SpringBoot整合jasypt实现数据加密的步骤

<dependency>
    <groupId>com.github.ulisesbocchio</groupId>
    <artifactId>jasypt-spring-boot-starter</artifactId>
    <version>3.0.4</version>
</dependency>

implementation 'com.github.ulisesbocchio:jasypt-spring-boot-starter:3.0.4'

jasypt:
  encryptor:
    password: YOUR_SECRET_PASSWORD

export JASYPT_ENCRYPTOR_PASSWORD=YOUR_SECRET_PASSWORD

jdbc:mysql://localhost:3306/mydb?useSSL=false

java -cp jasypt-1.9.3.jar org.jasypt.intf.cli.JasyptPBEStringEncryptionCLI input="jdbc:mysql://localhost:3306/mydb?useSSL=false" password="YOUR_SECRET_PASSWORD"

ENC(encrypted_string_here)

spring:
  datasource:
    url: ENC(encrypted_string_here)

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.jdbc.datasource.DriverManagerDataSource;
import javax.sql.DataSource;
@Configuration
public class DataSourceConfig {
    @Bean
    public DataSource dataSource() {
        DriverManagerDataSource dataSource = new DriverManagerDataSource();
        // 自动注入加密后的数据库连接配置
        dataSource.setUrl(/* 从配置文件中注入变量 */);
        dataSource.setUsername(/* 从配置文件中注入变量 */);
        dataSource.setPassword(/* 从配置文件中注入变量 */);
        return dataSource;
    }
}

import org.jasypt.util.text.AES256TextEncryptor;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;
@Service
public class UserService {
    @Autowired
    private StringEncryptor stringEncryptor;
    public String encryptData(String data) {
        return stringEncryptor.encrypt(data);
    }
    public String decryptData(String encryptedData) {
        return stringEncryptor.decrypt(encryptedData);
    }
}

String originalPassword = "mySuperSecretPassword";
String encryptedPassword = userService.encryptData(originalPassword);
System.out.println("Encrypted Password: " + encryptedPassword);
String decryptedPassword = userService.decryptData(encryptedPassword);
System.out.println("Decrypted Password: " + decryptedPassword);