encryptable.rb

# frozen_string_literal: true

module Encryptable
  ENCRYPTABLE_SALT = "iris.encryptable_salt"

  def encrypt(string)
    crypt.encrypt_and_sign(string)
  end

  def decrypt(encrypted_data)
    crypt.decrypt_and_verify(encrypted_data)
  end

private

  def crypt
    secret = Rails.application.secrets.secret_key_base
    len   = ActiveSupport::MessageEncryptor.key_len
    salt  = ENCRYPTABLE_SALT
    key   = ActiveSupport::KeyGenerator.new(secret).generate_key(salt, len)
    ActiveSupport::MessageEncryptor.new(key)
  end
end