Skip to content

ACC-3028: configure content encryption with ApplicationSettings#316

Open
NielsCW wants to merge 9 commits into
mainfrom
ACC-3028
Open

ACC-3028: configure content encryption with ApplicationSettings#316
NielsCW wants to merge 9 commits into
mainfrom
ACC-3028

Conversation

@NielsCW

@NielsCW NielsCW commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

Changes:

  • Application has applicationSettings
    • ApplicationSettings is an interface that represents application-specific configuration.
    • ContentEncryptionSettings implements ApplicationSettings, allows to configure engine and key wrapper algorithms. Content encryption is enabled if present and disabled if absent.
    • Default key wrapper algorithm is NONE and default encryption engine algorithm is AES128_CTR.
  • add ContentStoreResolver:
    • resolves into an EncryptedContentStore if encryption is enabled, and to the normal ContentStore otherwise
    • replaces autoconfiguration, so encryption is no longer configured with application properties
    • downside: needs dependency on contentgrid-appserver-query-engine-impl-jooq for DSLContextResolver.
  • add DataEncryptionKeyTableCreator:
    • Bootstrapping content encryption table is now controlled by contentgrid.appserver.query-engine.bootstrap-tables instead of contentgrid.appserver.content.encryption.bootstrap-tables.

@NielsCW NielsCW requested a review from a team as a code owner June 22, 2026 14:48
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant