Add mechanism (default SHA1) to password_hash command

Aleksandr Makhov · Aleksandr Makhov · commit 6d3cc7368bbf · 2022-10-27T14:56:33.000+02:00
According the ussie voxpupuli#649, the module ignore changes in passwrd hashes. Add the mechanism parameter to the password_hash command Changed unit test to mongodb_user due to new expected line generated for password_hash command.
diff --git a/lib/puppet/provider/mongodb_user/mongodb.rb b/lib/puppet/provider/mongodb_user/mongodb.rb
@@ -103,7 +103,7 @@ def password_hash=(_value)
         pwd: @resource[:password_hash],
         digestPassword: false
       }
-      command[:mechanisms] = ['SCRAM-SHA-1']
+      command[:mechanisms] = @resource[:auth_mechanism] == :scram_sha_1 ? ['SCRAM-SHA-1'] : ['SCRAM-SHA-256']
 
       mongo_eval("db.runCommand(#{command.to_json})", @resource[:database])
     else
diff --git a/spec/unit/puppet/provider/mongodb_user/mongodb_spec.rb b/spec/unit/puppet/provider/mongodb_user/mongodb_spec.rb
@@ -93,7 +93,8 @@
       {
           "updateUser":"new_user",
           "pwd":"pass",
-          "digestPassword":false
+          "digestPassword":false,
+          "mechanisms":["SCRAM-SHA-1"]
       }
       EOS
       allow(provider).to receive(:mongo_eval).

Original file line number	Diff line number	Diff line change
`@@ -103,7 +103,7 @@ def password_hash=(_value)`
`103`	`103`	`pwd: @resource[:password_hash],`
`104`	`104`	`digestPassword: false`
`105`	`105`	`}`
`106`		`- command[:mechanisms] = ['SCRAM-SHA-1']`
	`106`	`+ command[:mechanisms] = @resource[:auth_mechanism] == :scram_sha_1 ? ['SCRAM-SHA-1'] : ['SCRAM-SHA-256']`
`107`	`107`
`108`	`108`	`mongo_eval("db.runCommand(#{command.to_json})", @resource[:database])`
`109`	`109`	`else`
Original file line number	Diff line number	Diff line change
`@@ -93,7 +93,8 @@`
`93`	`93`	`{`
`94`	`94`	`"updateUser":"new_user",`
`95`	`95`	`"pwd":"pass",`
`96`		`- "digestPassword":false`
	`96`	`+ "digestPassword":false,`
	`97`	`+ "mechanisms":["SCRAM-SHA-1"]`
`97`	`98`	`}`
`98`	`99`	`EOS`
`99`	`100`	`allow(provider).to receive(:mongo_eval).`