attr_encryptor

attr_encryptor copied to clipboard

How does this compare to attr_encrypted

6

Can you clarify in the README how this relates to https://github.com/attr-encrypted/attr_encrypted? It seems most of the code is derived from there but you dont provide any attribution or explanation.

ykessler

When using `wrap_parameters` in Rails controllers[1], encrypted attributes are not passed through to the `params` hash for the controller resource. `wrap_parameters` uses `Model.attribute_names` to determine which parameters should be allowed....

snikch

Is attr_encryptor vulnerable to the same padding attacks that are mentioned in [ActiveSupport::MessageEncryptor](http://api.rubyonrails.org/classes/ActiveSupport/MessageEncryptor.html)? Taking a quick look at the source code, it seems that both attr_encryptor and activesupport use the...

mattbrictson

Searching encrypted values

4

I have the following code: ``` user = FactoryGirl.create(:user) returned_user = User.where(:encrypted_provider => User.encrypt_provider(user.provider), :encrypted_uid => User.encrypt_uid(user.uid)).first ``` But the returned user never returns anything. When I deconstruct the command...

betjaminrichards

Modifying marshaled attribute in place doesn't set dirty flag; not persisted

1

This is logical but not obvious until one runs into it. Adding or updating a hash key in a marshaled `attr_encrypted` doesn't mark the attribute as dirty, so `save` will...

troy