Struct FieldMapper 

pub struct FieldMapper { /* private fields */ }

Mapper for handling encrypted fields in database operations

Transparently encrypts/decrypts fields during read/write operations.

Implementations

impl FieldMapper

pub fn new( adapter: Arc<DatabaseFieldAdapter>, encrypted_fields: Vec<String>, ) -> Self

Create new field mapper

Arguments

• adapter - Field adapter for encryption/decryption
• encrypted_fields - List of fields that should be encrypted

pub fn is_field_encrypted(&self, field_name: &str) -> bool

Check if field is marked for encryption

pub async fn encrypt_field( &self, field_name: &str, plaintext: &str, ) -> Result<Vec<u8>, SecretsError>

Encrypt field value before write operation

Arguments

• field_name - Name of field to encrypt
• plaintext - Plaintext value to encrypt

Returns

Encrypted bytes in format: [nonce][ciphertext][tag]

pub async fn decrypt_field( &self, field_name: &str, ciphertext: &[u8], ) -> Result<String, SecretsError>

Decrypt field value after read operation

Arguments

• field_name - Name of field to decrypt
• ciphertext - Encrypted bytes from database

Returns

Decrypted plaintext string

pub async fn encrypt_fields( &self, fields: &[(String, String)], ) -> Result<Vec<FieldMapping>, SecretsError>

Encrypt multiple fields (batch operation)

Returns FieldMapping objects with encryption status.

pub async fn decrypt_fields( &self, fields: &[(String, Vec<u8>)], ) -> Result<Vec<FieldMapping>, SecretsError>

Decrypt multiple fields (batch operation)

Returns FieldMapping objects with decrypted values.

pub fn encrypted_fields(&self) -> Vec<String>

Get list of encrypted fields

pub fn has_encrypted_fields(&self) -> bool

Check if any fields are encrypted

pub fn register_encrypted_field(&mut self, field_name: impl Into<String>)

Register field for encryption

Can be used to dynamically add encrypted fields after mapper creation.

pub fn unregister_encrypted_field(&mut self, field_name: &str)

Unregister field from encryption

pub fn encrypted_field_count(&self) -> usize

Get count of encrypted fields

pub fn validate_configuration(&self) -> Result<(), SecretsError>

Validate field encryption configuration

Returns error if configuration is inconsistent or incomplete.