├── .gitignore ├── README.md ├── pom.xml └── src └── main └── java └── com └── barcke └── y └── rsa ├── advice ├── DecryptHttpInputMessage.java ├── EncryptRequestBodyAdvice.java └── EncryptResponseBodyAdvice.java ├── annotation ├── Decrypt.java ├── EnableSecurity.java └── Encrypt.java ├── config └── SecretKeyConfig.java ├── exception └── EncryptRequestException.java ├── pojo └── KeyInfo.java └── util ├── Base64Util.java ├── JsonUtils.java └── RSAUtil.java /.gitignore: -------------------------------------------------------------------------------- 1 | HELP.md 2 | target/ 3 | !.mvn/wrapper/maven-wrapper.jar 4 | !**/src/test/** 5 | 6 | ### STS ### 7 | .apt_generated 8 | .classpath 9 | .factorypath 10 | .project 11 | .settings 12 | .springBeans 13 | .sts4-cache 14 | 15 | ### IntelliJ IDEA ### 16 | .idea 17 | *.iws 18 | *.iml 19 | *.ipr 20 | *.log 21 | *.lck 22 | /test/ 23 | 24 | ### NetBeans ### 25 | /nbproject/private/ 26 | /nbbuild/ 27 | /dist/ 28 | /nbdist/ 29 | /.nb-gradle/ 30 | build/ 31 | 32 | ### VS Code ### 33 | .vscode/ 34 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # rsa-body-spring-boot 2 | ## 使用方式 3 | 导入对应的MAVEN包: 4 | 5 | ``` 6 | 7 | com.barcke.y 8 | rsa-body-spring-boot 9 | 1.0.0 10 | 11 | ``` 12 | 导入对应的包后开启配置项: 13 | ``` 14 | rsa: 15 | encrypt: 16 | open: true # 是否开启加密 true or false 17 | showLog: true # 是否打印加解密log true or false 默认false 18 | timestampCheck: true #是否开启时间校验 默认false 19 | publicKey: #公钥信息 20 | privateKey: #私钥信息 21 | ``` 22 | 可以使用如下方法生产公私钥: 23 | ``` 24 | import com.barcke.y.rsa.util.RSAUtil 25 | 26 | //用于生产公私钥 返回值为对应的公私钥信息 生成后请保管好 27 | RSAUtil.genKeyPair(); 28 | ``` 29 | 30 | 开启配置项后在项目中使用注解: 31 | ``` 32 | @Encrypt //加密 33 | @Decrypt(required = true, timeout = 30000L) //解密 required默认关闭,timeout超时时间设置 34 | ``` 35 | 示例: 36 | ![](https://imgkr.cn-bj.ufileos.com/11593bc0-ef37-403a-85d5-0e8a9d80d07a.png) 37 | **注意传参方式为“application/json”加密会对整个回参加密,解密会对整个入参解密.** 38 | 39 | 前端加解密可以同步公私钥信息、不过需要注意RSA的长度加密为117解密为256超长是会报错的~ 40 | 前端加解密可参考如下: 41 | ``` 42 | 43 | 44 | 45 | 46 | 使用jsencrypt执行OpenSSL的RSA加密，解密 47 | 48 | 49 | 50 | 73 | 74 | 75 | ``` 76 | 77 | ## 2021-03-05 升级如下 78 | ``` 79 | 80 | com.barcke.y 81 | rsa-body-spring-boot 82 | 1.0.1 83 | 84 | ``` 85 | #### 解决内容过长解密失败问题 86 | 87 | 支持版本JDK 1.8.0_251 88 | 过低不支持噢 89 | 1.8.0_251版本升级了RSA创建方式固过低不支持～ 90 | 91 | 92 | # 主作人员 93 | 94 | imyzt 95 | -------------------------------------------------------------------------------- /pom.xml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 4.0.0 6 | 7 | com.barcke.y 8 | rsa-body-spring-boot 9 | 1.0.1 10 | Springboot 参数自动加解密 11 | 12 | rsa-body-spring-boot 13 | jar 14 | https://github.com/Barcke/rsa-body-spring-boot 15 | 16 | 17 | UTF-8 18 | UTF-8 19 | 1.8 20 | 1.8 21 | 1.8 22 | true 23 | 2.1.4.RELEASE 24 | UTF-8 25 | ${java.home}/../bin/javadoc 26 | 27 | 28 | 29 | 30 | The Apache Software License, Version 2.0 31 | http://www.apache.org/licenses/LICENSE-2.0.txt 32 | 33 | 34 | 35 | 36 | https://github.com/Barcke/rsa-body-spring-boot 37 | scm:git:git@github.com:Barcke/rsa-body-spring-boot.git 38 | scm:git:git@github.com:Barcke/rsa-body-spring-boot.git 39 | 40 | 41 | 42 | 43 | barcke 44 | barcke 45 | barcke@163.com 46 | 47 | Developer 48 | 49 | +8 50 | 51 | 52 | 53 | 54 | 55 | release 56 | 57 | true 58 | 59 | 60 | 61 | 62 | org.apache.maven.plugins 63 | maven-source-plugin 64 | 2.2.1 65 | 66 | 67 | package 68 | 69 | jar-no-fork 70 | 71 | 72 | 73 | 74 | 75 | org.apache.maven.plugins 76 | maven-javadoc-plugin 77 | 2.9.1 78 | 79 | 80 | package 81 | 82 | jar 83 | 84 | 85 | 86 | 87 | 88 | org.apache.maven.plugins 89 | maven-gpg-plugin 90 | 1.6 91 | 92 | 93 | sign-artifacts 94 | verify 95 | 96 | sign 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | ossrh 106 | https://oss.sonatype.org/content/repositories/snapshots/ 107 | 108 | 109 | ossrh 110 | https://oss.sonatype.org/service/local/staging/deploy/maven2/ 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | org.springframework.boot 120 | spring-boot-starter 121 | true 122 | 123 | 124 | 125 | org.springframework.boot 126 | spring-boot-starter-web 127 | true 128 | 129 | 130 | 131 | org.springframework.boot 132 | spring-boot-starter-test 133 | test 134 | 135 | 136 | 137 | commons-codec 138 | commons-codec 139 | 140 | 141 | 142 | org.apache.commons 143 | commons-lang3 144 | 3.8.1 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | org.springframework.boot 158 | spring-boot-dependencies 159 | ${springboot-version} 160 | pom 161 | import 162 | 163 | 164 | 165 | 166 | 167 | -------------------------------------------------------------------------------- /src/main/java/com/barcke/y/rsa/advice/DecryptHttpInputMessage.java: -------------------------------------------------------------------------------- 1 | package com.barcke.y.rsa.advice; 2 | 3 | import com.barcke.y.rsa.annotation.Decrypt; 4 | import com.barcke.y.rsa.config.SecretKeyConfig; 5 | import com.barcke.y.rsa.exception.EncryptRequestException; 6 | import com.barcke.y.rsa.util.Base64Util; 7 | import com.barcke.y.rsa.util.JsonUtils; 8 | import com.barcke.y.rsa.util.RSAUtil; 9 | import org.apache.commons.lang3.StringUtils; 10 | import org.slf4j.Logger; 11 | import org.slf4j.LoggerFactory; 12 | import org.springframework.http.HttpHeaders; 13 | import org.springframework.http.HttpInputMessage; 14 | import sun.security.rsa.RSAPrivateCrtKeyImpl; 15 | 16 | import java.io.BufferedReader; 17 | import java.io.ByteArrayInputStream; 18 | import java.io.InputStream; 19 | import java.io.InputStreamReader; 20 | import java.security.interfaces.RSAPrivateKey; 21 | import java.util.Base64; 22 | import java.util.stream.Collectors; 23 | 24 | /** 25 | * ,;,,; 26 | * ,;;'( 社 27 | * __ ,;;' ' \ 会 28 | * /' '\'~~'~' \ /'\.) 主 29 | * ,;( ) / |. 义 30 | *,;' \ /-.,,( ) \ 码 31 | * ) / ) / )| 农 32 | * || || \) 33 | * (_\ (_\ 34 | * 35 | * @author Barcke 36 | * @version 1.0 37 | **/ 38 | public class DecryptHttpInputMessage implements HttpInputMessage { 39 | 40 | private Logger log = LoggerFactory.getLogger(this.getClass()); 41 | private HttpHeaders headers; 42 | private InputStream body; 43 | 44 | 45 | public DecryptHttpInputMessage(HttpInputMessage inputMessage, SecretKeyConfig secretKeyConfig, Decrypt decrypt) throws Exception { 46 | 47 | String privateKey = secretKeyConfig.getPrivateKey(); 48 | String charset = secretKeyConfig.getCharset(); 49 | boolean showLog = secretKeyConfig.isShowLog(); 50 | boolean timestampCheck = secretKeyConfig.isTimestampCheck(); 51 | 52 | if (StringUtils.isEmpty(privateKey)) { 53 | throw new IllegalArgumentException("privateKey is null"); 54 | } 55 | 56 | this.headers = inputMessage.getHeaders(); 57 | String content = new BufferedReader(new InputStreamReader(inputMessage.getBody())) 58 | .lines().collect(Collectors.joining(System.lineSeparator())); 59 | String decryptBody; 60 | // 未加密内容 61 | if (content.startsWith("{")) { 62 | // 必须加密 63 | if (decrypt.required()) { 64 | log.error("not support unencrypted content:{}", content); 65 | throw new EncryptRequestException("not support unencrypted content"); 66 | } 67 | log.info("Unencrypted without decryption:{}", content); 68 | decryptBody = content; 69 | } else { 70 | content = content.replaceAll(" ", "+"); 71 | if (StringUtils.isEmpty(content)) { 72 | throw new EncryptRequestException("request body is empty"); 73 | } 74 | RSAPrivateKey rsaPrivateKey = RSAPrivateCrtKeyImpl.newKey(Base64.getDecoder().decode(privateKey)); 75 | decryptBody = new String(RSAUtil.decrypt(rsaPrivateKey, Base64Util.decode(content)), charset); 76 | if(showLog) { 77 | log.info("After decryption：{}, Encrypted data received：{}", decryptBody, content); 78 | } 79 | } 80 | 81 | // 开启时间戳检查 82 | if (timestampCheck) { 83 | // 容忍最小请求时间 84 | long toleranceTime = System.currentTimeMillis() - decrypt.timeout(); 85 | long requestTime = JsonUtils.getNode(decryptBody, "timestamp").asLong(); 86 | // 如果请求时间小于最小容忍请求时间, 判定为超时 87 | if (requestTime < toleranceTime) { 88 | log.error("Encryption request has timed out, toleranceTime:{}, requestTime:{}, After decryption：{}", toleranceTime, requestTime, decryptBody); 89 | throw new EncryptRequestException("request timeout"); 90 | } 91 | } 92 | 93 | this.body = new ByteArrayInputStream(decryptBody.getBytes()); 94 | } 95 | 96 | @Override 97 | public InputStream getBody(){ 98 | return body; 99 | } 100 | 101 | @Override 102 | public HttpHeaders getHeaders() { 103 | return headers; 104 | } 105 | } 106 | -------------------------------------------------------------------------------- /src/main/java/com/barcke/y/rsa/advice/EncryptRequestBodyAdvice.java: -------------------------------------------------------------------------------- 1 | package com.barcke.y.rsa.advice; 2 | 3 | import com.barcke.y.rsa.annotation.Decrypt; 4 | import com.barcke.y.rsa.config.SecretKeyConfig; 5 | import com.barcke.y.rsa.exception.EncryptRequestException; 6 | import org.slf4j.Logger; 7 | import org.slf4j.LoggerFactory; 8 | import org.springframework.beans.factory.annotation.Autowired; 9 | import org.springframework.core.MethodParameter; 10 | import org.springframework.http.HttpInputMessage; 11 | import org.springframework.http.converter.HttpMessageConverter; 12 | import org.springframework.web.bind.annotation.ControllerAdvice; 13 | import org.springframework.web.servlet.mvc.method.annotation.RequestBodyAdvice; 14 | 15 | import java.lang.reflect.Method; 16 | import java.lang.reflect.Type; 17 | import java.util.Objects; 18 | 19 | /** 20 | * ,;,,; 21 | * ,;;'( 社 22 | * __ ,;;' ' \ 会 23 | * /' '\'~~'~' \ /'\.) 主 24 | * ,;( ) / |. 义 25 | *,;' \ /-.,,( ) \ 码 26 | * ) / ) / )| 农 27 | * || || \) 28 | * (_\ (_\ 29 | * 30 | * @author Barcke 31 | * @version 1.0 32 | **/ 33 | @ControllerAdvice 34 | public class EncryptRequestBodyAdvice implements RequestBodyAdvice { 35 | 36 | private Logger log = LoggerFactory.getLogger(this.getClass()); 37 | 38 | private boolean encrypt; 39 | private Decrypt decryptAnnotation; 40 | 41 | @Autowired 42 | private SecretKeyConfig secretKeyConfig; 43 | 44 | @Override 45 | public boolean supports(MethodParameter methodParameter, Type targetType, Class> converterType) { 46 | Method method = methodParameter.getMethod(); 47 | if (Objects.isNull(method)) { 48 | encrypt = false; 49 | return false; 50 | } 51 | if (method.isAnnotationPresent(Decrypt.class) && secretKeyConfig.isOpen()) { 52 | encrypt = true; 53 | decryptAnnotation = methodParameter.getMethodAnnotation(Decrypt.class); 54 | return true; 55 | } 56 | // 此处如果按照原逻辑直接返回encrypt, 会造成一次修改为true之后, 后续请求都会变成true, 在不支持时, 需要做修正 57 | encrypt = false; 58 | return false; 59 | } 60 | 61 | @Override 62 | public Object handleEmptyBody(Object body, HttpInputMessage inputMessage, MethodParameter parameter, Type targetType, Class> converterType) { 63 | return body; 64 | } 65 | 66 | @Override 67 | public HttpInputMessage beforeBodyRead(HttpInputMessage inputMessage, MethodParameter parameter, Type targetType, 68 | Class> converterType){ 69 | if (encrypt) { 70 | try { 71 | return new DecryptHttpInputMessage(inputMessage, secretKeyConfig, decryptAnnotation); 72 | } catch (EncryptRequestException e) { 73 | throw e; 74 | } catch (Exception e) { 75 | log.error("Decryption failed", e); 76 | } 77 | } 78 | return inputMessage; 79 | } 80 | 81 | @Override 82 | public Object afterBodyRead(Object body, HttpInputMessage inputMessage, MethodParameter parameter, Type targetType, 83 | Class> converterType) { 84 | return body; 85 | } 86 | } 87 | -------------------------------------------------------------------------------- /src/main/java/com/barcke/y/rsa/advice/EncryptResponseBodyAdvice.java: -------------------------------------------------------------------------------- 1 | package com.barcke.y.rsa.advice; 2 | 3 | import com.barcke.y.rsa.annotation.Encrypt; 4 | import com.barcke.y.rsa.config.SecretKeyConfig; 5 | import com.barcke.y.rsa.util.Base64Util; 6 | import com.barcke.y.rsa.util.JsonUtils; 7 | import com.barcke.y.rsa.util.RSAUtil; 8 | import org.slf4j.Logger; 9 | import org.slf4j.LoggerFactory; 10 | import org.springframework.beans.factory.annotation.Autowired; 11 | import org.springframework.core.MethodParameter; 12 | import org.springframework.http.MediaType; 13 | import org.springframework.http.converter.HttpMessageConverter; 14 | import org.springframework.http.server.ServerHttpRequest; 15 | import org.springframework.http.server.ServerHttpResponse; 16 | import org.springframework.util.StringUtils; 17 | import org.springframework.web.bind.annotation.ControllerAdvice; 18 | import org.springframework.web.servlet.mvc.method.annotation.ResponseBodyAdvice; 19 | import sun.security.rsa.RSAPublicKeyImpl; 20 | 21 | import java.lang.reflect.Method; 22 | import java.security.interfaces.RSAPublicKey; 23 | import java.util.Base64; 24 | import java.util.Objects; 25 | 26 | /** 27 | * ,;,,; 28 | * ,;;'( 社 29 | * __ ,;;' ' \ 会 30 | * /' '\'~~'~' \ /'\.) 主 31 | * ,;( ) / |. 义 32 | *,;' \ /-.,,( ) \ 码 33 | * ) / ) / )| 农 34 | * || || \) 35 | * (_\ (_\ 36 | * 37 | * @author Barcke 38 | * @version 1.0 39 | **/ 40 | @ControllerAdvice 41 | public class EncryptResponseBodyAdvice implements ResponseBodyAdvice { 42 | 43 | private Logger log = LoggerFactory.getLogger(this.getClass()); 44 | 45 | private boolean encrypt; 46 | 47 | @Autowired 48 | private SecretKeyConfig secretKeyConfig; 49 | 50 | private static ThreadLocal encryptLocal = new ThreadLocal<>(); 51 | 52 | @Override 53 | public boolean supports(MethodParameter returnType, Class> converterType) { 54 | Method method = returnType.getMethod(); 55 | if (Objects.isNull(method)) { 56 | return encrypt; 57 | } 58 | encrypt = method.isAnnotationPresent(Encrypt.class) && secretKeyConfig.isOpen(); 59 | return encrypt; 60 | } 61 | 62 | @Override 63 | public Object beforeBodyWrite(Object body, MethodParameter returnType, MediaType selectedContentType, 64 | Class> selectedConverterType, ServerHttpRequest request, ServerHttpResponse response) { 65 | // EncryptResponseBodyAdvice.setEncryptStatus(false); 66 | // Dynamic Settings Not Encrypted 67 | Boolean status = encryptLocal.get(); 68 | if (null != status && !status) { 69 | encryptLocal.remove(); 70 | return body; 71 | } 72 | if (encrypt) { 73 | String publicKey = secretKeyConfig.getPublicKey(); 74 | try { 75 | String content = JsonUtils.writeValueAsString(body); 76 | if (!StringUtils.hasText(publicKey)) { 77 | throw new NullPointerException("Please configure rsa.encrypt.privatekeyc parameter!"); 78 | } 79 | RSAPublicKey rsaPublicKey = RSAPublicKeyImpl.newKey(Base64.getDecoder().decode(publicKey)); 80 | byte[] encodedData = RSAUtil.encrypt(rsaPublicKey, content); 81 | String result = Base64Util.encode(encodedData); 82 | if(secretKeyConfig.isShowLog()) { 83 | log.info("Pre-encrypted data：{}，After encryption：{}", content, result); 84 | } 85 | return result; 86 | } catch (Exception e) { 87 | log.error("Encrypted data exception", e); 88 | } 89 | } 90 | 91 | return body; 92 | } 93 | } 94 | -------------------------------------------------------------------------------- /src/main/java/com/barcke/y/rsa/annotation/Decrypt.java: -------------------------------------------------------------------------------- 1 | package com.barcke.y.rsa.annotation; 2 | 3 | import com.barcke.y.rsa.exception.EncryptRequestException; 4 | 5 | import java.lang.annotation.*; 6 | 7 | /** 8 | * ,;,,; 9 | * ,;;'( 社 10 | * __ ,;;' ' \ 会 11 | * /' '\'~~'~' \ /'\.) 主 12 | * ,;( ) / |. 义 13 | *,;' \ /-.,,( ) \ 码 14 | * ) / ) / )| 农 15 | * || || \) 16 | * (_\ (_\ 17 | * 18 | * @author Barcke 19 | * @version 1.0 20 | **/ 21 | @Target(ElementType.METHOD) 22 | @Retention(RetentionPolicy.RUNTIME) 23 | @Documented 24 | public @interface Decrypt{ 25 | 26 | /** 27 | * 请求参数一定要是加密内容 28 | * @return boolean 29 | */ 30 | boolean required() default false; 31 | 32 | /** 33 | * 请求数据时间戳校验时间差 34 | * 超过(当前时间-指定时间)的数据认定为伪造 35 | * 注意应用程序需要捕获 {@link EncryptRequestException} 异常 36 | * @return long 37 | */ 38 | long timeout() default 3000; 39 | } 40 | -------------------------------------------------------------------------------- /src/main/java/com/barcke/y/rsa/annotation/EnableSecurity.java: -------------------------------------------------------------------------------- 1 | package com.barcke.y.rsa.annotation; 2 | 3 | import com.barcke.y.rsa.advice.EncryptRequestBodyAdvice; 4 | import com.barcke.y.rsa.advice.EncryptResponseBodyAdvice; 5 | import com.barcke.y.rsa.config.SecretKeyConfig; 6 | import org.springframework.context.annotation.Import; 7 | 8 | import java.lang.annotation.*; 9 | 10 | /** 11 | * ,;,,; 12 | * ,;;'( 社 13 | * __ ,;;' ' \ 会 14 | * /' '\'~~'~' \ /'\.) 主 15 | * ,;( ) / |. 义 16 | *,;' \ /-.,,( ) \ 码 17 | * ) / ) / )| 农 18 | * || || \) 19 | * (_\ (_\ 20 | * 21 | * @author Barcke 22 | * @version 1.0 23 | **/ 24 | @Target({ElementType.TYPE}) 25 | @Retention(RetentionPolicy.RUNTIME) 26 | @Inherited 27 | @Documented 28 | @Import({SecretKeyConfig.class, 29 | EncryptResponseBodyAdvice.class, 30 | EncryptRequestBodyAdvice.class}) 31 | public @interface EnableSecurity{ 32 | 33 | } 34 | -------------------------------------------------------------------------------- /src/main/java/com/barcke/y/rsa/annotation/Encrypt.java: -------------------------------------------------------------------------------- 1 | package com.barcke.y.rsa.annotation; 2 | 3 | import java.lang.annotation.*; 4 | 5 | /** 6 | * ,;,,; 7 | * ,;;'( 社 8 | * __ ,;;' ' \ 会 9 | * /' '\'~~'~' \ /'\.) 主 10 | * ,;( ) / |. 义 11 | *,;' \ /-.,,( ) \ 码 12 | * ) / ) / )| 农 13 | * || || \) 14 | * (_\ (_\ 15 | * 16 | * @author Barcke 17 | * @version 1.0 18 | **/ 19 | @Target(ElementType.METHOD) 20 | @Retention(RetentionPolicy.RUNTIME) 21 | @Documented 22 | public @interface Encrypt{ 23 | 24 | } 25 | -------------------------------------------------------------------------------- /src/main/java/com/barcke/y/rsa/config/SecretKeyConfig.java: -------------------------------------------------------------------------------- 1 | package com.barcke.y.rsa.config; 2 | 3 | import org.springframework.boot.context.properties.ConfigurationProperties; 4 | import org.springframework.context.annotation.Configuration; 5 | 6 | /** 7 | * ,;,,; 8 | * ,;;'( 社 9 | * __ ,;;' ' \ 会 10 | * /' '\'~~'~' \ /'\.) 主 11 | * ,;( ) / |. 义 12 | *,;' \ /-.,,( ) \ 码 13 | * ) / ) / )| 农 14 | * || || \) 15 | * (_\ (_\ 16 | * 17 | * @author Barcke 18 | * @version 1.0 19 | **/ 20 | @ConfigurationProperties(prefix = "rsa.encrypt") 21 | @Configuration 22 | public class SecretKeyConfig { 23 | 24 | private String privateKey; 25 | 26 | private String publicKey; 27 | 28 | private String charset = "UTF-8"; 29 | 30 | private boolean open = true; 31 | 32 | private boolean showLog = false; 33 | 34 | /** 35 | * 请求数据时间戳校验时间差 36 | * 超过指定时间的数据认定为伪造 37 | */ 38 | private boolean timestampCheck = false; 39 | 40 | public String getPrivateKey() { 41 | return privateKey; 42 | } 43 | 44 | public void setPrivateKey(String privateKey) { 45 | this.privateKey = privateKey; 46 | } 47 | 48 | public String getPublicKey() { 49 | return publicKey; 50 | } 51 | 52 | public void setPublicKey(String publicKey) { 53 | this.publicKey = publicKey; 54 | } 55 | 56 | public String getCharset() { 57 | return charset; 58 | } 59 | 60 | public void setCharset(String charset) { 61 | this.charset = charset; 62 | } 63 | 64 | public boolean isOpen() { 65 | return open; 66 | } 67 | 68 | public void setOpen(boolean open) { 69 | this.open = open; 70 | } 71 | 72 | public boolean isShowLog() { 73 | return showLog; 74 | } 75 | 76 | public void setShowLog(boolean showLog) { 77 | this.showLog = showLog; 78 | } 79 | 80 | public boolean isTimestampCheck() { 81 | return timestampCheck; 82 | } 83 | 84 | public void setTimestampCheck(boolean timestampCheck) { 85 | this.timestampCheck = timestampCheck; 86 | } 87 | } 88 | -------------------------------------------------------------------------------- /src/main/java/com/barcke/y/rsa/exception/EncryptRequestException.java: -------------------------------------------------------------------------------- 1 | package com.barcke.y.rsa.exception; 2 | 3 | /** 4 | * ,;,,; 5 | * ,;;'( 社 6 | * __ ,;;' ' \ 会 7 | * /' '\'~~'~' \ /'\.) 主 8 | * ,;( ) / |. 义 9 | *,;' \ /-.,,( ) \ 码 10 | * ) / ) / )| 农 11 | * || || \) 12 | * (_\ (_\ 13 | * 14 | * @author Barcke 15 | * @version 1.0 16 | **/ 17 | public class EncryptRequestException extends RuntimeException { 18 | 19 | public EncryptRequestException(String msg) { 20 | super(msg); 21 | } 22 | } 23 | -------------------------------------------------------------------------------- /src/main/java/com/barcke/y/rsa/pojo/KeyInfo.java: -------------------------------------------------------------------------------- 1 | package com.barcke.y.rsa.pojo; 2 | 3 | /** 4 | * ,;,,; 5 | * ,;;'( 社 6 | * __ ,;;' ' \ 会 7 | * /' '\'~~'~' \ /'\.) 主 8 | * ,;( ) / |. 义 9 | *,;' \ /-.,,( ) \ 码 10 | * ) / ) / )| 农 11 | * || || \) 12 | * (_\ (_\ 13 | * 14 | * @author Barcke 15 | * @version 1.0 16 | **/ 17 | public class KeyInfo { 18 | public String getPrivateKey() { 19 | return privateKey; 20 | } 21 | 22 | public void setPrivateKey(String privateKey) { 23 | this.privateKey = privateKey; 24 | } 25 | 26 | public String getPublicKey() { 27 | return publicKey; 28 | } 29 | 30 | public void setPublicKey(String publicKey) { 31 | this.publicKey = publicKey; 32 | } 33 | 34 | private String privateKey; 35 | private String publicKey; 36 | 37 | } 38 | -------------------------------------------------------------------------------- /src/main/java/com/barcke/y/rsa/util/Base64Util.java: -------------------------------------------------------------------------------- 1 | package com.barcke.y.rsa.util; 2 | 3 | import org.apache.commons.codec.binary.Base64; 4 | 5 | /** 6 | * ,;,,; 7 | * ,;;'( 社 8 | * __ ,;;' ' \ 会 9 | * /' '\'~~'~' \ /'\.) 主 10 | * ,;( ) / |. 义 11 | *,;' \ /-.,,( ) \ 码 12 | * ) / ) / )| 农 13 | * || || \) 14 | * (_\ (_\ 15 | * 16 | * @author Barcke 17 | * @version 1.0 18 | **/ 19 | public class Base64Util{ 20 | 21 | /** 22 | * Decoding to binary 23 | * @param base64 base64 24 | * @return byte 25 | * @throws Exception Exception 26 | */ 27 | public static byte[] decode(String base64) throws Exception { 28 | return Base64.decodeBase64(base64); 29 | } 30 | 31 | /** 32 | * Binary encoding as a string 33 | * @param bytes byte 34 | * @return String 35 | * @throws Exception Exception 36 | */ 37 | public static String encode(byte[] bytes) throws Exception { 38 | return new String(Base64.encodeBase64(bytes) , "UTF-8"); 39 | } 40 | } 41 | -------------------------------------------------------------------------------- /src/main/java/com/barcke/y/rsa/util/JsonUtils.java: -------------------------------------------------------------------------------- 1 | package com.barcke.y.rsa.util; 2 | 3 | 4 | import com.fasterxml.jackson.core.JsonProcessingException; 5 | import com.fasterxml.jackson.databind.JsonNode; 6 | import com.fasterxml.jackson.databind.ObjectMapper; 7 | 8 | import java.io.IOException; 9 | 10 | /** 11 | * ,;,,; 12 | * ,;;'( 社 13 | * __ ,;;' ' \ 会 14 | * /' '\'~~'~' \ /'\.) 主 15 | * ,;( ) / |. 义 16 | *,;' \ /-.,,( ) \ 码 17 | * ) / ) / )| 农 18 | * || || \) 19 | * (_\ (_\ 20 | * 21 | * @author Barcke 22 | * @version 1.0 23 | **/ 24 | public class JsonUtils { 25 | 26 | private JsonUtils() { 27 | } 28 | 29 | private static final ObjectMapper OBJECT_MAPPER = new ObjectMapper(); 30 | 31 | public static JsonNode getNode(String content, String key) throws IOException { 32 | JsonNode jsonNode = OBJECT_MAPPER.readTree(content); 33 | return jsonNode.get(key); 34 | } 35 | 36 | public static String writeValueAsString(Object body) throws JsonProcessingException { 37 | return OBJECT_MAPPER.writeValueAsString(body); 38 | } 39 | } 40 | -------------------------------------------------------------------------------- /src/main/java/com/barcke/y/rsa/util/RSAUtil.java: -------------------------------------------------------------------------------- 1 | package com.barcke.y.rsa.util; 2 | 3 | import com.barcke.y.rsa.pojo.KeyInfo; 4 | import org.apache.commons.codec.binary.Base64; 5 | 6 | import javax.crypto.Cipher; 7 | import java.nio.charset.StandardCharsets; 8 | import java.security.*; 9 | import java.security.interfaces.RSAPrivateKey; 10 | import java.security.interfaces.RSAPublicKey; 11 | 12 | /** 13 | * ,;,,; 14 | * ,;;'( 社 15 | * __ ,;;' ' \ 会 16 | * /' '\'~~'~' \ /'\.) 主 17 | * ,;( ) / |. 义 18 | *,;' \ /-.,,( ) \ 码 19 | * ) / ) / )| 农 20 | * || || \) 21 | * (_\ (_\ 22 | * 23 | * @author Barcke 24 | * @version 1.0 25 | **/ 26 | public class RSAUtil{ 27 | 28 | /** 29 | * encryption algorithm RSA 30 | */ 31 | public static final String KEY_ALGORITHM = "RSA"; 32 | 33 | public static byte[] encrypt(PublicKey publicKey, String message) throws Exception { 34 | Cipher cipher = Cipher.getInstance(KEY_ALGORITHM); 35 | cipher.init(Cipher.ENCRYPT_MODE, publicKey); 36 | 37 | return cipher.doFinal(message.getBytes(StandardCharsets.UTF_8)); 38 | } 39 | 40 | public static byte[] decrypt(PrivateKey privateKey, byte [] encrypted) throws Exception { 41 | Cipher cipher = Cipher.getInstance(KEY_ALGORITHM); 42 | cipher.init(Cipher.DECRYPT_MODE, privateKey); 43 | 44 | return cipher.doFinal(encrypted); 45 | } 46 | 47 | /** 48 | * 随机生成密钥对 49 | * @throws NoSuchAlgorithmException 找不到对应的算法 50 | * @return keyInfo 对应的密钥对 51 | */ 52 | public static KeyInfo genKeyPair() throws NoSuchAlgorithmException { 53 | // KeyPairGenerator类用于生成公钥和私钥对，基于RSA算法生成对象 54 | KeyPairGenerator keyPairGen = KeyPairGenerator.getInstance("RSA"); 55 | // 初始化密钥对生成器，密钥大小为96-1024位 56 | keyPairGen.initialize(1024,new SecureRandom()); 57 | // 生成一个密钥对，保存在keyPair中 58 | KeyPair keyPair = keyPairGen.generateKeyPair(); 59 | RSAPrivateKey privateKey = (RSAPrivateKey) keyPair.getPrivate(); // 得到私钥 60 | RSAPublicKey publicKey = (RSAPublicKey) keyPair.getPublic(); // 得到公钥 61 | String publicKeyString = new String(Base64.encodeBase64(publicKey.getEncoded())); 62 | // 得到私钥字符串 63 | String privateKeyString = new String(Base64.encodeBase64((privateKey.getEncoded()))); 64 | // 将公钥和私钥保存到KeyInfo 65 | KeyInfo keyInfo = new KeyInfo(); 66 | keyInfo.setPrivateKey(privateKeyString); 67 | keyInfo.setPublicKey(publicKeyString); 68 | return keyInfo; 69 | } 70 | 71 | public static void main(String[] args) throws Exception { 72 | 73 | KeyInfo keyInfo = genKeyPair(); 74 | 75 | System.out.println( 76 | "private: " + keyInfo.getPrivateKey() 77 | ); 78 | 79 | System.out.println( 80 | "public: " + keyInfo.getPublicKey() 81 | ); 82 | } 83 | } 84 | --------------------------------------------------------------------------------