MyBatis-Plus数据安全保护(字段脱敏)

1. 项目创建
2. POM依赖

   <dependency><!--MyBatis-Plus 企业级模块-->
       <groupId>com.baomidou</groupId>
       <artifactId>mybatis-mate-starter</artifactId>
       <version>1.2.8</version>
   </dependency>

3. YML配置

   spring:
     datasource:
       # 配置安全:https://blog.csdn.net/tongxin_tongmeng/article/details/128664932
       url: mpw:IlcV2VrLIr+z3ruf0oHP1sV3JuEvntw9QZDEYhQWDNHJ9Xkm7qZokxkEeTCPNqma
       username: mpw:aoVz0lDJNymnmrhw6LkQow==
       password: mpw:StRVtLG7vB6iKVt83du7fw==
       driver-class-name: com.mysql.cj.jdbc.Driver
   
   # Mybatis Mate 配置
   mybatis-mate:
     cert:
       # 请添加微信wx153666购买授权，不白嫖从我做起！ 测试证书会失效，请勿正式环境使用
       grant: thisIsTestLicense
       license: TtY9GC88CzSkEmUhzIyvM2MJKvsgPyxoNCExH4/GhaBwuTQ93aeLaR6/dM49wMSk+oQdmqUibCM8b5H74s1Nx+2C5V3U1gKiLtddVc8Eg8oC1F2nLxOiDKDvPpdxWFGsPW6mQE2LDr+tK8GXpFS3N8xwmYy/gHCwQ4Avqp9JqBbke7pZzL2adIlxYHmCYpfNTN+NRHIEFaGFTBlzZHDb3UfJaeqLaAtWBol0QOPEM69Kz3JSemxBHnEO1ID75bwwmkgqC7Ps4z9iYAK9GLzzaPwSiFELNCmIvwa5YSJLxP9NMQUWbVGIRqehxnVqfgx/68+yIfpByqGTMxLR33yeEQ==

4. SQL脚本

   CREATE TABLE `sentive` (
   	`id` BIGINT NOT NULL COMMENT '主键ID',
   	`chineseName` VARCHAR ( 255 ) DEFAULT NULL COMMENT 'chineseName',
   	`idCard` VARCHAR ( 255 ) DEFAULT NULL COMMENT 'idCard',
   	`phone` VARCHAR ( 255 ) DEFAULT NULL COMMENT 'phone',
   	`mobile` VARCHAR ( 255 ) DEFAULT NULL COMMENT 'mobile',
   	`address` VARCHAR ( 255 ) DEFAULT NULL COMMENT 'address',
   	`email` VARCHAR ( 255 ) DEFAULT NULL COMMENT 'email',
   	`bankCard` VARCHAR ( 255 ) DEFAULT NULL COMMENT 'bankCard',
   	`password` VARCHAR ( 255 ) DEFAULT NULL COMMENT 'password',
   	`carNumber` VARCHAR ( 255 ) DEFAULT NULL COMMENT 'carNumber',
   PRIMARY KEY ( `id` ) 
   ) ENGINE = INNODB DEFAULT CHARSET = utf8mb4 COLLATE = utf8mb4_0900_ai_ci;

5. 代码生成(MybatisX)

   @RestController
   @RequestMapping("/sensitive")
   public class SensitiveController {
   
       @Autowired
       private SensitiveService sensitiveService;
   
       @PostMapping("/create")
       public Boolean create(@RequestBody Sensitive sensitive) {
           return sensitiveService.save(sensitive);
       }
   
       @GetMapping("/get")
       public Sensitive get(@RequestBody Sensitive sensitive) {
           return sensitiveService.getById(sensitive.getId());
       }
   
       @GetMapping("/getAll")
       public List<Sensitive> getAll() {
           return sensitiveService.list();
       }
   
       @PutMapping("/update")
       public Boolean update(@RequestBody Sensitive sensitive) {
           return sensitiveService.updateById(sensitive);
       }
   
       @DeleteMapping("/delete")
       public Boolean delete(@RequestBody Sensitive sensitive) {
           return sensitiveService.removeById(sensitive);
       }
   
       @DeleteMapping("/deleteAll")
       public Boolean deleteAll() {
           return sensitiveService.remove(new QueryWrapper<>());
       }
   
   }

   
6. 脱敏策略

   @Configuration
   public class SensitiveStrategyConfig {
   
       /**
        * 注入脱敏策略
        */
       @Bean
       public ISensitiveStrategy sensitiveStrategy() {
           return new SensitiveStrategy();
       }
   
   }

7. 字段脱敏(@FieldSensitive)

   /**
    * 
    * @TableName sentive
    */
   @TableName(value ="sentive")
   @Data
   public class Sentive implements Serializable {
       /**
        * 主键ID
        */
       @TableId(value = "id")
       private Long id;
   
       /**
        * chineseName
        */
       @FieldSensitive(SensitiveType.chineseName)
       @TableField(value = "chineseName")
       private String chinesename;
   
       /**
        * idCard
        */
       @FieldSensitive(SensitiveType.idCard)
       @TableField(value = "idCard")
       private String idcard;
   
       /**
        * phone
        */
       @FieldSensitive(SensitiveType.phone)
       @TableField(value = "phone")
       private String phone;
   
       /**
        * mobile
        */
       @FieldSensitive(SensitiveType.mobile)
       @TableField(value = "mobile")
       private String mobile;
   
       /**
        * address
        */
       @FieldSensitive(SensitiveType.address)
       @TableField(value = "address")
       private String address;
   
       /**
        * email
        */
       @FieldSensitive(SensitiveType.email)
       @TableField(value = "email")
       private String email;
   
       /**
        * bankCard
        */
       @FieldSensitive(SensitiveType.bankCard)
       @TableField(value = "bankCard")
       private String bankcard;
   
       /**
        * password
        */
       @FieldSensitive(SensitiveType.password)
       @TableField(value = "password")
       private String password;
   
       /**
        * carNumber
        */
       @FieldSensitive(SensitiveType.carNumber)
       @TableField(value = "carNumber")
       private String carnumber;
   
       @TableField(exist = false)
       private static final long serialVersionUID = 1L;
   
       @Override
       public boolean equals(Object that) {
           if (this == that) {
               return true;
           }
           if (that == null) {
               return false;
           }
           if (getClass() != that.getClass()) {
               return false;
           }
           Sentive other = (Sentive) that;
           return (this.getId() == null ? other.getId() == null : this.getId().equals(other.getId()))
               && (this.getChinesename() == null ? other.getChinesename() == null : this.getChinesename().equals(other.getChinesename()))
               && (this.getIdcard() == null ? other.getIdcard() == null : this.getIdcard().equals(other.getIdcard()))
               && (this.getPhone() == null ? other.getPhone() == null : this.getPhone().equals(other.getPhone()))
               && (this.getMobile() == null ? other.getMobile() == null : this.getMobile().equals(other.getMobile()))
               && (this.getAddress() == null ? other.getAddress() == null : this.getAddress().equals(other.getAddress()))
               && (this.getEmail() == null ? other.getEmail() == null : this.getEmail().equals(other.getEmail()))
               && (this.getBankcard() == null ? other.getBankcard() == null : this.getBankcard().equals(other.getBankcard()))
               && (this.getPassword() == null ? other.getPassword() == null : this.getPassword().equals(other.getPassword()))
               && (this.getCarnumber() == null ? other.getCarnumber() == null : this.getCarnumber().equals(other.getCarnumber()));
       }
   
       @Override
       public int hashCode() {
           final int prime = 31;
           int result = 1;
           result = prime * result + ((getId() == null) ? 0 : getId().hashCode());
           result = prime * result + ((getChinesename() == null) ? 0 : getChinesename().hashCode());
           result = prime * result + ((getIdcard() == null) ? 0 : getIdcard().hashCode());
           result = prime * result + ((getPhone() == null) ? 0 : getPhone().hashCode());
           result = prime * result + ((getMobile() == null) ? 0 : getMobile().hashCode());
           result = prime * result + ((getAddress() == null) ? 0 : getAddress().hashCode());
           result = prime * result + ((getEmail() == null) ? 0 : getEmail().hashCode());
           result = prime * result + ((getBankcard() == null) ? 0 : getBankcard().hashCode());
           result = prime * result + ((getPassword() == null) ? 0 : getPassword().hashCode());
           result = prime * result + ((getCarnumber() == null) ? 0 : getCarnumber().hashCode());
           return result;
       }
   
       @Override
       public String toString() {
           StringBuilder sb = new StringBuilder();
           sb.append(getClass().getSimpleName());
           sb.append(" [");
           sb.append("Hash = ").append(hashCode());
           sb.append(", id=").append(id);
           sb.append(", chinesename=").append(chinesename);
           sb.append(", idcard=").append(idcard);
           sb.append(", phone=").append(phone);
           sb.append(", mobile=").append(mobile);
           sb.append(", address=").append(address);
           sb.append(", email=").append(email);
           sb.append(", bankcard=").append(bankcard);
           sb.append(", password=").append(password);
           sb.append(", carnumber=").append(carnumber);
           sb.append(", serialVersionUID=").append(serialVersionUID);
           sb.append("]");
           return sb.toString();
       }
   }

8. 脱敏测试

   脱敏前：
   {
   	"chinesename": "童心同萌",
   	"idcard": "111111",
   	"phone": "222222",
   	"mobile": "333333",
   	"address": "444444",
   	"email": "555555@qq.com",
   	"bankcard": "666666",
   	"password": "777777",
   	"carnumber": "888888"
   }
   
   注意：调用控制器接口向数据库插入数据

   

   脱敏后：
   {
       "id": 1614933945059004418,
       "chinesename": "童***",
       "idcard": "**1111",
       "phone": "**2222",
       "mobile": "333*33",
       "address": "444444",
       "email": "555***@qq.com",
       "bankcard": "666666**6666",
       "password": "******",
       "carnumber": "88***8"
   }
   
   注意：数据库存储内容为原始数据，查询时脱敏后得到的数据不再是原始数据，实现数据保护

   

9. 自定义策略

   @Configuration
   public class SensitiveStrategyConfig {
   
       /**
        * 注入脱敏策略
        */
       @Bean
       public ISensitiveStrategy sensitiveStrategy() {
           return new SensitiveStrategy()
                   .addStrategy("strategyA", t -> t.toUpperCase().replace("A", "#"))
                   .addStrategy("strategyB", t -> t.toUpperCase().replace("B", "$"))
                   .addStrategy("strategyC", t -> t.toUpperCase().replace("C", "&"));
       }
   
   }
   
   注意：strategyA strategyB strategyC 为自定义脱敏策略，字段添加@FieldSensitive("strategyA")注解
   即可使用strategyA脱敏策略，该策略将原始数据转为大写后将所有"A"替换为"#"，strategyB strategyC同理

       /**
        * chineseName
        */
       @FieldSensitive("strategyA")
       @TableField(value = "chineseName")
       private String chinesename;
   
       /**
        * idCard
        */
       @FieldSensitive("strategyB")
       @TableField(value = "idCard")
       private String idcard;
   
       /**
        * phone
        */
       @FieldSensitive("strategyC")
       @TableField(value = "phone")
       private String phone;