Java TextEncryptor类代码示例

import org.springframework.security.crypto.encrypt.TextEncryptor; //导入依赖的package包/类
@Autowired
@SuppressWarnings("unchecked")
public KvMapperFactory(ObjectMapper objectMapper, KeyValueStorage storage, TextEncryptor encryptor, Validator validator) {
    this.objectMapper = objectMapper;
    this.storage = storage;
    this.validator = validator;

    ImmutableMap.Builder<Class<?>, FieldSetter> builder = ImmutableMap.builder();
    builder.put(Map.class, (field, value) -> {
        Map fieldMap = (Map) field;
        fieldMap.clear();
        if (value != null) {
            fieldMap.putAll((Map)value);
        }
    });
    builder.put(Collection.class, (field, value) -> {
        Collection fieldColl = (Collection) field;
        fieldColl.clear();
        fieldColl.addAll((Collection)value);
    });
    setters = builder.build();
    interceptors = ImmutableMap.<Class<?>, PropertyInterceptor>builder()
      .put(PropertyCipher.class, new PropertyCipher(encryptor))
      .build();
}
 

import org.springframework.security.crypto.encrypt.TextEncryptor; //导入依赖的package包/类
@Bean
@ConditionalOnMissingBean(TextEncryptor.class)
public TextEncryptor textEncryptor() {
	KeyStore keyStore = this.key.getKeyStore();
	if (keyStore.getLocation() != null) {
		if (keyStore.getLocation().exists()) {
			return new RsaSecretEncryptor(
					new KeyStoreKeyFactory(keyStore.getLocation(),
							keyStore.getPassword().toCharArray()).getKeyPair(
									keyStore.getAlias(),
									keyStore.getSecret().toCharArray()),
					this.key.getRsa().getAlgorithm(), this.key.getRsa().getSalt(),
					this.key.getRsa().isStrong());
		}

		throw new IllegalStateException("Invalid keystore location");
	}

	return new EncryptorFactory().create(this.key.getKey());
}
 

import org.springframework.security.crypto.encrypt.TextEncryptor; //导入依赖的package包/类
@RequestMapping(value = "/decrypt/{name}/{profiles}", method = RequestMethod.POST)
public String decrypt(@PathVariable String name, @PathVariable String profiles,
		@RequestBody String data, @RequestHeader("Content-Type") MediaType type) {
	checkEncryptorInstalled(name, profiles);
	try {
		String input = stripFormData(this.helper.stripPrefix(data), type, true);
		Map<String, String> encryptorKeys = this.helper.getEncryptorKeys(name,
				profiles, data);
		TextEncryptor encryptor = this.encryptor.locate(encryptorKeys);
		String decrypted = encryptor.decrypt(input);
		logger.info("Decrypted cipher data");
		return decrypted;
	}
	catch (IllegalArgumentException|IllegalStateException e) {
		logger.error("Cannot decrypt key:" + name + ", value:" + data, e);
		throw new InvalidCipherException();
	}
}
 

import org.springframework.security.crypto.encrypt.TextEncryptor; //导入依赖的package包/类
@Test
public void addEnvironment() {
	TextEncryptorLocator locator = new TextEncryptorLocator() {

		private RsaSecretEncryptor encryptor = new RsaSecretEncryptor();

		@Override
		public TextEncryptor locate(Map<String, String> keys) {
			return this.encryptor;
		}
	};
	this.controller = new EncryptionController(locator);
	// Add space to input
	String cipher = this.controller.encrypt("app", "default", "foo bar",
			MediaType.TEXT_PLAIN);
	assertFalse("Wrong cipher: " + cipher, cipher.contains("{name:app}"));
	String decrypt = this.controller.decrypt("app", "default", cipher,
			MediaType.TEXT_PLAIN);
	assertEquals("Wrong decrypted plaintext: " + decrypt, "foo bar", decrypt);
}
 

import org.springframework.security.crypto.encrypt.TextEncryptor; //导入依赖的package包/类
public RedisConnectionRepository(final ConnectionFactoryLocator connectionFactoryLocator, final TextEncryptor textEncryptor, final SocialRedisConnectionRepository socialRedisConnectionRepository, final String userId) {
    Assert.notNull(socialRedisConnectionRepository, "socialRedisConnectionRepository is required");
    Assert.notNull(userId, "userId is required");

    this.userId = userId;
    this.socialRedisConnectionRepository = socialRedisConnectionRepository;
    this.connectionFactoryLocator = connectionFactoryLocator;
    this.textEncryptor = textEncryptor;
}
 

import org.springframework.security.crypto.encrypt.TextEncryptor; //导入依赖的package包/类
public RedisUsersConnectionRepository(ConnectionFactoryLocator connectionFactoryLocator, TextEncryptor textEncryptor, SocialRedisConnectionRepository socialRedisConnectionRepository) {
    Assert.notNull(connectionFactoryLocator);
    Assert.notNull(textEncryptor);
    Assert.notNull(socialRedisConnectionRepository);

    this.connectionFactoryLocator = connectionFactoryLocator;
    this.textEncryptor = textEncryptor;
    this.socialRedisConnectionRepository = socialRedisConnectionRepository;
}
 

import org.springframework.security.crypto.encrypt.TextEncryptor; //导入依赖的package包/类
@Bean
TextEncryptor textEncryptor(@Value("${dm.security.cipher.password}") String password,
                            @Value("${dm.security.cipher.salt}") String salt) {
    // on wrong configuration system will pass prop expressions '${prop}' as value, we need to detect this
    Assert.isTrue(StringUtils.hasText(password) && !password.startsWith("${"), "'dm.security.cipher.password' is invalid.");
    Assert.isTrue(StringUtils.hasText(salt) && !salt.startsWith("${"), "'dm.security.cipher.salt' is invalid.");
    //we use bouncycastle because standard  java does not support keys bigger 128bits
    // but spring also does not provide any way to change key size
    // see also: https://github.com/spring-projects/spring-security/issues/2917
    BytesEncryptor encryptor = new BouncyCastleAesGcmBytesEncryptor(password, salt);
    return new Base64Encryptor(encryptor);
}
 

import org.springframework.security.crypto.encrypt.TextEncryptor; //导入依赖的package包/类
/**
 * Method to encrypt fields based on {@link Encrypt} annotation.
 *
 * @param obj entity object
 */
public static void encrypt(Object obj) throws IllegalAccessException {
    CharSequence salt = getSalt(obj);

    TextEncryptor encryptor = Encryptors.text(secretKey, salt);
    for (Field field : obj.getClass().getDeclaredFields()) {
        if (field.isAnnotationPresent(Encrypt.class)) {
            field.setAccessible(true);
            field.set(obj, encryptor.encrypt((String) field.get(obj)));
            field.setAccessible(false);
        }
    }
}
 

import org.springframework.security.crypto.encrypt.TextEncryptor; //导入依赖的package包/类
/**
 * Method to decrypt fields based on {@link Encrypt} annotation.
 *
 * @param obj entity object
 */
public static void decrypt(Object obj) throws IllegalAccessException {
    CharSequence salt = getSalt(obj);

    TextEncryptor encryptor = Encryptors.text(secretKey, salt);
    for (Field field : obj.getClass().getDeclaredFields()) {
        if (field.isAnnotationPresent(Encrypt.class)) {
            field.setAccessible(true);
            field.set(obj, encryptor.decrypt((String) field.get(obj)));
            field.setAccessible(false);
        }
    }
}
 

import org.springframework.security.crypto.encrypt.TextEncryptor; //导入依赖的package包/类
@Bean
TextEncryptor textEncryptor() {
    return new TextEncryptor() {
        @Override
        public String encrypt(String text) { return text; }

        @Override
        public String decrypt(String encryptedText) { return encryptedText; }
    };
}
 

import org.springframework.security.crypto.encrypt.TextEncryptor; //导入依赖的package包/类
@Test
public void symmetric() {
	ConfigurableApplicationContext context = new SpringApplicationBuilder(
			EncryptionBootstrapConfiguration.class).web(WebApplicationType.NONE)
					.properties("encrypt.key:pie").run();
	TextEncryptor encryptor = context.getBean(TextEncryptor.class);
	assertEquals("foo", encryptor.decrypt(encryptor.encrypt("foo")));
	context.close();
}
 

import org.springframework.security.crypto.encrypt.TextEncryptor; //导入依赖的package包/类
@Test
public void rsaKeyStore() {
	ConfigurableApplicationContext context = new SpringApplicationBuilder(
			EncryptionBootstrapConfiguration.class)
					.web(WebApplicationType.NONE)
					.properties("encrypt.keyStore.location:classpath:/server.jks",
							"encrypt.keyStore.password:letmein",
							"encrypt.keyStore.alias:mytestkey",
							"encrypt.keyStore.secret:changeme")
					.run();
	TextEncryptor encryptor = context.getBean(TextEncryptor.class);
	assertEquals("foo", encryptor.decrypt(encryptor.encrypt("foo")));
	context.close();
}
 

import org.springframework.security.crypto.encrypt.TextEncryptor; //导入依赖的package包/类
@Test
public void rsaKeyStoreWithRelaxedProperties() {
	ConfigurableApplicationContext context = new SpringApplicationBuilder(
			EncryptionBootstrapConfiguration.class)
					.web(WebApplicationType.NONE)
					.properties("encrypt.key-store.location:classpath:/server.jks",
							"encrypt.key-store.password:letmein",
							"encrypt.key-store.alias:mytestkey",
							"encrypt.key-store.secret:changeme")
					.run();
	TextEncryptor encryptor = context.getBean(TextEncryptor.class);
	assertEquals("foo", encryptor.decrypt(encryptor.encrypt("foo")));
	context.close();
}
 

import org.springframework.security.crypto.encrypt.TextEncryptor; //导入依赖的package包/类
@Test
public void testWithRsaPrivateKey() throws Exception {
	String key = StreamUtils.copyToString(
			new ClassPathResource("/example-test-rsa-private-key").getInputStream(),
			Charset.forName("ASCII"));
	//RSA private key needs to be with no new lines 
	//-----BEGIN RSA PRIVATE KEY-----MIIEowI....iX8htsO-----END RSA PRIVATE KEY-----
	String keyNoNewLines = key.replaceAll("\\n", "");
	TextEncryptor encryptor = new EncryptorFactory().create(keyNoNewLines);
	String toEncrypt = "sample text to encrypt";
	String encrypted = encryptor.encrypt(toEncrypt);

	assertEquals(toEncrypt, encryptor.decrypt(encrypted));
}
 

import org.springframework.security.crypto.encrypt.TextEncryptor; //导入依赖的package包/类
/**
 * Decrypt the cipher with AES.
 *
 * @param cipher The encrypted string.
 * @param salt   The cipher specific salt.
 * @return The decrypted cipher.
 */
public static String decrypt(String cipher, String salt) {
  long start = System.nanoTime();
  TextEncryptor encryptor = Encryptors.text(PASSWORD, salt);
  String output = encryptor.decrypt(cipher); // This will break intentionally if something goes wrong (bad characters in the password?)
  long end = System.nanoTime();
  LOG.finer("Decryption took: " + timeDiff(start, end));
  return output;
}