概述
- 使用對(duì)稱加密的方式實(shí)現(xiàn)。
- 前端基于crypto-js。
- uni-app框架中是在uni.request的基礎(chǔ)上，在攔截器中處理的。
- springboot在Filter中完成解密工作。
uni-app
- 項(xiàng)目中引入crypto-js。
npm install crypto-js
- 加密方法
const SECRET_KEY = CryptoJS.enc.Utf8.parse("1234123412341234");
function encrypt (msg) {
const dataHex = CryptoJS.enc.Utf8.parse(msg);
const encrypted = CryptoJS.AES.encrypt(dataHex, SECRET_KEY, {
mode: CryptoJS.mode.ECB,
padding: CryptoJS.pad.Pkcs7
});
return encrypted.ciphertext.toString(CryptoJS.enc.Base64);
}
- 解密方法
function decrypt(msg) {
const encryptedHexStr = CryptoJS.enc.Hex.parse(msg);
const str = CryptoJS.enc.Base64.stringify(encryptedHexStr);
const decrypt = CryptoJS.AES.decrypt(str, SECRET_KEY, {
mode: CryptoJS.mode.ECB,
padding: CryptoJS.pad.Pkcs7
});
return decrypt.toString(CryptoJS.enc.Utf8);
}
- request攔截器
uni.addInterceptor('request', {
invoke(args) {
let plaintext = JSON.stringify(args.data);
plaintext = encodeURIComponent(plaintext);
const textArray = [];
while(plaintext.length > 15) {
textArray.push(plaintext.substring(0, 16));
plaintext = plaintext.substring(16);
}
textArray.push(plaintext);
const encryptParamArray = [];
textArray.forEach(item => {
encryptParamArray.push(btoa(encrypt(item)));
})
args.data = {"encryptParams": encryptParamArray};
},
success(args) {
},
fail(err) {
},
complete(res) {
}
});
備注
- 使用encodeURIComponent方法是為了處理 字符“+”，這個(gè)對(duì)應(yīng)java解密的時(shí)候存在問題。
- 該模式默認(rèn)解密長度出限制在16個(gè)字符中，所以需要將待加密的信息分解成單個(gè)字符長度小于16的字符組成數(shù)組。
Springboot
- DecryptFilter，解密攔截器
import cn.hutool.json.JSONUtil;
import org.apache.commons.codec.binary.Base64;
import org.springframework.http.HttpMethod;
import javax.crypto.Cipher;
import javax.crypto.spec.SecretKeySpec;
import javax.servlet.*;
import javax.servlet.annotation.WebFilter;
import javax.servlet.http.HttpServletRequest;
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.net.URLDecoder;
import java.nio.charset.StandardCharsets;
@WebFilter(urlPatterns = "/*") // 過濾所有請(qǐng)求
public class DecryptFilter implements Filter {
private String word;
public DecryptFilter(String word) {
this.word = word;
}
@Override
public void init(FilterConfig filterConfig) throws ServletException {
}
@Override
public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {
HttpServletRequest httpRequest = (HttpServletRequest) servletRequest;
if (HttpMethod.OPTIONS.matches(httpRequest.getMethod())) {
filterChain.doFilter(httpRequest, servletResponse);
return;
}
String encryptedData = "";
if (httpRequest.getHeader("Content-Type").contains("x-www-form-urlencoded")) {
// 獲取請(qǐng)求參數(shù)或請(qǐng)求體中的加密數(shù)據(jù)
encryptedData = httpRequest.getParameter("encryptParams");
} else if (httpRequest.getHeader("Content-Type").contains("json")) {
StringBuilder stringBuilder = new StringBuilder();
try (InputStream inputStream = httpRequest.getInputStream();
BufferedReader bufferedReader = new BufferedReader(new InputStreamReader(inputStream, StandardCharsets.UTF_8))) {
String line;
while ((line = bufferedReader.readLine()) != null) {
stringBuilder.append(line);
}
}
encryptedData = JSONUtil.parseObj(stringBuilder.toString()).get("encryptParams").toString();
encryptedData = encryptedData.replaceAll("[\\[\\]\"]", "");
}
String[] ciphertextArray = encryptedData.split(",");
// 解密操作，例如使用AES解密
String decryptedData = "";
try {
decryptedData = decrypt(ciphertextArray);
} catch (Exception e) {
throw new RuntimeException("解密失??！", e);
}
// 重構(gòu)ServletRequest，將解密后的數(shù)據(jù)設(shè)置到新的ServletRequest中
ServletRequest modifiedRequest = new BodyRewritingRequestWrapper(httpRequest, decryptedData);
// 繼續(xù)執(zhí)行過濾器鏈
filterChain.doFilter(modifiedRequest, servletResponse);
}
@Override
public void destroy() {
}
private String decrypt(String[] encryptedTextArray) throws Exception {
StringBuilder paramsJson = new StringBuilder("");
// 創(chuàng)建解密器
Cipher cipher = Cipher.getInstance("AES/ECB/PKCS5Padding");
byte[] keyBytes = word.getBytes(StandardCharsets.UTF_8);
SecretKeySpec keySpec = new SecretKeySpec(keyBytes, "AES");
cipher.init(Cipher.DECRYPT_MODE, keySpec);
for (String ciphertext : encryptedTextArray) {
byte[] decode = java.util.Base64.getDecoder().decode(ciphertext);
byte[] encryptedBytes = Base64.decodeBase64(decode);
byte[] decryptedBytes = cipher.doFinal(encryptedBytes);
paramsJson.append(new String(decryptedBytes, StandardCharsets.UTF_8));
}
return URLDecoder.decode(paramsJson.toString(), "UTF-8");
}
}
- BodyRewritingRequestWrapper，重寫的ServletRequest對(duì)相關(guān)
import cn.hutool.json.JSONObject;
import cn.hutool.json.JSONUtil;
import javax.servlet.ReadListener;
import javax.servlet.ServletInputStream;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletRequestWrapper;
import java.io.BufferedReader;
import java.io.ByteArrayInputStream;
import java.io.IOException;
import java.io.InputStreamReader;
import java.util.HashMap;
import java.util.Map;
public class BodyRewritingRequestWrapper extends HttpServletRequestWrapper {
private String body;
private JSONObject map;
public BodyRewritingRequestWrapper(HttpServletRequest request, String body) {
super(request);
this.body = body;
this.map = JSONUtil.parseObj(body);
}
@Override
public String getParameter(String name) {
if (map.containsKey(name)) {
return map.get(name).toString();
}
return super.getParameter(name);
}
@Override
public Map<String, String[]> getParameterMap() {
Map<String, String[]> originalParameters = super.getParameterMap();
Map<String, String[]> rewriteMap = new HashMap<>(originalParameters);
map.forEach((key, value) -> rewriteMap.put(key, new String[]{value.toString()}));
return rewriteMap;
}
@Override
public ServletInputStream getInputStream() throws IOException {
final ByteArrayInputStream byteArrayInputStream = new ByteArrayInputStream(body.getBytes());
return new ServletInputStream() {
public int read() throws IOException {
return byteArrayInputStream.read();
}
@Override
public boolean isFinished() {
return false;
}
@Override
public boolean isReady() {
return true;
}
@Override
public void setReadListener(ReadListener readListener) {
}
};
}
@Override
public BufferedReader getReader() throws IOException {
return new BufferedReader(new InputStreamReader(this.getInputStream()));
}
}
- 注冊(cè)攔截器
import org.springframework.beans.factory.annotation.Value;
import org.springframework.boot.web.servlet.FilterRegistrationBean;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.http.HttpMethod;
import org.springframework.web.cors.CorsConfiguration;
import org.springframework.web.cors.UrlBasedCorsConfigurationSource;
import org.springframework.web.filter.CorsFilter;
@Configuration
public class WebConfig {
@Value("${decrypt.word}")
private String word;
@Bean
public FilterRegistrationBean<DecryptFilter> myFilterRegistration() {
FilterRegistrationBean<DecryptFilter> registration = new FilterRegistrationBean<>();
registration.setFilter(new DecryptFilter(word));
registration.addUrlPatterns("/*");
registration.setName("decryptFilter");
registration.setOrder(1); // 設(shè)置過濾器的順序，根據(jù)實(shí)際需求設(shè)置
return registration;
}
}
文章來源地址http://www.zghlxwxcb.cn/news/detail-637083.html
文章來源：http://www.zghlxwxcb.cn/news/detail-637083.html
到了這里，關(guān)于uni-app和springboot完成前端后端對(duì)稱加密解密流程的文章就介紹完了。如果您還想了解更多內(nèi)容，請(qǐng)?jiān)谟疑辖撬阉鱐OY模板網(wǎng)以前的文章或繼續(xù)瀏覽下面的相關(guān)文章，希望大家以后多多支持TOY模板網(wǎng)！
