🔐 Add support for encrypted attributes

Gemfile

···
 gem "hanami-validations", HANAMI_VERSION
 gem "hanami-view", HANAMI_VERSION
 
+gem "base64"
 gem "dry-types", "~> 1.7"
 gem "dry-operation"
+gem "pg"
 gem "puma"
 gem "rake"
-gem "pg"
+gem "rom-encrypted_attribute"
 
 group :development do
   gem "hanami-webconsole", "~> 2.2"

Gemfile.lock

···
   specs:
     addressable (2.8.7)
       public_suffix (>= 2.0.2, < 7.0)
+    base64 (0.3.0)
     better_errors (2.10.1)
       erubi (>= 1.0.0)
       rack (>= 0.9.0)
···
       dry-struct (~> 1.0)
       dry-types (~> 1.6)
       transproc (~> 1.1)
+    rom-encrypted_attribute (0.0.5)
+      dry-types (~> 1.5)
     rom-repository (5.4.2)
       dry-core (~> 1.0)
       dry-initializer (~> 3.2)
···
   x86_64-linux-musl
 
 DEPENDENCIES
+  base64
   capybara
   database_cleaner-sequel
   dotenv
···
   puma
   rack-test
   rake
+  rom-encrypted_attribute
 
 BUNDLED WITH
    2.7.2

app/relations/teams.rb

···
 module Sparkles
   module Relations
     class Teams < Sparkles::DB::Relation
-      schema :teams, infer: true
+      include Deps["encrypted_attributes"]
+
+      schema :teams, infer: true do
+        use :encrypted_attributes
+
+        encrypt :access_token
+      end
     end
   end
 end

config/providers/encrypted_attributes.rb

···
+Hanami.app.register_provider(:encrypted_attributes) do
+  prepare do
+    require "rom/encrypted_attribute"
+
+    ROM::EncryptedAttribute.configure do |config|
+      config.primary_key = "your-primary-key" # required
+      config.key_derivation_salt = "your-derivation-salt" # required
+      config.hash_digest_class = OpenSSL::Digest::SHA256 # SHA1 by default
+    end
+
+    register "encrypted_attributes", ROM::EncryptedAttribute
+  end
+end