ishuibo / rsa-encrypt-body-spring-boot Goto Github PK
View Code? Open in Web Editor NEWSpring Boot 接口请求参数自动加解密
License: Apache License 2.0
Spring Boot 接口请求参数自动加解密
License: Apache License 2.0
补白异常了,,第一次用就异常了 啊啊啊
RSAUtil 类中的 MAX_DECRYPT_BLOCK 为 256 时,使用 1024 位的密钥进行分段解密会抛出 “Data must not be longer than 128 bytes“ 异常,将 MAX_DECRYPT_BLOCK 值设置为 128 时正常工作。
java.security.spec.InvalidKeySpecException: java.security.InvalidKeyException: IOException: algid parse error, not a sequence
可以将加密和解密注解整合到EnableSecurity 注解中一次配置多方使用,防止因为疏忽部分接口未进行加密
报错 privateKey is null
但是yml里面我已经写了啊
xxx类中
//加密
@Encrypt
public Rsa encrypt(){
Rsa rsa = new Rsa();
rsa.setId(1);
rsa.setTime(System.currentTimeMillis());
return rsa;
}
调用接口加密后的数据
string x = new xxx().encrypt();
这种方法行不通,还有什么好的办法吗?
EncryptResponseBodyAdvice和EncryptRequestBodyAdvice中的supports方法中,将枚举和是否加密存入类变量中是不对的,线程不安全。
springboot项目 部署tomcat 运行 ResponseBodyAdvice不执行
现在我们有一个需求,那就是前端加密,后端解密。后端返回值也加密,前端解密。
我的想法是 有两对,
A 私钥给前端用,公钥给后端用。用于前端加密,后端解密。
B 私钥给前端用,公钥给后端用,用户后端加密,前端解密。
前后端相互 都持有一个公钥和一个密钥。
请问还有比这个更好的方式吗?
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.