lib/kms_encrypted/clients/vault.rb in kms_encrypted-1.4.0 vs lib/kms_encrypted/clients/vault.rb in kms_encrypted-1.5.0

@@ -26,10 +26,10 @@
             KmsEncrypted.vault_client.logical.write(
               "transit/decrypt/#{key_id.sub("vault/", "")}",
               options
             )
           rescue ::Vault::HTTPClientError => e
-            decryption_failed! if e.message.include?("unable to decrypt")
+            decryption_failed! if e.message.include?("unable to decrypt") || e.message.include?("message authentication failed")
             raise e
           rescue ::Vault::HTTPServerError => e
             decryption_failed! if e.message.include?("message authentication failed")
             raise e
           rescue Encoding::UndefinedConversionError