SpringBoot中实现数据脱敏处理的方法详解

import java.lang.annotation.ElementType;
import java.lang.annotation.Retention;
import java.lang.annotation.RetentionPolicy;
import java.lang.annotation.Target;

@Target(ElementType.FIELD)
@Retention(RetentionPolicy.RUNTIME)
public @interface Sensitive {
    String type(); // 脱敏类型
    String pattern() default ""; // 可选的模式参数
}

public interface MaskingStrategy {
    String mask(String value, String pattern);
}

public class PhoneMaskingStrategy implements MaskingStrategy {
    @Override
    public String mask(String value, String pattern) {
        return value.replaceAll("(\d{3})\d{4}(\d{4})", "$1****$2");
    }
}

public class IdCardMaskingStrategy implements MaskingStrategy {
    @Override
    public String mask(String value, String pattern) {
        return value.replaceAll("(\d{6})\d{8}(\d{4})", "$1****$2");
    }
}

public class CustomMaskingStrategy implements MaskingStrategy {
    @Override
    public String mask(String value, String pattern) {
        return value.replaceAll(pattern, "****");
    }
}

import java.util.HashMap;
import java.util.Map;

public class MaskingStrategyFactory {
    private static final Map<String, MaskingStrategy> strategies = new HashMap<>();

    static {
        strategies.put("phone", new PhoneMaskingStrategy());
        strategies.put("idCard", new IdCardMaskingStrategy());
        strategies.put("custom", new CustomMaskingStrategy());
    }

    public static MaskingStrategy getStrategy(String type) {
        return strategies.getOrDefault(type, (value, pattern) -> value.replaceAll(".", "*")); // 默认脱敏
    }
}

import org.springframework.stereotype.Component;
import java.lang.reflect.Field;

@Component
public class GeneralDataMaskingProcessor {

    public void maskSensitiveData(Object obj) throws IllegalAccessException {
        Class<?> clazz = obj.getClass();
        for (Field field : clazz.getDeclaredFields()) {
            if (field.isAnnotationPresent(Sensitive.class)) {
                field.setAccessible(true);
                Object value = field.get(obj);
                if (value != null) {
                    String maskedValue = maskValue(value.toString(), field.getAnnotation(Sensitive.class));
                    field.set(obj, maskedValue);
                }
            }
        }
    }

    private String maskValue(String value, Sensitive sensitive) {
        String type = sensitive.type();
        String pattern = sensitive.pattern();
        
        MaskingStrategy strategy = MaskingStrategyFactory.getStrategy(type);
        return strategy.mask(value, pattern);
    }
}

public class User {

    private Long id;

    @Sensitive(type = "phone")
    private String phoneNumber;

    @Sensitive(type = "idCard")
    private String idCard;

    @Sensitive(type = "custom", pattern = "\d{3}-\d{4}") // 自定义模式
    private String customField;

    private String name;

    // Getters and Setters
}

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;

@Service
public class UserService {

    @Autowired
    private GeneralDataMaskingProcessor dataMaskingProcessor;

    public User getUser(Long id) {
        User user = findUserById(id); // 假设这是从数据库获取用户信息
        try {
            dataMaskingProcessor.maskSensitiveData(user);
        } catch (IllegalAccessException e) {
            e.printStackTrace();
        }
        return user;
    }

    private User findUserById(Long id) {
        // 模拟从数据库获取用户
        return new User(id, "13812345678", "123456789012345678", "123-4567", "John Doe");
    }
}

import org.junit.jupiter.api.Test;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.boot.test.context.SpringBootTest;

import static org.assertj.core.api.Assertions.assertThat;

@SpringBootTest
public class UserServiceTest {

    @Autowired
    private UserService userService;

    @Test
    public void testGetUser() {
        User user = userService.getUser(1L);
        assertThat(user.getPhoneNumber()).isEqualTo("138****5678");
        assertThat(user.getIdCard()).isEqualTo("123456****5678");
        assertThat(user.getCustomField()).isEqualTo("123-****"); // 自定义脱敏
    }
}