Springboot 使用Springsecurity登录,重写加密方式使用加盐MD5加密

1.创建Md5加密类实现PasswordEncoder

public class Md5PasswordEncoder implements PasswordEncoder {

    private final static String[] HEX_DIGITS = {"0", "1", "2", "3", "4", "5", "6", "7", "8", "9", "a", "b", "c", "d", "e", "f"};

    private String salt;
    
	public void setSalt(String salt) {
        this.salt = salt;
    }

    private static Md5PasswordEncoder instance = new Md5PasswordEncoder();

    private Md5PasswordEncoder() {
    }
	//以单例模式构造
    public static Md5PasswordEncoder getInstance() {
        return instance;
    }


    private String mergePasswordAndSalt(CharSequence password) {
        if (password == null) {
            password = "";
        }

        if ((salt == null) || "".equals(salt)) {
            return password.toString();
        } else {
            return password + "{" + salt + "}";
        }
    }

    private String byteArrayToHexString(byte[] b) {
        StringBuilder resultSb = new StringBuilder();
        for (byte value : b) {
            resultSb.append(byteToHexString(value));
        }
        return resultSb.toString();
    }

    private String byteToHexString(byte b) {
        int n = b;
        if (n < 0) {
            n = 256 + n;
        }
        int d1 = n / 16;
        int d2 = n % 16;
        return HEX_DIGITS[d1] + HEX_DIGITS[d2];
    }

    /**
     * MD5加密
     *
     * @param rawPassword 原始密码
     * @return 加密后的md5密文
     */
    @Override
    public String encode(CharSequence rawPassword) {
        String result = null;
        try {
            String algorithm = "MD5";
            MessageDigest md = MessageDigest.getInstance(algorithm);
            result = byteArrayToHexString(md.digest(mergePasswordAndSalt(rawPassword).getBytes(StandardCharsets.UTF_8)));
        } catch (Exception ignored) {
        }
        return result;
    }

    /**
     * 密码比较
     *
     * @param rawPassword     原始密码
     * @param encodedPassword 加密后的密码
     * @return boolean
     */
    @Override
    public boolean matches(CharSequence rawPassword, String encodedPassword) {
        return encodedPassword.equals(encode(rawPassword));
    }
}

2.修改继承WebSecurityConfigurerAdapterSecurityConfig

修改PasswordEncoder的创建方式,以单例模式创建

@Bean
public PasswordEncoder passwordEncoder() {
    return Md5PasswordEncoder.getInstance();
}
@Bean
@Override
public UserDetailsService userDetailsService() {
    //获取登录用户信息
    return username -> {
        SysUser user = sysUserService.getAdminByUsername(username);
        if (user != null) {
            Md5PasswordEncoder encoder = Md5PasswordEncoder.getInstance();
            //这里将用户名作为盐值设置到 Md5PasswordEncoder 
            encoder.setSalt(user.getUserName());
            return new AdminUserDetails(user);
        }
        throw new UsernameNotFoundException("用户名或密码错误!");
    };
}
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值