From aaeb1925767b08e35decb913e3867cd6415f0abd Mon Sep 17 00:00:00 2001 From: Nishant Joshi Date: Tue, 10 Sep 2024 13:22:39 +0530 Subject: [PATCH] chore: make kms decryption optional if partial auth not enabled (#5779) --- .../src/configs/secrets_transformers.rs | 22 ++++++++++++------- 1 file changed, 14 insertions(+), 8 deletions(-) diff --git a/crates/router/src/configs/secrets_transformers.rs b/crates/router/src/configs/secrets_transformers.rs index 4a39f58ebe..ce9c030333 100644 --- a/crates/router/src/configs/secrets_transformers.rs +++ b/crates/router/src/configs/secrets_transformers.rs @@ -115,16 +115,22 @@ impl SecretsHandler for settings::ApiKeys { let expiry_reminder_days = api_keys.expiry_reminder_days.clone(); #[cfg(feature = "partial-auth")] - let checksum_auth_context = secret_management_client - .get_secret(api_keys.checksum_auth_context.clone()) - .await?; - #[cfg(feature = "partial-auth")] - let checksum_auth_key = secret_management_client - .get_secret(api_keys.checksum_auth_key.clone()) - .await?; + let enable_partial_auth = api_keys.enable_partial_auth; #[cfg(feature = "partial-auth")] - let enable_partial_auth = api_keys.enable_partial_auth; + let (checksum_auth_context, checksum_auth_key) = { + if enable_partial_auth { + let checksum_auth_context = secret_management_client + .get_secret(api_keys.checksum_auth_context.clone()) + .await?; + let checksum_auth_key = secret_management_client + .get_secret(api_keys.checksum_auth_key.clone()) + .await?; + (checksum_auth_context, checksum_auth_key) + } else { + (String::new().into(), String::new().into()) + } + }; Ok(value.transition_state(|_| Self { hash_key,