How Springboot integrates Jasypt to implement configuration file encryption
Jun 01, 2023 am 08:55 AM
Introduction to Jasypt
Jasypt is a java library that allows a developer to add basic encryption functionality to his/her project with minimal effort and does not require a deep understanding of how encryption works
High-security, standards-based encryption technology for one-way and two-way encryption. Encrypt passwords, text, numbers, binary files...
Suitable for integration into Spring-based applications, open API, for any JCE provider...
Add the following dependencies:
<dependency>
<groupId>com.github.ulisesbocchio</groupId>
<artifactId>jasypt-spring-boot-starter</artifactId>
<version>2.1.1</version>
</dependency>Benefits of Jasypt
Protect the security of our system. Even if the code is leaked, the absolute security of the data source can be guaranteed.
Application Scenario
Encrypt all account passwords in the configuration file, as well as the things you want to encrypt.
How to use
Use the key to encrypt or decrypt the account or password, and decrypt the ciphertext when the project is started.
Practical use
Encryption and decryption tool class
import org.jasypt.util.text.BasicTextEncryptor;
/********************************************************************************
** @author ： ZYJ
** @date ：2023/04/26
** @description ：Jasypt加密解密
*********************************************************************************/
public class Jasypt {
public static void main(String[] args) {
BasicTextEncryptor basicTextEncryptor = new BasicTextEncryptor();
//加密的密鑰
basicTextEncryptor.setPassword("Jasypt");
//密碼進(jìn)行加密
String encrypt = basicTextEncryptor.encrypt("密碼:123456");
//密碼進(jìn)行解密
String decrypt = basicTextEncryptor.decrypt(encrypt);
//結(jié)果輸出
System.out.println("加密后的結(jié)果:"+encrypt);
System.out.println("加密后的結(jié)果:"+decrypt);
}
}Modify the configuration file, encrypt the database account password, use ENC() to include the ciphertext, put it in brackets, use The meaning of ENC() is to decrypt and load at startup.
Configure the key in the configuration file application.yml and use the specified key to decrypt
jasypt:
encryptor:
password: JasyptHowever, this method is not advisable because the code leaks the account password It is no different from plain text. You can configure the key in the environment variable and load it directly as a system environment variable! !
The key is specified through the environment variable. Modify the configuration file and replace the key with the environment variable name. In the form of ${environment variable name}, find the variable value through the environment variable name at startup. That is our key! ! !
jasypt:
encryptor:
#Environment variable variable name
password: ${JASYPT_PASSWORD}
Windows environment variable mode specification
Note: After configuring environment variables in Windows, you need to close IDEA and reopen it to let it load the environment variables.
Specify the Linux environment variable method
Edit the environment variable file
vim /etc/profile
Add at the bottom
export JASYPT_PASSWORD=Jasypt
Save and exit refresh environment variables
source /etc /profile
The above is the detailed content of How Springboot integrates Jasypt to implement configuration file encryption. For more information, please follow other related articles on the PHP Chinese website!
Hot AI Tools
Undress AI Tool
Undress images for free
Undresser.AI Undress
AI-powered app for creating realistic nude photos
AI Clothes Remover
Online AI tool for removing clothes from photos.
Clothoff.io
AI clothes remover
Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!
Hot Article
Hot Tools
Notepad++7.3.1
Easy-to-use and free code editor
SublimeText3 Chinese version
Chinese version, very easy to use
Zend Studio 13.0.1
Powerful PHP integrated development environment
Dreamweaver CS6
Visual web development tools
SublimeText3 Mac version
God-level code editing software (SublimeText3)
How Springboot integrates Jasypt to implement configuration file encryption
Jun 01, 2023 am 08:55 AM
Introduction to Jasypt Jasypt is a java library that allows a developer to add basic encryption functionality to his/her project with minimal effort and does not require a deep understanding of how encryption works. High security for one-way and two-way encryption. , standards-based encryption technology. Encrypt passwords, text, numbers, binaries... Suitable for integration into Spring-based applications, open API, for use with any JCE provider... Add the following dependency: com.github.ulisesbocchiojasypt-spring-boot-starter2. 1.1Jasypt benefits protect our system security. Even if the code is leaked, the data source can be guaranteed.
How to use Redis to implement distributed locks in SpringBoot
Jun 03, 2023 am 08:16 AM
1. Redis implements distributed lock principle and why distributed locks are needed. Before talking about distributed locks, it is necessary to explain why distributed locks are needed. The opposite of distributed locks is stand-alone locks. When we write multi-threaded programs, we avoid data problems caused by operating a shared variable at the same time. We usually use a lock to mutually exclude the shared variables to ensure the correctness of the shared variables. Its scope of use is in the same process. If there are multiple processes that need to operate a shared resource at the same time, how can they be mutually exclusive? Today's business applications are usually microservice architecture, which also means that one application will deploy multiple processes. If multiple processes need to modify the same row of records in MySQL, in order to avoid dirty data caused by out-of-order operations, distribution needs to be introduced at this time. The style is locked. Want to achieve points
How SpringBoot customizes Redis to implement cache serialization
Jun 03, 2023 am 11:32 AM
1. Customize RedisTemplate1.1, RedisAPI default serialization mechanism. The API-based Redis cache implementation uses the RedisTemplate template for data caching operations. Here, open the RedisTemplate class and view the source code information of the class. publicclassRedisTemplateextendsRedisAccessorimplementsRedisOperations, BeanClassLoaderAware{//Declare key, Various serialization methods of value, the initial value is empty @NullableprivateRedisSe
How to solve the problem that springboot cannot access the file after reading it into a jar package
Jun 03, 2023 pm 04:38 PM
Springboot reads the file, but cannot access the latest development after packaging it into a jar package. There is a situation where springboot cannot read the file after packaging it into a jar package. The reason is that after packaging, the virtual path of the file is invalid and can only be accessed through the stream. Read. The file is under resources publicvoidtest(){Listnames=newArrayList();InputStreamReaderread=null;try{ClassPathResourceresource=newClassPathResource("name.txt");Input
How SpringBoot integrates Redisson to implement delay queue
May 30, 2023 pm 02:40 PM
Usage scenario 1. The order was placed successfully but the payment was not made within 30 minutes. The payment timed out and the order was automatically canceled. 2. The order was signed and no evaluation was conducted for 7 days after signing. If the order times out and is not evaluated, the system defaults to a positive rating. 3. The order is placed successfully. If the merchant does not receive the order for 5 minutes, the order is cancelled. 4. The delivery times out, and push SMS reminder... For scenarios with long delays and low real-time performance, we can Use task scheduling to perform regular polling processing. For example: xxl-job Today we will pick
How to implement Springboot+Mybatis-plus without using SQL statements to add multiple tables
Jun 02, 2023 am 11:07 AM
When Springboot+Mybatis-plus does not use SQL statements to perform multi-table adding operations, the problems I encountered are decomposed by simulating thinking in the test environment: Create a BrandDTO object with parameters to simulate passing parameters to the background. We all know that it is extremely difficult to perform multi-table operations in Mybatis-plus. If you do not use tools such as Mybatis-plus-join, you can only configure the corresponding Mapper.xml file and configure The smelly and long ResultMap, and then write the corresponding sql statement. Although this method seems cumbersome, it is highly flexible and allows us to
Comparison and difference analysis between SpringBoot and SpringMVC
Dec 29, 2023 am 11:02 AM
SpringBoot and SpringMVC are both commonly used frameworks in Java development, but there are some obvious differences between them. This article will explore the features and uses of these two frameworks and compare their differences. First, let's learn about SpringBoot. SpringBoot was developed by the Pivotal team to simplify the creation and deployment of applications based on the Spring framework. It provides a fast, lightweight way to build stand-alone, executable
How to use the @Import annotation in SpringBoot
May 31, 2023 pm 06:25 PM
1. @Import introduces ordinary classes @Import introduces ordinary classes can help us define ordinary classes as Beans. @Import can be added to the classes corresponding to @SpringBootApplication (startup class), @Configuration (configuration class), and @Component (component class). Note: @RestController, @Service, and @Repository all belong to @Component@SpringBootApplication@Import(ImportBean.class)//ImportBean through the @Import annotation
