我们来看下例子:
@Data
public class Demo {
public String name;
private String title;
}
public class Test {
public static void main(String[] args) {
try {
Class clazz = Class.forName("com.lian.demo.Demo");
Demo demo = (Demo) clazz.newInstance();
demo.setName("name1");
demo.setTitle("title1");
Field[] fields = clazz.getDeclaredFields();
Arrays.stream(fields).forEach(field -> {
try {
System.out.println("成员变量"+field.getName()+"的值为:"+field.get(demo));
} catch (IllegalAccessException e) {
e.printStackTrace();
}
});
} catch (IllegalAccessException e) {
e.printStackTrace();
} catch (InstantiationException e) {
e.printStackTrace();
} catch (ClassNotFoundException e) {
e.printStackTrace();
}
}
}
执行结果如下:
成员变量name的值为:name1
java.lang.IllegalAccessException: Class com.lian.demo.Test can not access a member of class com.lian.demo.TestDemo with modifiers "private"
at sun.reflect.Reflection.ensureMemberAccess(Reflection.java:102)
at java.lang.reflect.AccessibleObject.slowCheckMemberAccess(AccessibleObject.java:296)
at java.lang.reflect.AccessibleObject.checkAccess(AccessibleObject.java:288)
at java.lang.reflect.Field.get(Field.java:390)
at com.lian.demo.Test.lambda$main$0(Test.java:38)
at java.util.Spliterators$ArraySpliterator.forEachRemaining(Spliterators.java:948)
at java.util.stream.ReferencePipeline$Head.forEach(ReferencePipeline.java:580)
at com.lian.demo.Test.main(Test.java:31)
说明反射机制中无法获取到private成员的值。那到底有没有办法获取到?当然是有。Java反射机制提供的setAccessible()方法可以取消Java的权限控制检查。
Arrays.stream(fields).forEach(field -> {
boolean flag = field.isAccessible();
System.out.println(field.getName() + ":" + flag);
try {
//设置该属性总是可访问
field.setAccessible(true);
System.out.println("成员变量"+field.getName()+"的值为:"+field.get(demo));
} catch (IllegalAccessException e) {
System.out.println(e.getMessage());
}
//还原可访问权限
field.setAccessible(flag);
});
这下没问题了,可以获取到了。setAccessible(true)取消了Java的权限控制检查,但不是改变方法或字段的访问权限。
而对于setAccessible()方法是否会破坏类的访问规则,产生安全隐患,我在知乎上面看到的一篇回答貌似很有道理: