Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

encrypt mutilple tables association table not use encrypt

See original GitHub issue

encrypt mutiple table association table not use encrypt .

version 4.1.0

Question: Multi-table query only encrypt process first table, other table’s encrypt fields ignored。

Want to: i want to query and return all encrypted fields in all tables not just first table in sql;

it’s ok : tableA email is encrypt field

ShardingSphere-SQL - Logic SQL:  select A.email as email from tableA as A cross join tableB as B where A.key = B.key;
// query and return  A.email_encrypt , because tableA is left (first) side in sql;
ShardingSphere-SQL - Actual SQL: select A.email_encrypt as email from tableA as A cross join tableB as B where A.key = B.key;

it’s not:

ShardingSphere-SQL - Logic SQL:  select A.email as email from tableB as B cross join tableA as A where A.key = B.key;
// not query and return A.email_encrypt , because tableA is right side in sql;
ShardingSphere-SQL - Actual SQL: select A.email as email from tableB as B cross join tableA as A where A.key = B.key;

because this:

// EncryptProjectionTokenGenerator.java

@Override
    public Collection<SubstitutableColumnNameToken> generateSQLTokens(final SelectStatementContext selectStatementContext) {
        ProjectionsSegment projectionsSegment = selectStatementContext.getSqlStatement().getProjections();
        // TODO process multiple tables
        String tableName = selectStatementContext.getSqlStatement().getSimpleTableSegments().iterator().next().getTableName().getIdentifier().getValue();
        return getEncryptRule().findEncryptTable(tableName).map(
            encryptTable -> generateSQLTokens(projectionsSegment, tableName, selectStatementContext, encryptTable)).orElseGet(Collections::emptyList);
    }

Qustion:

if i just use ss’ encrypt feature, and single data point , may i rewrite to this ? rewrite all fields in all tables , not just left (first) table;

after:

@Override
    public Collection<SubstitutableColumnNameToken> generateSQLTokens(final SelectStatementContext selectStatementContext) {
        ProjectionsSegment projectionsSegment = selectStatementContext.getSqlStatement().getProjections();
        Iterator<SimpleTableSegment> simpleTableSegmentIterator = selectStatementContext.getSqlStatement().getSimpleTableSegments().iterator();
        Collection<SubstitutableColumnNameToken> results = new LinkedList<>();
        while (simpleTableSegmentIterator.hasNext()) {
            String tableName = simpleTableSegmentIterator.next().getTableName().getIdentifier().getValue();
            results.addAll(getEncryptRule().findEncryptTable(tableName).map(encryptTable ->
                generateSQLTokens(projectionsSegment, tableName, selectStatementContext, encryptTable)).orElseGet(Collections::emptyList));
        }
        return results;
    }