API 安全机制 | 数据校验

数据校验

• 接口层面；
• 数据库层面；

数据校验 | 接口层面 | 代码

package com.lixinlei.security.api.vo;


import javax.validation.constraints.NotBlank;
import org.apache.commons.lang3.StringUtils;
import lombok.Data;

@Data
public class UserInfo {

    private Long id;

    private String name;

    @NotBlank(message = "用户名不能为空")
    private String username;

    @NotBlank(message = "密码不能为空")
    private String password;

}

数据校验 | 数据库层面 | 代码

package com.lixinlei.security.api.entity;

import javax.persistence.Column;
import javax.persistence.Entity;
import javax.persistence.GeneratedValue;
import javax.persistence.GenerationType;
import javax.persistence.Id;
import javax.validation.constraints.NotBlank;

import com.lixinlei.security.api.vo.UserInfo;
import lombok.Data;
import org.springframework.beans.BeanUtils;

@Entity
@Data
public class User {

    @Id
    @GeneratedValue(strategy = GenerationType.IDENTITY)
    private Long id;

    private String name;

    @NotBlank(message = "用户名不能为null")
    @Column(unique = true)
    private String username;

    @NotBlank
    private String password;

}