ASP.NET Core 6 WebApi 專案使用 AES 範例
呼叫 API 的 Request 與 Response 由 AES 加密(pkcs7padding + base64)
Request 解密
- 方法1 ModelBinder: 將 Request Body 解密後, Binding 至 parameter model
- 方法2 ResourceFiliter: 將 Request Body 解密後, 重新寫入 Request Body
Response 加密
- 使用 ActionFilter 將 Response 做 AES 加密
AES 加密套件為: NETCore.Encrypt (可自行替換習慣的套件)
Install-Package NETCore.Encrypt -Version 2.1.0- IAesCryptor.cs: 密碼器介面, 定義加解密方法
- AesCryptor.cs: 密碼器實作
- AesOptions.cs: 密碼器選項類別, 取得 AES KEY 與 IV
- AesModelBinder: AES 解密 ModelBinder
- AesResponseFilter: AES 加密 Filter
Program.cs
// AES Cryptor DI
builder.Services.AddScoped<IAesCryptor, AesCryptor>();
// AES Option Binding
builder.Services.Configure<AesOptions>(
builder.Configuration.GetSection(nameof(AesOptions)));appsettings.
"AesOptions": {
"Key": "7571B17C2CB2F3E0ED6F9E92277AFA2A",
"Iv": "E21E75D88C5B76C9"
}請先建立參數類別 WeatherForecastParameter.cs
public class WeatherForecastParameter
{
/// <summary>
/// 產生筆數, 預設 5 筆
/// </summary>
public int Size { get; set; } = 5;
}加入參數類別, 將
numerable.Range(1, 5)改為Enumerable.Range(1, parameter.Size)
[HttpPost]
[Route("raw")]
public IEnumerable<WeatherForecast> PostRaw(WeatherForecastParameter parameter)
{
return Enumerable.Range(1, parameter.Size)
.Select(index => new WeatherForecast
{
Date = DateTime.Now.AddDays(index),
TemperatureC = Random.Shared.Next(-20, 55),
Summary = Summaries[Random.Shared.Next(Summaries.Length)]
})
.ToArray();
}方法 1: AesModleBinder + AesResponseFilter
Step1 將參數類別綁定 AesModleBinder
[ModelBinder(BinderType = typeof(AesModelBinder))] WeatherForecastParameter parameter
Step2 加上 AesResponseFilter
[TypeFilter(typeof(AesResponseFilter))]
[HttpPost]
[Route("aes1")]
[TypeFilter(typeof(AesResponseFilter))]
public IEnumerable<WeatherForecast> PostAes([ModelBinder(BinderType = typeof(AesModelBinder))] WeatherForecastParameter parameter)
{
// 略
}方法 2: AesRequestFilter + AesResponseFilter
Step1 加上 AesRequestFilter
[TypeFilter(typeof(AesRequestFilter))]
Step2 加上 AesResponseFilter
[TypeFilter(typeof(AesResponseFilter))]
[HttpPost]
[Route("aes2")]
[TypeFilter(typeof(AesRequestFilter))]
[TypeFilter(typeof(AesResponseFilter))]
public IEnumerable<WeatherForecast> PostAes(WeatherForecastParameter parameter)
{
// 略
}直接使用加解密
// 加密
var result = _cryptor.Encrypt(value);
// 解密
var result = _cryptor.Decrypt(value);
// 泛型加密
var result = _cryptor.Encrypt(value);
// 泛型解密
var result = _cryptor.Decrypt<className>(value);抽換加解密套件
請修改 AesCryptor.cs 加解密的實作
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent