mongodb/mongoid · error · Mongoid::Errors::InvalidAutoEncryptionConfiguration

Invalid automatic encryption configuration for client %{clie

Error message

Invalid automatic encryption configuration for client %{client}.

What it means

Error "Invalid automatic encryption configuration for client %{client}." thrown in mongodb/mongoid.

Source

Thrown at lib/mongoid/tasks/encryption.rb:63

      private

      # Prepare arguments needed to create a data key from the client's
      # auto_encryption_options.
      #
      # @param [ String | nil ] kms_provider_name The name of the kms provider.
      # @param [ String | nil ] client_name The name of the client.
      #
      # @return [ Array<String, Hash, String> ] An array containing the
      #   normalized kms provider name, the kms providers hash, and the key
      #   vault namespace.
      def prepare_arguments(kms_provider_name, client_name)
        client = (client_name || 'default').to_s
        client_options = Mongoid.clients[client]
        raise Errors::NoClientConfig.new(client) unless client_options.is_a?(Hash)

        auto_encryption_options = client_options.dig(:options, :auto_encryption_options)
        raise Errors::InvalidAutoEncryptionConfiguration.new(client) unless auto_encryption_options.is_a?(Hash)

        key_vault_namespace = auto_encryption_options[:key_vault_namespace]
        raise Errors::InvalidAutoEncryptionConfiguration.new(client) unless key_vault_namespace.is_a?(String)

        kms_providers = auto_encryption_options[:kms_providers]
        raise Errors::InvalidAutoEncryptionConfiguration.new(client) unless kms_providers.is_a?(Hash)

        valid_kms_provider_name = get_kms_provider_name(kms_provider_name, kms_providers)
        unless kms_providers.key?(valid_kms_provider_name)
          raise Errors::InvalidAutoEncryptionConfiguration.new(client, valid_kms_provider_name)
        end

        [ valid_kms_provider_name, kms_providers, key_vault_namespace ]
      end

      # Get kms provider name to use for creating a data key.
      #
      # If kms_provider_name is provided, it will be used. Otherwise, if there

View on GitHub (pinned to 0da0e23d71)

When it happens

Trigger: Thrown at lib/mongoid/tasks/encryption.rb:63 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of mongodb/mongoid@0da0e23d71 (2026-08-23). Data as JSON: /api/errors/33bab0ec44cc7554. Report an issue: GitHub.