Skip to content

feat: add MongoDB Client-Side Field Level Encryption support#35

Merged
gispada merged 18 commits intomainfrom
features/client-side-field-level-encryption
Mar 6, 2026
Merged

feat: add MongoDB Client-Side Field Level Encryption support#35
gispada merged 18 commits intomainfrom
features/client-side-field-level-encryption

Conversation

@gispada
Copy link
Member

@gispada gispada commented Mar 4, 2026

Description

This PR adds first-class support for MongoDB Client-Side Field Level Encryption (CSFLE) to Flowerbase, enabling sensitive data to be protected transparently at the application boundary.

With this feature, teams can define encryption intent directly in their collection schema configuration and let Flowerbase handle the operational complexity during startup. The platform now supports secure field-level encryption across both simple and nested document structures, making it easier to adopt strong data protection patterns without rewriting business logic.

List of proposed changes

  • CSFLE setup flow in setupMongoDbCSFLE
  • Recursive alias resolution for schema properties and nested objects
  • Key vault index/key management for keyAltNames
  • mongodbEncryptionConfig support in initialize(...)
  • Unit tests for buildSchemaMap key alias resolution, including nested paths
  • README documentation for feature behavior and configuration examples

Modified packages

  • flowerbase
  • demo

@gispada gispada merged commit 5911edc into main Mar 6, 2026
1 check passed
@gispada gispada deleted the features/client-side-field-level-encryption branch March 6, 2026 08:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant