kms_encrypted 1.8.0 → 1.8.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ff4007985837815789e565e18c75fa56cf140d9fe80de15116da853f9ac97b8a
-  data.tar.gz: d7107117b2b91d20e30bb3fae1ccb56f1c488b47e9be336db43dd76bef62c92d
+  metadata.gz: 5d2fd98130bb218718e33d8b2f49721de9b73b05b368dfc3f9472995eb8fd9ed
+  data.tar.gz: feeb8a0742c07a876cc2759bdaa39df269582f8dfd695fef877596c83643c683
 SHA512:
-  metadata.gz: 36c756e49dabdce4f82b48d75bef9fceb8fbb91c2fc90b6137f9869d61d113464a9e10ff3db0ccd24a882b1746c19821113d64b23f3a9b5f27ecdd36f3c980c2
-  data.tar.gz: 94140b294489883bbb558a0f15d15c170193398ea0b629d7bf45d606b7de227d43afa6822c08490b388c8d4869016a009b58bc4f7ef1cd10c83ceffe9347e803
+  metadata.gz: fc14316c2de291916950a11e2c7f0b9523e7713a75d2325046e17a6be68168e212622f91c1ce3d39342cde507238b967984a826f660371415f0646882d44b68c
+  data.tar.gz: 8f3b567b3331e97cd1ee5fd97cbd34ec2cde905996d6bc665576fcefcea4cd55398987a4ac588db5e62d5ca21cbf773f93ae8e6af65aeb170b7375e962915103

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.8.1 (2026-02-07)
+
+- Added support for encryption-only test key
+
 ## 1.8.0 (2025-10-16)
 
 - Added `client` option

data/README.md

@@ -343,6 +343,8 @@ In a Rails application, you can also create `config/initializers/kms_encrypted.r
 KmsEncrypted.key_id = Rails.env.test? ? "insecure-test-key" : ENV["KMS_KEY_ID"]
 ```
 
+You can also use `insecure-test-key/encrypt`, which allows encryption but not decryption.
+
 ## Key Rotation
 
 Key management services allow you to rotate the master key without any code changes.

data/lib/kms_encrypted/client.rb

@@ -36,7 +36,7 @@ module KmsEncrypted
     private
 
     def provider
-      if key_id == "insecure-test-key"
+      if key_id == "insecure-test-key" || key_id == "insecure-test-key/encrypt"
         :test
       elsif key_id.start_with?("vault/")
         :vault

data/lib/kms_encrypted/clients/test.rb

@@ -10,6 +10,8 @@ module KmsEncrypted
       end
 
       def decrypt(ciphertext, context: nil)
+        decryption_failed! if key_id == "insecure-test-key/encrypt"
+
         prefix, plaintext, stored_context = ciphertext.split(":")
 
         decryption_failed! if prefix != PREFIX

data/lib/kms_encrypted/version.rb

@@ -1,3 +1,3 @@
 module KmsEncrypted
-  VERSION = "1.8.0"
+  VERSION = "1.8.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: kms_encrypted
 version: !ruby/object:Gem::Version
-  version: 1.8.0
+  version: 1.8.1
 platform: ruby
 authors:
 - Andrew Kane