使用springboot完成密码的加密解密

本文转载自查看原文 2017-11-15 09:33 23846 EDS/ mybatis/ springBoot

现今对于大多数公司来说，信息安全工作尤为重要，就像京东，阿里巴巴这样的大公司来说，信息安全是最为重要的一个话题，举个简单的例子：

就像这样的密码公开化，很容易造成一定的信息的泄露。所以今天我们要讲的就是如何来实现密码的加密和解密来提高数据的安全性。

在这首先要引入springboot融合mybatis的知识，如果有这方面不懂得同学，就要首先看一看这方面的知识：

推荐大家一个比较好的博客：程序猿DD-翟永超 http://blog.didispace.com/springbootmybatis/

为了方便大家的学习，我直接将源代码上传：

1.pom.xml

 1 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
 2   <modelVersion>4.0.0</modelVersion>
 3   <groupId>com.ninemax</groupId>
 4   <artifactId>spring-Login-test</artifactId>
 5   <version>0.0.1-SNAPSHOT</version>
 6   <packaging>war</packaging>
 7   
 8      <parent>
 9         <groupId>org.springframework.boot</groupId>
10         <artifactId>spring-boot-starter-parent</artifactId>
11         <version>1.3.2.RELEASE</version>
12         <relativePath/>
13     </parent>
14 
15     <properties>
16         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
17         <java.version>1.8</java.version>
18     </properties>
19 
20     <dependencies>
21        
22         <dependency>
23             <groupId>org.springframework.boot</groupId>
24             <artifactId>spring-boot-starter</artifactId>
25         </dependency>
26 
27         <dependency>
28             <groupId>org.springframework.boot</groupId>
29             <artifactId>spring-boot-starter-test</artifactId>
30             <scope>test</scope>
31         </dependency>
32 
33         <dependency>
34             <groupId>org.mybatis.spring.boot</groupId>
35             <artifactId>mybatis-spring-boot-starter</artifactId>
36             <version>1.1.1</version>
37         </dependency>
38 
39         <dependency>
40             <groupId>org.springframework.boot</groupId>
41             <artifactId>spring-boot-starter-web</artifactId>
42         </dependency>
43 
44         <dependency>
45             <groupId>commons-dbcp</groupId>
46             <artifactId>commons-dbcp</artifactId>
47         </dependency>
48 
49         <dependency>
50             <groupId>com.oracle</groupId>
51             <artifactId>ojdbc14</artifactId>
52             <version>10.2.0.3.0</version>
53         </dependency>
54         
55         
56          <dependency>
57             <groupId>org.springframework.boot</groupId>
58             <artifactId>spring-boot-starter-thymeleaf</artifactId>
59         </dependency>
60        
61         
62     </dependencies>
63 
64     <build>
65         <plugins>
66             <plugin>
67                 <groupId>org.springframework.boot</groupId>
68                 <artifactId>spring-boot-maven-plugin</artifactId>
69             </plugin>
70             <plugin>
71                 <groupId>org.apache.maven.plugins</groupId>
72                 <artifactId>maven-surefire-plugin</artifactId>
73                 <configuration>
74                     <skip>true</skip>
75                 </configuration>
76             </plugin>
77         </plugins>
78     </build>
79     
80   
81 </project>

View Code

2. AppTest.java

package com;

import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.SpringBootApplication;

@SpringBootApplication
public class AppTest {
     public static void main(String[] args) {
         SpringApplication.run(AppTest.class, args);
     }
     
}

View Code

3.User.java

package com.entity;

public class User {

    private String username;
    private String password;
    
    public String getUsername() {
        return username;
    }
    public void setUsername(String username) {
        this.username = username;
    }
    public String getPassword() {
        return password;
    }
    public void setPassword(String password) {
        this.password = password;
    }
    @Override
    public String toString() {
        return "User [username=" + username + ", password=" + password + "]";
    }

}

View Code

4.UserController.java

package com.controller;

import java.security.SecureRandom;

import javax.crypto.Cipher;
import javax.crypto.SecretKey;
import javax.crypto.SecretKeyFactory;
import javax.crypto.spec.DESKeySpec;
import javax.servlet.http.HttpServletRequest;

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;

import com.dao.UserDao;
import com.entity.User;

@Controller
public class UserController {

      @Autowired
      private UserDao userDao;
      
      @RequestMapping("/regist")
      public String regist() {
          return "regist";
      }
      
      @RequestMapping("/login")
      public String login() {
          return "login";
      }
        
      @RequestMapping("/success")
      public String success(HttpServletRequest request) {
          String username = request.getParameter("username");
          String password = request.getParameter("password");
         
          userDao.save(username, password);
          return "success";
      }
      
      @RequestMapping("/Loginsuccess")
      public String successLogin(HttpServletRequest request) {
          String username = request.getParameter("username");
          String password = request.getParameter("password");  ///123456
          User user = userDao.findByUname(username);
              if(user.getPassword().equals(password)) {
                  return "successLogin";
              }
              return "failure";
      }
}

View Code

5.UserDao.java

package com.dao;

import org.apache.ibatis.annotations.Insert;
import org.apache.ibatis.annotations.Mapper;
import org.apache.ibatis.annotations.Param;
import org.apache.ibatis.annotations.Select;

import com.entity.User;

@Mapper
public interface UserDao {
      @Insert("INSERT INTO LOGIN_NINE VALUES(#{username}, #{password})")
      void save(@Param("username")String username,@Param("password")String password);
      
      @Select("SELECT * FROM LOGIN_NINE WHERE username= #{username}")
      User findByUname(@Param("username")String username);
}

View Code

6.application.properties

spring.datasource.url=jdbc:oracle:thin:@10.236.4.251:1521:orcl
spring.datasource.username=hello
spring.datasource.password=lisa
spring.datasource.driver-class-name=oracle.jdbc.driver.OracleDriver

application.properties

7.还有一些静态HTML

(1.)regist.html

<!DOCTYPE html>
<html xmlns:th="http://www.thymeleaf.org">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>注册</title>

<style type="text/css">
    h1 {
      text-align:center;
      font-size:35px;
      color:red;
    }
    div {
      text-align:center;
    }
    div input {
      margin:10px;
    }
</style>
</head>
<body>
     <h1>注册账号</h1>
     <div>
     <form action="success" method="post">  
                                  用户名<input type="text" name="username"/>  <br/>
                                  密码<input type="password" name = "password"/>  <br/>
            <input type="submit" value="提交"/> &nbsp;
            <input type="reset"/>  
                            
     </form>
     </div>
</body>
</html>

View Code

(2.)login.html

<!DOCTYPE html>
<html xmlns:th="http://www.thymeleaf.org">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>登录</title>

<style type="text/css">
    h1 {
      text-align:center;
      font-size:35px;
      color:red;
    }
    div {
      text-align:center;
    }
    div input {
      margin:10px;
    }
    
</style>
</head>
<body>
     <h1>欢迎登录</h1>
     <div>
     <form action="Loginsuccess" method="post">  
                                  请输入用户名<input type="text" name="username"/>  <br/>
                                  请输入密码<input type="password" name = "password"/>  <br/>
            <input type="submit" value="提交"/> &nbsp;
            <input type="reset"/>     <br/>
            <a href="/regist">注册账号</a>                 
     </form>
     </div>
</body>
</html>

View Code

(3.)success.html

<!DOCTYPE html>
<html xmlns:th="http://www.thymeleaf.org">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>注册成功</title>
<style type="text/css">
   h1 {
     text-align:center;
     font-size:60px;
     color:green;
   }
   span {
     font-size:30px;
     color:green;
   }
</style>
</head>
<body>
<h1>注册成功</h1>
<a href="/login">返回登录</a>
</body>
</html>

View Code

(4.)failure.html

<!DOCTYPE html>
<html xmlns:th="http://www.thymeleaf.org">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>登录失败</title>

</head>
<body>
         登录失败
</body>
</html>

View Code

(5.)successLogin.html

<!DOCTYPE html>
<html xmlns:th="http://www.thymeleaf.org">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>成功</title>
</head>
<body>
      success
</body>
</html>

View Code

代码的格式如下：

完成了这一步的话首先运行一下AppTest看是否出错，如果有错，自己找原因，这里就不和大家讨论了，写了这么多，才要要进入正题了

本文采取的是EDS的加密解密方法，方法也很简单，不用添加额外的jar包，只需要在UserController上做出简单的修改就可以了：

*****UserController.java

package com.controller;

import java.security.SecureRandom;

import javax.crypto.Cipher;
import javax.crypto.SecretKey;
import javax.crypto.SecretKeyFactory;
import javax.crypto.spec.DESKeySpec;
import javax.servlet.http.HttpServletRequest;

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;

import com.dao.UserDao;
import com.entity.User;

@Controller
public class UserController {

      @Autowired
      private UserDao userDao;
      
      @RequestMapping("/regist")
      public String regist() {
          return "regist";
      }
      
      @RequestMapping("/login")
      public String login() {
          return "login";
      }
      
      /**
       *  EDS的加密解密代码
       */
      private static final byte[] DES_KEY = { 21, 1, -110, 82, -32, -85, -128, -65 };
        @SuppressWarnings("restriction")
        public static String encryptBasedDes(String data) {
            String encryptedData = null;
            try {
                // DES算法要求有一个可信任的随机数源
                SecureRandom sr = new SecureRandom();
                DESKeySpec deskey = new DESKeySpec(DES_KEY);
                // 创建一个密匙工厂，然后用它把DESKeySpec转换成一个SecretKey对象
                SecretKeyFactory keyFactory = SecretKeyFactory.getInstance("DES");
                SecretKey key = keyFactory.generateSecret(deskey);
                // 加密对象
                Cipher cipher = Cipher.getInstance("DES");
                cipher.init(Cipher.ENCRYPT_MODE, key, sr);
                // 加密，并把字节数组编码成字符串
                encryptedData = new sun.misc.BASE64Encoder().encode(cipher.doFinal(data.getBytes()));
            } catch (Exception e) {
                // log.error("加密错误，错误信息：", e);
                throw new RuntimeException("加密错误，错误信息：", e);
            }
            return encryptedData;
        }
        @SuppressWarnings("restriction")
        public static String decryptBasedDes(String cryptData) {
            String decryptedData = null;
            try {
                // DES算法要求有一个可信任的随机数源
                SecureRandom sr = new SecureRandom();
                DESKeySpec deskey = new DESKeySpec(DES_KEY);
                // 创建一个密匙工厂，然后用它把DESKeySpec转换成一个SecretKey对象
                SecretKeyFactory keyFactory = SecretKeyFactory.getInstance("DES");
                SecretKey key = keyFactory.generateSecret(deskey);
                // 解密对象
                Cipher cipher = Cipher.getInstance("DES");
                cipher.init(Cipher.DECRYPT_MODE, key, sr);
                // 把字符串进行解码，解码为为字节数组，并解密
                decryptedData = new String(cipher.doFinal(new sun.misc.BASE64Decoder().decodeBuffer(cryptData)));
            } catch (Exception e) {
                throw new RuntimeException("解密错误，错误信息：", e);
            }
            return decryptedData;
        }
        
      @RequestMapping("/success")
      public String success(HttpServletRequest request) {
          String username = request.getParameter("username");
          String password = request.getParameter("password");
          String s1 = encryptBasedDes(password);
          userDao.save(username, s1);
          return "success";
      }
      
      @RequestMapping("/Loginsuccess")
      public String successLogin(HttpServletRequest request) {
          String username = request.getParameter("username");
          String password = request.getParameter("password");  ///123456
          User user = userDao.findByUname(username);
              if(decryptBasedDes(user.getPassword()).equals(password)) {
                  return "successLogin";
              }
              return "failure";
      }
}

View Code

此时，直接运行Apptest.java,然后在浏览器输入地址：localhost:8080/regist 注册新的账号(我输入的是用户名：小明密码：123456)，如图

此时查看数据库信息

你就会发现密码实现了加密

当然，下次登陆的时候直接输入相应的账号和密码即可完成登录，实现了解码的过程

不知道大家完成的怎么样了，如果出现问题，可以在下面进行留言，我会为大家进行解答.

免责声明！

本站转载的文章为个人学习借鉴使用，本站对版权不负任何法律责任。如果侵犯了您的隐私权益，请联系本站邮箱yoyou2525@163.com删除。

猜您在找 vue前端密码加密+ springboot后端密码解密 vue3前端密码加密+springboot后端密码解密使用Bcrypt对密码进行加密与解密验证 MySQL密码加密与解密 java关于密码的加密解密 MySQL密码加密与解密凯撒密码的加密解密 SpringBoot使用jasypt加解密密码 C#：使用MD5对用户密码加密与解密使用kettle转换中的JavaScript对密码进行加密和解密