mirror of
https://github.com/we-promise/sure.git
synced 2026-04-07 22:34:47 +00:00
696ff0966b
* Initial sec * Update PII fields * FIX add tests * FIX safely read plaintext data on rake backfill * Update user.rb * FIX tests * encryption_ready? block * Test conditional to encryption on --------- Signed-off-by: Juan José Mata <juanjo.mata@gmail.com> Co-authored-by: Juan José Mata <juanjo.mata@gmail.com>
17 lines
701 B
Ruby
17 lines
701 B
Ruby
module Encryptable
|
|
extend ActiveSupport::Concern
|
|
|
|
class_methods do
|
|
# Helper to detect if ActiveRecord Encryption is configured for this app.
|
|
# This allows encryption to be optional - if not configured, sensitive fields
|
|
# are stored in plaintext (useful for development or legacy deployments).
|
|
def encryption_ready?
|
|
creds_ready = Rails.application.credentials.active_record_encryption.present?
|
|
env_ready = ENV["ACTIVE_RECORD_ENCRYPTION_PRIMARY_KEY"].present? &&
|
|
ENV["ACTIVE_RECORD_ENCRYPTION_DETERMINISTIC_KEY"].present? &&
|
|
ENV["ACTIVE_RECORD_ENCRYPTION_KEY_DERIVATION_SALT"].present?
|
|
creds_ready || env_ready
|
|
end
|
|
end
|
|
end
|