ClientEncryption.createEncryptedCollection() (mongosh method方法)

Create Your Encrypted Connection创建加密连接

1. Start mongosh开始mongosh

   Run:运行：

   mongosh --nodb

   --nodb means don't connect to a database.意味着不要连接到数据库。

2. Generate a Key String生成键字符串

   Generate a base 64 96-byte string:生成一个基本64 96字节的字符串：

   const TEST_LOCAL_KEY = require("crypto").randomBytes(96).toString("base64")

3. Create an Encryption Options Object创建加密选项对象

   To create a client-side field level encryption options object, use the TEST_LOCAL_KEY string from the previous step:要创建客户端字段级加密选项对象，请使用上一步中的TEST_LOCAL_KEY字符串：

      var autoEncryptionOpts = {
         "keyVaultNamespace" : "encryption.__dataKeys",
         "kmsProviders" : {
            "local" : {
               "key" : BinData(0, TEST_LOCAL_KEY)
            }
         }
      }

4. Create an Encrypted Client Object创建加密客户端对象

   To create an encrypted client object, use the Mongo() constructor. 要创建加密的客户端对象，请使用Mongo()构造函数。Replace the mongodb://myMongo.example.net URI with the connection string URI for the target cluster. For example:更换mongodb://myMongo.example.netURI，其中包含目标群集的连接字符串URI。例如：

   encryptedClient = Mongo(
      "mongodb://myMongo.example.net:27017/?replSetName=myMongo",
      autoEncryptionOpts
   )

Specify which Fields to Encrypt指定要加密的字段

Create an encryptedFieldsMaps to specify which fields to encrypt:创建encryptedFieldsMaps以指定要加密的字段：

const encryptedFieldsMap = {
  encryptedFields: {
    fields: [
      {
        path: "secretField",
        bsonType: "string",
        queries: { queryType: "equality" },
      },
    ],
  },
};

Create Your Encrypted Collection创建加密集合

Create an encrypted enc.users collection:创建加密的enc.users集合：

clientEncryption = encryptedClient.getClientEncryption();

var result = clientEncryption.createEncryptedCollection(
  "enc",
  "users",
  {
    provider: "local",
    createCollectionOptions: encryptedFieldsMap,
    masterKey: {} // masterKey is optional when provider is local
  }
)

Check Your Result Object检查结果对象

createEncryptedCollection returns a large result object with many fields. Check the value of result.collection to confirm the collection was created in the desired location.返回一个包含许多字段的大型结果对象。检查result.collection的值，以确认该集合是在所需位置创建的。

enc> result.collection
enc.users