eventsimple 2.5.0 → 2.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c49589e4a0e45a9149f99568927f76b0d17b1e6b22f73bb079edd1b27ea856cd
-  data.tar.gz: 95794663749d9759b1ddbb6867c6774ffc8df60a30449c408958fb68f7160dc3
+  metadata.gz: 64f15c989c426a973f8d1689e098c0ea7947af521742bb8e70badf2b705ed162
+  data.tar.gz: 48de4621966b60aa7328e4eb51c383d2cb65a5862ce8301d9d754eca6cbc0d3e
 SHA512:
-  metadata.gz: c134a1dfdf5e16e888b2c9018756819417205f924609b095001cbd2802e1c97e27f0268b93c6eada4c036162cf4086b33c72127c2539d9fcd085cca7ca11b24f
-  data.tar.gz: d8edcf526493068375fc706d04180f206c73fcb4fc57848e1fc6c5cabfcb09690235f3550a5f7b6ac67f230e94deb56f6a5a91097a43476660f8e5b4aabfb84f
+  metadata.gz: 6c0a3945fd3e5dc70798933b0058d91c79cea258ecbb895917e6f93a9d6e3cf404bd356f36332d8e072b2dcb7a4bdbb32b560696af4266e592bf34e115200904
+  data.tar.gz: d1f53a2cbdbe9f3c951368d52300db2e3fc692f2b9e76d39c179d8f37675e5ff6ff7735643e480b1b68c748bdc2cd8a6c0a2cbbd9e330827f2078b3b253ab5d4

data/CHANGELOG.md

@@ -6,6 +6,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## Unreleased
 
+## 2.6.0 - 2026-05-01
+### Added
+- `Eventsimple::Types::*.encrypted` now accepts an optional
+  `key_provider:` keyword. When supplied, encryption/decryption goes
+  through that `ActiveRecord::Encryption::KeyProvider` instead of the
+  default keyed off `config.active_record.encryption.primary_key`.
+  Existing call sites (no `key_provider:`) keep using the global
+  config. Lets a single Rails app encrypt different event attributes
+  against different `KeyProvider`s — e.g. when collapsing a
+  microservice that used its own primary key (and possibly its own
+  derivation salt) into a host app whose globals are already used for
+  its own encrypted events.
+
 ## 2.5.0 - 2026-04-26
 ### Added
 - Entities and events now raise `ActiveRecord::ReadOnlyRecord` when persistence methods that bypass ActiveRecord's built-in readonly check are invoked (`delete`, `update_column(s)`, `update_attribute(!)`, `touch`, `toggle!`, `increment!`, `decrement!`). Relation-level bulk SQL (`insert` / `insert_all` / `upsert` / `upsert_all` / `update_all` / `delete_all` / `touch_all`) is guarded the same way.

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    eventsimple (2.5.0)
+    eventsimple (2.6.0)
       concurrent-ruby (>= 1.2.3)
       dry-struct (>= 1.8.0)
       dry-types (>= 1.7.0)
@@ -458,7 +458,7 @@ CHECKSUMS
   dry-types (1.9.0) sha256=7b656fe0a78d2432500ae1f29fefd6762f5a032ca7000e4f36bc111453d45d4d
   erb (6.0.1) sha256=28ecdd99c5472aebd5674d6061e3c6b0a45c049578b071e5a52c2a7f13c197e5
   erubi (1.13.1) sha256=a082103b0885dbc5ecf1172fede897f9ebdb745a4b97a5e8dc63953db1ee4ad9
-  eventsimple (2.5.0)
+  eventsimple (2.6.0)
   factory_bot (6.5.6) sha256=12beb373214dccc086a7a63763d6718c49769d5606f0501e0a4442676917e077
   factory_bot_rails (6.5.1) sha256=d3cc4851eae4dea8a665ec4a4516895045e710554d2b5ac9e68b94d351bc6d68
   ffi (1.17.3-aarch64-linux-gnu) sha256=28ad573df26560f0aedd8a90c3371279a0b2bd0b4e834b16a2baa10bd7a97068

data/lib/eventsimple/types/encrypted_type.rb

@@ -9,16 +9,17 @@ module Eventsimple
       include Dry::Types::Decorator
       include Dry::Types::Builder
 
-      def initialize(type, **options)
+      def initialize(type, key_provider: nil, **options)
         super
         @type = type
+        @key_provider = key_provider
         freeze
       end
 
       def meta(data = nil)
         return { eventsimple: true } if data.nil?
 
-        self.class.new(@type.meta(data))
+        self.class.new(@type.meta(data), key_provider: @key_provider)
       end
 
       def encrypt(value)
@@ -26,9 +27,13 @@ module Eventsimple
         return value if value == '' || (value.is_a?(::String) && value.blank?)
 
         string_value = serialize_value(value)
-        return string_value if ActiveRecord::Encryption::Encryptor.new.encrypted?(string_value)
+        return string_value if encryptor.encrypted?(string_value)
 
-        ActiveRecord::Encryption::Encryptor.new.encrypt(string_value)
+        if @key_provider
+          encryptor.encrypt(string_value, key_provider: @key_provider)
+        else
+          encryptor.encrypt(string_value)
+        end
       end
 
       def decrypt(value)
@@ -36,7 +41,11 @@ module Eventsimple
         return value if value == '' || (value.is_a?(::String) && value.blank?)
 
         decrypted = begin
-          ActiveRecord::Encryption::Encryptor.new.decrypt(value)
+          if @key_provider
+            encryptor.decrypt(value, key_provider: @key_provider)
+          else
+            encryptor.decrypt(value)
+          end
         rescue StandardError
           return value # Return original if decryption fails
         end
@@ -46,6 +55,10 @@ module Eventsimple
 
       private
 
+      def encryptor
+        ActiveRecord::Encryption::Encryptor.new
+      end
+
       def serialize_value(value)
         case value
         when Array, Hash

data/lib/eventsimple/types.rb

@@ -26,12 +26,12 @@ module Eventsimple
         end
       end
 
-      def encrypted
+      def encrypted(key_provider: nil)
         if respond_to?(:name) && name.to_s.include?('TrueClass') && name.to_s.include?('FalseClass')
           raise ArgumentError, 'Bool type does not support encryption'
         end
 
-        EncryptedType.new(self)
+        EncryptedType.new(self, key_provider: key_provider)
       end
     end
 

data/lib/eventsimple/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Eventsimple
-  VERSION = '2.5.0'
+  VERSION = '2.6.0'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: eventsimple
 version: !ruby/object:Gem::Version
-  version: 2.5.0
+  version: 2.6.0
 platform: ruby
 authors:
 - Zulfiqar Ali