devbox
小蓝xlanll
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

springboot2+redis集群 redis密码加解密_springboot2.4+redis6配置用户密码

作者：小蓝xlanll | 2024-02-27 10:44:32

赞

踩

springboot2.4+redis6配置用户密码

创作背景

springboot2 集成redis集群网上的例子已经很多了，但涉及到密码几乎都是明文，这在实际生产环境中，是不允许的，特写此文章。

源码片段

第一步：pom.xml

  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <project xmlns="http://maven.apache.org/POM/4.0.0"
  3.          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
  4.          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
  5.  
  6.     <modelVersion>4.0.0</modelVersion>
  7.     <parent>
  8.         <groupId>org.springframework.boot</groupId>
  9.         <artifactId>spring-boot-starter-parent</artifactId>
  10.         <version>2.3.3.RELEASE</version>
  11.     </parent>
  12.  
  13.     <groupId>com.wu</groupId>
  14.     <artifactId>springbootKafka</artifactId>
  15.     <version>0.0.1</version>
  16.     <name>springbootKafka</name>
  17.  
  18.     <properties>
  19.         <java.version>1.8</java.version>
  20.     </properties>
  21.     <dependencies>
  22.  
  23.         <dependency>
  24.             <groupId>org.springframework.boot</groupId>
  25.             <artifactId>spring-boot-starter</artifactId>
  26.         </dependency>
  27.  
  28.         <dependency>
  29.             <groupId>org.springframework.boot</groupId>
  30.             <artifactId>spring-boot-starter-aop</artifactId>
  31.         </dependency>
  32.        
  33.         <dependency>
  34.             <groupId>org.springframework.boot</groupId>
  35.             <artifactId>spring-boot-starter-data-redis</artifactId>
  36.         </dependency>
  37.  
  38.         <dependency>
  39.             <groupId>redis.clients</groupId>
  40.             <artifactId>jedis</artifactId>
  41.         </dependency>
  42.  
  43.         <dependency>
  44.             <groupId>org.projectlombok</groupId>
  45.             <artifactId>lombok</artifactId>
  46.         </dependency>
  47.        
  48.         <dependency>
  49.             <groupId>org.springframework.boot</groupId>
  50.             <artifactId>spring-boot-starter-test</artifactId>
  51.             <scope>test</scope>
  52.         </dependency>
  53.  
  54.         <dependency>
  55.             <groupId>cn.hutool</groupId>
  56.             <artifactId>hutool-all</artifactId>
  57.             <version>5.6.7</version>
  58.         </dependency>
  59.  
  60.         <dependency>
  61.             <groupId>org.springframework.kafka</groupId>
  62.             <artifactId>spring-kafka-test</artifactId>
  63.             <scope>test</scope>
  64.         </dependency>
  65.        
  66.     </dependencies>
  67.  
  68.     <build>
  69.         <plugins>
  70.             <plugin>
  71.                 <groupId>org.springframework.boot</groupId>
  72.                 <artifactId>spring-boot-maven-plugin</artifactId>
  73.                 <version>2.3.3.RELEASE</version>
  74.             </plugin>
  75.         </plugins>
  76.     </build>
  77. </project>

第二步：配置 application.yml

  1. spring:
  2.   main:
  3.     web-application-type: none #去除web，以纯java的模式启动springboot
  4.   redis:
  5.     cluster:
  6.       nodes: 192.168.1.101:8001,192.168.1.101:8002,192.168.1.102:8001,192.168.1.102:8002,192.168.1.103:8001,192.168.1.103:8002
  7.       max-redirects: 3  # 获取失败 最大重定向次数
  8.     pool:
  9.       max-active: 1000  # 连接池最大连接数（使用负值表示没有限制）
  10.       max-idle: 10    # 连接池中的最大空闲连接
  11.       max-wait: -1   # 连接池最大阻塞等待时间（使用负值表示没有限制）
  12.       min-idle: 5     # 连接池中的最小空闲连接
  13.     timeout: 6000  # 连接超时时长（毫秒）
  14.     password: FC7EF9622A3D2B62 #redis加密密码
  15. logging:
  16.   level:
  17.     root: info

以上重点是这一句：

password: FC7EF9622A3D2B62

redis密码不是明文的，而是通过des加密过的。

DesUtils.java
  1. package com.wu.kafka.util;
  2.  
  3. import javax.crypto.Cipher;
  4. import javax.crypto.SecretKey;
  5. import javax.crypto.SecretKeyFactory;
  6. import javax.crypto.spec.DESKeySpec;
  7. import java.security.SecureRandom;
  8.  
  9. public final class DesUtils {
  10.     private static final String DES = "DES";
  11.     private static final String KEY = "comwukafka"; //默认密钥
  12.  
  13.     private DesUtils() {}
  14.  
  15.     private static byte[] encrypt(byte[] src, byte[] key) throws Exception {
  16.         SecureRandom sr = new SecureRandom();
  17.         DESKeySpec dks = new DESKeySpec(key);
  18.         SecretKeyFactory keyFactory = SecretKeyFactory.getInstance(DES);
  19.         SecretKey secretKey = keyFactory.generateSecret(dks);
  20.         Cipher cipher = Cipher.getInstance(DES);
  21.         cipher.init(Cipher.ENCRYPT_MODE, secretKey, sr);
  22.         return cipher.doFinal(src);
  23.     }
  24.  
  25.     private static byte[] decrypt(byte[] src, byte[] key) throws Exception {
  26.         SecureRandom sr = new SecureRandom();
  27.         DESKeySpec dks = new DESKeySpec(key);
  28.         SecretKeyFactory keyFactory = SecretKeyFactory.getInstance(DES);
  29.         SecretKey secretKey = keyFactory.generateSecret(dks);
  30.         Cipher cipher = Cipher.getInstance(DES);
  31.         cipher.init(Cipher.DECRYPT_MODE, secretKey, sr);
  32.         return cipher.doFinal(src);
  33.     }
  34.  
  35.     private static String byte2hex(byte[] b) {
  36.         String hs = "";
  37.         String temp = "";
  38.         for (int n = 0; n < b.length; n++) {
  39.             temp = (java.lang.Integer.toHexString(b[n] & 0XFF));
  40.             if (temp.length() == 1)
  41.                 hs = hs + "0" + temp;
  42.             else
  43.                 hs = hs + temp;
  44.         }
  45.         return hs.toUpperCase();
  46.  
  47.     }
  48.  
  49.     private static byte[] hex2byte(byte[] b) {
  50.         if ((b.length % 2) != 0)
  51.             throw new IllegalArgumentException("length not even");
  52.         byte[] b2 = new byte[b.length / 2];
  53.         for (int n = 0; n < b.length; n += 2) {
  54.             String item = new String(b, n, 2);
  55.             b2[n / 2] = (byte) Integer.parseInt(item, 16);
  56.         }
  57.         return b2;
  58.     }
  59.  
  60.     public static String decode(String src, String key) {
  61.         String decryptStr = "";
  62.         try {
  63.             byte[] decrypt = decrypt(hex2byte(src.getBytes()), key.getBytes());
  64.             decryptStr = new String(decrypt);
  65.         } catch (Exception e) {
  66.             e.printStackTrace();
  67.         }
  68.         return decryptStr;
  69.     }
  70.  
  71.     public static String encode(String src, String key){
  72.         byte[] bytes = null;
  73.         String encryptStr = "";
  74.         try {
  75.             bytes = encrypt(src.getBytes(), key.getBytes());
  76.         } catch (Exception ex) {
  77.             ex.printStackTrace();
  78.         }
  79.         if (bytes != null)
  80.             encryptStr = byte2hex(bytes);
  81.         return encryptStr;
  82.     }
  83.  
  84.     /**
  85.      * 解密
  86.      */
  87.     public static String decode(String src) {
  88.         return decode(src, KEY);
  89.     }
  90.  
  91.     /**
  92.      * 加密
  93.      */
  94.     public static String encode(String src) {
  95.         return encode(src, KEY);
  96.     }
  97. }

第三步：自定义 RedisConnectionFactory，不采用默认逻辑

  1. package com.wu.kafka.config;
  2.  
  3. import com.wu.kafka.util.DesUtils;
  4. import org.springframework.beans.factory.annotation.Autowired;
  5. import org.springframework.beans.factory.annotation.Qualifier;
  6. import org.springframework.context.annotation.Bean;
  7. import org.springframework.context.annotation.Configuration;
  8. import org.springframework.core.env.Environment;
  9. import org.springframework.core.env.MapPropertySource;
  10. import org.springframework.data.redis.connection.RedisClusterConfiguration;
  11. import org.springframework.data.redis.connection.RedisConnectionFactory;
  12. import org.springframework.data.redis.connection.lettuce.LettuceConnectionFactory;
  13. import org.springframework.data.redis.core.RedisTemplate;
  14. import org.springframework.data.redis.core.StringRedisTemplate;
  15. import org.springframework.data.redis.serializer.GenericJackson2JsonRedisSerializer;
  16. import org.springframework.data.redis.serializer.StringRedisSerializer;
  17.  
  18. import javax.annotation.Resource;
  19. import java.io.Serializable;
  20. import java.util.HashMap;
  21. import java.util.Map;
  22.  
  23. @Configuration
  24. public class RedisConfig {
  25.  
  26.     private final Environment environment;
  27.     public RedisConfig(Environment environment) {
  28.         this.environment = environment;
  29.     }
  30.  
  31.     @Bean(name = "myredisConnectionFactory")
  32.     public RedisConnectionFactory myLettuceConnectionFactory() {
  33.         Map<String, Object> source = new HashMap<String, Object>();
  34.         source.put("spring.redis.cluster.nodes", environment.getProperty("spring.redis.cluster.nodes"));
  35.         source.put("spring.redis.cluster.timeout", environment.getProperty("spring.redis.cluster.timeout"));
  36.         source.put("spring.redis.cluster.max-redirects", environment.getProperty("spring.redis.cluster.max-redirects"));
  37.         MapPropertySource mapPropertySource = new MapPropertySource("RedisClusterConfiguration", source);
  38.         RedisClusterConfiguration  redisClusterConfiguration = new RedisClusterConfiguration(mapPropertySource);
  39.  
  40.         //获取application.yml 中的密码（密文）
  41.         String password = environment.getProperty("spring.redis.password");
  42.         //解密密码并停驾到配置中
  43.         redisClusterConfiguration.setPassword(DesUtils.decode(password));
  44.  
  45.         return new LettuceConnectionFactory(redisClusterConfiguration);
  46.     }
  47.  
  48.     @Bean
  49.     public RedisTemplate<String, Serializable> redisTemplate(@Qualifier("myredisConnectionFactory") RedisConnectionFactory factory) {
  50.         RedisTemplate<String, Serializable> template = new RedisTemplate<>();
  51.         template.setKeySerializer(new StringRedisSerializer());
  52.         template.setValueSerializer(new GenericJackson2JsonRedisSerializer());
  53.         template.setConnectionFactory(factory);
  54.         return template;
  55.     }
  56.  
  57.     @Bean
  58.     public StringRedisTemplate createStringRedisTemplate(@Qualifier("myredisConnectionFactory") RedisConnectionFactory factory){
  59.         StringRedisTemplate stringRedisTemplate = new StringRedisTemplate(factory);
  60.         stringRedisTemplate.setKeySerializer(new StringRedisSerializer());
  61.         stringRedisTemplate.setValueSerializer(new GenericJackson2JsonRedisSerializer());
  62.         return stringRedisTemplate;
  63.     }
  64.  
  65. }

第四步 使用

  1.     @Autowired
  2.     private RedisTemplate redisTemplate;
  3.  
  4.     @Autowired
  5.     private StringRedisTemplate stringRedisTemplate;
  6.  
  7.     public void test(){
  8.         stringRedisTemplate.boundValueOps("name").set("wuchao", 500, TimeUnit.SECONDS);
  9.         String name = stringRedisTemplate.boundValueOps("name").get();
  10.         System.out.println(name);
  11.     }
声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/小蓝xlanll/article/detail/152214
推荐阅读
相关标签

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。