1、介紹

jasypt可以在springboot注入property和yml配置檔案中的值之前，將配置檔案中的值先預先處理的工具。可以用來實現對資料庫賬號密碼等敏感資訊密文解密的功能。

2、Maven依賴

<dependency>
    <groupId>com.github.ulisesbocchio</groupId>
    <artifactId>jasypt-spring-boot-starter</artifactId>
    <version>2.0.0</version>
</dependency
 
>

3、註冊解密Bean

@Configuration
public class EncryptionPropertyConfig {

    @Bean(name="encryptablePropertyResolver")
    public EncryptablePropertyResolver encryptablePropertyResolver() {
        return new EncryptionPropertyResolver();
    }

    class EncryptionPropertyResolver implements EncryptablePropertyResolver {

        @Override
 

        public String resolvePropertyValue(String value) {
            if(StringUtils.isBlank(value)) {
                return value;
            }
            // 值以[email protected]開頭的均為DES加密,需要解密
            if(value.startsWith("[email protected]")) {
                return resolveDESValue(value.substring(4
 
));
            }
            // 不需要解密的值直接返回
            return value;
        }

        private String resolveDESValue(String value) {
            // 自定義DES密文解密
            return DESUtil.getDecryptString(value);
        }

    }
}

4、測試

4.1、property配置檔案

# 127.0.0.1的密文為e3zcSlYS29N0Y3i+mVdkgQ==
datasource.host[email protected]+mVdkgQ==
# 3306的密文為S6mBLsaSBEw=
datasource.port[email protected]=
datasource.database=test
datasource.url=jdbc:mysql://${datasource.host}:${datasource.port}/${datasource.database}?useUnicode=true&characterEncoding=utf8

4.2、注入

@RunWith(SpringRunner.class)
@SpringBootTest(classes = Application.class)
public class ApplicationTests {

    @Value("${datasource.url}")
    private String url;

    @Test
    public void testJasypt() {
        System.out.println(url);
    }

}

4.3、輸出

jdbc:mysql://127.0.0.1:3306/test?useUnicode=true&characterEncoding=utf8