Module: AttrVault::InstanceMethods

Defined in:
lib/attr_vault.rb

Instance Method Summary collapse

Instance Method Details

#before_save ⇒ Object 



14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
 
# File 'lib/attr_vault.rb', line 14

def before_save
  keyring = self.class.vault_keys
  current_key = keyring.current_key
  key_id = self[self.class.vault_key_field]
  record_key = self.class.vault_keys.fetch(key_id) unless key_id.nil?

  @vault_dirty_attrs ||= {}
  if !record_key.nil? && current_key != record_key
    # If the record key is not nil and not current, flag *all*
    # attrs as dirty, since we want to rewrite them all in order
    # to use the latest key. Note that when the record key is nil,
    # we're dealing with a new record, so there are no existing
    # vault attributes to rewrite. We only write these out when
    # they're set explicitly in a new record, in which case they
    # will be in the dirty attrs already and are handled below.
    self.class.vault_attrs.each do |attr|
      next if @vault_dirty_attrs.has_key? attr.name
      @vault_dirty_attrs[attr.name] = self.send(attr.name)
    end
  end
  # If any attr has plaintext_source_field and the plaintext field
  # has a value set, flag the attr as dirty using the plaintext
  # source value, then nil out the plaintext field.
  self.class.vault_attrs.reject { |attr| attr.plaintext_source_field.nil? }.each do |attr|
    unless self[attr.plaintext_source_field].nil?
      @vault_dirty_attrs[attr.name] = self[attr.plaintext_source_field]
      self[attr.plaintext_source_field] = nil
    end
  end
  self.class.vault_attrs.each do |attr|
    next unless @vault_dirty_attrs.has_key? attr.name

    value = @vault_dirty_attrs[attr.name]
    encrypted, hmac = Cryptor.encrypt(value, current_key.value)

    unless encrypted.nil?
      encrypted = Sequel.blob(encrypted)
    end
    unless hmac.nil?
      hmac = Sequel.blob(hmac)
    end

    self[attr.encrypted_field] = encrypted
    self[attr.hmac_field] = hmac
  end
  self[self.class.vault_key_field] = current_key.id
  @vault_dirty_attrs = {}
  super
end