mongoid 9.0.11 → 9.0.12

data/spec/support/crypt/models.rb

@@ -47,4 +47,161 @@ module Crypt
     field :vin, type: String, encrypt: true
     field :make, type: String
   end
+
+  # An encrypted model whose database name is a callable resolving to a
+  # constant. The callable form of :database is supported by store_in, but the
+  # encryption schema map is keyed by namespace and built once, so this model's
+  # namespace is not known when the map is generated.
+  class DynamicCar
+    include Mongoid::Document
+
+    store_in database: -> { 'vehicles_dynamic' }
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q==', deterministic: true
+
+    field :vin, type: String, encrypt: true
+  end
+
+  # An encrypted model using the documented multi-tenant idiom, where the
+  # database name is only known once a tenant is selected. There is no correct
+  # value to resolve at client construction time.
+  class TenantCar
+    include Mongoid::Document
+
+    # The fallback keeps this model usable by tasks that iterate every model,
+    # such as Mongoid::Tasks::Database.create_collections. Mongoid raises
+    # NoMethodError when a callable :database resolves to nil.
+    store_in database: -> { Thread.current[:tenant_database] || 'vehicles_no_tenant' }
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q==', deterministic: true
+
+    field :vin, type: String, encrypt: true
+  end
+
+  # An encrypted model that is embedded by more than one parent, and more than
+  # once by the same parent.
+  class Token
+    include Mongoid::Document
+
+    field :value, type: String, encrypt: { deterministic: true }
+
+    embedded_in :tokenized, polymorphic: true
+  end
+
+  # A parent whose encrypted data lives entirely in an embedded model: it has
+  # no encrypted field of its own and no encrypt_with.
+  class Wallet
+    include Mongoid::Document
+
+    embeds_one :token, class_name: 'Crypt::Token', as: :tokenized
+  end
+
+  # Two parents embedding the same encrypted model.
+  class Vault
+    include Mongoid::Document
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q=='
+
+    embeds_one :token, class_name: 'Crypt::Token', as: :tokenized
+  end
+
+  class Chest
+    include Mongoid::Document
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q=='
+
+    embeds_one :token, class_name: 'Crypt::Token', as: :tokenized
+  end
+
+  # A parent embedding the same encrypted model through two relations.
+  class Ledger
+    include Mongoid::Document
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q=='
+
+    embeds_one :primary_token, class_name: 'Crypt::Token', as: :tokenized
+    embeds_one :backup_token, class_name: 'Crypt::Token', as: :tokenized
+  end
+
+  # Three levels of nesting, where the middle level has no encrypted field of
+  # its own.
+  class Owner
+    include Mongoid::Document
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q=='
+
+    embeds_one :account, class_name: 'Crypt::Account'
+  end
+
+  class Account
+    include Mongoid::Document
+
+    embedded_in :owner, class_name: 'Crypt::Owner'
+    embeds_one :credential, class_name: 'Crypt::Credential'
+  end
+
+  class Credential
+    include Mongoid::Document
+
+    field :secret, type: String, encrypt: { deterministic: true }
+
+    embedded_in :account, class_name: 'Crypt::Account'
+  end
+
+  # A model that embeds itself. The walk over embedded relations has to stop
+  # here, or generating the map never terminates.
+  class Comment
+    include Mongoid::Document
+
+    field :body, type: String, encrypt: { deterministic: true }
+
+    embedded_in :commentable, polymorphic: true
+    embeds_one :reply, class_name: 'Crypt::Comment', as: :commentable
+  end
+
+  class Article
+    include Mongoid::Document
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q=='
+
+    embeds_one :comment, class_name: 'Crypt::Comment', as: :commentable
+  end
+
+  # A parent with no encrypted field of its own: the encrypted field lives on
+  # the embedded model. Used by the integration specs, so the embedded model
+  # carries a key id.
+  class Folder
+    include Mongoid::Document
+
+    embeds_one :note, class_name: 'Crypt::Note'
+  end
+
+  class Note
+    include Mongoid::Document
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q==', deterministic: true
+
+    field :text, type: String, encrypt: true
+
+    embedded_in :folder, class_name: 'Crypt::Folder'
+  end
+
+  # A model naming an embedded class that is never defined. The association
+  # cannot be used, so nothing is ever embedded through it, but every model in
+  # the application is walked when the schema map is generated.
+  class Drawer
+    include Mongoid::Document
+
+    embeds_one :missing_note, class_name: 'Crypt::MissingNote'
+  end
+
+  # The same, on a model that is encrypted itself, so the walk descends into
+  # its relations.
+  class Cabinet
+    include Mongoid::Document
+
+    field :label, type: String, encrypt: { deterministic: true }
+
+    embeds_one :missing_note, class_name: 'Crypt::MissingNote'
+  end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: mongoid
 version: !ruby/object:Gem::Version
-  version: 9.0.11
+  version: 9.0.12
 platform: ruby
 authors:
 - The MongoDB Ruby Team
@@ -292,6 +292,7 @@ files:
 - lib/mongoid/errors/empty_config_file.rb
 - lib/mongoid/errors/immutable_attribute.rb
 - lib/mongoid/errors/in_memory_collation_not_supported.rb
+- lib/mongoid/errors/in_memory_regexp_timeout.rb
 - lib/mongoid/errors/invalid_around_callback.rb
 - lib/mongoid/errors/invalid_async_query_executor.rb
 - lib/mongoid/errors/invalid_auto_encryption_configuration.rb
@@ -335,6 +336,7 @@ files:
 - lib/mongoid/errors/no_client_hosts.rb
 - lib/mongoid/errors/no_clients_config.rb
 - lib/mongoid/errors/no_default_client.rb
+- lib/mongoid/errors/no_encryption_schema.rb
 - lib/mongoid/errors/no_environment.rb
 - lib/mongoid/errors/no_map_reduce_output.rb
 - lib/mongoid/errors/no_metadata.rb
@@ -382,6 +384,7 @@ files:
 - lib/mongoid/extensions/time_with_zone.rb
 - lib/mongoid/extensions/true_class.rb
 - lib/mongoid/factory.rb
+- lib/mongoid/field_readable.rb
 - lib/mongoid/fields.rb
 - lib/mongoid/fields/encrypted.rb
 - lib/mongoid/fields/foreign_key.rb
@@ -429,6 +432,7 @@ files:
 - lib/mongoid/matcher/not.rb
 - lib/mongoid/matcher/or.rb
 - lib/mongoid/matcher/regex.rb
+- lib/mongoid/matcher/regexp_budget.rb
 - lib/mongoid/matcher/size.rb
 - lib/mongoid/matcher/type.rb
 - lib/mongoid/model_resolver.rb
@@ -598,9 +602,11 @@ files:
 - spec/integration/matcher_operator_data/type_timestamp.yml
 - spec/integration/matcher_operator_data/type_undefined.yml
 - spec/integration/matcher_operator_spec.rb
+- spec/integration/matcher_regexp_timeout_spec.rb
 - spec/integration/matcher_spec.rb
 - spec/integration/persistence/collection_options_spec.rb
 - spec/integration/persistence/range_field_spec.rb
+- spec/integration/query_operator_guard_spec.rb
 - spec/integration/server_query_spec.rb
 - spec/integration/shardable_spec.rb
 - spec/integration/stringified_symbol_field_spec.rb
@@ -764,6 +770,7 @@ files:
 - spec/mongoid/document_persistence_context_spec.rb
 - spec/mongoid/document_query_spec.rb
 - spec/mongoid/document_spec.rb
+- spec/mongoid/encryptable_spec.rb
 - spec/mongoid/equality_spec.rb
 - spec/mongoid/errors/ambiguous_relationship_spec.rb
 - spec/mongoid/errors/attribute_not_loaded_spec.rb
@@ -851,6 +858,7 @@ files:
 - spec/mongoid/matcher/extract_attribute_data/numeric_keys.yml
 - spec/mongoid/matcher/extract_attribute_data/traversal.yml
 - spec/mongoid/matcher/extract_attribute_spec.rb
+- spec/mongoid/matcher/regexp_budget_spec.rb
 - spec/mongoid/model_resolver_spec.rb
 - spec/mongoid/mongoizable_spec.rb
 - spec/mongoid/monkey_patches_spec.rb
@@ -1245,7 +1253,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 1.3.6
 requirements: []
-rubygems_version: 4.0.10
+rubygems_version: 4.0.21
 specification_version: 4
 summary: Elegant Persistence in Ruby for MongoDB.
 test_files:
@@ -1346,9 +1354,11 @@ test_files:
 - spec/integration/matcher_operator_data/type_timestamp.yml
 - spec/integration/matcher_operator_data/type_undefined.yml
 - spec/integration/matcher_operator_spec.rb
+- spec/integration/matcher_regexp_timeout_spec.rb
 - spec/integration/matcher_spec.rb
 - spec/integration/persistence/collection_options_spec.rb
 - spec/integration/persistence/range_field_spec.rb
+- spec/integration/query_operator_guard_spec.rb
 - spec/integration/server_query_spec.rb
 - spec/integration/shardable_spec.rb
 - spec/integration/stringified_symbol_field_spec.rb
@@ -1512,6 +1522,7 @@ test_files:
 - spec/mongoid/document_persistence_context_spec.rb
 - spec/mongoid/document_query_spec.rb
 - spec/mongoid/document_spec.rb
+- spec/mongoid/encryptable_spec.rb
 - spec/mongoid/equality_spec.rb
 - spec/mongoid/errors/ambiguous_relationship_spec.rb
 - spec/mongoid/errors/attribute_not_loaded_spec.rb
@@ -1599,6 +1610,7 @@ test_files:
 - spec/mongoid/matcher/extract_attribute_data/numeric_keys.yml
 - spec/mongoid/matcher/extract_attribute_data/traversal.yml
 - spec/mongoid/matcher/extract_attribute_spec.rb
+- spec/mongoid/matcher/regexp_budget_spec.rb
 - spec/mongoid/model_resolver_spec.rb
 - spec/mongoid/mongoizable_spec.rb
 - spec/mongoid/monkey_patches_spec.rb