Jasypt实现配置文件加密

Digester digester = new Digester();
digester.setAlgorithm("SHA-1");
String message = "hello";
byte[] digest = digester.digest(message.getBytes());

String userPassword = "1qaz";
BasicPasswordEncryptor passwordEncryptor = new BasicPasswordEncryptor();
String encryptedPassword = passwordEncryptor.encryptPassword(userPassword);
String inputPassword = "!QAZ";
if (passwordEncryptor.checkPassword(inputPassword, encryptedPassword)) {
    // correct!
} else {
    // bad login!
}

String userPassword = "1234";
StrongPasswordEncryptor passwordEncryptor = new StrongPasswordEncryptor();
String encryptedPassword = passwordEncryptor.encryptPassword(userPassword);
String inputPassword = "!@#$";
if (passwordEncryptor.checkPassword(inputPassword, encryptedPassword)) {
    // correct!
} else {
    // bad login!
}

BasicTextEncryptor textEncryptor = new BasicTextEncryptor();
String myEncryptionPassword = "123456";
textEncryptor.setPassword(myEncryptionPassword);
String myText = "myText";
String myEncryptedText = textEncryptor.encrypt(myText);
String plainText = textEncryptor.decrypt(myEncryptedText);

datasource.driver=com.mysql.jdbc.Driver
datasource.url=jdbc:mysql://localhost/reportsdb
datasource.username=reportsUser
datasource.password=ENC(G6N718UuyPE5bHyWKyuLQSm02auQPUtm)

 /*
  * 首先，创建一个用于加解密的StringEncryptor并设置加密算法和加解密的密码
  *
  */
 StandardPBEStringEncryptor encryptor = new StandardPBEStringEncryptor();
 encryptor.setPassword("jasypt"); // could be got from web, env variable...
 encryptor.setAlgorithm("PBEWithHMACSHA512AndAES_256");
 encryptor.setIvGenerator(new RandomIvGenerator());

 /*
  * 创建EncryptableProperties的实例并加载配置文件
  */
 Properties props = new EncryptableProperties(encryptor);
 props.load(new FileInputStream("/path/to/my/configuration.properties"));

 /*
  * 使用相同的方式获取加密内容和未加密内容，EncryptableProperties会自动对ENC(...)格式的内容进行解密
  */
 String datasourceUsername = props.getProperty("datasource.username");
 String datasourcePassword = props.getProperty("datasource.password");

<!-- 原来的配置文件加载类，用于替换bean定义中的占位符 -->
<!--
<bean id="propertyConfigurer" class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer">
    <property name="locations">
        <list>
            <value>classpath:dataSource.properties</value>
        </list>
    </property>
</bean>
-->

<!-- 使用PBEWithMD5AndDES的加密算法进行加解密,密码从环境变量APP_ENCRYPTION_PASSWORD中读取 -->
<bean id="environmentVariablesConfiguration"
      class="org.jasypt.encryption.pbe.config.EnvironmentStringPBEConfig">
    <property name="algorithm" value="PBEWithMD5AndDES" />
    <property name="passwordEnvName" value="APP_ENCRYPTION_PASSWORD" />
</bean>

<bean id="configurationEncryptor"
      class="org.jasypt.encryption.pbe.StandardPBEStringEncryptor">
    <property name="config" ref="environmentVariablesConfiguration" />
</bean>

<!-- 替换PropertyPlaceholderConfigurer并提交构造器参数 -->
<bean id="propertyConfigurer" class="org.jasypt.spring4.properties.EncryptablePropertySourcesPlaceholderConfigurer">
    <constructor-arg ref="configurationEncryptor" />
    <property name="locations">
        <list>
            <value>classpath:dataSource.properties</value>
        </list>
    </property>
</bean>

<!-- 定义bean，占位符${...}会使用配置文件中对应的属性值进行替换 -->
<bean id="dataSource" class="com.alibaba.druid.pool.DruidDataSource">
    <property name="username" value="${druid.username}" />
	<property name="password" value="${druid.password}" />
	<property name="driverClassName" value="${druid.driverClassName}" />
</bean>

        <dependency>
            <groupId>org.jasypt</groupId>
            <artifactId>jasypt-spring4</artifactId>
            <version>1.9.3</version>
        </dependency>

name=ENC(UjfKzywOXO2vJrq5kajvwg==)
age=ENC(d9nkfwy27Kk9LtZAV2IB1A==)

	<bean id="configurationEncryptor"
		  class="org.jasypt.encryption.pbe.StandardPBEStringEncryptor">
		<property name="password" value="p0nsh1ne"/>
	</bean>

	<bean id="propertyConfigurer" class="org.jasypt.spring4.properties.EncryptablePropertySourcesPlaceholderConfigurer">
		<constructor-arg ref="configurationEncryptor" />
		<property name="locations">
			<list>
				<value>classpath:user.properties</value>
			</list>
		</property>
	</bean>

	<bean class="io.github.pxzxj.User">
		<property name="name" value="${name}"/>
		<property name="age" value="${age}" />
	</bean>

description=demo of jasypt for springmvc

@PropertySource("classpath:app.properties")
public class QController {

    @Autowired
    private User user;

    @Value("${description}")
    private String description;

    @RequestMapping("/user")
    public User a(){
        user.setDescription(description);
        return user;
    }
}

        <dependency>
            <groupId>com.github.ulisesbocchio</groupId>
            <artifactId>jasypt-spring-boot-starter</artifactId>
            <version>3.0.3</version>
        </dependency>

jasypt:
  encryptor:
    password: p0nsh1ne

user:
  name: ENC(8772TyKou2uUTpxN0u50kpaWCBcq1OyuxUBhtWxiy5GxKguDytDslGmAKLXZkS3S)
userage: ENC(FQ6DqDcESRvlMvLmrQsg5DQ6sQDFPG6FJngffT5+BFPpUd8t4r/th7XEktl9H+d0)

description=ENC(X/djxKOlwYwCdQoJtzVnO2UsAYMT3rUZRB7wlp3O6kxv0SbvS/DUCtMQkTsdWNavwPXM5swC+D53Ym8dp1op0A==)

@RestController
@PropertySource("classpath:app.properties")
public class QController {

    @Autowired
    private UserProperties userProperties;

    @Value("${description}")
    private String description;

    @Value("${userage}")
    private Integer userage;

    @RequestMapping("/user")
    public User a(){
        User user = new User();
        user.setName(userProperties.getName());
        user.setAge(userage);
        user.setDescription(description);
        return user;
    }
}