关于若依框架集成jsencrypt实现密码加密传输方式（AuthenticationContextHolder.setContext(authenticationToken)；报错问题改造）

比眉伴天荒 2023-09-29 17:15 3阅读 0赞

### 一、修改前端login.js对密码进行rsa加密。 ###

import {
         encrypt } from '@/utils/jsencrypt';
    
    // 登录方法
    export function login(username, password, code, uuid) {
        
      password = encrypt(password);
      const data = {
        
        username,
        password,
        code,
        uuid
      }
      return request({
        
        url: '/login',
        headers: {
        
          isToken: false
        },
        method: 'post',
        data: data
      })
    }

### 二、工具类sign包下添加RsaUtils.java，用于RSA加密解密。 ###

package com.ruoyi.common.utils.sign;
    
    import org.apache.commons.codec.binary.Base64;
    import javax.crypto.Cipher;
    import java.security.*;
    import java.security.interfaces.RSAPrivateKey;
    import java.security.interfaces.RSAPublicKey;
    import java.security.spec.PKCS8EncodedKeySpec;
    import java.security.spec.X509EncodedKeySpec;
    
    /**
     * RSA加密解密
     *
     * @author ruoyi
     **/
    public class RsaUtils
    {
        
        // Rsa 私钥
        public static String privateKey = "此处为你自己的私钥";
    
        /**
    
         * @param text 待解密的文本
         * @return 解密后的文本
         * @throws Exception
         */
        public static String decryptByPrivateKey(String text) throws Exception
        {
        
            return decryptByPrivateKey(privateKey, text);
        }
    
        /**
         * 公钥解密
         *
         * @param publicKeyString 公钥
         * @param text 待解密的信息
         * @return 解密后的文本
         */
        public static String decryptByPublicKey(String publicKeyString, String text) throws Exception
        {
        
            X509EncodedKeySpec x509EncodedKeySpec = new X509EncodedKeySpec(Base64.decodeBase64(publicKeyString));
            KeyFactory keyFactory = KeyFactory.getInstance("RSA");
            PublicKey publicKey = keyFactory.generatePublic(x509EncodedKeySpec);
            Cipher cipher = Cipher.getInstance("RSA");
            cipher.init(Cipher.DECRYPT_MODE, publicKey);
            byte[] result = cipher.doFinal(Base64.decodeBase64(text));
            return new String(result);
        }
    
        /**
         * 私钥加密
         *
         * @param privateKeyString 私钥
         * @param text 待加密的信息
         * @return 加密后的文本
         */
        public static String encryptByPrivateKey(String privateKeyString, String text) throws Exception
        {
        
            PKCS8EncodedKeySpec pkcs8EncodedKeySpec = new PKCS8EncodedKeySpec(Base64.decodeBase64(privateKeyString));
            KeyFactory keyFactory = KeyFactory.getInstance("RSA");
            PrivateKey privateKey = keyFactory.generatePrivate(pkcs8EncodedKeySpec);
            Cipher cipher = Cipher.getInstance("RSA");
            cipher.init(Cipher.ENCRYPT_MODE, privateKey);
            byte[] result = cipher.doFinal(text.getBytes());
            return Base64.encodeBase64String(result);
        }
    
        /**
         * 私钥解密
         *
         * @param privateKeyString 私钥
         * @param text 待解密的文本
         * @return 解密后的文本
         */
        public static String decryptByPrivateKey(String privateKeyString, String text) throws Exception
        {
        
            PKCS8EncodedKeySpec pkcs8EncodedKeySpec5 = new PKCS8EncodedKeySpec(Base64.decodeBase64(privateKeyString));
            KeyFactory keyFactory = KeyFactory.getInstance("RSA");
            PrivateKey privateKey = keyFactory.generatePrivate(pkcs8EncodedKeySpec5);
            Cipher cipher = Cipher.getInstance("RSA");
            cipher.init(Cipher.DECRYPT_MODE, privateKey);
            byte[] result = cipher.doFinal(Base64.decodeBase64(text));
            return new String(result);
        }
    
        /**
         * 公钥加密
         *
         * @param publicKeyString 公钥
         * @param text 待加密的文本
         * @return 加密后的文本
         */
        public static String encryptByPublicKey(String publicKeyString, String text) throws Exception
        {
        
            X509EncodedKeySpec x509EncodedKeySpec2 = new X509EncodedKeySpec(Base64.decodeBase64(publicKeyString));
            KeyFactory keyFactory = KeyFactory.getInstance("RSA");
            PublicKey publicKey = keyFactory.generatePublic(x509EncodedKeySpec2);
            Cipher cipher = Cipher.getInstance("RSA");
            cipher.init(Cipher.ENCRYPT_MODE, publicKey);
            byte[] result = cipher.doFinal(text.getBytes());
            return Base64.encodeBase64String(result);
        }
    
        /**
         * 构建RSA密钥对
         *
         * @return 生成后的公私钥信息
         */
        public static RsaKeyPair generateKeyPair() throws NoSuchAlgorithmException
        {
        
            KeyPairGenerator keyPairGenerator = KeyPairGenerator.getInstance("RSA");
            keyPairGenerator.initialize(1024);
            KeyPair keyPair = keyPairGenerator.generateKeyPair();
            RSAPublicKey rsaPublicKey = (RSAPublicKey) keyPair.getPublic();
            RSAPrivateKey rsaPrivateKey = (RSAPrivateKey) keyPair.getPrivate();
            String publicKeyString = Base64.encodeBase64String(rsaPublicKey.getEncoded());
            String privateKeyString = Base64.encodeBase64String(rsaPrivateKey.getEncoded());
            return new RsaKeyPair(publicKeyString, privateKeyString);
        }
    
        /**
         * RSA密钥对对象
         */
        public static class RsaKeyPair
        {
        
            private final String publicKey;
            private final String privateKey;
    
            public RsaKeyPair(String publicKey, String privateKey)
            {
        
                this.publicKey = publicKey;
                this.privateKey = privateKey;
            }
    
            public String getPublicKey()
            {
        
                return publicKey;
            }
    
            public String getPrivateKey()
            {
        
                return privateKey;
            }
        }
    }

### 三、登录方法SysLoginService.java，对密码进行rsa解密。 ###

// 关键代码 RsaUtils.decryptByPrivateKey(password)
                UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(username, RsaUtils.decryptByPrivateKey(password));
                //若依官网上是AuthenticationContextHolder.setContext(authenticationToken);  一直报错，我也不知道什么原因，可能这个方法是作者自己写的，但是方法没贴进来吧
                SecurityContextHolder.getContext().setAuthentication(authenticationToken);
                // 该方法会去调用UserDetailsServiceImpl.loadUserByUsername
                authentication = authenticationManager.authenticate(authenticationToken);