active_storage_encryption 0.2.0 → 0.3.0

data/test/lib/overrides_test.rb

@@ -0,0 +1,349 @@
+# frozen_string_literal: true
+
+require "test_helper"
+
+class ActiveStorageEncryption::OverridesTest < ActiveSupport::TestCase
+  include ActiveJob::TestHelper
+
+  setup do
+    ActiveStorage::Current.url_options = {
+      host: "www.example.com",
+      protocol: "https"
+    }
+  end
+
+  def test_encryption_key_is_set_on_encrypted_service_before_saving
+    blob = ActiveStorage::Blob.create!(
+      key: "yoyo",
+      filename: "test.txt",
+      byte_size: 10,
+      checksum: "abab",
+      metadata: {"identified" => true},
+      content_type: "text/plain",
+      encryption_key: "blabla",
+      service_name: "encrypted_disk"
+    )
+
+    assert blob.valid?
+    blob.encryption_key = nil
+    refute blob.valid?
+    assert_equal ["Encryption key must be present for this service"], blob.errors.full_messages
+  end
+
+  def test_attach_download_and_destroy_with_encryption_works
+    user = User.create!
+    with_uploadable_random_file do |file|
+      user.file.attach(io: file, filename: "test.txt")
+    end
+    assert user.file.url.include?("/active-storage-encryption/blob/")
+    assert user.file.blob.encryption_key
+    with_uploadable_random_file do |file|
+      assert_equal file.size, user.file.blob.byte_size
+    end
+    with_uploadable_random_file do |file|
+      assert_equal file.read, user.file.download
+    end
+    user.file.destroy
+    user.reload
+    refute user.file.attached?
+  end
+
+  def test_generate_random_encryption_key_is_long_enough
+    key = ActiveStorage::Blob.generate_random_encryption_key
+    assert_equal 48, key.size
+    assert_equal Encoding::BINARY, key.encoding
+  end
+
+  def test_service_encrypted
+    blob = ActiveStorage::Blob.create!(service_name: :encrypted_disk, checksum: "yoyo", encryption_key: "haha", filename: "test", key: "hahahaha", byte_size: 50)
+    assert blob.service_encrypted?
+    blob_2 = ActiveStorage::Blob.create!(service_name: :test, checksum: "yoyo", filename: "test", key: "ok", byte_size: 50)
+    refute blob_2.service_encrypted?
+  end
+
+  def test_create_before_direct_upload_works_with_encryption_and_without
+    blob = with_uploadable_random_file do |file|
+      ActiveStorage::Blob.create_before_direct_upload!(
+        filename: "test_upload",
+        byte_size: file.size,
+        checksum: "something",
+        metadata: {"identified" => true},
+        service_name: "encrypted_disk"
+      )
+    end
+    assert_raises ActiveStorage::FileNotFoundError do
+      blob.download
+    end
+
+    assert blob.service_encrypted?
+    assert blob.encryption_key
+
+    blob_2 = with_uploadable_random_file do |file|
+      ActiveStorage::Blob.create_before_direct_upload!(
+        filename: "test_upload_2",
+        byte_size: file.size,
+        checksum: "something",
+        metadata: {"identified" => true},
+        service_name: "test"
+      )
+    end
+    refute blob_2.service_encrypted?
+    refute blob_2.encryption_key
+  end
+
+  def test_create_and_upload_works_with_encryption_and_without
+    encrypted_blob = with_uploadable_random_file do |file|
+      ActiveStorage::Blob.create_and_upload!(
+        io: file,
+        filename: "test_upload",
+        metadata: {"identified" => true},
+        service_name: "encrypted_disk"
+      )
+    end
+
+    assert encrypted_blob.service_encrypted?
+    assert encrypted_blob.url.include?("/active-storage-encryption/blob/")
+    assert encrypted_blob.encryption_key
+    with_uploadable_random_file do |file|
+      assert_equal file.size, encrypted_blob.byte_size
+    end
+    with_uploadable_random_file do |file|
+      assert_equal file.read, encrypted_blob.download
+    end
+
+    unencrypted_blob = with_uploadable_random_file do |file|
+      ActiveStorage::Blob.create_and_upload!(
+        io: file,
+        filename: "test_upload_2",
+        metadata: {"identified" => true},
+        service_name: "test"
+      )
+    end
+
+    refute unencrypted_blob.service_encrypted?
+    assert unencrypted_blob.url.include?("/rails/active_storage/disk/")
+    refute unencrypted_blob.encryption_key
+    with_uploadable_random_file do |file|
+      assert_equal file.size, unencrypted_blob.byte_size
+    end
+    with_uploadable_random_file do |file|
+      assert_equal file.read, unencrypted_blob.download
+    end
+  end
+
+  def test_open_temp_reads_the_content_of_the_blob_with_encryption_and_without
+    encrypted_blob = with_uploadable_random_file do |file|
+      ActiveStorage::Blob.create_and_upload!(
+        io: file,
+        filename: "test_upload",
+        metadata: {"identified" => true},
+        service_name: "encrypted_disk"
+      )
+    end
+
+    with_uploadable_random_file do |file|
+      encrypted_blob.open do |b|
+        assert_equal file.read, b.read
+      end
+    end
+
+    unencrypted_blob = with_uploadable_random_file do |file|
+      ActiveStorage::Blob.create_and_upload!(
+        io: file,
+        filename: "test_upload_2",
+        metadata: {"identified" => true},
+        service_name: "test"
+      )
+    end
+
+    with_uploadable_random_file do |file|
+      unencrypted_blob.open do |b|
+        assert_equal file.read, b.read
+      end
+    end
+  end
+
+  def test_can_download_a_chunk_with_encryption_and_without
+    encrypted_blob = with_uploadable_random_file do |file|
+      ActiveStorage::Blob.create_and_upload!(
+        io: file,
+        filename: "test_upload",
+        metadata: {"identified" => true},
+        service_name: "encrypted_disk"
+      )
+    end
+
+    chunk = encrypted_blob.download_chunk(0..5.bytes)
+    with_uploadable_random_file do |file|
+      assert_equal chunk, file.read(6)
+    end
+
+    unencrypted_blob = with_uploadable_random_file do |file|
+      ActiveStorage::Blob.create_and_upload!(
+        io: file,
+        filename: "test_upload_2",
+        metadata: {"identified" => true},
+        service_name: "test"
+      )
+    end
+
+    chunk = unencrypted_blob.download_chunk(0..5.bytes)
+    with_uploadable_random_file do |file|
+      assert_equal chunk, file.read(6)
+    end
+  end
+
+  def test_serializable_hash_works_with_encryption_and_without
+    encrypted_blob = with_uploadable_random_file do |file|
+      ActiveStorage::Blob.create_and_upload!(
+        io: file,
+        filename: "test_upload",
+        metadata: {"identified" => true},
+        service_name: "encrypted_disk"
+      )
+    end
+    encrypted_blob_hash = {
+      "id" => encrypted_blob.id,
+      "key" => encrypted_blob.key,
+      "filename" => encrypted_blob.filename,
+      "content_type" => encrypted_blob.content_type,
+      "metadata" => encrypted_blob.metadata,
+      "service_name" => encrypted_blob.service_name,
+      "byte_size" => encrypted_blob.byte_size,
+      "checksum" => encrypted_blob.checksum,
+      "created_at" => encrypted_blob.created_at
+    }
+    assert_equal encrypted_blob_hash.sort, encrypted_blob.serializable_hash.sort
+
+    unencrypted_blob = with_uploadable_random_file do |file|
+      ActiveStorage::Blob.create_and_upload!(
+        io: file,
+        filename: "test_upload_2",
+        metadata: {"identified" => true},
+        service_name: "encrypted_disk"
+      )
+    end
+    unencrypted_blob_hash = {
+      "id" => unencrypted_blob.id,
+      "key" => unencrypted_blob.key,
+      "filename" => unencrypted_blob.filename,
+      "content_type" => encrypted_blob.content_type,
+      "metadata" => unencrypted_blob.metadata,
+      "service_name" => unencrypted_blob.service_name,
+      "byte_size" => unencrypted_blob.byte_size,
+      "checksum" => unencrypted_blob.checksum,
+      "created_at" => unencrypted_blob.created_at
+    }
+    assert_equal unencrypted_blob_hash, unencrypted_blob.serializable_hash
+  end
+
+  def test_instance_compose_works_with_encryption_and_without
+    rng = Random.new(Minitest.seed)
+
+    encrypted_blob_1 = with_uploadable_random_file do |file|
+      ActiveStorage::Blob.create_and_upload!(
+        io: file, filename: "test_upload", metadata: {"identified" => true},
+        service_name: "encrypted_disk"
+      )
+    end
+    encrypted_blob_2 = with_uploadable_random_file do |file|
+      ActiveStorage::Blob.create_and_upload!(
+        io: file, filename: "test_upload_2", metadata: {"identified" => true},
+        service_name: "encrypted_disk"
+      )
+    end
+    new_encrypted_blob = ActiveStorage::Blob.create_before_direct_upload!(
+      key: "new_blob_key", filename: "combined_test_upload",
+      metadata: {"identified" => true}, content_type: "plain/text",
+      checksum: "okok",
+      byte_size: encrypted_blob_1.byte_size + encrypted_blob_2.byte_size,
+      encryption_key: rng.bytes(68),
+      service_name: "encrypted_disk"
+    )
+    new_encrypted_blob.compose([encrypted_blob_1.key, encrypted_blob_2.key], source_encryption_keys: [encrypted_blob_1.encryption_key, encrypted_blob_2.encryption_key])
+    with_uploadable_random_file do |file|
+      assert_equal file.read * 2, new_encrypted_blob.download
+    end
+
+    unencrypted_blob_1 = with_uploadable_random_file do |file|
+      ActiveStorage::Blob.create_and_upload!(
+        io: file, filename: "test_upload_3", metadata: {"identified" => true},
+        service_name: "test"
+      )
+    end
+    unencrypted_blob_2 = with_uploadable_random_file do |file|
+      ActiveStorage::Blob.create_and_upload!(
+        io: file, filename: "test_upload_4", metadata: {"identified" => true},
+        service_name: "test"
+      )
+    end
+    new_unencrypted_blob = ActiveStorage::Blob.create_before_direct_upload!(
+      key: "new_blob_key_2", filename: "combined_test_upload",
+      metadata: {"identified" => true}, content_type: "plain/text",
+      checksum: "okok",
+      byte_size: unencrypted_blob_1.byte_size + unencrypted_blob_2.byte_size
+    )
+    new_unencrypted_blob.compose([unencrypted_blob_1.key, unencrypted_blob_2.key])
+    with_uploadable_random_file do |file|
+      assert_equal file.read * 2, new_unencrypted_blob.download
+    end
+  end
+
+  def test_class_compose_works_with_and_without_encryption
+    rng = Random.new(Minitest.seed)
+
+    encrypted_blob_1 = with_uploadable_random_file do |file|
+      ActiveStorage::Blob.create_and_upload!(
+        io: file, filename: "test_upload", metadata: {"identified" => true},
+        service_name: "encrypted_disk"
+      )
+    end
+    encrypted_blob_2 = with_uploadable_random_file do |file|
+      ActiveStorage::Blob.create_and_upload!(
+        io: file, filename: "test_upload_2", metadata: {"identified" => true},
+        service_name: "encrypted_disk"
+      )
+    end
+    new_enc_blob = ActiveStorage::Blob.compose(
+      [encrypted_blob_1, encrypted_blob_2],
+      content_type: "text/plain",
+      filename: "composed_blob",
+      metadata: {"identified" => true},
+      key: "new_enc_blob",
+      service_name: "encrypted_disk",
+      encryption_key: rng.bytes(68)
+    )
+    with_uploadable_random_file do |file|
+      assert_equal file.read * 2, new_enc_blob.download
+    end
+
+    unencrypted_blob_1 = with_uploadable_random_file do |file|
+      ActiveStorage::Blob.create_and_upload!(
+        io: file, filename: "test_upload_3", metadata: {"identified" => true},
+        service_name: "test"
+      )
+    end
+    unencrypted_blob_2 = with_uploadable_random_file do |file|
+      ActiveStorage::Blob.create_and_upload!(
+        io: file, filename: "test_upload_4", metadata: {"identified" => true},
+        service_name: "test"
+      )
+    end
+    new_unencrypted_blob = ActiveStorage::Blob.compose(
+      [unencrypted_blob_1, unencrypted_blob_2],
+      key: "new_unencblob_key_2", filename: "combined_test_upload_2",
+      metadata: {"identified" => true}, service_name: "test"
+    )
+    with_uploadable_random_file do |file|
+      assert_equal file.read * 2, new_unencrypted_blob.download
+    end
+  end
+
+  private
+
+  def with_uploadable_random_file(size = 128, &blk)
+    rng = Random.new(Minitest.seed)
+    plaintext_upload_bytes = rng.bytes(size)
+    StringIO.open(plaintext_upload_bytes, "rb", &blk)
+  end
+end

metadata

@@ -1,15 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: active_storage_encryption
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.3.0
 platform: ruby
 authors:
 - Julik Tarkhanov
 - Sebastian van Hesteren
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-03-27 00:00:00.000000000 Z
+date: 2025-05-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -95,6 +94,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: google-cloud-storage
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: sqlite3
   requirement: !ruby/object:Gem::Requirement
@@ -165,6 +178,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: pry
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 description: Adds customer-supplied encryption keys to storage services.
 email:
 - me@julik.nl
@@ -172,10 +199,17 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".github/dependabot.yml"
+- ".github/workflows/ci.yml"
+- ".gitignore"
+- ".ruby-version"
+- ".standard.yml"
 - Appraisals
+- Gemfile
 - MIT-LICENSE
 - README.md
 - Rakefile
+- active_storage_encryption.gemspec
 - bin/rails
 - bin/rubocop
 - config/initializers/active_storage_encryption.rb
@@ -185,6 +219,7 @@ files:
 - gemfiles/rails_8.gemfile
 - gemfiles/rails_8.gemfile.lock
 - lib/active_storage/service/encrypted_disk_service.rb
+- lib/active_storage/service/encrypted_gcs_service.rb
 - lib/active_storage/service/encrypted_mirror_service.rb
 - lib/active_storage/service/encrypted_s3_service.rb
 - lib/active_storage_encryption.rb
@@ -193,6 +228,7 @@ files:
 - lib/active_storage_encryption/encrypted_disk_service.rb
 - lib/active_storage_encryption/encrypted_disk_service/v1_scheme.rb
 - lib/active_storage_encryption/encrypted_disk_service/v2_scheme.rb
+- lib/active_storage_encryption/encrypted_gcs_service.rb
 - lib/active_storage_encryption/encrypted_mirror_service.rb
 - lib/active_storage_encryption/encrypted_s3_service.rb
 - lib/active_storage_encryption/engine.rb
@@ -200,13 +236,19 @@ files:
 - lib/active_storage_encryption/private_url_policy.rb
 - lib/active_storage_encryption/resumable_gcs_upload.rb
 - lib/active_storage_encryption/version.rb
+- lib/generators/add_encryption_key_to_active_storage_blobs.rb.erb
+- lib/generators/install_generator.rb
 - lib/tasks/active_storage_encryption_tasks.rake
 - test/active_storage_encryption_test.rb
 - test/dummy/Rakefile
+- test/dummy/app/assets/images/.keep
 - test/dummy/app/assets/stylesheets/application.css
 - test/dummy/app/controllers/application_controller.rb
+- test/dummy/app/controllers/concerns/.keep
 - test/dummy/app/helpers/application_helper.rb
 - test/dummy/app/models/application_record.rb
+- test/dummy/app/models/concerns/.keep
+- test/dummy/app/models/user.rb
 - test/dummy/app/views/layouts/application.html.erb
 - test/dummy/app/views/pwa/manifest.json.erb
 - test/dummy/app/views/pwa/service-worker.js
@@ -233,139 +275,24 @@ files:
 - test/dummy/config/storage.yml
 - test/dummy/db/migrate/20250304023851_create_active_storage_tables.active_storage.rb
 - test/dummy/db/migrate/20250304023853_add_blob_encryption_key_column.rb
+- test/dummy/db/migrate/20250428093315_create_users.rb
 - test/dummy/db/schema.rb
-- test/dummy/log/development.log
-- test/dummy/log/test.log
+- test/dummy/lib/assets/.keep
+- test/dummy/log/.keep
 - test/dummy/public/404.html
 - test/dummy/public/406-unsupported-browser.html
 - test/dummy/public/422.html
 - test/dummy/public/500.html
 - test/dummy/public/icon.png
 - test/dummy/public/icon.svg
-- test/dummy/storage/0a/mt/0amtaps713liftrtbxt9h998epz4
-- test/dummy/storage/0b/93/0b93pygovuunam1a3ovzwmrbuw2x
-- test/dummy/storage/0m/3s/0m3s7r3nboblijr1jxlnvm3p3l4b
-- test/dummy/storage/0o/9s/0o9s4ctbpu757qh7ucyony0itek4
-- test/dummy/storage/1e/q6/1eq646og0wazgfw7bwjqz2uem0g4
-- test/dummy/storage/1n/o3/1no30cpwrm727bm6arvb7zxagdg1
-- test/dummy/storage/1x/6w/1x6wsoq3pew17reztwax78lrr3hc
-- test/dummy/storage/28/de/28deswrv89c9f2tk7dz1l5uovd4r
-- test/dummy/storage/2h/sd/2hsd1mh20c6os2nzyoicfyymhwev
-- test/dummy/storage/2t/ni/2tnidhdk4c6cj0tnw3jiw88dgs4g
-- test/dummy/storage/2v/e0/2ve0555nluisy2el5cf4txzgae3j
-- test/dummy/storage/2z/c5/2zc5mj8g0o9l7mfnim0vs4v48xd6
-- test/dummy/storage/34/xc/34xc9hk74dm9227d6mhgfcfxl4ue
-- test/dummy/storage/3z/0t/3z0tnve7ivrq0qyrvfhfzztjhjqs
-- test/dummy/storage/49/14/4914188q1dptpw4po91cp54f32bg
-- test/dummy/storage/4c/74/4c7412lfz0pm2ocg6u01h67bnsch
-- test/dummy/storage/52/qf/52qfbgjlf3gor3agsyrt09t19o55
-- test/dummy/storage/57/go/57gok1uc4ebc3ugrjrje4lpe1ram
-- test/dummy/storage/5f/dv/5fdvt6tu1mkyajbz4hbxbw6fpt9w
-- test/dummy/storage/5x/b7/5xb7zzi66fi5f6yrn09pq4ogb9wo
-- test/dummy/storage/6m/vr/6mvr1fr5it125tm4vahjw6bv9wkz
-- test/dummy/storage/7b/hb/7bhbdxqn67lape1f49jqfktcei4n
-- test/dummy/storage/7n/4v/7n4vpm1q14y4qffc4jj78m036gtw
-- test/dummy/storage/7q/ku/7qkufbjwbbqwnf89uciosleixnew
-- test/dummy/storage/8l/5v/8l5vb4o02hx46s5qohfn5to945p3
-- test/dummy/storage/8q/pu/8qpun3f8vzl7auxajvqyq8f48ngw
-- test/dummy/storage/8w/ag/8wag4ptmox207h7mobamk0tcebwx
-- test/dummy/storage/8w/v8/8wv8lrhsw4s2r6guh1csd3jd89ii
-- test/dummy/storage/9b/c6/9bc6wlpfnqdywpnxgeoin3w9b5ch
-- test/dummy/storage/9l/wk/9lwkt21k5iburdaitbwliw7krtwt
-- test/dummy/storage/9p/0v/9p0vgfw3l2854k7so3rp33rmyh7p
-- test/dummy/storage/9r/sy/9rsya3r6syft34qz24g1h4u4qq44
-- test/dummy/storage/9s/es/9seslusr46xjf3mfzq10hkp13kc1
-- test/dummy/storage/9t/nv/9tnvn5v52fkvurpgszf4gco78t5h
-- test/dummy/storage/9u/to/9utokgxyu6xyovandu7pjhogoaqp
-- test/dummy/storage/9w/a4/9wa4c20p4dvm1cd5thnv9f7ei13w
-- test/dummy/storage/at/kg/atkgs5gwz2xdv9lvqftsg6p7gcpu
-- test/dummy/storage/at/qo/atqomgf3rpb2f6e1tq1yn2xqzojv
-- test/dummy/storage/ba/lq/balqtije6kf82ht4lr70ajaae9kc
-- test/dummy/storage/bf/i1/bfi1ij9rygr6lkx1r0lhgi8o5smx
-- test/dummy/storage/bg/ye/bgyenotrv3aj6lk88edwv0c41pfj
-- test/dummy/storage/bu/xe/buxed4b1l78kcax53fa37awm9ywk
-- test/dummy/storage/d2/c1/d2c11nhikb474oq3q7so0xbhukvj
-- test/dummy/storage/development.sqlite3
-- test/dummy/storage/dk/hy/dkhybxn2o27a8xgvfhsxpgqxa1zf
-- test/dummy/storage/e7/2n/e72nz5cz3wf6qvh4dw4qfnw6ucog
-- test/dummy/storage/eo/4q/eo4qn68m7al0ehhe0s23ycuzkjto
-- test/dummy/storage/ew/8s/ew8sejdsx8ddmrzkvfa37ebz1ts1
-- test/dummy/storage/f8/q1/f8q1kpg2tou8ru0afj8d2gy6ym5p
-- test/dummy/storage/fr/55/fr558uhp1k93jzhb4butyi2ry51t
-- test/dummy/storage/g4/nh/g4nhx1zxbeiegqpgn8ppsl1yhm0t
-- test/dummy/storage/gg/r5/ggr51egxhqfh4w5eluzs47qceb76
-- test/dummy/storage/gh/ua/ghuaagralqmjy8rkbwmuv3010lvs
-- test/dummy/storage/gx/uh/gxuhmf52ufli3m7ng8irp8ghxa1v
-- test/dummy/storage/h0/m1/h0m1emy251xus1d9qh6u25dzy18o
-- test/dummy/storage/hh/kc/hhkc2q8paptyvhw2m5hlwylhtfo5
-- test/dummy/storage/hq/0q/hq0q04kr6qzrp0qaee8rehcp2tzx
-- test/dummy/storage/ii/g1/iig1ge3fsjitai4g2fkq4qt369wh
-- test/dummy/storage/io/f0/iof0mv7w8qjd6m826g52pzyxedet
-- test/dummy/storage/jk/2i/jk2ifmx6ac35ubk3esufnm6bn1m1
-- test/dummy/storage/jw/4t/jw4trdeyfkw3j8z70xcnr9a7gqe5
-- test/dummy/storage/ke/k2/kek24leksglm1rs2a78mfmot0p3s
-- test/dummy/storage/kh/6d/kh6doaxxwxiyes0yqz2dmmpajkzv
-- test/dummy/storage/kj/7n/kj7nookjhisagd80z8hlv3wn50am
-- test/dummy/storage/kq/lf/kqlf5udtrgrk4v55qodxyt6i68p8
-- test/dummy/storage/ky/33/ky334jbo8eb08pj9qbe919iz91mh
-- test/dummy/storage/lt/zw/ltzw4lur2bheit1273ogpfzhv7j1
-- test/dummy/storage/m2/ve/m2vejmyttn1ium81dopppom6vum6
-- test/dummy/storage/m8/d4/m8d4r9iauedq8wlpvnx1f3ou0jwg
-- test/dummy/storage/m9/ee/m9eetioklzatyff94gq0vn1cga1n
-- test/dummy/storage/ma/v0/mav084zvmyoh1a8i7dcwqy2aaoi9
-- test/dummy/storage/mg/pa/mgpauiu02i28j3poef65k3q0gfpw
-- test/dummy/storage/mm/8g/mm8gp5evncb1ol1lj2jlmra2ixij
-- test/dummy/storage/mm/d2/mmd21x8c1amgnidzw0wowiwug4g3
-- test/dummy/storage/n2/qr/n2qro0y9heko9cwxlf10wiqiipsw
-- test/dummy/storage/n8/b7/n8b7b7qgu6jtw577dnn10jrrmszs
-- test/dummy/storage/n8/p2/n8p2ine0qqhphn09kqtxco4y7g0a
-- test/dummy/storage/nk/vh/nkvhgk7snpdy2ak6k02htxx9swp7
-- test/dummy/storage/nn/s0/nns0nggo0x645ytco52adnsi4myp
-- test/dummy/storage/nu/kz/nukzl7cckkzh68i7kyjkm9mzw7c0
-- test/dummy/storage/nv/8v/nv8vyoghcde1yr1bjpsw4327qt7s
-- test/dummy/storage/of/on/ofonhf1gs26k3dpj6o7b0ktzfowh
-- test/dummy/storage/pl/pf/plpfs59hvdoogj9gdweqta36csqn
-- test/dummy/storage/q5/g5/q5g55ekmscu10pzfw6q4syigt81g
-- test/dummy/storage/q5/kc/q5kcr9twyb9v4mh31pay0t7nkuwu
-- test/dummy/storage/qa/xd/qaxdngi74r52ahqg1pz8hjddeajc
-- test/dummy/storage/r7/5v/r75vadn34ak53vinylgnfdl1s8rt
-- test/dummy/storage/rj/rg/rjrghnyzyvxpkjw1a57mrloz72x1
-- test/dummy/storage/se/h7/seh7eorfoanpp6de62pubv7kyu1a
-- test/dummy/storage/sj/i1/sji1oj12soz2fcjcoz0gejvzo8to
-- test/dummy/storage/sn/2r/sn2rku9thay4hbcbt926an69maku
-- test/dummy/storage/sw/jm/swjmbmxou3tnarcirxc6gdycxh91
-- test/dummy/storage/sz/mq/szmqlydvpgqaw7p3v0wh444wtcif
-- test/dummy/storage/test.sqlite3
-- test/dummy/storage/tg/by/tgbyrdvg94ivhhy2z59e8l9fod10
-- test/dummy/storage/u5/vm/u5vmz08tuayqggd436et8fiaeml1
-- test/dummy/storage/u6/pf/u6pf4yky0vbmvid3fa3lm4lre68g
-- test/dummy/storage/ub/ql/ubqlmlilt8ujgdpngcm1zae41kgy
-- test/dummy/storage/un/29/un29e9khqism72ag27ojccmn5sds
-- test/dummy/storage/ux/ns/uxnsvuk4rr1p67n1oq6tmraz0gaw
-- test/dummy/storage/v1/qo/v1qor0zxg3lctk9mbwyos3oag9gj
-- test/dummy/storage/v8/ok/v8okmd7374w1obna13a7anllx2vu
-- test/dummy/storage/vd/tf/vdtfmz2ctis3dr1r35do9bow2xj5
-- test/dummy/storage/vo/dg/vodgq1inccnujjt3auber7tt8w8o
-- test/dummy/storage/vp/oe/vpoeiq00tf9pk0jcjlccomkju1zc
-- test/dummy/storage/vu/kg/vukgoj6qf96bhealui2yaeyn4n72
-- test/dummy/storage/w7/2z/w72zoqu7v6v6jp0tpy671dcbvpow
-- test/dummy/storage/wa/3f/wa3fncsnozc6n4xfu32gw34geqcd
-- test/dummy/storage/wy/ix/wyixbqx3f6a4agb8bjhrtpblpaua
-- test/dummy/storage/xd/st/xdsttma3tqt7mex0vhp1vsm3dq16
-- test/dummy/storage/xv/ej/xvejm2e064bnpunx3nmktaqs0x90
-- test/dummy/storage/xx/py/xxpyyodssq2xmp57qrtvuw0wchwk
-- test/dummy/storage/xz/ik/xzikejc5sohi3zexa93s9xmg4jst
-- test/dummy/storage/y4/g8/y4g8teo86blcv0zysa2d2jawvk6i
-- test/dummy/storage/y9/58/y958xli6aoktx1ehuyjc1k8dcbzv
-- test/dummy/storage/yj/lw/yjlw8bf70iujb16deja8ae43rqbc
-- test/dummy/storage/z3/qy/z3qyb9avbucwhxa8909rpfued0y5
-- test/dummy/storage/zr/wu/zrwudcg4kgo7r0jemszuzok8grqp
-- test/dummy/tmp/local_secret.txt
+- test/integration/.keep
 - test/integration/encrypted_blob_proxy_controller_test.rb
 - test/integration/encrypted_blobs_controller_test.rb
 - test/lib/encrypted_disk_service_test.rb
+- test/lib/encrypted_gcs_service_test.rb
 - test/lib/encrypted_mirror_service_test.rb
 - test/lib/encrypted_s3_service_test.rb
+- test/lib/overrides_test.rb
 - test/test_helper.rb
 homepage: https://github.com/cheddar-me/active_storage_encryption
 licenses:
@@ -375,7 +302,6 @@ metadata:
   homepage_uri: https://github.com/cheddar-me/active_storage_encryption
   source_code_uri: https://github.com/cheddar-me/active_storage_encryption
   changelog_uri: https://github.com/cheddar-me/active_storage_encryption/blob/main/CHANGELOG.md
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -390,8 +316,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
-signing_key:
+rubygems_version: 3.6.6
 specification_version: 4
 summary: Customer-supplied encryption key support for ActiveStorage blobs.
 test_files: []