Summary

Doctrine MongoDB ODM should help users use client-side field-level encryption by allowing to specify encryption options on field mappings.

Motivation

Users of ODMs may want to configure encryption settings for fields along with field mappings. This project aims to provide support for FLE in field mappings:

• When mapping any field, users can mark the field as encrypted and configure encryption settings (e.g. key to be used)
• When a client is created, ODM generates an autoEncryption options containing the JSON schema for all encrypted fields
• When storing a document, ODM will not encrypt data. Instead, users have to roll their own solution to encrypt data if they are not using Atlas or MongoDB Enterprise
• When users manually construct a query, ODM will not perform encryption of values. Users that need this functionality are encouraged to use MongoDB Atlas or MongoDB Enterprise, which supports this use-case.

Cast of Characters

• Product Owner:
• Project Lead:
• Program Manager:
• Drivers Contact:

Documentation

[Scope Document|]
[Technical Design Document|]