Mongo()

Connect to a MongoDB Cluster连接到MongoDB集群

The following operation creates a new connection object from within a mongosh session:以下操作从mongosh会话中创建一个新的连接对象：

cluster = Mongo("mongodb://mymongo.example.net:27017/?replicaSet=myMongoCluster")

Issue operations against the cluster object to interact with the mymongo.example.net:27017 cluster:针对cluster对象发出操作以与mymongo.example.net:27017集群交互：

myDB = cluster.getDB("myDB"); // returns the database object返回数据库对象
myColl = myDB.getCollection("myColl"); // returns the collection object返回集合对象

Connect to a Cluster with Client-Side Encryption Enabled连接到启用客户端加密的群集

mongosh --nodb

const TEST_LOCAL_KEY = require("crypto").randomBytes(96).toString("base64")

 var autoEncryptionOpts = {
   "keyVaultNamespace" : "encryption.__dataKeys",
   "kmsProviders" : {
     "local" : {
       "key" : BinData(0, TEST_LOCAL_KEY)
     }
   }
 }

encryptedClient = Mongo(
  "mongodb://myMongo.example.net:27017/?replSetName=myMongo",
   autoEncryptionOpts
)

Issue operations against the cluster object to interact with the mymongo.example.net:27017 cluster and perform explicit encryption:针对cluster对象发出操作以与mymongo.example.net:27017集群交互并执行显式加密：

// returns the database object返回数据库对象
myDB = cluster.getDB("myDB");

// returns the collection object返回集合对象
myColl = myDB.getCollection("myColl");

// returns object for managing data encryption keys返回用于管理数据加密键的对象
keyVault = cluster.getKeyVault();

// returns object for explicit encryption/decryption返回用于显式加密/解密的对象
clientEncryption = cluster.getClientEncryption();

See Client-Side Field Level Encryption Methods for a complete list of client-side field level encryption methods.有关客户端字段级别加密方法的完整列表，请参阅客户端字段级别的加密方法。

Connect to a Cluster with Automatic Client-Side Encryption Enabled连接到启用了自动客户端加密的群集

To configure client-side field level encryption for a locally managed key:要为本地管理的键配置客户端字段级加密，请执行以下操作：

• generate a base64-encoded 96-byte string with no line breaks生成不带换行符的base64编码的96字节字符串
• use mongosh to load the key使用mongosh加载键

export TEST_LOCAL_KEY=$(echo "$(head -c 96 /dev/urandom | base64 | tr -d '\n')")

mongosh --nodb

The following operation creates a new connection object from within a mongosh session. 以下操作从mongosh会话中创建一个新的连接对象。The AutoEncryptionOpts option specifies the required options for enabling automatic client-side encryption on the hr.employees collection:AutoEncryptionOpts选项指定在hr.employees集合上启用客户端自动加密所需的选项：

var autoEncryptionOpts = {
  "keyVaultNamespace" : "encryption.__dataKeys",
  "kmsProviders" : {
    "local" : {
      "key" : BinData(0, process.env["TEST_LOCAL_KEY"])
    }
  },
  schemaMap : {
    "hr.employees" : {
      "bsonType": "object",
      "properties" : {
        "taxid" : {
          "encrypt" : {
            "keyId" : [UUID("bffb361b-30d3-42c0-b7a4-d24a272b72e3")],
            "bsonType" : "string",
            "algorithm" : "AEAD_AES_256_CBC_HMAC_SHA_512-Random"
          }
        },
        "taxid-short": {
          "encrypt": {
            "keyId": [UUID("33408ee9-e499-43f9-89fe-5f8533870617")],
            "algorithm": "AEAD_AES_256_CBC_HMAC_SHA_512-Deterministic",
            "bsonType": "string"
          }
        }
      }
    }
  }
}

cluster = Mongo(
  "mongodb://mymongo.example.net:27017/?replicaSet=myMongoCluster",
  autoEncryptionOpts
)

Issue operations against the cluster object to interact with the mymongo.example.net:27017 cluster and utilize automatic encryption:针对cluster对象发出操作以与mymongo.example.net:27017集群交互并使用自动加密：

// returns the database object返回数据库对象
myDB = cluster.getDB("myDB");

// returns the collection object返回集合对象
myColl = myDB.getCollection("myColl");

myColl.insertOne(
  {
    "name" : "J Doe",
    "taxid" : "123-45-6789",
    "taxid-short" : "6789"
  }
)

The specified automatic encryption rules encrypt the taxid and taxid-short fields using the specified data encryption key and algorithm. Only clients configured for the correct KMS and access to the specified data encryption key can decrypt the field.指定的自动加密规则使用指定的数据加密键和算法对taxid和taxid-short字段进行加密。只有为正确的KMS和对指定数据加密键的访问权限配置的客户端才能解密该字段。

See Client-Side Field Level Encryption Methods for a complete list of client-side field level encryption methods.有关客户端字段级别加密方法的完整列表，请参阅客户端字段级别的加密方法。

Connect to a Cluster with the Stable API Enabled连接到已启用稳定API的群集

The following operation creates a new connection object from within a mongosh session. 以下操作从mongosh会话中创建一个新的连接对象。The api option enables Stable API V1 and specifies that you cannot run deprecated command or commands outside of the Stable API.api选项启用Stable api V1，并指定您不能在Stable api之外运行不推荐使用的命令。

cluster = Mongo(
  "mongodb://mymongo.example.net:27017/?replicaSet=myMongoCluster",
   null,
   { api: { version: "1", strict: true, deprecationErrors: true } }
)

To interact with the mymongo.example.net:27017 cluster, issue operations against the cluster object. For a full list of Stable API commands, see Stable API Commands.要与mymongo.example.net:27017集群交互，请针对cluster对象发出操作。有关Stable API命令的完整列表，请参阅Stable API命令。