feat(orm): add encrypted column decorator with deterministic and blind indexes by RomainLanz · Pull Request #1143 · adonisjs/lucid

feat(orm): add encrypted column decorator with deterministic and blind query support

RomainLanz

committed

feat(orm): add encrypted column decorators with driver support and blind index query rewriting

RomainLanz

committed

fix(orm): encrypt ModelQueryBuilder update payloads and sync blind indexes

RomainLanz

committed

fix(orm): avoid encrypting joined table columns with matching names

RomainLanz

committed

fix(orm): harden encrypted column query/write paths and blind-index handling

RomainLanz

committed

test(db): include users_encrypted in table snapshots and shared test schema

RomainLanz

committed

test(db): remove table name

RomainLanz

committed

fix(orm): support in/not in operators for encrypted where clauses

RomainLanz

committed

fix(orm): validate blind encrypted metadata in model write path

RomainLanz

committed

test(orm): cover unsupported encrypted whereBetween and whereJson operators

RomainLanz

committed

fix(orm): harden encrypted where rewriting (in/not in, object, and/or)

RomainLanz

committed

refactor(orm): optimize encrypted update payload preparation in ModelQueryBuilder

RomainLanz

committed

fix(encrypted): exclude driver from column options passed to $addColumn

RomainLanz

committed

refactor(query-builder): deduplicate encrypted where and whereIn logic

RomainLanz

committed

fix(query-builder): rewrite object where variants for blind multi-index columns

RomainLanz

committed

fix(query-builder): guard whereColumn comparisons on encrypted columns

RomainLanz

committed

refactor(base-model): compute blind index writes in deferred single-pass prepareForAdapter

RomainLanz

committed

refactor(query-builder): validate qualified source before encrypted column resolution

RomainLanz

committed

fix(encrypted-column): pass driver to decrypt during consume

RomainLanz

committed

types(encrypted-column): narrow allowed column options

RomainLanz

committed

test(query-builder): cover encrypted key/value update with returning

RomainLanz

committed

fix(query-builder): reject increment/decrement on encrypted columns

RomainLanz

committed

test(schema): index blind column on users_encrypted table

RomainLanz

committed

refactor(query-builder): use named options for encrypted method guards

RomainLanz

committed

fix(query-builder): block object-form increment/decrement on encrypted columns

RomainLanz

committed

fix(base-model): keep encryption provider dynamically inherited after boot

RomainLanz

committed

fix(query-builder): use explicit error for standard encrypted where queries

RomainLanz

committed

fix(encrypted-column): keep driver value as provided and trim only blind metadata

RomainLanz

committed

chore(errors): reword unsupported encrypted query message for non-where operations

RomainLanz

committed

refactor(query-builder): simplify encrypted method guard signature

RomainLanz

committed

refactor(query-builder): extract encrypted query support into dedicated class

RomainLanz

committed

refactor(encryption): replace useEncryption API with config defaults and centralize driver resolution

RomainLanz

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(orm): add encrypted column decorator with deterministic and blind indexes#1143

feat(orm): add encrypted column decorator with deterministic and blind indexes#1143
RomainLanz wants to merge 32 commits into
22.xfrom
feat/encryption

Commits on Feb 7, 2026

feat(orm): add encrypted column decorator with deterministic and blind query support

feat(orm): add encrypted column decorators with driver support and blind index query rewriting

fix(orm): encrypt ModelQueryBuilder update payloads and sync blind indexes

fix(orm): avoid encrypting joined table columns with matching names

fix(orm): harden encrypted column query/write paths and blind-index handling

test(db): include users_encrypted in table snapshots and shared test schema

test(db): remove table name

fix(orm): support in/not in operators for encrypted where clauses

fix(orm): validate blind encrypted metadata in model write path

test(orm): cover unsupported encrypted whereBetween and whereJson operators

fix(orm): harden encrypted where rewriting (in/not in, object, and/or)

refactor(orm): optimize encrypted update payload preparation in ModelQueryBuilder

fix(encrypted): exclude driver from column options passed to $addColumn

refactor(query-builder): deduplicate encrypted where and whereIn logic

fix(query-builder): rewrite object where variants for blind multi-index columns

fix(query-builder): guard whereColumn comparisons on encrypted columns

refactor(base-model): compute blind index writes in deferred single-pass prepareForAdapter

refactor(query-builder): validate qualified source before encrypted column resolution

fix(encrypted-column): pass driver to decrypt during consume

types(encrypted-column): narrow allowed column options

test(query-builder): cover encrypted key/value update with returning

fix(query-builder): reject increment/decrement on encrypted columns

test(schema): index blind column on users_encrypted table

refactor(query-builder): use named options for encrypted method guards

fix(query-builder): block object-form increment/decrement on encrypted columns

fix(base-model): keep encryption provider dynamically inherited after boot

fix(query-builder): use explicit error for standard encrypted where queries

fix(encrypted-column): keep driver value as provided and trim only blind metadata

chore(errors): reword unsupported encrypted query message for non-where operations

refactor(query-builder): simplify encrypted method guard signature

refactor(query-builder): extract encrypted query support into dedicated class

refactor(encryption): replace useEncryption API with config defaults and centralize driver resolution