-
Notifications
You must be signed in to change notification settings - Fork 1.5k
Added option to configure DEK cache lifetime #1689
New issue
Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? # to your account
Conversation
Added the `AutoEncryptionSettings.Builder#keyExpiration` method and `ClientEncryptionSettings.Builder#keyExpiration` method to configure the cache expiration time for data encryption keys. JAVA-5547
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM 👍
1- Does this use the updated spec tests? mongodb/specifications@787bbe6
2- What happens when the key expires? Are we testing this via unified or prose test?
mongodb-crypt/src/main/com/mongodb/internal/crypt/capi/MongoCryptOptions.java
Outdated
Show resolved
Hide resolved
Co-authored-by: Nabil Hachicha <nabil.hachicha@gmail.com>
Co-authored-by: Nabil Hachicha <nabil.hachicha@gmail.com>
Co-authored-by: Nabil Hachicha <nabil.hachicha@gmail.com>
Co-authored-by: Nabil Hachicha <nabil.hachicha@gmail.com>
…yptOptions.java Co-authored-by: Nabil Hachicha <nabil.hachicha@gmail.com>
Co-authored-by: Nabil Hachicha <nabil.hachicha@gmail.com>
@nhachicha thanks for the review:
Yes 👍
This is handled by libmongocrypt and is covered by unified and their tests |
Added the
AutoEncryptionSettings.Builder#keyExpiration
method andClientEncryptionSettings.Builder#keyExpiration
method to configure the cache expiration time for data encryption keys.JAVA-5547