15.1、原理步骤
- 注册:注册时,将用户密码加密放入数据库
- 登录:登录时,将用户密码采用上述相同的算法加密,之后再与数据库中的信息进行比对,若相同,则登录
15.2、实现(这里采用了SHA256算法,其他摘要算法MD5/SHA1/MAC类似)
注意:这里的程序是在我之前写的一个maven+spring+springmvc+mybatis+velocity整合的文章上进行的修改,具体的框架搭建以及数据库表结构等就不再啰嗦了,自己参考下边这篇博客:
http://www.cnblogs.com/java-zhao/p/5096811.html
这里只列出Java类。整个代码结构如下:
UserController
![](https://i-blog.csdnimg.cn/blog_migrate/961ddebeb323a10fe0623af514929fc1.gif)
1 package com.xxx.web; 2 3 import org.springframework.beans.factory.annotation.Autowired; 4 import org.springframework.stereotype.Controller; 5 import org.springframework.web.bind.annotation.RequestMapping; 6 import org.springframework.web.bind.annotation.RequestParam; 7 import org.springframework.web.bind.annotation.ResponseBody; 8 import org.springframework.web.servlet.ModelAndView; 9 10 import com.xxx.model.User; 11 import com.xxx.service.UserService; 12 13 @Controller 14 @RequestMapping("user") 15 public class UserController { 16 17 @Autowired 18 private UserService userService; 19 20 @ResponseBody 21 @RequestMapping("register") 22 public boolean register(@RequestParam("username") String username, 23 @RequestParam("password") String password){ 24 25 return userService.register(username, password); 26 } 27 28 @RequestMapping("login") 29 public ModelAndView login(@RequestParam("username") String username, 30 @RequestParam("password") String password){ 31 User user = userService.login(username, password); 32 33 ModelAndView modelAndView = new ModelAndView(); 34 if(user == null){ 35 modelAndView.addObject("message", "用户不存在或者密码错误!请重新输入"); 36 modelAndView.setViewName("error"); 37 }else{ 38 modelAndView.addObject("user", user); 39 modelAndView.setViewName("userinfo"); 40 } 41 42 return modelAndView; 43 } 44 }
UserService(这里是加解密的主战场)
![](https://i-blog.csdnimg.cn/blog_migrate/961ddebeb323a10fe0623af514929fc1.gif)
1 package com.xxx.service; 2 3 import java.io.UnsupportedEncodingException; 4 import java.security.NoSuchAlgorithmException; 5 6 import org.springframework.beans.factory.annotation.Autowired; 7 import org.springframework.stereotype.Service; 8 9 import com.util.encoder.ShaEncoder; 10 import com.xxx.dao.UserDAO; 11 import com.xxx.model.User; 12 13 @Service 14 public class UserService { 15 16 @Autowired 17 private UserDAO userDao; 18 19 public boolean register(String username, String password){ 20 User user = new User(); 21 user.setUsername(username); 22 try { 23 user.setPassword(ShaEncoder.encodeSHAHex(password));//对密码进行sha256加密 24 } catch (NoSuchAlgorithmException e) { 25 e.printStackTrace(); 26 } catch (UnsupportedEncodingException e) { 27 e.printStackTrace(); 28 } 29 return userDao.register(user); 30 } 31 32 public User login(String username, String password) { 33 User user = null; 34 try { 35 user = userDao.login(username, ShaEncoder.encodeSHAHex(password));//对密码进行sha256加密 36 } catch (NoSuchAlgorithmException e) { 37 e.printStackTrace(); 38 } catch (UnsupportedEncodingException e) { 39 e.printStackTrace(); 40 } 41 return user; 42 } 43 }
UserDAO
![](https://i-blog.csdnimg.cn/blog_migrate/961ddebeb323a10fe0623af514929fc1.gif)
1 package com.xxx.dao; 2 3 import org.springframework.beans.factory.annotation.Autowired; 4 import org.springframework.stereotype.Repository; 5 6 import com.xxx.mapper.UserMapper; 7 import com.xxx.model.User; 8 9 @Repository 10 public class UserDAO { 11 12 @Autowired 13 private UserMapper userMapper; 14 15 public boolean register(User user){ 16 return userMapper.insertUser(user)==1?true:false; 17 } 18 19 public User login(String username ,String password){ 20 return userMapper.selectByUsernameAndPwd(username, password); 21 } 22 }
UserMapper
![](https://i-blog.csdnimg.cn/blog_migrate/961ddebeb323a10fe0623af514929fc1.gif)
1 package com.xxx.mapper; 2 3 import org.apache.ibatis.annotations.Insert; 4 import org.apache.ibatis.annotations.Param; 5 import org.apache.ibatis.annotations.Result; 6 import org.apache.ibatis.annotations.Results; 7 import org.apache.ibatis.annotations.Select; 8 9 import com.xxx.model.User; 10 11 public interface UserMapper { 12 13 @Insert("INSERT INTO userinfo(username, password) VALUES(#{username},#{password})") 14 public int insertUser(User user); 15 16 @Select("SELECT * FROM userinfo WHERE username = #{username} AND password = #{password}") 17 @Results(value = { @Result(id = true, column = "id", property = "id"), 18 @Result(column = "username", property = "username"), 19 @Result(column = "password", property = "password")}) 20 public User selectByUsernameAndPwd(@Param("username")String username ,@Param("password")String password); 21 }
ShaEncoder(这里基于Commons Codec,即CC实现的Sha256工具类)
![](https://i-blog.csdnimg.cn/blog_migrate/961ddebeb323a10fe0623af514929fc1.gif)
1 package com.util.encoder; 2 3 import java.io.UnsupportedEncodingException; 4 import java.security.NoSuchAlgorithmException; 5 import org.apache.commons.codec.digest.DigestUtils; 6 7 public class ShaEncoder { 8 private static final String ENCODING = "UTF-8"; 9 10 public static String encodeSHAHex(String data) throws NoSuchAlgorithmException,UnsupportedEncodingException { 11 return new String(DigestUtils.sha256Hex(data.getBytes(ENCODING))); 12 } 13 }
代码简单易懂,自己去看逻辑,然后进行测试即可。
当然我们还可以在上述代码的基础上,为密码加一点盐(即用一个字符串与密码相连),然后对加盐后的字符串进行加密。代码如下:
![](https://i-blog.csdnimg.cn/blog_migrate/961ddebeb323a10fe0623af514929fc1.gif)
1 package com.xxx.service; 2 3 import java.io.UnsupportedEncodingException; 4 import java.security.NoSuchAlgorithmException; 5 6 import org.springframework.beans.factory.annotation.Autowired; 7 import org.springframework.stereotype.Service; 8 9 import com.util.encoder.ShaEncoder; 10 import com.xxx.dao.UserDAO; 11 import com.xxx.model.User; 12 13 @Service 14 public class UserService { 15 16 private static final String SALT = "nana";//盐 17 18 @Autowired 19 private UserDAO userDao; 20 21 public boolean register(String username, String password){ 22 User user = new User(); 23 user.setUsername(username); 24 try { 25 user.setPassword(ShaEncoder.encodeSHAHex(SALT+password));//对加盐的密码进行sha256加密 26 } catch (NoSuchAlgorithmException e) { 27 e.printStackTrace(); 28 } catch (UnsupportedEncodingException e) { 29 e.printStackTrace(); 30 } 31 return userDao.register(user); 32 } 33 34 public User login(String username, String password) { 35 User user = null; 36 try { 37 user = userDao.login(username, ShaEncoder.encodeSHAHex(SALT+password));//对加盐的密码进行sha256加密 38 } catch (NoSuchAlgorithmException e) { 39 e.printStackTrace(); 40 } catch (UnsupportedEncodingException e) { 41 e.printStackTrace(); 42 } 43 return user; 44 } 45 }