[REQ] Support json path wildcards about client-encryption-java HOT 4 CLOSED

Hi @connerza

Thanks for your request. At this time we have no plans to implement wildcard JSON paths.
Ideally, we prefer if services encrypt entire payloads. Allowing individual fields is still left for edge cases like auditing, huge payloads etc. This is to keep things as simple as possible.

For your example rather than end up with something like

{
  "items": [
    {
      "encryptedData1": "ngaarekjgnrelkjgna.rbakjrbgkjerbg...
    },
    {
      "encryptedData2": "ngaarekjgnrelkjgna.rbakjrbgkjerbg...
    },
  ] 
}

would it not be better to places the encryption on the items field so it results in something like

{
  "encryptedData": "asdfasdbfvkajbdv.asdfkjbasvkjbkrljbv...
}

So the end-user only has to decrypt one field rather than run it against each field in the list?

from client-encryption-java.

Ah getcha! I'll bring this up with the team and schedule it for a future iteration.
I'll let you know once it's in.
If you would like to implement it yourself we also accept PRs.

from client-encryption-java.

Hi @rfeelin, thanks for your response! For our use case, we want to only encrypt certain attributes within the list while leaving other attributes in plain text for auditing and debugging purposes. So rather than looking like

{
  "items": [
    {
      "encryptedData1": "ngaarekjgnrelkjgna.rbakjrbgkjerbg...
    },
    {
      "encryptedData2": "ngaarekjgnrelkjgna.rbakjrbgkjerbg...
    },
  ] 
}

it looks something more like

{
  "items": [
    {
        "sensitiveData": "ngaarekjgnrelkjgna.rbakjrbgkjerbg...,
        "nonSensitiveData1": "hello",
        "nonSensitiveData2": "world",
        ...
    },
    {
        "sensitiveData": "ngaarekjgnrelkjgna.rbakjrbgkjerbg...,
        "nonSensitiveData1": "hello",
        "nonSensitiveData2": "world",
        ...
    },
  ] 
}

from client-encryption-java.

@connerza the latest version of the plugin now has support for wildcards. Can you validate that this is working as expected?

from client-encryption-java.