正在使用的加密

const pipeline = [  {    $lookup: {      from: "encryptedCollection",      localField: "userId",      foreignField: "_id",      as: "userDetails"    }  }];
const results = await collection.aggregate(pipeline).toArray();

import * as net from "net";
const kmsConnectCallback = ({ host, port, signal }) =>  new Promise((resolve, reject) => {    // Opens a plain connection to the proxy, not to the KMS host.    // Passing signal lets Node abort the connection attempt when the    // driver aborts the operation.    const socket = net.connect({      host: "proxy.example.com",      port: 8080,      signal    });
    // Guards against a proxy that accepts the connection but stops    // responding. The driver applies no timeout to the KMS connection,    // so use an application-chosen idle timeout. It stays active after    // the CONNECT exchange, so it also covers the TLS handshake and    // KMS request that the driver performs over this socket.    socket.setTimeout(10000, () => {      socket.destroy(new Error("KMS connection timed out"));    });
    socket.once("error", reject);
    socket.once("connect", () => {      // Asks the proxy to tunnel to the KMS host      socket.write(        `CONNECT ${host}:${port} HTTP/1.1\r\n` +          `Host: ${host}:${port}\r\n\r\n`      );
      socket.once("data", chunk => {        if (chunk.toString("utf8").startsWith("HTTP/1.1 200")) {          // Returns the socket so that the driver can perform the          // TLS handshake          resolve(socket);        } else {          socket.destroy();          reject(new Error("Proxy refused the CONNECT request"));        }      });    });  });
const clientEncryption = new ClientEncryption(keyVaultClient, {  keyVaultNamespace,  kmsProviders,  kmsConnectCallback});