TIL(15) 21-10-06 : MongoDB Auth, API URL 컨벤션 완료

Facts

✅ MongoDB 인증 처리

✅ API URL 수정 최종 점검

 

Findings

MongoDB Auth 기능 추가

계정 생성

• 먼저, administrator 계정을 생성한다.
  • admin 내에서 앞으로 생성할 db와 user를 관리할 수 있는 administrator 계정을 생성한다.
    • user id : adminer
    • 기본db명 : admin

use admin 
db.createUser({ 
	user: "adminer", 
        pwd: "사용할 Password", // 사용할 password 
        roles: [{role: "userAdminAnyDatabase", db: "admin"}] 
 })

• 새로운 계정 추가방법
  • admin db에 adminer계정으로 접속한 후에 새로운 db와 이를 사용할 계정 생성한다.

use admin 
db.auth("adminer", "password") // 접속 성공 시 1 출력 
use test_db // test db 생성  
db.createUser({ 
	user: "계정 이름", 
	pwd: "사용할 password", // 사용할 password 
        roles: [{role: "readWrite", db: "test_db"}] // test_db에 대한 readWrite 권한 부여 
})

 

Roles (권한)

• Database Administration Roles
  • 'readWrite' : Provides all the privileges of the read role plus ability to modify data on all non-system collections and the system.js collection.
• Database User Roles
  
  • 'dbAdmin' : Provides the ability to perform administrative tasks such as schema-related tasks, indexing, and gathering statistics. This role does not grant privileges for user and role management.
  • 'dbOwner' : The database owner can perform any administrative action on the database. This role combines the privileges granted by the readWrite, dbAdmin and userAdmin roles.
  • 'userAdmin' : Provides the ability to create and modify roles and users on the current database. Since the userAdmin role allows users to grant any privilege to any user, including themselves, the role also indirectly

 

접속 방법

• URL

mongodb://{account_id}:{password}@127.0.0.1

• mongoDB 접속

mongo -u {account_id} -p {password}

• robo3T 연결 방법
  • mongodb에서 사용할 db와 계정 생성 후 robo3t 접속
  • File > Connect > Create >Address : localhost / port: 27017Database: adminPassword: user password
    • [Connection 설정]
      Address : localhost / port: 27017
    • [Authentication 설정]
      Database: admin
      User Name: mongo db의 user name
      Password: user password
      Auth Mechanism: SCRAM-SHA-1

 

참고 자료

mongoDB admin 권한 설정방법 How to enable access control for mongo DB

Built-In Roles — MongoDB Manual