jasypt 官網(wǎng):
https://github.com/ulisesbocchio/jasypt-spring-boot
參考:
https://zhiku8.com/springboot-jasypt.html
一:pom
<!-- Jasypt加密 -->
<dependency>
<groupId>com.github.ulisesbocchio</groupId>
<artifactId>jasypt-spring-boot-starter</artifactId>
<version>2.0.0</version>
</dependency>
二:yml配置文件中引入passwodk,也就是鹽
# 配置文件加密key
jasypt:
encryptor:
password: panther
三:創(chuàng)建工具包
package com.xxx.xxx.xxx;
import org.jasypt.encryption.pbe.PooledPBEStringEncryptor;
import org.jasypt.encryption.pbe.StandardPBEByteEncryptor;
import org.jasypt.encryption.pbe.config.SimpleStringPBEConfig;
/**
* @Created with Intellij IDEA
* @Author :
* @Date : 2018/5/18 - 10:37
* @Copyright (C), 2018-2018
* @Descripition : Jasypt安全框架加密類工具包
*/
public class JasyptUtils {
/**
* Jasypt生成加密結(jié)果
*
* @param password 配置文件中設(shè)定的加密密碼 jasypt.encryptor.password
* @param value 待加密值
* @return
*/
public static String encryptPwd(String password, String value) {
PooledPBEStringEncryptor encryptOr = new PooledPBEStringEncryptor();
encryptOr.setConfig(cryptOr(password));
String result = encryptOr.encrypt(value);
return result;
}
/**
* 解密
*
* @param password 配置文件中設(shè)定的加密密碼 jasypt.encryptor.password
* @param value 待解密密文
* @return
*/
public static String decyptPwd(String password, String value) {
PooledPBEStringEncryptor encryptOr = new PooledPBEStringEncryptor();
encryptOr.setConfig(cryptOr(password));
String result = encryptOr.decrypt(value);
return result;
}
/**
* @param password salt
* @return
*/
public static SimpleStringPBEConfig cryptOr(String password) {
SimpleStringPBEConfig config = new SimpleStringPBEConfig();
config.setPassword(password);
config.setAlgorithm(StandardPBEByteEncryptor.DEFAULT_ALGORITHM);
config.setKeyObtentionIterations("1000");
config.setPoolSize("1");
config.setProviderName(null);
config.setSaltGeneratorClassName("org.jasypt.salt.RandomSaltGenerator");
config.setStringOutputType("base64");
return config;
}
public static void main(String[] args) {
// 加密
System.out.println(encryptPwd("EbfYkitulv73I2p0mXI50JMXoaxZTKJ7", "root@1234"));
// 解密
// mysql@1234
// System.out.println(decyptPwd("EbfYkitulv73I2p0mXI50JMXoaxZTKJ7", "bgWQ4OfVCUJ1ExsqNhGV+KKBgpx8alv+"));
// root@1234
// System.out.println(decyptPwd("EbfYkitulv73I2p0mXI50JMXoaxZTKJ7", "tdHzge8YvviOJaiV/+P6uQ9wgB44D1aH"));
}
}
四:使用方法
運(yùn)行main方法僚楞,填入配置的鹽毫缆,然后填入需要加密的value玲躯,直接運(yùn)行即可。
類似配置文件中的數(shù)據(jù)庫(kù)連接
# 開發(fā)環(huán)境
spring:
datasource:
driver-class-name: com.mysql.jdbc.Driver
url: jdbc:mysql://127.0.0.1:3306/panther_dev?useUnicode=true&characterEncoding=UTF-8
# Jasypt加密 可到common包中找到JasyptUtil加解密工具類生成加密結(jié)果 格式為ENC(加密結(jié)果)
username: ENC(S2G86yhb0OMJMeNXUaGwYw==)
password: ENC(GfP4qfnrJeqMvzN1nOemIQ==)