Move kms_credentials to settings

Author: aclark4life

django_mongodb_backend/routers.py

@@ -27,5 +27,4 @@ def register_routers():
     Patch the ConnectionRouter with methods to get KMS credentials and provider
     from the SchemaEditor.
     """
-    ConnectionRouter.kms_credentials = ConnectionRouter._router_func("kms_credentials")
     ConnectionRouter.kms_provider = ConnectionRouter._router_func("kms_provider")

django_mongodb_backend/schema.py

@@ -1,3 +1,4 @@
+from django.conf import settings
 from django.db import router
 from django.db.backends.base.schema import BaseDatabaseSchemaEditor
 from django.db.models import Index, UniqueConstraint
@@ -447,7 +448,7 @@ def _create_collection(self, model):
             # option is not inadvertently set to "default" somewhere
             # which then causes the `master_key.copy` in libmongocrypt
             # to fail.
-            credentials = router.kms_credentials(model) if provider != "local" else None
+            credentials = settings.DATABASES[db].KMS_CREDENTIALS if provider != "local" else None
             ce.create_encrypted_collection(
                 db,
                 table,

docs/source/howto/encryption.rst

@@ -33,3 +33,6 @@ Django settings
 
 ``KMS_PROVIDER``
 ----------------
+
+DATABASES["encrypted"]["KMS_CREDENTIALS"]
+-----------------------------------------