Method UpdateEncryptedAIProviderSettings

enterprise/dbcrypt/dbcrypt.go:485–498

UpdateEncryptedAIProviderSettings re-encrypts the settings column of a row, regardless of its deleted flag, so that dbcrypt key rotation can move every FK reference to a new key digest before old keys are revoked.

(ctx context.Context, params database.UpdateEncryptedAIProviderSettingsParams)

// rotation can move every FK reference to a new key digest before
// old keys are revoked.
func (db *dbCrypt) UpdateEncryptedAIProviderSettings(ctx context.Context, params database.UpdateEncryptedAIProviderSettingsParams) (database.AIProvider, error) {
	if err := db.encryptAIProviderSettings(&params.Settings, &params.SettingsKeyID); err != nil {
		return database.AIProvider{}, err
	}

	provider, err := db.Store.UpdateEncryptedAIProviderSettings(ctx, params)
	if err != nil {
		return database.AIProvider{}, err
	}
	if err := db.decryptAIProvider(&provider); err != nil {
		return database.AIProvider{}, err
	}
	return provider, nil
}

func (db *dbCrypt) GetAIProviderKeyByID(ctx context.Context, id uuid.UUID) (database.AIProviderKey, error) {
	key, err := db.Store.GetAIProviderKeyByID(ctx, id)