SpringBoot The project often puts the password plaintext for connecting to the database in the configuration file , The security is lower , Especially in some enterprises, the security requirements are very high , So we consider how to encrypt the password .

  jasypt Is an easy-to-use encryption and decryption Java library , Can be quickly integrated into Spring Boot In the project , And provides automatic configuration , Easy to use .

The steps are as follows :

* 1) introduce maven rely on <dependency> <groupId>com.github.ulisesbocchio</groupId> <
artifactId>jasypt-spring-boot-starter</artifactId> <version>1.17</version> </
* 2) Reconfigure file application.yml jasypt: encryptor: password: 123456 # jasypt Encrypted salt value
* 3) Generate the encrypted key in the test case import org.jasypt.encryption.pbe.StandardPBEStringEncryptor;
import org.junit.jupiter.api.Test; public class TestEncryptorTest { @Test public
void test() { StandardPBEStringEncryptor encryptor = new
StandardPBEStringEncryptor(); encryptor.setPassword("123456");//yml Set in the file key
String url= encryptor.encrypt(
"jdbc:mysql://localhost:3306/test?createDatabaseIfNotExist=true"); String name =
encryptor.encrypt("root"); String password = encryptor.encrypt("root"); String
url1= encryptor.decrypt(url); String name1 = encryptor.decrypt(name); String
password1= encryptor.decrypt(password); System.out.println("url ciphertext :"+url); System
.out.println("url Plaintext :"+url1); System.out.println("username ciphertext :"+name); System.out.
println("username Plaintext :"+name1); System.out.println("password ciphertext :"+password); System
.out.println("password Plaintext :"+password1); } } /* output :
url ciphertext :1L+DJGp6GKaSjXWQDGafQdjPrxEvOebftER88SsTAux/zJsaWSHs4K61s7QNyBwdKd0UEYVmnNaFtVMXHkj7nFh8UlvpmvgmtPSscC+Qeww=
url Plaintext :jdbc:mysql://localhost:3306/test?createDatabaseIfNotExist=true
username ciphertext :TeRrFJqzQGcsuIsQ20ANsg== username Plaintext :root
password ciphertext :2HhGPhzjfTCdPiLGBZuY53DIHAMNTNRe password Plaintext :root */
* 4) Add the generated key above to application.yml In configuration , This is mainly used for database password ciphertext ENC Identify spring: datasource:
url: ENC(1L+DJGp6GKaSjXWQDGafQdjPrxEvOebftER88SsTAux/
zJsaWSHs4K61s7QNyBwdKd0UEYVmnNaFtVMXHkj7nFh8UlvpmvgmtPSscC+Qeww=) username: ENC(
TeRrFJqzQGcsuIsQ20ANsg==) password: ENC(2HhGPhzjfTCdPiLGBZuY53DIHAMNTNRe)
* 5) Running program , Can be connected to the database . The specific connection information cannot be seen in the configuration file , Relative safety .
supplement :API Interface for data encryption

The data transmitted by the interface can also be encrypted . The back end encrypts the interface that transmits data , And provide corresponding decryption interface , When the front end calls the data interface for transmission , Also call the decryption interface , It realizes the encryption and decryption of data . The advantage of this is , The front end can only see the data it wants to see and can see , Make data relatively safe .