Download the PHP package mathiasgrimm/laravel-encrypted-attributes without Composer
On this page you can find all versions of the php package mathiasgrimm/laravel-encrypted-attributes. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download mathiasgrimm/laravel-encrypted-attributes
More information about mathiasgrimm/laravel-encrypted-attributes
Files in mathiasgrimm/laravel-encrypted-attributes
Package laravel-encrypted-attributes
Short Description Encrypted and safe-by-default Laravel Model attributes
License MIT
Informations about the package laravel-encrypted-attributes
Laravel Encrypted Attributes
This package adds secure-by-default encrypted attributes, to any Laravel Model, on demand.
By default, all serializations (toArray
, toJson
) and the default getter for any attribute
will always choose the encrypted value over the decrypted one.
To get the decrypted value you have to simply add the _decrypted
suffix:
Installation
Background
I was thinking in a way to improve the existing Eloquent cast encrypted
Encrypted Casting.
Laravel Documentation:
The encrypted cast will encrypt a model's attribute value using Laravel's built-in encryption features. In addition, the encrypted:array, encrypted:collection, encrypted:object, AsEncryptedArrayObject, and AsEncryptedCollection casts work like their unencrypted counterparts; however, as you might expect, the underlying value is encrypted when stored in your database.
Laravel's default behavior is to keep it encrypted only in the database, and plain text for the rest. I think the default behaviour should be to always keep it encrypted unless you specifically ask for it decrypted.
For the rest of this reading assume the following:
local.encrypted-string
is an encrypted string, prepended with the environment it was encrypted in.plain-text-string
is just an unencrypted plain text string.
Laravel Default Behavior
The examples bellow will all output the encrypted cast attributes in plain text:
Configuration
To use the Encrypted attributes all you need to do is to use the trait HasEncryptedAttributes
and
add the attributes you want to be encrypted to the protected $encrypted = []
model property.
Examples
Environment Scope
When using the encrypted attributes, the environment in which the value was encrypted in is prepended to the encrypted string.
Examples:
By doing that we can add extra checks based on the prefix.
With that we could do things like: