Jackson：实现脱敏

Dear 丶 2024-03-22 12:52 47阅读 0赞

### 脱敏 ###

#### 注解 ####

import com.fasterxml.jackson.annotation.JacksonAnnotationsInside;
    import com.fasterxml.jackson.databind.annotation.JsonSerialize;
    import java.lang.annotation.ElementType;
    import java.lang.annotation.Retention;
    import java.lang.annotation.RetentionPolicy;
    import java.lang.annotation.Target;
    
    
    @Retention(RetentionPolicy.RUNTIME)
    @Target(ElementType.FIELD)
    @JacksonAnnotationsInside
    @JsonSerialize(using = SensitiveJsonSerializer.class)
    public @interface Sensitive {
        
        //脱敏策略
        SensitiveStrategy strategy();
    }

#### 策略 ####

import java.util.function.Function;
    
    
    /**
     * 脱敏策略，枚举类，针对不同的数据定制特定的策略
     */
    public enum SensitiveStrategy {
        
        /**
         * 用户名
         */
        USERNAME(s -> s.replaceAll("(\\S)\\S(\\S*)", "$1*$2")),
        /**
         * 身份证
         */
        ID_CARD(s -> s.replaceAll("(\\d{4})\\d{10}(\\w{4})", "$1****$2")),
        /**
         * 手机号
         */
        PHONE(s -> s.replaceAll("(\\d{3})\\d{4}(\\d{4})", "$1****$2")),
        /**
         * 地址
         */
        ADDRESS(s -> s.replaceAll("(\\S{3})\\S{2}(\\S*)\\S{2}", "$1****$2****")),
    
        /**
         * 公司
         */
        COMPANY(s -> s.replaceAll("(\\S{3})\\S*(\\S{3})", "$1***$2"));
    
    
        private final Function<String, String> desensitizer;
    
        SensitiveStrategy(Function<String, String> desensitizer) {
        
            this.desensitizer = desensitizer;
        }
    
        public Function<String, String> desensitizer() {
        
    
            return desensitizer;
        }
    }

#### 序列化 ####

import com.fasterxml.jackson.core.JsonGenerator;
    import com.fasterxml.jackson.databind.BeanProperty;
    import com.fasterxml.jackson.databind.JsonMappingException;
    import com.fasterxml.jackson.databind.JsonSerializer;
    import com.fasterxml.jackson.databind.SerializerProvider;
    import com.fasterxml.jackson.databind.ser.ContextualSerializer;
    
    
    /**
     * 序列化注解自定义实现
     * JsonSerializer<String>：指定String 类型，serialize()方法用于将修改后的数据载入
     */
    public class SensitiveJsonSerializer extends JsonSerializer<String> implements ContextualSerializer {
        
    
        private SensitiveStrategy strategy;
    
        @Override
        public void serialize(String value, JsonGenerator gen, SerializerProvider serializers) throws IOException {
        
            gen.writeString(strategy.desensitizer().apply(value));
        }
    
        /**
         * 获取属性上的注解属性
         */
        @Override
        public JsonSerializer<?> createContextual(SerializerProvider prov, BeanProperty property) throws JsonMappingException {
        
    
            Sensitive annotation = property.getAnnotation(Sensitive.class);
            if (Objects.nonNull(annotation) && Objects.equals(String.class, property.getType().getRawClass())) {
        
                this.strategy = annotation.strategy();
                return this;
            }
            return prov.findValueSerializer(property.getType(), property);
    
        }
    }

#### 使用 ####

@Sensitive(strategy = SensitiveStrategy.PHONE)
        @ApiModelProperty(value = "手机号")
        private String mobile;