symmetric-encryption 4.4.0 → 4.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 17ec7e95cd640a1bc8b960bff9244557e3dcd58bb58744b054e4bb7ef95a051a
-  data.tar.gz: 36230ce36bf337f98d5cf70e45c5ed1658faeed8ce650cd9b4b7d12354a477df
+  metadata.gz: 8e2c2ad605877325606a7a1d186768164ea937ea31c00dfbd03e9d9cb2af9fc4
+  data.tar.gz: c09040519caf78c1e323f176bbb9a4b1927285d9d8fda9db22cbf98e79c65445
 SHA512:
-  metadata.gz: 4d880e284b3aa211e2a4bdeb872ff294d8c8743eb033edcafd6ec7ee569da3390b12821e555b1efe98503b2e4c4c05d0380f5da6d09577dfcd57badc12c0bce2
-  data.tar.gz: 36453ff31c896a7b7359b66cd53d3777f71b6855d53d8f002a77d7af91e3fe21c1a346869c0414aecbe8cc92c7e93dd73701edaa751072df6dcdd9459dd74752
+  metadata.gz: d21beddef347085e73ac34ef570500d5b670b4d8d46db0bcc6bdf1578d677224e29c13810b425dc0889aee9c6af8e180b29d53f9a13a4d4702303b6bc099a88c
+  data.tar.gz: b8dd362780461aaa8b207ca1ba7c337ecbf05dd8b56a7c49cef1df2a04cff92fa76afe1efa1d16db8efb0d695cf9462aed2ad2ecf6c07703e5687a91c37b6188

data/README.md

@@ -27,6 +27,13 @@ Checkout the sister project [Rocket Job](http://rocketjob.io): Ruby's missing ba
 
 Fully supports Symmetric Encryption to encrypt data in flight and at rest while running jobs in the background.
 
+## Upgrading to Rails V7
+
+There is a method naming conflict with Rails 7, which has its own `encrypted_attributes` method.
+
+As a result the older `attr_encrypted` mechanism is no longer available with Rails 7. 
+Migrate the use of `attr_encrypted` to `attribute` as described in the [Frameworks Guide](https://encryption.rocketjob.io/frameworks.html).
+
 ## Upgrading to SymmetricEncryption V4
 
 Version 4 of Symmetric Encryption has completely adopted the Ruby keyword arguments on most API's where

data/lib/symmetric_encryption/active_record/encrypted_attribute.rb

@@ -24,6 +24,10 @@ module SymmetricEncryption
         )
       end
 
+      def changed_in_place?(raw_old_value, new_value)
+        deserialize(raw_old_value) != new_value
+      end
+
       private
 
       # Symmetric Encryption uses coercible gem to handle casting

data/lib/symmetric_encryption/config.rb

@@ -27,7 +27,7 @@ module SymmetricEncryption
 
     # Reads the entire configuration for all environments from the supplied file name.
     def self.read_file(file_name)
-      config = YAML.load(ERB.new(File.new(file_name).read).result)
+      config = load_yaml(ERB.new(File.new(file_name).read).result)
       config = deep_symbolize_keys(config)
       config.each_pair { |_env, cfg| SymmetricEncryption::Config.send(:migrate_old_formats!, cfg) }
       config
@@ -75,7 +75,7 @@ module SymmetricEncryption
         begin
           raise(ConfigError, "Cannot find config file: #{file_name}") unless File.exist?(file_name)
 
-          env_config = YAML.load(ERB.new(File.new(file_name).read).result)[env]
+          env_config = self.class.load_yaml(ERB.new(File.new(file_name).read).result)[env]
           raise(ConfigError, "Cannot find environment: #{env} in config file: #{file_name}") unless env_config
 
           env_config = self.class.send(:deep_symbolize_keys, env_config)
@@ -163,5 +163,11 @@ module SymmetricEncryption
     end
 
     private_class_method :migrate_old_formats!
+
+    def self.load_yaml(src)
+      return YAML.safe_load(src, permitted_classes: [Symbol], aliases: true) if Psych::VERSION.to_i >= 4
+
+      YAML.load(src)
+    end
   end
 end

data/lib/symmetric_encryption/keystore.rb

@@ -220,8 +220,7 @@ module SymmetricEncryption
 
       # Migrate old encrypted_iv
       if (encrypted_iv = config.delete(:encrypted_iv)) && private_rsa_key
-        encrypted_iv = RSAKey.new(private_rsa_key).decrypt(encrypted_iv)
-        config[:iv]  = ::Base64.decode64(encrypted_iv)
+        config[:iv] = RSAKey.new(private_rsa_key).decrypt(::Base64.decode64(encrypted_iv))
       end
 
       # Migrate old iv_filename

data/lib/symmetric_encryption/version.rb

@@ -1,3 +1,3 @@
 module SymmetricEncryption
-  VERSION = "4.4.0".freeze
+  VERSION = "4.6.0".freeze
 end

data/lib/symmetric_encryption.rb

@@ -17,7 +17,10 @@ begin
       ActiveRecord::Type.register(:encrypted, SymmetricEncryption::ActiveRecord::EncryptedAttribute)
     end
 
-    ActiveRecord::Base.include(SymmetricEncryption::ActiveRecord::AttrEncrypted)
+    # Remove old way of defining attributes with Rails 7 since it conflicts with the method names.
+    if ActiveRecord.version <= Gem::Version.new("7.0.0")
+      ActiveRecord::Base.include(SymmetricEncryption::ActiveRecord::AttrEncrypted)
+    end
   end
 
   ActiveSupport.on_load(:mongoid) do

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: symmetric-encryption
 version: !ruby/object:Gem::Version
-  version: 4.4.0
+  version: 4.6.0
 platform: ruby
 authors:
 - Reid Morrison
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-10-07 00:00:00.000000000 Z
+date: 2022-11-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: coercible
@@ -86,7 +86,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.22
+rubygems_version: 3.3.7
 signing_key:
 specification_version: 4
 summary: Encrypt ActiveRecord and Mongoid attributes, files and passwords in configuration