mongoid 9.0.11 → 9.0.13

data/spec/support/crypt/models.rb

@@ -47,4 +47,257 @@ module Crypt
     field :vin, type: String, encrypt: true
     field :make, type: String
   end
+
+  # An encrypted model whose database name is a callable resolving to a
+  # constant. The callable form of :database is supported by store_in, but the
+  # encryption schema map is keyed by namespace and built once, so this model's
+  # namespace is not known when the map is generated.
+  class DynamicCar
+    include Mongoid::Document
+
+    store_in database: -> { 'vehicles_dynamic' }
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q==', deterministic: true
+
+    field :vin, type: String, encrypt: true
+  end
+
+  # An encrypted model using the documented multi-tenant idiom, where the
+  # database name is only known once a tenant is selected. There is no correct
+  # value to resolve at client construction time.
+  class TenantCar
+    include Mongoid::Document
+
+    # The fallback keeps this model usable by tasks that iterate every model,
+    # such as Mongoid::Tasks::Database.create_collections. Mongoid raises
+    # NoMethodError when a callable :database resolves to nil.
+    store_in database: -> { Thread.current[:tenant_database] || 'vehicles_no_tenant' }
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q==', deterministic: true
+
+    field :vin, type: String, encrypt: true
+  end
+
+  # An encrypted model that is embedded by more than one parent, and more than
+  # once by the same parent.
+  class Token
+    include Mongoid::Document
+
+    field :value, type: String, encrypt: { deterministic: true }
+
+    embedded_in :tokenized, polymorphic: true
+  end
+
+  # A parent whose encrypted data lives entirely in an embedded model: it has
+  # no encrypted field of its own and no encrypt_with.
+  class Wallet
+    include Mongoid::Document
+
+    embeds_one :token, class_name: 'Crypt::Token', as: :tokenized
+  end
+
+  # Two parents embedding the same encrypted model.
+  class Vault
+    include Mongoid::Document
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q=='
+
+    embeds_one :token, class_name: 'Crypt::Token', as: :tokenized
+  end
+
+  class Chest
+    include Mongoid::Document
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q=='
+
+    embeds_one :token, class_name: 'Crypt::Token', as: :tokenized
+  end
+
+  # A parent embedding the same encrypted model through two relations.
+  class Ledger
+    include Mongoid::Document
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q=='
+
+    embeds_one :primary_token, class_name: 'Crypt::Token', as: :tokenized
+    embeds_one :backup_token, class_name: 'Crypt::Token', as: :tokenized
+  end
+
+  # Three levels of nesting, where the middle level has no encrypted field of
+  # its own.
+  class Owner
+    include Mongoid::Document
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q=='
+
+    embeds_one :account, class_name: 'Crypt::Account'
+  end
+
+  class Account
+    include Mongoid::Document
+
+    embedded_in :owner, class_name: 'Crypt::Owner'
+    embeds_one :credential, class_name: 'Crypt::Credential'
+  end
+
+  class Credential
+    include Mongoid::Document
+
+    field :secret, type: String, encrypt: { deterministic: true }
+
+    embedded_in :account, class_name: 'Crypt::Account'
+  end
+
+  # A model that embeds itself. The walk over embedded relations has to stop
+  # here, or generating the map never terminates.
+  class Comment
+    include Mongoid::Document
+
+    field :body, type: String, encrypt: { deterministic: true }
+
+    embedded_in :commentable, polymorphic: true
+    embeds_one :reply, class_name: 'Crypt::Comment', as: :commentable
+  end
+
+  class Article
+    include Mongoid::Document
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q=='
+
+    embeds_one :comment, class_name: 'Crypt::Comment', as: :commentable
+  end
+
+  # A parent with no encrypted field of its own: the encrypted field lives on
+  # the embedded model. Used by the integration specs, so the embedded model
+  # carries a key id.
+  class Folder
+    include Mongoid::Document
+
+    embeds_one :note, class_name: 'Crypt::Note'
+  end
+
+  class Note
+    include Mongoid::Document
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q==', deterministic: true
+
+    field :text, type: String, encrypt: true
+
+    embedded_in :folder, class_name: 'Crypt::Folder'
+  end
+
+  # A model naming an embedded class that is never defined. The association
+  # cannot be used, so nothing is ever embedded through it, but every model in
+  # the application is walked when the schema map is generated.
+  class Drawer
+    include Mongoid::Document
+
+    embeds_one :missing_note, class_name: 'Crypt::MissingNote'
+  end
+
+  # The same, on a model that is encrypted itself, so the walk descends into
+  # its relations.
+  class Cabinet
+    include Mongoid::Document
+
+    field :label, type: String, encrypt: { deterministic: true }
+
+    embeds_one :missing_note, class_name: 'Crypt::MissingNote'
+  end
+
+  # Two unrelated models stored in one collection, each with its own encrypted
+  # field.
+  class Badge
+    include Mongoid::Document
+
+    store_in collection: 'crypt_badges'
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q==', deterministic: true
+
+    field :serial, type: String, encrypt: true
+  end
+
+  class BadgeScan
+    include Mongoid::Document
+
+    store_in collection: 'crypt_badges'
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q==', deterministic: true
+
+    field :holder, type: String, encrypt: true
+  end
+
+  # Single collection inheritance. Only Member is registered in
+  # Mongoid.models; the subclasses are not.
+  class Member
+    include Mongoid::Document
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q==', deterministic: true
+
+    field :ssn, type: String, encrypt: true
+  end
+
+  class Employee < Member
+    field :salary, type: String, encrypt: true
+  end
+
+  class Contractor < Member
+    field :rate, type: String, encrypt: true
+  end
+
+  # Single collection inheritance where only the subclass is encrypted.
+  class Listing
+    include Mongoid::Document
+
+    field :title, type: String
+  end
+
+  class PrivateListing < Listing
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q==', deterministic: true
+
+    field :owner_ssn, type: String, encrypt: true
+  end
+
+  # An embeds_one target whose subclass adds an encrypted field.
+  class Box
+    include Mongoid::Document
+
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q==', deterministic: true
+
+    embeds_one :item, class_name: 'Crypt::Item'
+  end
+
+  class Item
+    include Mongoid::Document
+
+    field :label, type: String, encrypt: true
+
+    embedded_in :box, class_name: 'Crypt::Box'
+  end
+
+  class SealedItem < Item
+    field :seal, type: String, encrypt: true
+  end
+
+  # An embeds_one target with no encrypted field, whose subclass has one.
+  # Nothing on Locker or Content declares encryption.
+  class Locker
+    include Mongoid::Document
+
+    embeds_one :content, class_name: 'Crypt::Content'
+  end
+
+  class Content
+    include Mongoid::Document
+
+    field :label, type: String
+
+    embedded_in :locker, class_name: 'Crypt::Locker'
+  end
+
+  class SecretContent < Content
+    encrypt_with key_id: 'grolrnFVSSW9Gq04Q87R9Q==', deterministic: true
+
+    field :code, type: String, encrypt: true
+  end
 end

data/spec/support/models/modifier_models.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+module ModifierModels
+  class Cabinet
+    include Mongoid::Document
+
+    embeds_one :drawer, class_name: 'ModifierModels::Drawer', autobuild: true
+  end
+
+  class Drawer
+    include Mongoid::Document
+
+    field :matcher, type: String
+    embedded_in :cabinet, class_name: 'ModifierModels::Cabinet'
+    embeds_many :items, class_name: 'ModifierModels::Item'
+  end
+
+  class Item
+    include Mongoid::Document
+
+    field :name, type: String
+    embedded_in :drawer, class_name: 'ModifierModels::Drawer'
+    embeds_many :widgets, class_name: 'ModifierModels::Widget'
+  end
+
+  class Widget
+    include Mongoid::Document
+
+    field :label, type: String
+    embedded_in :item, class_name: 'ModifierModels::Item'
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: mongoid
 version: !ruby/object:Gem::Version
-  version: 9.0.11
+  version: 9.0.13
 platform: ruby
 authors:
 - The MongoDB Ruby Team
@@ -292,6 +292,7 @@ files:
 - lib/mongoid/errors/empty_config_file.rb
 - lib/mongoid/errors/immutable_attribute.rb
 - lib/mongoid/errors/in_memory_collation_not_supported.rb
+- lib/mongoid/errors/in_memory_regexp_timeout.rb
 - lib/mongoid/errors/invalid_around_callback.rb
 - lib/mongoid/errors/invalid_async_query_executor.rb
 - lib/mongoid/errors/invalid_auto_encryption_configuration.rb
@@ -302,6 +303,7 @@ files:
 - lib/mongoid/errors/invalid_discriminator_key_target.rb
 - lib/mongoid/errors/invalid_dot_dollar_assignment.rb
 - lib/mongoid/errors/invalid_elem_match_operator.rb
+- lib/mongoid/errors/invalid_encryption_schema.rb
 - lib/mongoid/errors/invalid_estimated_count_criteria.rb
 - lib/mongoid/errors/invalid_estimated_count_scoping.rb
 - lib/mongoid/errors/invalid_expression_operator.rb
@@ -335,6 +337,7 @@ files:
 - lib/mongoid/errors/no_client_hosts.rb
 - lib/mongoid/errors/no_clients_config.rb
 - lib/mongoid/errors/no_default_client.rb
+- lib/mongoid/errors/no_encryption_schema.rb
 - lib/mongoid/errors/no_environment.rb
 - lib/mongoid/errors/no_map_reduce_output.rb
 - lib/mongoid/errors/no_metadata.rb
@@ -382,6 +385,7 @@ files:
 - lib/mongoid/extensions/time_with_zone.rb
 - lib/mongoid/extensions/true_class.rb
 - lib/mongoid/factory.rb
+- lib/mongoid/field_readable.rb
 - lib/mongoid/fields.rb
 - lib/mongoid/fields/encrypted.rb
 - lib/mongoid/fields/foreign_key.rb
@@ -429,6 +433,7 @@ files:
 - lib/mongoid/matcher/not.rb
 - lib/mongoid/matcher/or.rb
 - lib/mongoid/matcher/regex.rb
+- lib/mongoid/matcher/regexp_budget.rb
 - lib/mongoid/matcher/size.rb
 - lib/mongoid/matcher/type.rb
 - lib/mongoid/model_resolver.rb
@@ -598,9 +603,11 @@ files:
 - spec/integration/matcher_operator_data/type_timestamp.yml
 - spec/integration/matcher_operator_data/type_undefined.yml
 - spec/integration/matcher_operator_spec.rb
+- spec/integration/matcher_regexp_timeout_spec.rb
 - spec/integration/matcher_spec.rb
 - spec/integration/persistence/collection_options_spec.rb
 - spec/integration/persistence/range_field_spec.rb
+- spec/integration/query_operator_guard_spec.rb
 - spec/integration/server_query_spec.rb
 - spec/integration/shardable_spec.rb
 - spec/integration/stringified_symbol_field_spec.rb
@@ -764,6 +771,7 @@ files:
 - spec/mongoid/document_persistence_context_spec.rb
 - spec/mongoid/document_query_spec.rb
 - spec/mongoid/document_spec.rb
+- spec/mongoid/encryptable_spec.rb
 - spec/mongoid/equality_spec.rb
 - spec/mongoid/errors/ambiguous_relationship_spec.rb
 - spec/mongoid/errors/attribute_not_loaded_spec.rb
@@ -851,6 +859,7 @@ files:
 - spec/mongoid/matcher/extract_attribute_data/numeric_keys.yml
 - spec/mongoid/matcher/extract_attribute_data/traversal.yml
 - spec/mongoid/matcher/extract_attribute_spec.rb
+- spec/mongoid/matcher/regexp_budget_spec.rb
 - spec/mongoid/model_resolver_spec.rb
 - spec/mongoid/mongoizable_spec.rb
 - spec/mongoid/monkey_patches_spec.rb
@@ -1080,6 +1089,7 @@ files:
 - spec/support/models/message.rb
 - spec/support/models/minim.rb
 - spec/support/models/mixed_drink.rb
+- spec/support/models/modifier_models.rb
 - spec/support/models/mop.rb
 - spec/support/models/movie.rb
 - spec/support/models/my_hash.rb
@@ -1245,7 +1255,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 1.3.6
 requirements: []
-rubygems_version: 4.0.10
+rubygems_version: 4.0.24
 specification_version: 4
 summary: Elegant Persistence in Ruby for MongoDB.
 test_files:
@@ -1346,9 +1356,11 @@ test_files:
 - spec/integration/matcher_operator_data/type_timestamp.yml
 - spec/integration/matcher_operator_data/type_undefined.yml
 - spec/integration/matcher_operator_spec.rb
+- spec/integration/matcher_regexp_timeout_spec.rb
 - spec/integration/matcher_spec.rb
 - spec/integration/persistence/collection_options_spec.rb
 - spec/integration/persistence/range_field_spec.rb
+- spec/integration/query_operator_guard_spec.rb
 - spec/integration/server_query_spec.rb
 - spec/integration/shardable_spec.rb
 - spec/integration/stringified_symbol_field_spec.rb
@@ -1512,6 +1524,7 @@ test_files:
 - spec/mongoid/document_persistence_context_spec.rb
 - spec/mongoid/document_query_spec.rb
 - spec/mongoid/document_spec.rb
+- spec/mongoid/encryptable_spec.rb
 - spec/mongoid/equality_spec.rb
 - spec/mongoid/errors/ambiguous_relationship_spec.rb
 - spec/mongoid/errors/attribute_not_loaded_spec.rb
@@ -1599,6 +1612,7 @@ test_files:
 - spec/mongoid/matcher/extract_attribute_data/numeric_keys.yml
 - spec/mongoid/matcher/extract_attribute_data/traversal.yml
 - spec/mongoid/matcher/extract_attribute_spec.rb
+- spec/mongoid/matcher/regexp_budget_spec.rb
 - spec/mongoid/model_resolver_spec.rb
 - spec/mongoid/mongoizable_spec.rb
 - spec/mongoid/monkey_patches_spec.rb
@@ -1828,6 +1842,7 @@ test_files:
 - spec/support/models/message.rb
 - spec/support/models/minim.rb
 - spec/support/models/mixed_drink.rb
+- spec/support/models/modifier_models.rb
 - spec/support/models/mop.rb
 - spec/support/models/movie.rb
 - spec/support/models/my_hash.rb