Customized SQL Queries to ecrypt externalId value

[mostafahussein]

We are using Identity Server to store information about users and we are trying to encrypt the value of externalId on the database level. Using the column encryption feature of PostgreSQL.

But to do so we have to make WSO2IS understand how to encrypt and decrypt the value of externalId.

I have searched for a way to customize the queries and I have found this link: Configuring a JDBCUserStore Properties used in JDBC userstore manager but this one does not seem to have queries about the externalId or maybe because its just a sample of the queries. anyway my search pointed me to this repository as I think the externalId means this attribute EXTERNAL_CLAIM_ID inside this table IDN_OIDC_SCOPE_CLAIM_MAPPING and according to this file SQLQueries.java it seems that all queries that contains EXTERNAL_CLAIM_ID needs to be modified in order to make use of the column encryption feature.

• Is this applicable by customizing through the JDBC User Properties only ?
• Or We have to customize the code of this repository by making a fork and use it ?
• What else do we need to make this possible ?
• Is there a better way to do it ?

Note: I don't want to encrypt the disk or the volume itself.