Extend encryptor config validation rules - Githubissues

cossacklabs / acra

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

https://www.cossacklabs.com/acra/

Apache License 2.0

1.32k stars 128 forks source link

Extend encryptor config validation rules #618

Closed Zhaars closed 1 year ago

Zhaars commented 1 year ago

AcraServer denies such config:

schemas:
  - table: mytable
    columns:
      - name
    encrypted:
      - column: name
        data_type: "str"
        response_on_fail: ciphertext
        searchable: true

PR includes extending validation rules of encryptor configs with OnFail settings

Checklist

[ ] Change is covered by automated tests
[ ] The coding guidelines are followed
[ ] Public API has proper documentation in the Acra documentation site or has PR on documentation repository with new changes
[ ] CHANGELOG.md is updated (in case of notable or breaking changes)
[ ] CHANGELOG_DEV.md is updated
[ ] Benchmark results are attached (if applicable)
are up-to-date (in case of API changes)