MongoDB Atlas Authentication Using Service Accounts (OAuth)

1
pip install requests 
2
pip install oauthlib 

1
import os
2
from requests_oauthlib import OAuth2Session
3
from oauthlib.oauth2 import BackendApplicationClient
4
from requests.auth import HTTPBasicAuth
5
import requests
6
7
# Constants
8
token_path = "/api/oauth/token"
9
api_url = "/api/atlas/v2/"
10
client_id = os.environ["MONGODB_ATLAS_CLIENT_ID"]
11
client_secret = os.environ["MONGODB_ATLAS_CLIENT_SECRET"]
12
base_url = "https://cloud.mongodb.com"
13
14
def get_access_token():
15
    # Use BackendApplicationClient for the client credentials grant
16
    client = BackendApplicationClient(client_id=client_id)
17
    oauth = OAuth2Session(client=client)
18
19
    # Prepare Basic Auth credentials
20
    auth = HTTPBasicAuth(client_id, client_secret)
21
    token_url = f"{base_url}{token_path}"
22
23
    # Fetch the token using the proper authentication
24
    token = oauth.fetch_token(token_url=token_url, auth=auth)
25
    return token['access_token']
26
27
def fetch_data():
28
    access_token = get_access_token()
29
    headers = {
30
        "Authorization": f"Bearer {access_token}",
31
        "Accept": "application/vnd.atlas.2023-01-01+json"
32
    }
33
34
    response = requests.get(f"{base_url}{api_url}", headers=headers)
35
    response.raise_for_status()
36
37
    return response.json()
38
39
if __name__ == "__main__":
40
    try:
41
        data = fetch_data()
42
        print(data)
43
    except Exception as e:
44
        print(f"Error: {e}")

1
set +o history # disable history as we're going to paste credentials
2
export SA_CLIENT_ID=your_client_id
3
export SA_CLIENT_SECRET=your_client_secret

1
python atlas_request.py

1
 npm install —-save axios simple-oauth2

1
npm init

1
const axios = require('axios');
2
const { ClientCredentials } = require('simple-oauth2');
3
4
// Can be any API url from https://www.mongodb.com/docs/atlas/reference/api-resources-spec/v2/
5
const apiURL = '/api/atlas/v2/';
6
7
const { MONGODB_ATLAS_CLIENT_ID, MONGODB_ATLAS_CLIENT_SECRET } = process.env;
8
9
var baseUrl = "https://cloud.mongodb.com";
10
11
// OAuth2 Client Configuration
12
const oauth2Config = {
13
  client: {
14
    id: MONGODB_ATLAS_CLIENT_ID,
15
    secret: MONGODB_ATLAS_CLIENT_SECRET,
16
  },
17
  auth: {
18
    tokenHost: baseUrl,
19
    tokenPath: '/api/oauth/token',
20
  },
21
};
22
23
// Create OAuth2 Client
24
const oauth2Client = new ClientCredentials(oauth2Config);
25
26
async function fetchWithOAuth2() {
27
  try {
28
    // Retrieve access token
29
    const tokenParams = {
30
    };
31
    const tokenResponse = await oauth2Client.getToken(tokenParams);
32
    const accessToken = tokenResponse.token.access_token;
33
    const headers = {
34
      Authorization: `Bearer ${accessToken}`,
35
      Accept: 'application/vnd.atlas.2023-01-01+json'
36
    }
37
    // Make API Request
38
    const response = await axios.get(baseUrl + apiURL, {
39
      headers: headers
40
    });
41
42
    console.log('Response data:', response.data);
43
  } catch (error) {
44
    console.error('Error during request:', error.message);
45
  }
46
}
47
48
fetchWithOAuth2();

1
set +o history # to disable history for credentials
2
export MONGODB_ATLAS_CLIENT_ID=your_client_id
3
export MONGODB_ATLAS_CLIENT_SECRET=your_client_secret

1
node atlas-request.js

1
go mod init example.com/service-accounts
2
go get go.mongodb.org/atlas-sdk/v20241023001/admin

1
package main
2
3
import (
4
	"context"
5
	"fmt"
6
	"log"
7
	"os"
8
9
	"go.mongodb.org/atlas-sdk/v20241113001/admin"
10
)
11
12
// Example for Using Service Account for listing Atlas Projects.
13
func main() {
14
	// Fetch clientID and clientSecret from environment variables
15
	clientID := os.Getenv("MONGODB_ATLAS_CLIENT_ID")
16
	clientSecret := os.Getenv("MONGODB_ATLAS_CLIENT_SECRET")
17
18
	if clientID == "" || clientSecret == "" {
19
		log.Fatal("Missing required environment variables")
20
	}
21
22
	ctx := context.Background()
23
	sdk, err := admin.NewClient(
24
		admin.UseBaseURL(host),
25
            //Out-of-the-box support for OAuth in the SDK
26
		admin.UseOAuthAuth(ctx, clientID, clientSecret),
27
	)
28
	if err != nil {
29
		log.Fatalf("Error: %v", err)
30
	}
31
 
32
      orgs, _, err := sdk.OrganizationsApi.ListOrganizations(ctx).Execute()
33
	if err != nil {
34
           log.Fatalf("Error: %v", err)
35
	}
36
	if orgs.GetTotalCount() == 0 {
37
		log.Fatalf("no orgs")
38
	}
39
      fmt.Println("Successfully used Service Account")
40
}

1
export MONGODB_ATLAS_CLIENT_ID=your_client_id
2
export MONGODB_ATLAS_CLIENT_SECRET=your_client_secret
3
export MONGODB_ATLAS_ORG=your_org_id

1
go run atlas_request.go