SpringBoot敏感数据脱敏的处理方式

public enum SensitiveStrategy {
    // 不同脱敏策略
    USERNAME(s -> s.replaceAll("(.).", "$1**")),
    PHONE(s -> s.replaceAll("(\\d{3})\\d{4}(\\d{4})", "$1****$2")),
    ID_CARD(s -> s.replaceAll("(\\d{4})\\d{10}(\\d{4})", "$1****$2"));

    private final Function<String, String> desensitizer;

    SensitiveStrategy(Function<String, String> desensitizer) {
        this.desensitizer = desensitizer;
    }

    public Function<String, String> getDesensitizer() {
        return desensitizer;
    }
}

@Retention(RetentionPolicy.RUNTIME)
@JacksonAnnotationsInside
@JsonSerialize(using = SensitiveSerialize.class)
public @interface Sensitive {
    SensitiveStrategy strategy();
}

public class SensitiveSerialize extends JsonSerializer<String> {
    private SensitiveStrategy strategy;

    public SensitiveSerialize(SensitiveStrategy strategy) {
        this.strategy = strategy;
    }

    @Override
    public void serialize(String value, JsonGenerator gen, SerializerProvider provider) throws IOException {
        gen.writeString(strategy.getDesensitizer().apply(value));
    }
}

public class UserDTO {
    @Sensitive(strategy = SensitiveStrategy.PHONE)
    private String phone;

    @Sensitive(strategy = SensitiveStrategy.ID_CARD)
    private String idCard;
}

<configuration>
    <conversionRule conversionWord="msg" converterClass="com.example.LogMaskConverter"/>
</configuration>

public class LogMaskConverter extends ClassicConverter {
    @Override
    public String convert(ILoggingEvent event) {
        return event.getMessage()
            .replaceAll("(\\d{3})\\d{4}(\\d{4})", "$1****$2") // 手机号
            .replaceAll("(\\d{4})\\d{10}(\\d{4})", "$1****$2"); // 身份证
    }
}

<dependency>
    <groupId>com.github.ulisesbocchio</groupId>
    <artifactId>jasypt-spring-boot-starter</artifactId>
    <version>3.0.5</version>
</dependency>

jasypt.encryptor.password=your_secret_key

public class User {
    @Encrypted
    private String phone;

    @Encrypted
    private String idCard;
}