Queryable Encryption 使用 Symfony 和 Doctrine ODM

symfony new qe-symfony-appcd qe-symfony-appcomposer require doctrine/mongodb-odm-bundle mongodb/mongodb

MONGODB_URI=<connection URI>CRYPT_SHARED_LIB_PATH=<Automatic Encryption Shared Library path>

<?php
namespace App\Document;
use Doctrine\ODM\MongoDB\Mapping\Attribute as ODM;
#[ODM\Document(collection: 'patients')]class Patient{    #[ODM\Id]    public string $id;
    #[ODM\Field]    public string $patientName;
    #[ODM\Field]    public int $patientId;
    #[ODM\EmbedOne(targetDocument: PatientRecord::class)]    public PatientRecord $patientRecord;}

<?php
namespace App\Document;
use Doctrine\ODM\MongoDB\Mapping\Attribute as ODM;use Doctrine\ODM\MongoDB\Mapping\EncryptQuery;
#[ODM\EmbeddedDocument]class PatientRecord{    #[ODM\Field]    #[ODM\Encrypt(queryType: EncryptQuery::Equality)]    public string $ssn;
    #[ODM\EmbedOne(targetDocument: Billing::class)]    #[ODM\Encrypt]    public Billing $billing;
    #[ODM\Field]    public int $billAmount;}

<?php
namespace App\Document;
use Doctrine\ODM\MongoDB\Mapping\Attribute as ODM;
#[ODM\EmbeddedDocument]class Billing{    #[ODM\Field]    public string $type;
    #[ODM\Field]    public string $number;}

<?php
namespace App\Command;
use App\Document\Billing;use App\Document\Patient;use App\Document\PatientRecord;use Doctrine\ODM\MongoDB\Configuration;use Doctrine\ODM\MongoDB\DocumentManager;use Doctrine\ODM\MongoDB\Mapping\Driver\AttributeDriver;use MongoDB\BSON\Binary;use MongoDB\Client;use Symfony\Component\Console\Attribute\AsCommand;use Symfony\Component\Console\Command\Command;use Symfony\Component\Console\Input\InputInterface;use Symfony\Component\Console\Output\OutputInterface;
#[AsCommand(    name: 'app:queryable-encryption',    description: 'Demonstrates Queryable Encryption with '        . 'Doctrine MongoDB ODM',)]class QueryableEncryptionCommand extends Command{    protected function execute(        InputInterface $input,        OutputInterface $output,    ): int {        // Paste application variables below
        // Paste encryption credentials below
        // Paste connection and configuration below
        // Paste collection setup below
        // Paste insert operation below
        // Paste encrypted query below
        return Command::SUCCESS;    }}

// Paste application variables below$keyVaultNamespace = 'encryption.__keyVault';$encryptedDatabase = 'medicalRecords';$encryptedCollection = 'patients';

// Paste encryption credentials below// Warning: Local key files are for development only. Use a remote KMS in production.$keyFile = __DIR__ . '/../../master-key.bin';if (!file_exists($keyFile)) {     file_put_contents($keyFile, random_bytes(96));}$masterKeyBytes = file_get_contents($keyFile);
$kmsProvider = [     'type' => 'local',     'key' => new Binary(         $masterKeyBytes,         Binary::TYPE_GENERIC,     ),];

$autoEncryptionOptions = [     'keyVaultNamespace' => $keyVaultNamespace,];
$cryptSharedLibPath = $_ENV['CRYPT_SHARED_LIB_PATH'] ?? '';if ($cryptSharedLibPath) {     $autoEncryptionOptions['extraOptions'] = [         'cryptSharedLibPath' => $cryptSharedLibPath,     ];}

// Paste connection and configuration below$cacheDir = __DIR__ . '/../../var/cache/doctrine';$config = new Configuration();$config->setAutoEncryption($autoEncryptionOptions);$config->setKmsProvider($kmsProvider);$config->setProxyDir($cacheDir . '/Proxies');$config->setProxyNamespace('Proxies');$config->setHydratorDir($cacheDir . '/Hydrators');$config->setHydratorNamespace('Hydrators');$config->setDefaultDB($encryptedDatabase);$config->setMetadataDriverImpl(     new AttributeDriver([__DIR__ . '/../Document']));
$client = new Client(     uri: $_ENV['MONGODB_URI'],     uriOptions: [],     driverOptions: $config->getDriverOptions(),);
$dm = DocumentManager::create($client, $config);

// Paste collection setup below$schemaManager = $dm->getSchemaManager();$schemaManager->dropDocumentCollection(Patient::class);$schemaManager->createDocumentCollection(Patient::class);

// Paste insert operation below$billing = new Billing();$billing->type = 'Visa';$billing->number = '4111111111111111';
$record = new PatientRecord();$record->ssn = '987-65-4320';$record->billing = $billing;$record->billAmount = 1500;
$patient = new Patient();$patient->patientName = 'Jon Doe';$patient->patientId = 12345678;$patient->patientRecord = $record;
$dm->persist($patient);$dm->flush();$dm->clear();
$output->writeln(     'Successfully inserted the patient document.');

// Paste encrypted query below$found = $dm     ->getRepository(Patient::class)     ->findOneBy(['patientRecord.ssn' => '987-65-4320']);
if ($found instanceof Patient) {     $output->writeln('Found patient:');     $output->writeln(         '  Name: ' . $found->patientName     );     $output->writeln(         '  SSN: ' . $found->patientRecord->ssn     );     $output->writeln(         '  Billing type: '         . $found->patientRecord->billing->type     );     $output->writeln(         '  Billing number: '         . $found->patientRecord->billing->number     );     $output->writeln(         '  Bill amount: '         . $found->patientRecord->billAmount     );}
$output->writeln('Connection closed.');

php bin/console app:queryable-encryption

Successfully inserted the patient document.Found patient:  Name: Jon Doe  SSN: 987-65-4320  Billing type: Visa  Billing number: 4111111111111111  Bill amount: 1500Connection closed.

{ "_id": {    "$oid": "..." }, "patientName": "Jon Doe", "patientId": 12345678, "patientRecord": {   "ssn": {      "$binary": {        ...      }   },   "billing": {      "$binary": {         ...      }   },   "billAmount": 1500 }, "__safeContent__": [   {      "$binary": {         ...      }   } ]}