SpringBoot程序加密保护代码不被反编译

<plugin>
    <groupId>org.apache.maven.plugins</groupId>
    <artifactId>maven-shade-plugin</artifactId>
    <version>3.3.0</version>
    <configuration>
        <filters>
            <filter>
                <artifact>*:*</artifact>
                <excludes>
                    <exclude>**/*.properties</exclude>
                </excludes>
            </filter>
        </filters>
        <shadedArtifactAttached>true</shadedArtifactAttached>
    </configuration>
    <executions>
        <execution>
            <phase>package</phase>
            <goals>
                <goal>shade</goal>
            </goals>
        </execution>
    </executions>
</plugin>

# 保留 SpringBoot 的入口类
-keep class com.example.Application { *; }

# 保留所有标注了 @Component 的类
-keep @org.springframework.stereotype.Component class *

# 保留类中的注解
-keepattributes RuntimeVisibleAnnotations

# 混淆所有其他类和方法
-obfuscate

import javax.crypto.Cipher;
import javax.crypto.KeyGenerator;
import javax.crypto.SecretKey;
import javax.crypto.spec.SecretKeySpec;
import java.io.*;
import java.nio.file.Files;
import java.nio.file.Path;
import java.nio.file.Paths;
import java.util.Base64;

public class BytecodeEncryptor {
    private static final String ALGORITHM = "AES";
    private static final String KEY = "MySecretKey12345"; // 16字节密钥

    public static void main(String[] args) throws Exception {
        Path inputPath = Paths.get("target/classes");
        Path outputPath = Paths.get("target/encrypted-classes");
        Files.createDirectories(outputPath);

        SecretKey secretKey = new SecretKeySpec(KEY.getBytes(), ALGORITHM);
        Cipher cipher = Cipher.getInstance(ALGORITHM);
        cipher.init(Cipher.ENCRYPT_MODE, secretKey);

        Files.walk(inputPath).filter(Files::isRegularFile).forEach(file -> {
            try {
                byte[] bytes = Files.readAllBytes(file);
                byte[] encryptedBytes = cipher.doFinal(bytes);
                Path encryptedFile = outputPath.resolve(inputPath.relativize(file));
                Files.createDirectories(encryptedFile.getParent());
                Files.write(encryptedFile, encryptedBytes);
            } catch (Exception e) {
                e.printStackTrace();
            }
        });
    }
}

import javax.crypto.Cipher;
import javax.crypto.spec.SecretKeySpec;
import java.io.IOException;
import java.nio.file.Files;
import java.nio.file.Path;
import java.nio.file.Paths;

public class EncryptedClassLoader extends ClassLoader {
    private static final String ALGORITHM = "AES";
    private static final String KEY = "MySecretKey12345";
    private final Path basePath;

    public EncryptedClassLoader(Path basePath, ClassLoader parent) {
        super(parent);
        this.basePath = basePath;
    }

    @Override
    protected Class<?> findClass(String name) throws ClassNotFoundException {
        try {
            Path encryptedFile = basePath.resolve(name.replace('.', '/') + ".class");
            byte[] encryptedBytes = Files.readAllBytes(encryptedFile);

            Cipher cipher = Cipher.getInstance(ALGORITHM);
            cipher.init(Cipher.DECRYPT_MODE, new SecretKeySpec(KEY.getBytes(), ALGORITHM));
            byte[] classBytes = cipher.doFinal(encryptedBytes);

            return defineClass(name, classBytes, 0, classBytes.length);
        } catch (IOException | RuntimeException e) {
            throw new ClassNotFoundException("Class not found: " + name, e);
        } catch (Exception e) {
            throw new RuntimeException("Failed to decrypt class", e);
        }
    }
}

public class Application {
    public static void main(String[] args) throws Exception {
        Path encryptedPath = Paths.get("target/encrypted-classes");
        ClassLoader encryptedLoader = new EncryptedClassLoader(encryptedPath, Application.class.getClassLoader());
        Thread.currentThread().setContextClassLoader(encryptedLoader);

        SpringApplication.run(Application.class, args);
    }
}