Allow uer to customize KMS provider.

aclark4life · aclark4life · commit 4dbaa8fcc052 · 2025-07-02T19:23:38.000-04:00
diff --git a/django_mongodb_backend/encryption.py b/django_mongodb_backend/encryption.py
@@ -9,6 +9,7 @@
 
 KEY_VAULT_DATABASE_NAME = "keyvault"
 KEY_VAULT_COLLECTION_NAME = "__keyVault"
+KMS_PROVIDER = "local"  # e.g., "aws", "azure", "gcp", "kmip", or "local"
 
 
 def get_customer_master_key():
diff --git a/django_mongodb_backend/schema.py b/django_mongodb_backend/schema.py
@@ -440,7 +440,7 @@ def _create_collection(self, model):
                 db,
                 model._meta.db_table,
                 self._get_encrypted_fields_map(model),
-                "local",  # TODO: KMS provider should be configurable
+                settings.KMS_PROVIDER,
             )
 
     def _get_encrypted_fields_map(self, model):

Original file line number	Diff line number	Diff line change
`@@ -440,7 +440,7 @@ def _create_collection(self, model):`
`440`	`440`	`db,`
`441`	`441`	`model._meta.db_table,`
`442`	`442`	`self._get_encrypted_fields_map(model),`
`443`		`- "local", # TODO: KMS provider should be configurable`
	`443`	`+ settings.KMS_PROVIDER,`
`444`	`444`	`)`
`445`	`445`
`446`	`446`	`def _get_encrypted_fields_map(self, model):`