Loading...

XML

Word

Printable

JSON

Type: New Feature
Resolution: Fixed
Priority: Unknown
Fix Version/s: 6.17.0, mongodb-client-encryption-6.4.0
Affects Version/s: None
Component/s: Client Side Encryption
Labels:

Quarter:
- FY26Q2
Story Points:
3
Upstream Changes Summary:
Hide

DRIVERS-2781:
Summary of necessary driver changes

Expose the cache expiration option provided by libmongocrypt

Commits for syncing spec/prose tests
C driver implementation:
https://github.com/mongodb/mongo-c-driver/commit/b0edf300b8623bc8a4d861f02aaefc8c312c46c9

libmongocrypt implementation is available in 1.12.0:
https://github.com/mongodb/libmongocrypt/commit/11a8060526a638575d5e18cad254256ac871078c

Spec tests:

Added in: https://github.com/mongodb/specifications/commit/ecce2eccf0e6f3b41dff3bf0e57e2350f7517340

Updated (to increase wait time) in: https://github.com/mongodb/specifications/commit/787bbe67bdffb614270654372112e93fc2cd3eb3
Show
DRIVERS-2781 : Summary of necessary driver changes Expose the cache expiration option provided by libmongocrypt Commits for syncing spec/prose tests C driver implementation: https://github.com/mongodb/mongo-c-driver/commit/b0edf300b8623bc8a4d861f02aaefc8c312c46c9 libmongocrypt implementation is available in 1.12.0: https://github.com/mongodb/libmongocrypt/commit/11a8060526a638575d5e18cad254256ac871078c Spec tests: Added in: https://github.com/mongodb/specifications/commit/ecce2eccf0e6f3b41dff3bf0e57e2350f7517340 Updated (to increase wait time) in: https://github.com/mongodb/specifications/commit/787bbe67bdffb614270654372112e93fc2cd3eb3
Compass/DevTools Changes:
Not Needed
Confidence Status:
None

Checklist:

Empty

show more show less

Documentation Changes:
Not Needed

Aha! Reference:
None
Tracking Level:
None
Risk Status:
None
Exec Notes:
None
Goal Name:
None
Goal Link:
None

This ticket was split from DRIVERS-2781, please see that ticket for a detailed description.

Use Case

As a developer
I want to be able to configure the DEK cache storage time
So that I can limit the number of KMS requests

User Experience

User can configure the timeout of the decrypted DEK key.

Dependencies

Depends on libmongocrypt 1.12

Risks/Unknowns

None

Acceptance Criteria

Implementation Requirements

Add the keyExpirationMS option to the bindings and encryption options TS in mongodb-client-encryption.
Expose keyExpirationMS option in the driver for auto encryption options and client encryption options.
Update libmongocrypt dependency in mongodb-client-encryption to latest (1.14.0) (see ~~NODE-6841~~)
Update the mongodb-client-encryption dependency in the driver to the latest release.

Testing Requirements

Update driver legacy and unified tests for client encryption for the following commits:
https://github.com/mongodb/specifications/commit/ecce2eccf0e6f3b41dff3bf0e57e2350f7517340
https://github.com/mongodb/specifications/commit/787bbe67bdffb614270654372112e93fc2cd3eb3

Documentation Requirements

Add API docs for the new timeout option.

Follow Up Requirements

None

has to be finished together with

NODE-6841 Release mongodb-client-encryption with libmongocrypt 1.14

Closed

split from

DRIVERS-2781 Add option to configure DEK cache lifetime

Implementing

1.	Add support for keyExpirationMS in mongodb-client-encryption	NODE-6947		Closed	Durran Jordan	mongodb-client-encryption-6.4.0
2.	Add support for keyExpirationMS in Node driver	NODE-6952		Closed	Durran Jordan	6.17.0

Assignee:: Durran Jordan
Reporter:: TPM Jira Automations Bot
Reviewers:: None
Votes:: 0 Vote for this issue
Watchers:: 2 Start watching this issue

Created:: Jul 25 2024 03:44:23 PM UTC
Updated:: May 13 2025 08:09:04 PM UTC
Resolved:: May 13 2025 08:09:04 PM UTC
Confidence Status Last Update:: 07/May/25 2:10 PM

Details

Description

Use Case

User Experience

Dependencies

Risks/Unknowns

Acceptance Criteria

Implementation Requirements

Testing Requirements

Documentation Requirements

Follow Up Requirements

Attachments

Issue Links

Sub-Tasks

Activity

People

Dates