action_encrypt 0.1.1 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 77578faa5509a3f8ca0489331a6e6d8de6a716c9841457167b82c75c4e7f88de
-  data.tar.gz: 347b93c2f523a066a5126a4d327008b2ec8e6f18b6876c8d29eec61470cb1dd0
+  metadata.gz: 850dbcfb530af9a8e6b85b1885c9ea4390c3850dae49aaaebc67ea383c7dcaf4
+  data.tar.gz: 56bb5d876520484d803e21d5bb0e56be1fa168de379e2d0530c8e6a70c8f142e
 SHA512:
-  metadata.gz: aa25aa15c59e48d1d663000cc49d67e55fd9d2aab3d96756ee22831d2a68f50ad41da635a7ee2282a95442c9fe01031c6f0eb078583bb06c2160277f12f86fc1
-  data.tar.gz: 8dbea43c52706497c144c3556b3a8ae781338e87336ab385b0968cdfcc0657b18c1945861c5de8bf43c1649bae17198f2847c99e14f7fba22a9556a72e4b0798
+  metadata.gz: 961ae2946e16d396104cb911f2420bb449d204cb617d91ee10fc6732846c1057055f6ed8c100b3b6d87160135e7989ebc52f22a8cdd730e113ab5ab308e13d66
+  data.tar.gz: 34659ca935c25192bbfe2c313acf06d057a5b44098cb66e3924c146dd7a16f921c9d68f613eb282b40efb7a8371dad01bcd860b308e4229bb0204b09e69751bb

data/README.md

@@ -18,10 +18,14 @@ Install migrations:
 $ rails action_encrypt:install:migrations
 ```
 
-Add a key_encryption_key to your Rails encrypted credentials file. Generate
-one using `SecureRandom.hex(32)`
-```yml
-key_encryption_key: <<key>>
+Create `action_encrypt.rb` in your initializers folder and set encryption keys. Generate them
+using `SecureRandom.hex(32)`. You can decide between storing the values in ENV or using rails encrypted credentials system.
+
+```ruby
+ActionEncrypt.configure do |config|
+  config.key_encryption_key = ENV.fetch('KEY_ENCRYPTION_KEY')
+  config.blind_index_key = ENV.fetch('BLIND_INDEX_KEY')
+end
 ```
 
 Create a Data Encryption Key

data/app/models/action_encrypt/data_encryption_key.rb

@@ -10,7 +10,7 @@ module ActionEncrypt
     end
 
     def encryption_key
-      [Rails.application.credentials.key_encryption_key].pack("H*")
+      [ActionEncrypt.configuration.key_encryption_key].pack("H*")
     end
 
     def promote!

data/db/migrate/20190628112807_unique_index_iv_columns.rb

@@ -0,0 +1,6 @@
+class UniqueIndexIvColumns < ActiveRecord::Migration[5.2]
+  def change
+    add_index :action_encrypt_data_encryption_keys, :encrypted_key_iv, unique: true
+    add_index :action_encrypt_encrypted_fields, :encrypted_blob_iv, unique: true
+  end
+end

data/lib/action_encrypt/attribute.rb

@@ -6,7 +6,9 @@ module ActionEncrypt
 
     class_methods do
       def search_encrypted(name, opts = {})
-        blind_index :"#{name}", key: [Rails.application.credentials.blind_index_key].pack("H*")
+        require 'blind_index'
+
+        blind_index :"#{name}", key: [ActionEncrypt.configuration.blind_index_key].pack("H*")
 
         before_validation :"compute_#{name}_bidx"
 

data/lib/action_encrypt/configuration.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+module ActionEncrypt
+  class Configuration
+    attr_accessor :key_encryption_key, :blind_index_key
+  end
+end

data/lib/action_encrypt/version.rb

@@ -1,3 +1,3 @@
 module ActionEncrypt
-  VERSION = '0.1.1'
+  VERSION = '0.2.0'
 end

data/lib/action_encrypt.rb

@@ -6,4 +6,15 @@ module ActionEncrypt
   extend ActiveSupport::Autoload
 
   autoload :Attribute
+  autoload :Configuration
+
+  class << self
+    def configuration
+      @configuration ||= Configuration.new
+    end
+
+    def configure
+      yield(configuration)
+    end
+  end
 end

metadata

@@ -1,27 +1,27 @@
 --- !ruby/object:Gem::Specification
 name: action_encrypt
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.2.0
 platform: ruby
 authors:
 - David Van Der Beek
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2019-04-11 00:00:00.000000000 Z
+date: 2021-12-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '5.2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '5.2'
 - !ruby/object:Gem::Dependency
@@ -66,7 +66,7 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-description: 
+description:
 email:
 - earlynovrock@gmail.com
 executables: []
@@ -83,8 +83,10 @@ files:
 - db/migrate/20190404115831_create_action_encrypt_encrypted_fields.rb
 - db/migrate/20190404121918_create_action_encrypt_data_encryption_keys.rb
 - db/migrate/20190404122056_add_data_encryption_key_to_action_encrypt_encrypted_fields.rb
+- db/migrate/20190628112807_unique_index_iv_columns.rb
 - lib/action_encrypt.rb
 - lib/action_encrypt/attribute.rb
+- lib/action_encrypt/configuration.rb
 - lib/action_encrypt/engine.rb
 - lib/action_encrypt/version.rb
 - lib/tasks/action_encrypt_tasks.rake
@@ -92,7 +94,7 @@ homepage: https://github.com/dvanderbeek/action_encrypt
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -107,8 +109,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.1
-signing_key: 
+rubygems_version: 3.0.6
+signing_key:
 specification_version: 4
 summary: Easily add encrypted fields to your models.
 test_files: []