Skip to content

enh(database::mongodb): add version tracking modes #6243

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
tpaskap wants to merge 3 commits into
base: develop
Choose a base branch
from
+1,309 −9
Open

enh(database::mongodb): add version tracking modes #6243

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
ff0274a
feat(mongodb): add version tracking modes
tpaskap Jun 16, 2026
c32e1ac
Merge branch 'develop' into feature/mongodb
tpaskap Jun 17, 2026
a9ba80e
feat(mongodb): expose detailed CVE list in patch-status mode
tpaskap Jun 24, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
75 changes: 67 additions & 8 deletions src/database/mongodb/custom/driver.pm
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -49,6 +49,8 @@ sub new {
'protocol:s' => { name => 'protocol' },
'username:s' => { name => 'username' },
'password:s' => { name => 'password' },
'auth-source:s' => { name => 'auth_source' },
'replica-set:s' => { name => 'replica_set' },
'timeout:s' => { name => 'timeout' },
'ssl-opt:s@' => { name => 'ssl_opt' },
'no-ssl' => { name => 'no_ssl' }
Expand Down Expand Up @@ -79,6 +81,8 @@ sub check_options {
$self->{timeout} = (defined($self->{option_results}->{timeout})) ? $self->{option_results}->{timeout} : 10;
$self->{username} = (defined($self->{option_results}->{username})) ? $self->{option_results}->{username} : '';
$self->{password} = (defined($self->{option_results}->{password})) ? $self->{option_results}->{password} : '';
$self->{auth_source} = (defined($self->{option_results}->{auth_source})) ? $self->{option_results}->{auth_source} : '';
$self->{replica_set} = (defined($self->{option_results}->{replica_set})) ? $self->{option_results}->{replica_set} : '';
$self->{no_ssl} = (defined($self->{option_results}->{no_ssl})) ? 1 : 0;

if ($self->{hostname} eq '') {
Expand Down Expand Up @@ -106,25 +110,58 @@ sub get_port {
return $self->{port};
}

sub connect {
sub build_uri {
my ($self, %options) = @_;

my $uri = URI::Encode->new({encode_reserved => 1});
my $encoded_username = $uri->encode($self->{username});
my $encoded_password = $uri->encode($self->{password});
my $encoder = URI::Encode->new({encode_reserved => 1});
my $encoded_username = $encoder->encode($self->{username});
my $encoded_password = $encoder->encode($self->{password});

my $host = defined($options{host}) && $options{host} ne '' ? $options{host} : $self->{hostname};
my $port = defined($options{port}) ? $options{port} : $self->{port};

$uri = $self->{protocol} . '://';
my $uri = $self->{protocol} . '://';
$uri .= $encoded_username . ':' . $encoded_password . '@' if ($encoded_username ne '' && $encoded_password ne '');
$uri .= $self->{hostname} if ($self->{hostname} ne '');
$uri .= ':' . $self->{port} if ($self->{port} ne '' && $self->{protocol} ne 'mongodb+srv');
$uri .= $host if ($host ne '');
$uri .= ':' . $port if ($port ne '' && $host !~ /:\d+$/ && $self->{protocol} ne 'mongodb+srv');

$self->{output}->output_add(long_msg => 'Connection URI: ' . $uri, debug => 1);
my @params = ();
push @params, 'authSource=' . $encoder->encode($self->{auth_source}) if ($self->{auth_source} ne '');
push @params, 'replicaSet=' . $encoder->encode($self->{replica_set}) if ($self->{replica_set} ne '');
# MongoDB URI parser requires a '/' between the host list and the
# query string, even when no default database is specified.
$uri .= '/?' . join('&', @params) if (scalar(@params) > 0);

return $uri;
}

sub redact_uri {
my ($self, $uri) = @_;

# Hide the password between ':' and '@' in 'scheme://user:password@host...'
# so that --debug never leaks credentials.
$uri =~ s{(://[^:/@]+):[^@]+@}{$1:***\@};
return $uri;
}

sub build_mongodb_options {
my ($self, %options) = @_;

my %mongodb_options = ();
if ($self->{no_ssl} == 0) {
$mongodb_options{ssl} = (defined($self->{ssl_opts}) && scalar(keys %{$self->{ssl_opts}}) > 0) ? $self->{ssl_opts} : 1;
}

return %mongodb_options;
}

sub connect {
my ($self, %options) = @_;

my $uri = $self->build_uri();
$self->{output}->output_add(long_msg => 'Connection URI: ' . $self->redact_uri($uri), debug => 1);

my %mongodb_options = $self->build_mongodb_options();
$self->{client} = MongoDB::MongoClient->new(host => $uri, %mongodb_options);
$self->{client}->connect();

Expand Down Expand Up @@ -161,6 +198,20 @@ sub run_command {
return $db->run_command($options{command});
}

sub run_command_on_host {
my ($self, %options) = @_;

my $uri = $self->build_uri(host => $options{host}, port => $options{port});
$self->{output}->output_add(long_msg => 'Connection URI: ' . $self->redact_uri($uri), debug => 1);

my %mongodb_options = $self->build_mongodb_options();
my $client = MongoDB::MongoClient->new(host => $uri, %mongodb_options);
$client->connect();

my $db = $client->get_database($options{database});
return $db->run_command($options{command});
}

sub list_databases {
my ($self, %options) = @_;

Expand Down Expand Up @@ -221,6 +272,14 @@ MongoDB username.

MongoDB password.

=item B<--auth-source>

Authentication database (authSource connection string option).

=item B<--replica-set>

Replica set name (replicaSet connection string option).

=item B<--timeout>

Set timeout in seconds (default: 10).
Expand Down
Loading