SpringBoot结合MyBatis实现数据库字段加密_Java

今天分享一篇基于springboot+mybatis来实现数据库字段加密的操作，喜欢的朋友可以借鉴

大致的实现流程

业务层-->系统拦截器-->数据库-->系统拦截器-->返回结果

加密注解设计

把需要加密的字段通过我们自定义的加密注解进行标识，所以我们需要先自定义一段加密注解的代码

@target(elementtype.field)
@retention(retentionpolicy.runtime)
public @interface encrypt {
}

实体类

在实体类上使用注解标记需要加密字段

@data
public class user {
    private long id;
    private string username;
    
    @encrypt
    private string password;
    
    @encrypt
    private string email;
    
    @encrypt
    private string phone;
}

加密工具类

基于aes加密算法实现对字段名的加密，大家可以选择其他的加密算法

public class encryptionutil {
    privatestaticfinal string algorithm = "aes";
    privatestaticfinal string transformation = "aes/ecb/pkcs5padding";
    
    // aes加密
    public static string encrypt(string plaintext, string key) {
        try {
            secretkeyspec secretkey = new secretkeyspec(key.getbytes(standardcharsets.utf_8), algorithm);
            cipher cipher = cipher.getinstance(transformation);
            cipher.init(cipher.encrypt_mode, secretkey);
            byte[] encryptedbytes = cipher.dofinal(plaintext.getbytes(standardcharsets.utf_8));
            return base64.getencoder().encodetostring(encryptedbytes);
        } catch (exception e) {
            thrownew runtimeexception("加密失败", e);
        }
    }
    
    // aes解密
    public static string decrypt(string ciphertext, string key) {
        try {
            secretkeyspec secretkey = new secretkeyspec(key.getbytes(standardcharsets.utf_8), algorithm);
            cipher cipher = cipher.getinstance(transformation);
            cipher.init(cipher.decrypt_mode, secretkey);
            byte[] decryptedbytes = cipher.dofinal(base64.getdecoder().decode(ciphertext));
            returnnew string(decryptedbytes, standardcharsets.utf_8);
        } catch (exception e) {
            thrownew runtimeexception("解密失败", e);
        }
    }
}

系统拦截器设计

通过拦截实现自动加密和自动解密

// 加密拦截器
@intercepts({
    @signature(type = executor.class, method = "update", args = {mappedstatement.class, object.class})
})
@component
public class fieldencryptioninterceptor implements interceptor {
    
    @value("${encryption.key:mysecretkey12345}")
    private string encryptionkey;
    
    @override
    public object intercept(invocation invocation) throws throwable {
        object[] args = invocation.getargs();
        mappedstatement mappedstatement = (mappedstatement) args[0];
        object parameter = args[1];
        
        // 获取sql命令类型
        string sqlcommandtype = mappedstatement.getsqlcommandtype().tostring();
        
        // 对insert和update操作进行加密处理
        if ("insert".equals(sqlcommandtype) || "update".equals(sqlcommandtype)) {
            encryptfields(parameter);
        }
        
        return invocation.proceed();
    }
    
    // 解密拦截器
    @intercepts({
        @signature(type = resultsethandler.class, method = "handleresultsets", args = {statement.class})
    })
    @component
    public class fielddecryptioninterceptor implements interceptor {
        
        @value("${encryption.key:mysecretkey12345}")
        private string encryptionkey;
        
        @override
        public object intercept(invocation invocation) throws throwable {
            // 执行原始方法
            object result = invocation.proceed();
            
            // 对查询结果进行解密处理
            if (result instanceof list) {
                list<?> list = (list<?>) result;
                for (object item : list) {
                    decryptfields(item);
                }
            } else {
                decryptfields(result);
            }
            
            return result;
        }
    }
}

测试场景