dependencygroupId…目录

dependencygroupIdcom.github.ulisesbocchio/groupIdartifactIdjasypt-spring-boot-starter/artifactIdversion3.0.3/version/dependency

PBEWithHmacSHA512AndAES_256password:

encryptionkey

使用ConfigurationProperties(prefix

spring.datasource)注解的dataSource()方法通过DataSourceBuilder.create().build();创建了一个DataSource的bean。

这个bean的配置信息来自于application.properties或application.yml文件中的spring.datasource前缀下的配置项比如数据库URL、用户名、密码等。

重点:

密码在yaml是加密的,如ENC(N8VBWG5nOHvy5efX3/mlPAmdBykE7iDZFl362LyeaPRXMbLT0PzEIlB/KDXrNYz6)配置了jasypt之后使用password作为密钥进行加密解密。

#加密

PBEWithHmacSHA512AndAES_256password:

encryptionkey

com.mysql.cj.jdbc.Driverjdbc-url:

jdbc:mysql://localhost:3306/auth?serverTimezoneAsia/ShanghaiuseUnicodetruecharacterEncodingutf-8allowMultiQueriestruenullCatalogMeansCurrenttrueusername:

rootpassword:

ENC(N8VBWG5nOHvy5efX3/mlPAmdBykE7iDZFl362LyeaPRXMbLT0PzEIlB/KDXrNYz6)type:

com.alibaba.druid.pool.DruidDataSourcedruid:initial-size:

5min-idle:

truetime-between-eviction-runs-millis:

60000redis:port:

通过配置类的方式实现数据库的连接构建StringEncryptor

的bean对象实现密码的加密解密把加密解密串放到配置文件中用ENC()包裹着加载配置文件的时候有ENC()就会自动解密这样避免配置文件密码泄露的风险。

Beanpublic

PooledPBEStringEncryptor();SimpleStringPBEConfig

config

SimpleStringPBEConfig();config.setPassword(encryptionkey);

加密密钥config.setAlgorithm(PBEWithHmacSHA512AndAES_256);config.setKeyObtentionIterations(1000);config.setPoolSize(1);config.setProviderName(SunJCE);config.setSaltGeneratorClassName(org.jasypt.salt.RandomSaltGenerator);config.setStringOutputType(base64);encryptor.setConfig(config);return

encryptor;}

com.baomidou.mybatisplus.extension.plugins.MybatisPlusInterceptor;

import

com.baomidou.mybatisplus.extension.plugins.inner.OptimisticLockerInnerInterceptor;

import

com.baomidou.mybatisplus.extension.plugins.inner.PaginationInnerInterceptor;

import

com.baomidou.mybatisplus.extension.spring.MybatisSqlSessionFactoryBean;

import

org.apache.ibatis.session.SqlSessionFactory;

import

org.jasypt.encryption.StringEncryptor;

import

org.jasypt.encryption.pbe.PooledPBEStringEncryptor;

import

org.jasypt.encryption.pbe.config.SimpleStringPBEConfig;

import

org.mybatis.spring.annotation.MapperScan;

import

org.springframework.beans.factory.annotation.Autowired;

import

org.springframework.beans.factory.annotation.Value;

import

org.springframework.boot.context.properties.ConfigurationProperties;

import

org.springframework.boot.jdbc.DataSourceBuilder;

import

org.springframework.context.annotation.Bean;

import

org.springframework.context.annotation.Configuration;

import

org.springframework.core.io.support.PathMatchingResourcePatternResolver;import

javax.annotation.PostConstruct;

import

stringEncryptor;ConfigurationProperties(prefix

DataSource

DataSourceBuilder.create().build();}Beanpublic

interceptor

MybatisPlusInterceptor();//分页插件interceptor.addInnerInterceptor(new

PaginationInnerInterceptor());//注册乐观锁插件interceptor.addInnerInterceptor(new

OptimisticLockerInnerInterceptor());return

SqlSessionFactory

MybatisSqlSessionFactoryBean();ssfb.setDataSource(dataSource);ssfb.setPlugins(interceptor);//到哪里找xml文件ssfb.setMapperLocations(new

PathMatchingResourcePatternResolver().getResources(classpath:/mapper/*Mapper.xml));return

StringEncryptor

PooledPBEStringEncryptor();SimpleStringPBEConfig

config

SimpleStringPBEConfig();config.setPassword(encryptionkey);

加密密钥config.setAlgorithm(PBEWithHmacSHA512AndAES_256);config.setKeyObtentionIterations(1000);config.setPoolSize(1);config.setProviderName(SunJCE);config.setSaltGeneratorClassName(org.jasypt.salt.RandomSaltGenerator);config.setStringOutputType(base64);encryptor.setConfig(config);return

void

stringEncryptor.encrypt(Root123);String

deSTr

stringEncryptor.decrypt(N8VBWG5nOHvy5efX3/mlPAmdBykE7iDZFl362LyeaPRXMbLT0PzEIlB/KDXrNYz6);System.out.println(enStrenStr);System.out.println(deSTrdeSTr);*/}}你们的点赞和赞赏是我继续前进的动力谢谢。