-
Notifications
You must be signed in to change notification settings - Fork 52
DOCSP-18653: remove username from x509 example #640
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM! Left a suggestion and question.
.. note:: | ||
|
||
You do not need to specify a username when authenticating with this | ||
mechanism. However, if you provide a username, you must encode it so |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
mechanism. However, if you provide a username, you must encode it so | |
mechanism. However, if you provide a username, you must URI encode it so |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
N/A because removing note
|
||
.. literalinclude:: /code-snippets/authentication/x509.js | ||
:language: javascript | ||
|
||
.. note:: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Suggestion:
Based on the comments on the ticket, it's not needed for all the versions of the Node.js driver docs we maintain. I would omit this since it might cause users to ask why they might include it.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Good call. I wasn't sure because the ticket says we might want to tell users that it is optional but requires URI encoding... But if there's really no use case where users need to supply the user, best to not reference it at all
the X.509 certificate, see the MongoDB manual :manual:`X.509 tutorial | ||
</tutorial/configure-x509-client-authentication/#add-x-509-certificate-subject-as-a-user>`. | ||
authenticate by retrieving the distinguished name (DN) from the | ||
client certificate. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Question:
I thought the removed sentence provides information that helps the user determine the certificate is the one that corresponds to their MongoDB user? Is there enough info in this section on how to set up x.509 authentication without it?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It was my understanding that since username is no longer required, users do not need to know how to retrieve the subject from their certificate.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ok. It wasn't clear to me whether the link was trying to confirm the certificate was for the user or to extract the subject/username.
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
* DOCSP-18653: remove username from x509 example * CC suggestions (cherry picked from commit 40939c7)
Pull Request Info
PR Reviewing Guidelines
JIRA - https://jira.mongodb.org/browse/DOCSP-18653
Staging
Self-Review Checklist