This repository demonstrates how to integrate MongoDB Queryable Encryption with Spring Data MongoDB. You can read more on

• Queryable Encryption With Spring Data MongoDB: How to Query Encrypted Fields

This is a sample Spring Boot application that stores and retrieves employee records using MongoDB Queryable Encryption. It showcases how to:

• Encrypt fields using annotations (@Encrypted, @RangeEncrypted and @Queryable)
• Run equality and range queries securely on encrypted data

Below is a visual representation of how encrypted documents appear in MongoDB Compass:

Encrypted fields (pin, ssn, age and salary)

Before running this project, make sure you have:

• Java 17 or higher (tested with Corretto 21)
• Maven 3.6+
• MongoDB 8.0+ running as a replica set
• MongoDB crypt_shared library installed
  • Dowload the Automatic Encryption Shared Library

git clone https://github.com/mongodb-developer/spring-data-queryable-encryption.git

cd spring-data-queryable-encryption

Make sure you're inside the project folder spring-data-queryable-encryption before running the next steps.

On Linux/macOS:

export MONGODB_URI="<YOUR_CONNECTION_STRING>" CRYPT_PATH="<PATH_TO_AUTOMATIC_ENC_SHA_LIB.dylib>"

On Windows

$env:MONGODB_URI="<YOUR_CONNECTION_STRING>"; $env:CRYPT_PATH="<PATH_TO_AUTOMATIC_ENC_SHA_LIB.dll"

mvn spring-boot:run

When the application starts, it automatically creates a collection called employees in the hrsystem database (only if it's empty) and inserts 6 sample employees. You can use these records to test the API directly in Swagger or with .http files.

You can now try endpoints like:

GET /employees
GET /employees/ssn/1
GET /employees/filter/age-less-than?age=30
GET /employees/filter/salary-greater-than?salary=3500

Once the application is running, access:

http://localhost:8080/swagger-ui.html

Or (for some versions):

http://localhost:8080/swagger-ui/index.html

It includes endpoints for:

• /employees → Manage employees records

Create a Employee

POST /employees
Content-Type: application/json

{
  "name": "Ricardo",
  "pin": "0441",
  "ssn": 12,
  "age": 36,
  "salary": 1200
}

Find All employees

GET /employees

Find by SSN (encrypted query)

GET /employees/ssn/12

Find employees with age less than a value

GET /employees/filter/age-less-than?age=50

Find employees with salary greater than a value

GET /employees/filter/salary-greater-than?salary=100.0

This project includes ready-to-use .http files to test all API endpoints easily from your IDE (such as IntelliJ IDEA, Rider, or VSCode with REST Client plugin).

• employee_requests.http → Test all endpoints under /employees

1. Open the .http file in IntelliJ.
2. Click on the green "Run" icon next to any request.
3. You’ll see the response in a built-in HTTP client tab.