AC-12767: Implement extensible data re-encryption.

Author: admanesachin

app/code/Magento/Config/Model/Data/ReEncryptorList/CoreConfigDataReEncryptor/Handler.php

@@ -7,9 +7,7 @@
 
 namespace Magento\Config\Model\Data\ReEncryptorList\CoreConfigDataReEncryptor;
 
-use Magento\Framework\App\Config\Initial;
 use Magento\Framework\App\ResourceConnection;
-use Magento\Config\Model\Config\Backend\Encrypted;
 use Magento\Framework\Encryption\EncryptorInterface;
 use Magento\EncryptionKey\Model\Data\ReEncryptorList\ReEncryptor\HandlerInterface;
 use Magento\EncryptionKey\Model\Data\ReEncryptorList\ReEncryptor\Handler\ErrorFactory;
@@ -22,17 +20,17 @@ class Handler implements HandlerInterface
     /**
      * @var string
      */
-    private const TABLE_NAME = "core_config_data";
+    private const PATTERN = "^[[:digit:]]+:[[:digit:]]+:.*$";
 
     /**
      * @var string
      */
-    private const BACKEND_MODEL = Encrypted::class;
+    private const TABLE_NAME = "core_config_data";
 
     /**
-     * @var Initial
+     * @var int
      */
-    private Initial $config;
+    private const QUERY_SIZE = 1000;
 
     /**
      * @var EncryptorInterface
@@ -50,18 +48,15 @@ class Handler implements HandlerInterface
     private ErrorFactory $errorFactory;
 
     /**
-     * @param Initial $config
      * @param EncryptorInterface $encryptor
      * @param ResourceConnection $resourceConnection
      * @param ErrorFactory $errorFactory
      */
     public function __construct(
-        Initial $config,
         EncryptorInterface $encryptor,
         ResourceConnection $resourceConnection,
         ErrorFactory $errorFactory
     ) {
-        $this->config = $config;
         $this->encryptor = $encryptor;
         $this->resourceConnection = $resourceConnection;
         $this->errorFactory = $errorFactory;
@@ -72,46 +67,34 @@ public function __construct(
      */
     public function reEncrypt(): array
     {
-        $paths = [];
         $errors = [];
-
-        foreach ($this->config->getMetadata() as $path => $processor) {
-            if (isset($processor['backendModel']) &&
-                $processor['backendModel'] === self::BACKEND_MODEL
-            ) {
-                $paths[] = $path;
-            }
-        }
-
-        if ($paths) {
-            $tableName = $this->resourceConnection->getTableName(
-                self::TABLE_NAME
-            );
-
-            $connection = $this->resourceConnection->getConnection();
-
-            $select = $connection->select()
-                ->from($tableName, ['config_id', 'value'])
-                ->where('path IN (?)', $paths)
-                ->where('value != ?', '')
-                ->where('value IS NOT NULL');
-
-            foreach ($connection->fetchPairs($select) as $configId => $value) {
-                try {
-                    $connection->update(
-                        $tableName,
-                        ['value' => $this->encryptor->encrypt($this->encryptor->decrypt($value))],
-                        ['config_id = ?' => (int) $configId]
-                    );
-                } catch (\Throwable $e) {
-                    $errors[] = $this->errorFactory->create(
-                        "config_id",
-                        $configId,
-                        $e->getMessage()
-                    );
-
-                    continue;
-                }
+        $tableName = $this->resourceConnection->getTableName(
+            self::TABLE_NAME
+        );
+        $connection = $this->resourceConnection->getConnection();
+
+        $select = $connection->select()
+            ->from($tableName, ['config_id', 'value'])
+            ->where('value != ?', '')
+            ->where('value IS NOT NULL')
+            ->where('value REGEXP ?', self::PATTERN)
+            ->limit(self::QUERY_SIZE);
+
+        foreach ($connection->fetchPairs($select) as $configId => $value) {
+            try {
+                $connection->update(
+                    $tableName,
+                    ['value' => $this->encryptor->encrypt($this->encryptor->decrypt($value))],
+                    ['config_id = ?' => (int)$configId]
+                );
+            } catch (\Throwable $e) {
+                $errors[] = $this->errorFactory->create(
+                    "config_id",
+                    $configId,
+                    $e->getMessage()
+                );
+
+                continue;
             }
         }