springboot ENC jasypt加密敏感配置

pom中添加依賴：

        <!-- 配置文件密碼加密 -->
        <dependency>
            <groupId>com.github.ulisesbocchio</groupId>
            <artifactId>jasypt-spring-boot-starter</artifactId>
            <version>3.0.4</version>
        </dependency>
        <dependency>
            <groupId>org.jasypt</groupId>
            <artifactId>jasypt</artifactId>
            <version>1.9.3</version>
        </dependency>

添加配置類：

import org.jasypt.encryption.StringEncryptor;
import org.jasypt.encryption.pbe.PooledPBEStringEncryptor;
import org.jasypt.encryption.pbe.config.SimpleStringPBEConfig;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

/**
 * @description : 配置文件用戶密碼  加密配置類
 */
@Configuration
public class EncryptorConfig {

    @Bean("jasyptStringEncryptor")
    public StringEncryptor jasyptStringEncryptor() {
        PooledPBEStringEncryptor encryptor = new PooledPBEStringEncryptor();
        SimpleStringPBEConfig config = new SimpleStringPBEConfig();
        config.setPassword("qwertyuiop123");
//        config.setAlgorithm("PBEWITHHMACSHA512ANDAES_256"); // 這個(gè)加密算法比較特殊，后期更新
        config.setAlgorithm("PBEWithMD5AndDES");
        config.setKeyObtentionIterations("1000");
        config.setPoolSize("1");
        config.setProviderName("SunJCE");
        config.setSaltGeneratorClassName("org.jasypt.salt.RandomSaltGenerator");
        config.setIvGeneratorClassName("org.jasypt.iv.NoIvGenerator");
        config.setStringOutputType("base64");
        encryptor.setConfig(config);
        return encryptor;
    }
}

測(cè)試方法：

import org.jasypt.util.text.BasicTextEncryptor;

import java.util.Scanner;

/***
 * 配置文件用戶密碼加密/解密測(cè)試類
 */
public class CryptoUtilTest {

    private static String KEY = "qwertyuiop123";

    public static void main(String[] args) {
        generatePassword();
        decryptPassword();
    }

    /**
     * 獲取密文
     */
    private static void generatePassword(){
        BasicTextEncryptor textEncryptor = new BasicTextEncryptor();
        //加密所需的salt(鹽) 隨便生成的隨機(jī)數(shù)用做鹽值
        textEncryptor.setPassword(KEY);
        Scanner scanner = new Scanner(System.in);
        System.out.println("請(qǐng)輸入密碼明文:");
        String password = scanner.nextLine();
        //要加密的數(shù)據(jù)（數(shù)據(jù)庫(kù)的用戶名或密碼）
        String enPassword = textEncryptor.encrypt(password);
        //查看密碼
        System.out.println("密碼密文是:");

        System.out.println(enPassword);
    }

    /**
     * 獲取明文
     */
    private static void decryptPassword(){
        BasicTextEncryptor textEncryptor = new BasicTextEncryptor();
        //加密所需的salt(鹽) 隨便生成的隨機(jī)數(shù)用做鹽值
        textEncryptor.setPassword(KEY);
        Scanner scanner = new Scanner(System.in);
        System.out.println("請(qǐng)輸入密碼密文:");
        String password = scanner.nextLine();
        //要加密的數(shù)據(jù)（數(shù)據(jù)庫(kù)的用戶名或密碼）
        String enPassword = textEncryptor.decrypt(password);
        //查看密碼
        System.out.println("密碼明文是:");

        System.out.println(enPassword);


    }
}

yml配置文件中修改用戶名和密碼：

spring:
  datasource:
    url: jdbc:mysql://127.0.0.1:3306/test
    username: ENC(2Hn+MUePaco1jG01mDi6JQ==)
    password: ENC(Tui0/IQEjniy9LRB74QQC2Lz4j8zR4zS)