SpringBoot配置文件加密处理

1
<dependency>
2
    <groupId>com.github.ulisesbocchio</groupId>
3
    <artifactId>jasypt-spring-boot-starter</artifactId>
4
    <version>3.0.4</version>
5
</dependency>
6

7
<dependency>
8
    <groupId>org.springframework.boot</groupId>
9
    <artifactId>spring-boot-configuration-processor</artifactId>
10
    <optional>true</optional>
11
</dependency>

1
package com.lyne.moyu.uc.utils;
2

3
import org.jasypt.encryption.pbe.PooledPBEStringEncryptor;
4
import org.jasypt.encryption.pbe.config.SimpleStringPBEConfig;
5

6
/**
7
 * Keafmd * * @ClassName: JasyptUtils
8
 * @Description:
9
 * @date: 2022-04-25 11:18
10
 */public class JasyptUtils {
11
   /**
12
    * Jasypt生成加密结果
13
    *
14
    * @param password 配置文件中设定的加密密码 jasypt.encryptor.password
15
    * @param value    待加密值
16
    * @return
17
    */
18
   public static String encryptPwd(String password, String value) {
19
      PooledPBEStringEncryptor encryptOr = new PooledPBEStringEncryptor();
20
      encryptOr.setConfig(cryptOr(password));
21
      String result = encryptOr.encrypt(value);
22
      return result;
23
   }
24

25
   /**
26
    * 解密
27
    *
28
    * @param password 配置文件中设定的加密密码 jasypt.encryptor.password
29
    * @param value    待解密密文
30
    * @return
31
    */
32
   public static String decyptPwd(String password, String value) {
33
      PooledPBEStringEncryptor encryptOr = new PooledPBEStringEncryptor();
34
      encryptOr.setConfig(cryptOr(password));
35
      String result = encryptOr.decrypt(value);
36
      return result;
37
   }
38

39
   /**
40
    * @param password salt
41
    * @return
42
    */
43
   public static SimpleStringPBEConfig cryptOr(String password) {
44
      SimpleStringPBEConfig config = new SimpleStringPBEConfig();
45
      config.setPassword(password);
46
      // 3.0.4版自动解密默认加密算法是PBEWITHHMACSHA512ANDAES_256，
47
      // 1.8及以下版本可能需要自己替换安全文件，也可以在配置实体时修改
48
      config.setAlgorithm("PBEWITHHMACSHA512ANDAES_256");
49
      config.setKeyObtentionIterations("1000");
50
      config.setPoolSize("1");
51
      config.setProviderName("SunJCE");
52
      config.setSaltGeneratorClassName("org.jasypt.salt.RandomSaltGenerator");
53
      config.setIvGeneratorClassName("org.jasypt.iv.RandomIvGenerator");
54
      config.setStringOutputType("base64");
55
      return config;
56
   }
57

58
   public static void main(String[] args) {
59
      // 加密
60
      // 盐值替换成自己熟悉的口令，此口令为解密密钥，需要妥善保管。
61
      // 盐值也需要在第三步写入配置文件
62
      System.out.println(encryptPwd("your salt", "123456"));
63
   }
64
}

1
spring:
2
  application:
3
    name: u-center
4
  profiles:
5
    active: dev
6
  jackson:
7
    date-format: yyyy-MM-dd HH:mm:ss
8
    time-zone: GMT+8
9
  mvc:
10
    throw-exception-if-no-handler-found: true
11
    static-path-pattern: /**
12
  web:
13
    resources:
14
      add-mappings: false
15
  datasource:
16
    url: jdbc:mysql://localhost:3306/mo_yu_ucenter?userUnicode=true&useSSL=false&serverTimezone=Asia/Shanghai&characterEncoding=utf-8&allowPublicKeyRetrieval=true
17
    driver-class-name: com.mysql.cj.jdbc.Driver
18
    type: com.alibaba.druid.pool.DruidDataSource
19
    username: root
20
    password: ENC(lG4hT3FdNsFdWPmUCob7D4YUHZqyaSXEH/uYzfAWh58lSVwBz6wLd02jSgXbNHzH)
21
jasypt:
22
  encryptor:
23
    password: your salt

1
jasypt.password=your salt

1
/**
2
 * @author lyne
3
 * @date 2022/11/28
4
 */@Component
5
@PropertySource("classpath:jasypt.properties")
6
@ConfigurationProperties(prefix = "jasypt")
7
public class JasyptProperties {
8
   private String password;
9

10
   public String getPassword() {
11
      return password;
12
   }
13

14
   public void setPassword(String password) {
15
      this.password = password;
16
   }
17
}

1
/**
2
 * @author lyne
3
 * @date 2022/11/28
4
 */@Configuration
5
public class JasyptConfig {
6

7
   @Autowired
8
   private JasyptProperties myJasyptProperties;
9

10
   @Bean("jasyptStringEncryptor")
11
   public StringEncryptor jasyptStringEncryptor(Singleton<JasyptEncryptorConfigurationProperties> configProps) {
12
      PooledPBEStringEncryptor encryptor = new PooledPBEStringEncryptor();
13
      JasyptEncryptorConfigurationProperties jasyptProperties = configProps.get();
14
      SimpleStringPBEConfig config = new SimpleStringPBEConfig();
15
      config.setPassword(myJasyptProperties.getPassword());
16
      config.setAlgorithm(jasyptProperties.getAlgorithm());
17
      config.setKeyObtentionIterations(jasyptProperties.getKeyObtentionIterations());
18
      config.setPoolSize(jasyptProperties.getPoolSize());
19
      config.setProviderName(jasyptProperties.getProviderName());
20
      config.setSaltGeneratorClassName(jasyptProperties.getSaltGeneratorClassname());
21
      config.setIvGeneratorClassName(jasyptProperties.getIvGeneratorClassname());
22
      config.setStringOutputType(jasyptProperties.getStringOutputType());
23
      encryptor.setConfig(config);
24
      return encryptor;
25
   }
26

27
}

1
# privacy Files
2
jasypt.properties