cipherstash-dynamodb 0.8.3

CipherStash SDK for searchable, in-use encryption for DynamoDB
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88

use cipherstash_dynamodb::traits::*;
use cipherstash_dynamodb::*;
use serial_test::serial;
use std::future::Future;

mod common;

#[derive(Debug, Encryptable, Decryptable)]
pub struct User {
    name: String,
    age: u64,
}

// implement a noop Searchable for user as there are no indexes
impl Searchable for User {}

impl Identifiable for User {
    type PrimaryKey = PkSk;

    fn type_name() -> std::borrow::Cow<'static, str> {
        std::any::type_name::<Self>().to_lowercase().into()
    }

    fn sort_key_prefix() -> Option<std::borrow::Cow<'static, str>> {
        Some(Self::type_name())
    }

    fn get_primary_key(&self) -> Self::PrimaryKey {
        PkSk("user".to_string(), self.name.to_string())
    }
}

#[tokio::test]
#[serial]
async fn test_round_trip_user() {
    run_test(|table| async move {
        table
            .put(User {
                name: "Sarah".to_string(),
                age: 100,
            })
            .await
            .expect("failed to put Sarah");

        table
            .put(User {
                name: "John".to_string(),
                age: 100,
            })
            .await
            .expect("failed to put John");

        let sarah: User = table
            .get(("user", "Sarah"))
            .await
            .expect("failed to get Sarah")
            .unwrap();

        let john: User = table
            .get(("user", "John"))
            .await
            .expect("failed to get Sarah")
            .unwrap();

        assert_eq!(sarah.name, "Sarah");
        assert_eq!(john.name, "John");
    })
    .await;
}

async fn run_test<F: Future<Output = ()>>(mut f: impl FnMut(EncryptedTable) -> F) {
    let config = aws_config::from_env()
        .endpoint_url("http://localhost:8000")
        .load()
        .await;

    let client = aws_sdk_dynamodb::Client::new(&config);

    let table_name = "identifiable-tests";

    common::create_table(&client, table_name).await;

    let table = EncryptedTable::init(client, table_name)
        .await
        .expect("Failed to init table");

    f(table).await;
}