ActiveRecord::Encryption::ExtendedDeterministicQueries

Automatically expand encrypted arguments to support querying both encrypted and unencrypted data

Active Record Encryption supports querying the db using deterministic attributes. For example:

Contact.find_by(email_address: "[email protected]")

The value “[email protected]” will get encrypted automatically to perform the query. But there is a problem while the data is being encrypted. This won’t work. During that time, you need these queries to be:

Contact.find_by(email_address: [ "[email protected]", "<encrypted [email protected]>" ])

This patches ActiveRecord to support this automatically. It addresses both:

• ActiveRecord::Base - Used in Contact.find_by_email_address(...)

• ActiveRecord::Relation - Used in Contact.internal.find_by_email_address(...)

This module is included if `config.active_record.encryption.extend_queries` is `true`.