Yaml file encryption

Springboot and jasypt

Use jasypt encryption yaml Sensitive information in the file

1、 The required depend on

      <dependency>
            <groupId>com.github.ulisesbocchio</groupId>
            <artifactId>jasypt-spring-boot-starter</artifactId>
            <version>2.1.2</version>
        </dependency>

2、 Use in yaml Add the required key to the file

jasypt:
  encryptor:
    password: qwerty  # secret key ( Customize )
    algorithm: PBEWithMD5AndDES # encryption 

3、 Key generation

java -cp jasypt-1.9.3.jar org.jasypt.intf.cli.JasyptPBEStringEncryptionCLI input="123456" password="qwerty" algorithm=PBEWithMD5AndDES

input： password ( Customize )
password： Custom key
algorithm： encryption

4、 Take steps 3 Command on jasypt Execute under dependency (cmd)

5、 Encryption method ( Take the account and password connecting to the database as an example )

    @Autowired
    private StringEncryptor stringEncryptor;

    @Test
    public void encryptPwd(){
    

        // encryption 
        String username = stringEncryptor.encrypt("root");
        System.out.println(" encryption username："+username);

        String decryptUserName = stringEncryptor.decrypt(username);
        System.out.println(" Decrypt username"+decryptUserName);

        String pwd = stringEncryptor.encrypt("123456");
        System.out.println(" Encrypted password ："+pwd);

        String decryptPwd = stringEncryptor.decrypt(pwd);
        System.out.println(" Decrypt password "+decryptPwd);

    }

6、 And then replace it according to the encrypted account password yaml The account number and password in the file are sufficient

   username: ENC(+9yooqRfPCwdB2a+qMKZUA==)
   password: ENC(vBoYnMFjRK8JUWTJo2XQJA==)

Be sure to add. ENC() Otherwise I can't recognize

It can also be in springboot Encryption key in the startup class of ( If you add it to the startup class, you don't need to write it in the configuration file , Just specify the encryption method )

public class DemoApplication {
    

    public static void main(String[] args) {
    
        System.setProperty("jasypt.encryptor.password", "qwerty");
        SpringApplication.run(DemoApplication.class, args);
    }

}