests

kkloberdanz
authored and
Micah Scott
committed
mongoc_oidc_callback_copy
Micah Scott
committed
Updated set_oidc_callback for new mongoc_oidc_callback_t
Micah Scott
committed
Changes to support new oidc callback and param/response types
Micah Scott
committed
Support the move of AUTH_ERROR_AND_FAIL into mongoc-cluster-sasl-private.h
Micah Scott
committed
Update stored OIDC data types in mongoc_topology_t
Micah Scott
committed

Commits on May 17, 2025

Formatting and include fixes
Micah Scott
committed
Zero tokens on free, moved from Kyle's patch to new oidc_credential
Micah Scott
committed
Update to current APIs, add comments, try to invalidate correct token
Micah Scott
committed
Update test-oidcauth for current APIs
Micah Scott
committed
Use portable thread handle type
Micah Scott
committed
Fix NULL'ed required parameters when testing mongoc_topology_scanner_new
Micah Scott
committed
Revert unneeded changes to src/libmongoc/tests/unified/operation.c
Micah Scott
committed
Revert unneeded parts of src/libmongoc/tests/unified/runner.c change
Micah Scott
committed
Revert changes to .evergreen/scripts/integration-tests.sh
Micah Scott
committed
Partial revert of .evergreen/scripts/run-tests.sh
Micah Scott
committed
check_var_opt OIDC
Micah Scott
committed

Commits on May 18, 2025

Check bson item types in check_run_on_requirement
Micah Scott
committed
Remove runOnRequirement-authMechanism-type invalid test
Micah Scott
committed
For OIDC tests, leave URI password unset
Micah Scott
committed
Test OIDC env var in authMechanism run_on_requirement
Micah Scott
committed

Commits on May 19, 2025

Portability fix, use BSON_THREAD_RETURN
Micah Scott
committed
Merge branch 'master' into CDRIVER-4689-kyle-rebase
Micah Scott
committed
Merge branch 'master' into CDRIVER-4689-kyle-rebase
Micah Scott
committed