数据源的加密解密

先来看一下数据库配置文件：

dbCustomer.driverClass=org.gjt.mm.mysql.Driver
dbCustomer.jdbcUrl=jdbc:mysql://192.168.1.81:3306/p2p_customer?useUnicode=true&characterEncoding=UTF8
dbCustomer.user=PCVoqoFQn5w=     加密后的用户名

dbCustomer.password=eh1IPqyJjLs=  加密后的密码
#
dbCustomer.initialPoolSize=10
dbCustomer.maxIdleTime=60
dbCustomer.maxPoolSize=50
dbCustomer.minPoolSize=10
#
dbCustomer.acquireIncrement=3
dbCustomer.acquireRetryDelay=1000
dbCustomer.acquireRetryAttempts=30
dbCustomer.breakAfterAcquireFailure=false

applicationContext.xml 中的C3P0中的配置如下：

 <!-- 数据库连接池管理 -->
    <bean id="c3p0DataSourceCustomer" class="com.mchange.v2.c3p0.ComboPooledDataSource" destroy-method="close">
        <property name="driverClass" value="${dbCustomer.driverClass}"/>
        <property name="jdbcUrl" value="${dbCustomer.jdbcUrl}"/>
        <!-- <property name="user" value="${dbCustomer.user}"/>
        <property name="password" value="${dbCustomer.password}"/> -->
        <property name="properties" ref="dataSourcePropertiesCustomer"/> 

        <property name="initialPoolSize" value="${dbCustomer.initialPoolSize}"/>
        <property name="maxIdleTime" value="${dbCustomer.maxIdleTime}"/>
        <property name="maxPoolSize" value="${dbCustomer.maxPoolSize}"/>
        <property name="minPoolSize" value="${dbCustomer.minPoolSize}"/>
        <property name="acquireIncrement" value="${dbCustomer.acquireIncrement}"/>
        <property name="acquireRetryDelay" value="${dbCustomer.acquireRetryDelay}"/>
        <property name="acquireRetryAttempts" value="${dbCustomer.acquireRetryAttempts}"/>
        <property name="breakAfterAcquireFailure" value="${dbCustomer.breakAfterAcquireFailure}"/>
    </bean>

      <bean id="dataSourcePropertiesCustomer" class="com.hzfh.service.EncryptedDataSourceFactory">  
        <property name="properties">  
            <props>  
                <prop key="user">${dbCustomer.user}</prop>  
                <prop key="password">${dbCustomer.password}</prop>  
            </props>  
        </property>  
     </bean> 

项目启动加载时，会自动找到 com.hzfh.service.EncryptedDataSourceFactory 类，并且 用户名：user、密码：password 传入到该类中进行解密

package com.hzfh.service.EncryptedDataSourceFactory;
import java.io.UnsupportedEncodingException;
import java.util.Properties;

import org.springframework.beans.factory.FactoryBean;

import com.hzframework.encrypt.DESEncoder;
import com.hzframework.encrypt.Encoder;
  
public class EncryptedDataSourceFactory implements FactoryBean {  
  
    private Properties properties;  
      
    public Object getObject() throws Exception {  
        return getProperties();  
    }  
  
    public Class getObjectType() {  
        return java.util.Properties.class;  
    }  
  
    public boolean isSingleton() {  
        return true;  
    }  
  
    public Properties getProperties() {  
        return properties;  
    }  
  
    public void setProperties(Properties inProperties) {  
        this.properties = inProperties;  
        String originalUsername = properties.getProperty("user");  
        String originalPassword = properties.getProperty("password");  
        if (originalUsername != null){  
            String newUsername = decryptDESUsername(originalUsername);  
            properties.put("user", newUsername);  
        }  
        if (originalPassword != null){  
            String newPassword = decryptDESPassword(originalPassword);  
            properties.put("password", newPassword);  
        }  
    }  
      
    private String decryptDESUsername(String originalUsername){  
        return decryptDES(originalUsername);  
    }  
      
    private String decryptDESPassword(String originalPassword){  
        return decryptDES(originalPassword);  
    }  
    /**
     * 解密
     * @param data 原始数据
     * @return 加密后的数据
     */
    public  String decryptDES(String data) {
        try {
            String key = "GWWEEuUvhV4=";
            byte[] bytes = Encoder.decryptBASE64(data);
            return new String(DESEncoder.decrypt(bytes, key));
        } catch (Exception e) {
            e.printStackTrace();
        }
        return null;
    }
    /**
     * 加密
     * @param data 原始数据
     * @return 加密后的数据
     */
    public  String encryptDES(String data) {
        try {
            String key ="GWWEEuUvhV4=";
            byte[] bytes = toByteArray(data);
            return Encoder.encryptBASE64(DESEncoder.encrypt(bytes, key));
        } catch (Exception e) {
            e.printStackTrace();
        }
        return null;
    }
    private  byte[] toByteArray(String str) throws UnsupportedEncodingException {
        return str.getBytes("UTF-8");
    }
  
}  

上述com.hzfh.service.EncryptedDataSourceFactory类需要继承FactoryBean ,同时里面的加密、解密算法就要根据自己项目中的加密解密去写了，可以参考上一篇文章

对用户名、密码加密时，我用到了单元测试 直接生产加密后的字符串

    @Test
    public void getEncrypt(){
            try {
                String key ="GW0EYuUvhV4=";
                byte[] bytes = toByteArray("123456");
                System.out.println(Encoder.encryptBASE64(DESEncoder.encrypt(bytes, key)));
            } catch (Exception e) {
                e.printStackTrace();
            }
    }
    private  byte[] toByteArray(String str) throws UnsupportedEncodingException {
        return str.getBytes("UTF-8");
    }

输出：eh1IPqyJjLs=

这样数据源就可以进行密文显示了，同时不影响数据库的连接。