aws-actionmailbox-ses 0.1.1 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 500a94c42e04fdbcd047f3ff0a949dba15110019cfc9dafbf824bfc917e1407f
-  data.tar.gz: 3c26b90900c66fffb702399f13fd0aef63e0e2316d00f95d1089c71ccba1c6c2
+  metadata.gz: 7c81a3cc0b639c90ccd81bcf1540c60685adfa3c083280e70637bdc00721b851
+  data.tar.gz: 830df5c1ba13c70751f7162c9257583471102a05578b71ebda5691e13f88a07c
 SHA512:
-  metadata.gz: 989d114e01bbe063d62d18c73e14aefc3790407c2f67568ad812fb68b4e0517cea1cd592c50d6a84a2b5bf613ad038dc3bbe82c10ad3c0c357ce62c74e225468
-  data.tar.gz: 6a62a9998e3f806cfea4162e88bf9d6cc6adb89ac2fecfdb74cf8eab40328b19e9db56e411fcde1b9a15c99baa63c7c379cd5e3983b5e959b68b8cc707e19e33
+  metadata.gz: b97ef893bfcfcfa0653751789b1e377c3f6e4ed9d8f812675e6211ec098e0076d24ad9c9e1bec11ac9ae40d005232e4322f81d4c532ca43546a63388c4d8182a
+  data.tar.gz: bac6961f43f0cf4e686996e4933d5f72008cd4fbd8af7d77b1ca4ce3e798b6a668cd41bec6a9270a27bc9b994c819132695b1fcfb3398285e11dd36a35239448

data/CHANGELOG.md

@@ -1,3 +1,8 @@
+0.2.0 (2026-04-28)
+------------------
+
+* Feature - Support client-side-encrypted inbound objects via configurable `s3_client`, with optional `decrypt_fallback_to_plain` for mixed buckets (#5)
+
 0.1.1 (2026-03-31)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-0.1.1
+0.2.0

data/lib/aws/action_mailbox/ses/engine.rb

@@ -9,6 +9,8 @@ module Aws
       class Engine < ::Rails::Engine
         config.action_mailbox.ses = ActiveSupport::OrderedOptions.new
         config.action_mailbox.ses.s3_client_options ||= {}
+        config.action_mailbox.ses.s3_client ||= nil
+        config.action_mailbox.ses.decrypt_fallback_to_plain ||= false
 
         initializer 'aws-sdk-rails.mount_engine' do |app|
           app.routes.append do

data/lib/aws/action_mailbox/ses/s3_client.rb

@@ -9,7 +9,11 @@ module Aws
       class S3Client
         class << self
           def client
-            @client ||= build_client
+            @client ||= ::Rails.configuration.action_mailbox.ses.s3_client || build_client
+          end
+
+          def client_plain
+            @client_plain ||= build_client
           end
 
           private

data/lib/aws/action_mailbox/ses/sns_notification.rb

@@ -49,13 +49,20 @@ module Aws
         end
 
         def s3_content
-          S3Client
-            .client
+          fetch_client
             .get_object(key: key, bucket: bucket)
             .body
             .string
         end
 
+        def fetch_client
+          cfg = ::Rails.configuration.action_mailbox.ses
+          return S3Client.client unless cfg.decrypt_fallback_to_plain && cfg.s3_client
+
+          meta = S3Client.client_plain.head_object(key: key, bucket: bucket).metadata || {}
+          meta.key?('x-amz-key-v2') || meta.key?('x-amz-key') ? S3Client.client : S3Client.client_plain
+        end
+
         def message
           @message ||= JSON.parse(notification[:Message], symbolize_names: true)
         end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-actionmailbox-ses
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.2.0
 platform: ruby
 authors:
 - Amazon Web Services