SpringBoot常用脱敏方案小结

public interface CompanyDesensMixin {
    @Desensitize(type = DesensitizeType.EMAIL)
    String getEmail();
}

@Target(ElementType.FIELD)
@Retention(RetentionPolicy.RUNTIME)
public @interface Sensitive {
    SensitiveType value();
}

/**
 * 脱敏类型枚举
 */
public enum SensitiveType {
    PHONE,      // 手机号
    ID_CARD,    // 身份证
    NAME,       // 姓名
    EMAIL,      // 邮箱
    BANK_CARD   // 银行卡
}

/**
 * 深度脱敏AOP处理器
 */
@Aspect
@Component
@Slf4j
public class DeepSensitiveAspect {
    // 定义切点：拦截Controller层所有方法
    @Pointcut("execution(* com.jing.springbootdemo.web.BasicController.user())")
    public void controllerPointcut() {}
    
    /**
     * 环绕通知：处理Controller层返回结果
     */
    @Around("controllerPointcut()")
    public Object aroundController(ProceedingJoinPoint joinPoint) throws Throwable {
        Object result = joinPoint.proceed();
        long start = System.nanoTime();
        Object res = processDeepSensitive(result);
        long end = System.nanoTime();
        long cost = TimeUnit.NANOSECONDS.toMillis(end - start);
        log.info("Controller 通知总耗时 = {} ms | 签名 = {}", cost, joinPoint.getSignature().toShortString());
        return res;
    }
    
    /**
     * 递归处理单个对象所有字段
     */
    private Object processObject(Object obj) {
        if (obj == null) {
            return null;
        }
        Class<?> clazz = obj.getClass();
        try {
            // 获取所有字段（包括父类）
            List<Field> fields = getAllFields(clazz);
            for (Field field : fields) {
                field.setAccessible(true);
                // 检查是否有脱敏注解
                Sensitive sensitive = field.getAnnotation(Sensitive.class);
                if (sensitive != null && field.getType() == String.class) {
                    // 处理敏感字段
                    processSensitiveField(obj, field, sensitive);
                } else {
                    // 递归处理嵌套对象
                    processNestedField(obj, field);
                }
            }
        } catch (Exception e) {
            log.warn("脱敏处理失败: {}", e.getMessage());
        }
        return obj;
     }
}

public UserDTO toDTO(UserEntity entity) {
    UserDTO dto = new UserDTO();
    // 1. 普通字段
    dto.setUserName(desensitizeName(entity.getRealName()));
    // 2. 身份证号
    dto.setIdCard(StrUtil.hide(entity.getIdCard(), 1, 17));
    // 3. 手机
    dto.setMobile(DesensitizedUtil.mobilePhone(entity.getMobile()));
    // 4. 邮箱
    dto.setEmail(DesensitizedUtil.email(entity.getEmail()));
    return dto;
}

private String desensitizeName(String fullName) {
    if (fullName == null || fullName.length() < 2) return fullName;
    return fullName.charAt(0) + "*" + fullName.substring(fullName.length() - 1);
}

SELECT 
    id,
    CONCAT(LEFT(phone, 3), '****', RIGHT(phone, 4)) AS phone,
    CONCAT(LEFT(id_card, 6), '********', RIGHT(id_card, 4)) AS id_card,
    CONCAT(LEFT(name, 1), '*', RIGHT(name, 1)) AS name,
    CONCAT(LEFT(email, 4), '****', SUBSTRING(email, LOCATE('@', email))) AS email,
    CONCAT(LEFT(bank_card, 4), '********', RIGHT(bank_card, 4)) AS bank_card
FROM users;