Skip to content

fix: add MongoDB AWS auth extra#214

Open
scale-ballen wants to merge 1 commit intomainfrom
fix/mongodb-aws-auth-extra
Open

fix: add MongoDB AWS auth extra#214
scale-ballen wants to merge 1 commit intomainfrom
fix/mongodb-aws-auth-extra

Conversation

@scale-ballen
Copy link
Copy Markdown
Contributor

@scale-ballen scale-ballen commented Apr 30, 2026

Summary

  • switch Agentex backend dependency from plain pymongo to pymongo[aws]
  • update uv.lock with pymongo-auth-aws and AWS SDK dependencies required for MONGODB-AWS auth

Context

This is the app-side dependency needed for the SGP DocumentDB IAM auth migration. Without this extra, PyMongo cannot authenticate using authMechanism=MONGODB-AWS.

Testing

  • uv lock --check

Greptile Summary

This PR switches the agentex backend's PyMongo dependency from plain pymongo to pymongo[aws], enabling the MONGODB-AWS authentication mechanism needed for the SGP DocumentDB IAM auth migration. The uv.lock is updated to pull in pymongo-auth-aws 1.3.0 and its transitive AWS SDK dependencies (boto3, botocore, jmespath, s3transfer).

Confidence Score: 5/5

Safe to merge — minimal, targeted dependency change with no logic modifications.

The PR makes exactly one semantic change (adding the aws extra to pymongo) and the lock file is a verified (uv lock --check) mechanical consequence. No application logic, configuration, or security boundaries are altered. All new packages come from PyPI with recorded hashes.

No files require special attention.

Important Files Changed

Filename Overview
agentex/pyproject.toml Single-line change: adds the aws extra to the pymongo dependency to enable MONGODB-AWS authentication; version constraints unchanged.
uv.lock Lock file updated to resolve pymongo[aws]: adds pymongo-auth-aws 1.3.0 and its transitive deps (boto3 1.43.1, botocore 1.43.1, jmespath 1.1.0, s3transfer 0.17.0); all hashes and metadata are present.

Sequence Diagram

sequenceDiagram
    participant App as Agentex Backend
    participant PyMongo as pymongo[aws]
    participant AuthAWS as pymongo-auth-aws
    participant Boto3 as boto3/botocore
    participant DocDB as DocumentDB (IAM)

    App->>PyMongo: connect with MONGODB-AWS mechanism
    PyMongo->>AuthAWS: negotiate AWS authentication
    AuthAWS->>Boto3: fetch IAM credentials from instance profile
    Boto3-->>AuthAWS: temporary credentials bundle
    AuthAWS-->>PyMongo: signed auth payload
    PyMongo->>DocDB: authenticate via IAM token
    DocDB-->>App: connection established
Loading

Reviews (1): Last reviewed commit: "fix: add MongoDB AWS auth extra" | Re-trigger Greptile

@scale-ballen scale-ballen requested a review from a team as a code owner April 30, 2026 23:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants