Rename PersonalData to SensitiveData. This makes clear that the usage can be broader then only personal data from users.

Add missing doc entry for multiple `DataSubjectId`'s.

Author: DanielBadura

README.md

@@ -528,7 +528,7 @@ There are two events: `PostExtract` and `PreHydrate`.
 For this functionality we use the [symfony/event-dispatcher](https://symfony.com/doc/current/components/event_dispatcher.html).
 
 ```php
-use Patchlevel\Hydrator\Cryptography\PersonalDataPayloadCryptographer;
+use Patchlevel\Hydrator\Cryptography\SensitiveDataPayloadCryptographer;
 use Patchlevel\Hydrator\Cryptography\Store\CipherKeyStore;
 use Patchlevel\Hydrator\Metadata\Event\EventMetadataFactory;
 use Patchlevel\Hydrator\MetadataHydrator;
@@ -557,8 +557,8 @@ $hydrator = new MetadataHydrator(eventDispatcher: $eventDispatcher);
 
 ### Cryptography
 
-The library also offers the possibility to encrypt and decrypt personal data.
-For this purpose, a key is created for each subject ID, which is used to encrypt the personal data.
+The library also offers the possibility to encrypt and decrypt sensitive data, e.g. personal data of customers.
+For this purpose, a key is created for each subject ID, which is used to encrypt the sensitive data.
 
 #### DataSubjectId
 
@@ -579,42 +579,62 @@ final class EmailChanged
 
 > [!WARNING]
 > The `DataSubjectId` must be a string. You can use a normalizer to convert it to a string.
-> The Subject ID cannot be personal data.
+> The Subject ID cannot be sensitive data.
 
-#### PersonalData
+First we need to define what the subject id is.
 
-Next, we need to specify which fields we want to encrypt.
+```php
+use Patchlevel\Hydrator\Attribute\DataSubjectId;
+
+final class EmailChanged
+{
+    public function __construct(
+        #[DataSubjectId(name: 'profile')]
+        public readonly string $profileId,
+    ) {
+    }
+}
+```
+
+You can also use multiple data subject id's in one event by defining the name of the subject id's.
 
 ```php
 use Patchlevel\Hydrator\Attribute\DataSubjectId;
-use Patchlevel\Hydrator\Attribute\PersonalData;
+use Patchlevel\Hydrator\Attribute\SensitiveData;
 
 final class DTO 
 {
     public function __construct(
-        #[DataSubjectId]
-        public readonly string $profileId,
-        #[PersonalData]
-        public readonly string|null $email,
+        #[DataSubjectId(name: 'profile1')]
+        public readonly string $profile1Id,
+        #[SensitiveData(subjectIdName: 'profile1')]
+        public readonly string|null $email1,
+        #[DataSubjectId(name: 'profile2')]
+        public readonly string $profile2Id,
+        #[SensitiveData(subjectIdName: 'profile2')]
+        public readonly string|null $email2,
     ) {
     }
 }
 ```
 
+> [!NOTE]
+> The default name of `DataSubjectId` is `default`.
+
 If the information could not be decrypted, then a fallback value is inserted.
 The default fallback value is `null`.
 You can change this by setting the `fallback` parameter.
 In this case `unknown` is added:
 
 ```php
-use Patchlevel\Hydrator\Attribute\PersonalData;
+use Patchlevel\Hydrator\Attribute\SensitiveData;
 
 final class DTO
 {
     public function __construct(
         #[DataSubjectId]
         public readonly string $profileId,
-        #[PersonalData(fallback: 'unknown')]
+        #[SensitiveData(fallback: 'unknown')]
         public readonly string $name,
     ) {
     }
@@ -625,16 +645,16 @@ You can also use a callable as a fallback.
 
 ```php
 use Patchlevel\Hydrator\Attribute\DataSubjectId;
-use Patchlevel\Hydrator\Attribute\PersonalData;
+use Patchlevel\Hydrator\Attribute\SensitiveData;
 
 final class ProfileCreated
 {
     public function __construct(
         #[DataSubjectId]
         public readonly string $profileId,
-        #[PersonalData(fallback: 'deleted profile')]
+        #[SensitiveData(fallback: 'deleted profile')]
         public readonly string $name,
-        #[PersonalData(fallbackCallable: [self::class, 'anonymizedEmail'])]
+        #[SensitiveData(fallbackCallable: [self::class, 'anonymizedEmail'])]
         public readonly string $email,
     ) {
     }
@@ -655,13 +675,13 @@ final class ProfileCreated
 Here we show you how to configure the cryptography.
 
 ```php
-use Patchlevel\Hydrator\Cryptography\PersonalDataPayloadCryptographer;
+use Patchlevel\Hydrator\Cryptography\SensitiveDataPayloadCryptographer;
 use Patchlevel\Hydrator\Cryptography\Store\CipherKeyStore;
 use Patchlevel\Hydrator\Metadata\Event\EventMetadataFactory;
 use Patchlevel\Hydrator\MetadataHydrator;
 
 $cipherKeyStore = new InMemoryCipherKeyStore();
-$cryptographer = PersonalDataPayloadCryptographer::createWithDefaultSettings($cipherKeyStore);
+$cryptographer = SensitiveDataPayloadCryptographer::createWithDefaultSettings($cipherKeyStore);
 $hydrator = new MetadataHydrator(cryptographer: $cryptographer);
 ```
 

baseline.xml

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <files psalm-version="6.12.0@cf420941d061a57050b6c468ef2c778faf40aee2">
-  <file src="src/Attribute/PersonalData.php">
+  <file src="src/Attribute/SensitiveData.php">
     <MixedPropertyTypeCoercion>
       <code><![CDATA[$fallbackCallable]]></code>
     </MixedPropertyTypeCoercion>
@@ -17,7 +17,7 @@
       <code><![CDATA[list<string>]]></code>
     </MoreSpecificReturnType>
   </file>
-  <file src="src/Cryptography/PersonalDataPayloadCryptographer.php">
+  <file src="src/Cryptography/SensitiveDataPayloadCryptographer.php">
     <MixedArgument>
       <code><![CDATA[$rawData]]></code>
     </MixedArgument>
@@ -41,7 +41,7 @@
   </file>
   <file src="src/Metadata/PropertyMetadata.php">
     <RiskyTruthyFalsyComparison>
-      <code><![CDATA[$this->personalDataFallbackCallable]]></code>
+      <code><![CDATA[$this->sensitiveDataFallbackCallable]]></code>
     </RiskyTruthyFalsyComparison>
   </file>
   <file src="src/MetadataHydrator.php">

phpstan-baseline.neon

@@ -16,7 +16,7 @@ parameters:
 			message: '#^Parameter \#2 \$data of method Patchlevel\\Hydrator\\Cryptography\\Cipher\\Cipher\:\:decrypt\(\) expects string, mixed given\.$#'
 			identifier: argument.type
 			count: 1
-			path: src/Cryptography/PersonalDataPayloadCryptographer.php
+			path: src/Cryptography/SensitiveDataPayloadCryptographer.php
 
 		-
 			message: '#^Method Patchlevel\\Hydrator\\Guesser\\BuiltInGuesser\:\:guess\(\) has parameter \$type with generic class Symfony\\Component\\TypeInfo\\Type\\ObjectType but does not specify its types\: T$#'
@@ -54,12 +54,6 @@ parameters:
 			count: 1
 			path: src/Metadata/AttributeMetadataFactory.php
 
-		-
-			message: '#^Method Patchlevel\\Hydrator\\Metadata\\AttributeMetadataFactory\:\:getPersonalData\(\) should return array\{bool, mixed, \(callable\(string, mixed\)\: mixed\)\|null\} but returns array\{false, null\}\.$#'
-			identifier: return.type
-			count: 1
-			path: src/Metadata/AttributeMetadataFactory.php
-
 		-
 			message: '#^Parameter \#1 \$class of method Patchlevel\\Hydrator\\Metadata\\AttributeMetadataFactory\:\:findNormalizerOnClass\(\) expects class\-string, string given\.$#'
 			identifier: argument.type

src/Attribute/DataSubjectId.php

@@ -10,7 +10,7 @@
 final class DataSubjectId
 {
     public function __construct(
-        public readonly string $identifier = 'default',
+        public readonly string $name = 'default',
     ) {
     }
 }

src/Attribute/PersonalData.php src/Attribute/SensitiveData.phpsrc/Attribute/PersonalData.php renamed to src/Attribute/SensitiveData.php

@@ -8,15 +8,15 @@
 use InvalidArgumentException;
 
 #[Attribute(Attribute::TARGET_PROPERTY)]
-final class PersonalData
+final class SensitiveData
 {
     /** @var (callable(string, mixed):mixed)|null */
     public readonly mixed $fallbackCallable;
 
     public function __construct(
         public readonly mixed $fallback = null,
         callable|null $fallbackCallable = null,
-        public readonly string $identifier = 'default',
+        public readonly string $subjectIdName = 'default',
     ) {
         $this->fallbackCallable = $fallbackCallable;
 

src/Cryptography/NotPersonalData.php src/Cryptography/NotSensitiveData.phpsrc/Cryptography/NotPersonalData.php renamed to src/Cryptography/NotSensitiveData.php

@@ -8,11 +8,11 @@
 
 use function sprintf;
 
-final class NotPersonalData extends RuntimeException
+final class NotSensitiveData extends RuntimeException
 {
     /** @param class-string $class */
     public function __construct(string $class, string $fieldName)
     {
-        parent::__construct(sprintf('Trying to get subject id for %s::%s which is not marked as personal data.', $class, $fieldName));
+        parent::__construct(sprintf('Trying to get subject id for %s::%s which is not marked as sensitive data.', $class, $fieldName));
     }
 }

…phy/PersonalDataPayloadCryptographer.php …hy/SensitiveDataPayloadCryptographer.phpsrc/Cryptography/PersonalDataPayloadCryptographer.php renamed to src/Cryptography/SensitiveDataPayloadCryptographer.php src/Cryptography/PersonalDataPayloadCryptographer.php renamed to src/Cryptography/SensitiveDataPayloadCryptographer.php

@@ -18,7 +18,7 @@
 use function is_int;
 use function is_string;
 
-final class PersonalDataPayloadCryptographer implements PayloadCryptographer
+final class SensitiveDataPayloadCryptographer implements PayloadCryptographer
 {
     public function __construct(
         private readonly CipherKeyStore $cipherKeyStore,
@@ -37,7 +37,7 @@ public function __construct(
     public function encrypt(ClassMetadata $metadata, array $data): array
     {
         foreach ($metadata->properties() as $propertyMetadata) {
-            if (!$propertyMetadata->isPersonalData()) {
+            if (!$propertyMetadata->isSensitiveData()) {
                 continue;
             }
 
@@ -77,7 +77,7 @@ public function encrypt(ClassMetadata $metadata, array $data): array
     public function decrypt(ClassMetadata $metadata, array $data): array
     {
         foreach ($metadata->properties() as $propertyMetadata) {
-            if (!$propertyMetadata->isPersonalData()) {
+            if (!$propertyMetadata->isSensitiveData()) {
                 continue;
             }
 
@@ -119,17 +119,17 @@ public function decrypt(ClassMetadata $metadata, array $data): array
     /** @param array<string, mixed> $data */
     private function subjectId(PropertyMetadata $propertyMetadata, ClassMetadata $metadata, array $data): string
     {
-        if (!$propertyMetadata->isPersonalData()) {
-            throw new NotPersonalData($metadata->className(), $propertyMetadata->propertyName());
+        if (!$propertyMetadata->isSensitiveData()) {
+            throw new NotSensitiveData($metadata->className(), $propertyMetadata->propertyName());
         }
 
-        $personalDataIdentifier = $propertyMetadata->personalDataIdentifier();
+        $sensitiveDataSubjectIdName = $propertyMetadata->sensitiveDataSubjectIdName();
 
-        if (!$metadata->hasSubjectIdIdentifier($personalDataIdentifier)) {
+        if (!$metadata->hasSubjectIdIdentifier($sensitiveDataSubjectIdName)) {
             throw new MissingSubjectId($metadata->className(), $propertyMetadata->propertyName());
         }
 
-        $fieldName = $metadata->getSubjectIdFieldName($personalDataIdentifier);
+        $fieldName = $metadata->getSubjectIdFieldName($sensitiveDataSubjectIdName);
 
         if (!array_key_exists($fieldName, $data)) {
             throw new MissingSubjectId($metadata->className(), $fieldName);
@@ -150,10 +150,10 @@ private function subjectId(PropertyMetadata $propertyMetadata, ClassMetadata $me
 
     private function fallback(PropertyMetadata $propertyMetadata, string $subjectId, mixed $rawData): mixed
     {
-        $callback = $propertyMetadata->personalDataFallbackCallback();
+        $callback = $propertyMetadata->sensitiveDataFallbackCallable();
 
         if (!$callback) {
-            return $propertyMetadata->personalDataFallback();
+            return $propertyMetadata->sensitiveDataFallback();
         }
 
         return $callback($subjectId, $rawData);

src/Metadata/AttributeMetadataFactory.php

@@ -8,9 +8,9 @@
 use Patchlevel\Hydrator\Attribute\Ignore;
 use Patchlevel\Hydrator\Attribute\Lazy;
 use Patchlevel\Hydrator\Attribute\NormalizedName;
-use Patchlevel\Hydrator\Attribute\PersonalData;
 use Patchlevel\Hydrator\Attribute\PostHydrate;
 use Patchlevel\Hydrator\Attribute\PreExtract;
+use Patchlevel\Hydrator\Attribute\SensitiveData;
 use Patchlevel\Hydrator\Guesser\BuiltInGuesser;
 use Patchlevel\Hydrator\Guesser\Guesser;
 use Patchlevel\Hydrator\Normalizer\ArrayNormalizer;
@@ -156,7 +156,7 @@ private function getPropertyMetadataList(ReflectionClass $reflectionClass): arra
                 $fieldName,
                 $this->getNormalizer($reflectionProperty),
                 $this->getSubjectId($reflectionProperty),
-                ...$this->getPersonalData($reflectionProperty),
+                ...$this->getSensitiveData($reflectionProperty),
             );
         }
 
@@ -291,41 +291,41 @@ private function getSubjectId(ReflectionProperty $reflectionProperty): string|nu
             return null;
         }
 
-        return $attributeReflectionList[0]->newInstance()->identifier;
+        return $attributeReflectionList[0]->newInstance()->name;
     }
 
     /** @return array{string|null, mixed, (callable(string, mixed):mixed)|null} */
-    private function getPersonalData(ReflectionProperty $reflectionProperty): array
+    private function getSensitiveData(ReflectionProperty $reflectionProperty): array
     {
-        $attributeReflectionList = $reflectionProperty->getAttributes(PersonalData::class);
+        $attributeReflectionList = $reflectionProperty->getAttributes(SensitiveData::class);
 
         if ($attributeReflectionList === []) {
             return [null, null, null];
         }
 
         $attribute = $attributeReflectionList[0]->newInstance();
 
-        return [$attribute->identifier, $attribute->fallback, $attribute->fallbackCallable];
+        return [$attribute->subjectIdName, $attribute->fallback, $attribute->fallbackCallable];
     }
 
     private function validate(ClassMetadata $metadata): void
     {
         $subjectIds = [];
 
         foreach ($metadata->properties() as $property) {
-            if ($property->isPersonalData() && $property->isSubjectId()) {
-                throw new SubjectIdAndPersonalDataConflict($metadata->className(), $property->propertyName());
+            if ($property->isSensitiveData() && $property->isSubjectId()) {
+                throw new SubjectIdAndSensitiveDataConflict($metadata->className(), $property->propertyName());
             }
 
-            if ($property->isPersonalData() && !$metadata->hasSubjectIdIdentifier($property->personalDataIdentifier())) {
+            if ($property->isSensitiveData() && !$metadata->hasSubjectIdIdentifier($property->sensitiveDataSubjectIdName())) {
                 throw new MissingDataSubjectId($metadata->className());
             }
 
             if (!$property->isSubjectId()) {
                 continue;
             }
 
-            $subjectIdIdentifier = $property->subjectIdIdentifier();
+            $subjectIdIdentifier = $property->subjectIdName();
 
             if (array_key_exists($subjectIdIdentifier, $subjectIds)) {
                 throw new DuplicateSubjectIdIdentifier(

src/Metadata/ClassMetadata.php

@@ -83,7 +83,7 @@ public function propertyForField(string $name): PropertyMetadata
     public function hasSubjectIdIdentifier(string $subjectIdIdentifier): bool
     {
         foreach ($this->properties as $property) {
-            if ($property->subjectIdIdentifier() === $subjectIdIdentifier) {
+            if ($property->subjectIdName() === $subjectIdIdentifier) {
                 return true;
             }
         }
@@ -94,7 +94,7 @@ public function hasSubjectIdIdentifier(string $subjectIdIdentifier): bool
     public function getSubjectIdFieldName(string $subjectIdIdentifier): string
     {
         foreach ($this->properties as $property) {
-            if ($property->subjectIdIdentifier() === $subjectIdIdentifier) {
+            if ($property->subjectIdName() === $subjectIdIdentifier) {
                 return $property->fieldName();
             }
         }