Merge pull request #21 from babylonchain/add-auth-for-mongo

fix: add mongo auth connection

bin/init-mongo.sh

@@ -12,6 +12,16 @@ mongosh --eval "rs.initiate({_id: 'RS', members: [{ _id: 0, host: 'localhost:270
 # Wait for replica set to initiate
 sleep 5
 
+# Create the root user
+mongosh --eval "
+db = db.getSiblingDB('admin');
+db.createUser({
+  user: 'root',
+  pwd: 'example',
+  roles: [{ role: 'root', db: 'admin' }]
+});
+"
+
 # Create the necessary indexes
 mongosh --eval "
 db = db.getSiblingDB('staking-api-service');

cmd/staking-expiry-checker/main.go

@@ -43,7 +43,7 @@ func main() {
 	metrics.Init(metricsPort)
 
 	// create new db client
-	dbClient, err := db.New(ctx, cfg.Db.DbName, cfg.Db.Address)
+	dbClient, err := db.New(ctx, cfg.Db)
 	if err != nil {
 		log.Fatal().Err(err).Msg("error while creating db client")
 	}

config/config-docker.yml

@@ -2,6 +2,8 @@ poller:
   interval: 5s
   log-level: debug
 db:
+  username: root
+  password: example
   address: "mongodb://localhost:27017"
   db-name: staking-api-service
 btc:

config/config-local.yml

@@ -2,6 +2,8 @@ poller:
   interval: 5s
   log-level: debug
 db:
+  username: root
+  password: example
   address: "mongodb://localhost:27017"
   db-name: staking-api-service
 btc:

docker-compose.yml

@@ -16,6 +16,9 @@ services:
     hostname: mongodb
     ports:
       - "27017:27017"
+    environment:
+      MONGO_INITDB_ROOT_USERNAME: root
+      MONGO_INITDB_ROOT_PASSWORD: example
     volumes:
       - ./bin/init-mongo.sh:/init-mongo.sh
     entrypoint: [ "/init-mongo.sh" ]

internal/config/db.go

@@ -7,11 +7,21 @@ import (
 )
 
 type DbConfig struct {
-	DbName  string `mapstructure:"db-name"`
-	Address string `mapstructure:"address"`
+	Username string `mapstructure:"username"`
+	Password string `mapstructure:"password"`
+	DbName   string `mapstructure:"db-name"`
+	Address  string `mapstructure:"address"`
 }
 
 func (cfg *DbConfig) Validate() error {
+	if cfg.Username == "" {
+		return fmt.Errorf("missing db username")
+	}
+
+	if cfg.Password == "" {
+		return fmt.Errorf("missing db password")
+	}
+
 	if cfg.Address == "" {
 		return fmt.Errorf("missing db address")
 	}

internal/db/dbclient.go

@@ -9,6 +9,7 @@ import (
 	"go.mongodb.org/mongo-driver/mongo"
 	"go.mongodb.org/mongo-driver/mongo/options"
 
+	"github.com/babylonchain/staking-expiry-checker/internal/config"
 	"github.com/babylonchain/staking-expiry-checker/internal/db/model"
 )
 
@@ -17,15 +18,19 @@ type Database struct {
 	client *mongo.Client
 }
 
-func New(ctx context.Context, dbName string, dbURI string) (*Database, error) {
-	clientOps := options.Client().ApplyURI(dbURI)
+func New(ctx context.Context, cfg config.DbConfig) (*Database, error) {
+	credential := options.Credential{
+		Username: cfg.Username,
+		Password: cfg.Password,
+	}
+	clientOps := options.Client().ApplyURI(cfg.Address).SetAuth(credential)
 	client, err := mongo.Connect(ctx, clientOps)
 	if err != nil {
 		return nil, err
 	}
 
 	return &Database{
-		dbName: dbName,
+		dbName: cfg.DbName,
 		client: client,
 	}, nil
 }

tests/config-test.yml

@@ -2,6 +2,8 @@ poller:
   interval: 2s
   log-level: debug
 db:
+  username: root
+  password: example
   address: "mongodb://localhost:27017"
   db-name: staking-api-service
 btc:

tests/setup.go

@@ -69,7 +69,7 @@ func setupTestServer(t *testing.T, dep *TestServerDependency) (*queue.QueueManag
 		dbClient = dep.MockDbClient
 	} else {
 		setupTestDB(cfg)
-		dbClient, err = db.New(ctx, cfg.Db.DbName, cfg.Db.Address)
+		dbClient, err = db.New(ctx, cfg.Db)
 		if err != nil {
 			t.Fatalf("Failed to initialize db client: %v", err)
 		}