springboot数据库连接用户名和密码加密

悠悠 2022-12-07 13:55 293阅读 0赞

### springboot数据库连接用户名和密码加密 ###

配置文件存储加密之后的数据库连接用户名和密码。

加密方式：对称加密（可根据实际情况，自作更改）

> [加密工具参考Hutool][Hutool]

原配置文件中数据源配置

spring:
      datasource:
        url: jdbc:postgresql://127.0.0.1:5432/db_name
        username: db_user1
        password: qwe123!@#
        driver-class-name: org.postgresql.Driver

加密后配置

> 生成环境可去掉注释  
> 数据源类型可根据实际情况做调整

spring:
      datasource:
        url: jdbc:postgresql://127.0.0.1:5432/db_name
        # 原用户名 db_user1
        username: f8e50229847f3b94b6f1b4fce10cb9a4
        # 原密码 qwe123!@#
        password: 9b4775c191b55f96df1f6fb4df414870
        driver-class-name: org.postgresql.Driver
    # 数据库秘钥
    datasource:
      decrypt:
        key: j6j8Odpdj4O7fNlM

新建SecurityDataSourceConfig.class文件

import cn.hutool.core.util.CharsetUtil;
    import cn.hutool.crypto.SecureUtil;
    import cn.hutool.crypto.symmetric.SymmetricAlgorithm;
    import cn.hutool.crypto.symmetric.SymmetricCrypto;
    import com.zaxxer.hikari.HikariDataSource;
    import lombok.extern.slf4j.Slf4j;
    import org.springframework.beans.factory.annotation.Value;
    import org.springframework.boot.autoconfigure.jdbc.DataSourceProperties;
    import org.springframework.boot.context.properties.ConfigurationProperties;
    import org.springframework.boot.jdbc.DataSourceBuilder;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.util.StringUtils;
    
    import javax.sql.DataSource;
    
    @Configuration
    @Slf4j
    public class SecurityDateSourceConfig { 
    
        @Value("${datasource.decrypt.key}")
        private String decryptKey;
    
        @SuppressWarnings("unchecked")
        protected <T> T createDataSource(DataSourceProperties properties, Class<? extends DataSource> type) { 
    
            //生成密钥
            byte[] key = SecureUtil.generateKey(SymmetricAlgorithm.AES.getValue(), this.decryptKey.getBytes()).getEncoded();
            //构建
            SymmetricCrypto aes = new SymmetricCrypto(SymmetricAlgorithm.AES, key);
            String encryptUserName = aes.decryptStr(properties.determineUsername(), CharsetUtil.CHARSET_UTF_8);
            String encryptPassword = aes.decryptStr(properties.determinePassword(), CharsetUtil.CHARSET_UTF_8);
    
            log.info("解密后的username = [" + encryptUserName + "]");
            log.info("解密后的password = [" + encryptPassword + "]");
    
            DataSourceBuilder builder = DataSourceBuilder.create(properties.getClassLoader()).type(properties.getType()).driverClassName(properties.determineDriverClassName())
                    .url(properties.determineUrl()).username(encryptUserName).password(encryptPassword);
    
            return (T) builder.type(type).build();
        }
    
        @Bean
        @ConfigurationProperties(prefix = "spring.datasource.hikari")
        public HikariDataSource dataSource(DataSourceProperties properties) { 
            HikariDataSource dataSource = createDataSource(properties, HikariDataSource.class);
            if (StringUtils.hasText(properties.getName())) { 
                dataSource.setPoolName(properties.getName());
            }
            return dataSource;
        }
    
    
    
        public static void main(String[] args) throws Exception { 
            String password = "qwe123!@#";
            String username = "db_user1";
    
            String securityKey = "j6j8Odpdj4O7fNlM";
            //生成密钥
            byte[] key = SecureUtil.generateKey(SymmetricAlgorithm.AES.getValue(), securityKey.getBytes()).getEncoded();
            //构建
            SymmetricCrypto aes = new SymmetricCrypto(SymmetricAlgorithm.AES, key);
    
            //加密为16进制表示
            String encryptHexUserName = aes.encryptHex(username);
    
            String encryptHexPassword = aes.encryptHex(password);
            //解密为字符串
    // String decryptUserNameStr = aes.decryptStr(encryptHexUserName, CharsetUtil.CHARSET_UTF_8);
            System.out.println("加密后的username = [" + encryptHexUserName + "]");
            System.out.println("加密后的password= [" + encryptHexPassword + "]");
    
        }
    }

[Hutool]: https://www.hutool.cn/docs/#/crypto/%E5%AF%B9%E7%A7%B0%E5%8A%A0%E5%AF%86-SymmetricCrypto