1.SQL數據脫敏實現

MYSQL(電話號碼,身份證)數據脫敏的實現

--CONCAT()、LEFT()和RIGHT()字符串函數組合使用，請看下面具體實現

-- CONCAT(str1,str2,…)：返回結果為連接參數產生的字符串
-- LEFT(str,len)：返回從字符串str 開始的len 最左字符
-- RIGHT(str,len)：從字符串str 開始，返回最右len 字符

--電話號碼脫敏sql：

SELECTmobilePhoneAS脫敏前電話號碼,CONCAT(LEFT(mobilePhone,3),'********')AS脫敏后電話號碼FROMt_s_user

--身份證號碼脫敏sql:

SELECTidcardAS未脫敏身份證,CONCAT(LEFT(idcard,3),'****',RIGHT(idcard,4))AS脫敏后身份證號FROMt_s_user

2.JAVA數據脫敏實現

可參考：海強 / sensitive-plus

https://gitee.com/strong_sea/sensitive-plus

數據脫敏插件，目前支持地址脫敏、銀行卡號脫敏、中文姓名脫敏、固話脫敏、身份證號脫敏、手機號脫敏、密碼脫敏 一個是正則脫敏、另外一個根據顯示長度脫敏，默認是正則脫敏，可以根據自己的需要配置自己的規則。

3.mybatis-mate-sensitive-jackson

mybatisplus 的新作，可以測試使用，生產需要收費。

根據定義的策略類型，對數據進行脫敏，當然策略可以自定義。

#目前已有
packagemybatis.mate.strategy;

publicinterfaceSensitiveType{
StringchineseName="chineseName";
StringidCard="idCard";
Stringphone="phone";
Stringmobile="mobile";
Stringaddress="address";
Stringemail="email";
StringbankCard="bankCard";
Stringpassword="password";
StringcarNumber="carNumber";
}

Demo 代碼目錄

1、pom.xml

"1.0"encoding="UTF-8"?>
"http://maven.apache.org/POM/4.0.0"xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0http://maven.apache.org/xsd/maven-4.0.0.xsd">

com.baomidou
mybatis-mate-examples
0.0.1-SNAPSHOT

4.0.0
mybatis-mate-sensitive-jackson


mysql
mysql-connector-java

2、appliation.yml

#DataSourceConfig
spring:
datasource:
#driver-class-name:org.h2.Driver
#schema:classpath:db/schema-h2.sql
#data:classpath:db/data-h2.sql
#url:jdbcmem:test
#username:root
#password:test
driver-class-name:com.mysql.cj.jdbc.Driver
url:jdbc//localhost:3306/mybatis_mate?useSSL=false&useUnicode=true&characterEncoding=UTF-8&serverTimezone=UTC
username:root
password:123456
#MybatisMate配置
mybatis-mate:
cert:
#請添加微信wx153666購買授權，不白嫖從我做起！測試證書會失效，請勿正式環境使用
grant:thisIsTestLicense
license:as/bsBaSVrsA9FfjC/N77ruEt2/QZDrW+MHETNuEuZBra5mlaXZU+DE1ZvF8UjzlLCpH3TFVH3WPV+Ya7Ugiz1Rx4wSh/FK6Ug9lhos7rnsNaRB/+mR30aXqtlLt4dAmLAOCT56r9mikW+t1DDJY8TVhERWMjEipbqGO9oe1fqYCegCEX8tVCpToKr5J1g1V86mNsNnEGXujnLlEw9jBTrGxAyQroD7Ns1Dhwz1K4Y188mvmRQp9t7OYrpgsC7N9CXq1s1c2GtvfItHArkqHE4oDrhaPjpbMjFWLI5/XqZDtW3D+AVcH7pTcYZn6vzFfDZEmfDFV5fQlT3Rc+GENEg==

#LoggerConfig
logging:
level:
mybatis.mate:debug

3、Appliation啟動類

packagemybatis.mate.sensitive.jackson;

importorg.springframework.boot.SpringApplication;
importorg.springframework.boot.autoconfigure.SpringBootApplication;

@SpringBootApplication
publicclassSensitiveJacksonApplication{

//測試訪問http://localhost:8080/info，http://localhost:8080/list
publicstaticvoidmain(String[]args){
SpringApplication.run(SensitiveJacksonApplication.class,args);
}
}

4、配置類，自定義脫敏策略

packagemybatis.mate.sensitive.jackson.config;

importmybatis.mate.databind.ISensitiveStrategy;
importmybatis.mate.strategy.SensitiveStrategy;
importorg.springframework.context.annotation.Bean;
importorg.springframework.context.annotation.Configuration;

@Configuration
publicclassSensitiveStrategyConfig{

/**
*注入脫敏策略
*/
@Bean
publicISensitiveStrategysensitiveStrategy(){
//自定義testStrategy類型脫敏處理
returnnewSensitiveStrategy().addStrategy("testStrategy",t->t+"***test***");
}
}

5、業務類

User，注解標識脫敏字段，及選用脫敏策略

packagemybatis.mate.sensitive.jackson.entity;

importlombok.Getter;
importlombok.Setter;
importmybatis.mate.annotation.FieldSensitive;
importmybatis.mate.sensitive.jackson.config.SensitiveStrategyConfig;
importmybatis.mate.strategy.SensitiveType;

@Getter
@Setter
publicclassUser{
privateLongid;
/**
*這里是一個自定義的策略{@linkSensitiveStrategyConfig}初始化注入
*/
@FieldSensitive("testStrategy")
privateStringusername;
/**
*默認支持策略{@linkSensitiveType}
*/
@FieldSensitive(SensitiveType.mobile)
privateStringmobile;
@FieldSensitive(SensitiveType.email)
privateStringemail;

}

UserController

packagemybatis.mate.sensitive.jackson.controller;

importmybatis.mate.databind.ISensitiveStrategy;
importmybatis.mate.databind.RequestDataTransfer;
importmybatis.mate.sensitive.jackson.entity.User;
importmybatis.mate.sensitive.jackson.mapper.UserMapper;
importmybatis.mate.strategy.SensitiveType;
importorg.springframework.beans.factory.annotation.Autowired;
importorg.springframework.web.bind.annotation.GetMapping;
importorg.springframework.web.bind.annotation.RestController;

importjavax.servlet.http.HttpServletRequest;
importjava.util.HashMap;
importjava.util.List;
importjava.util.Map;

@RestController
publicclassUserController{
@Autowired
privateUserMapperuserMapper;
@Autowired
privateISensitiveStrategysensitiveStrategy;

//測試訪問http://localhost:8080/info
@GetMapping("/info")
publicUserinfo(){
returnuserMapper.selectById(1L);
}

//測試返回map訪問http://localhost:8080/map
@GetMapping("/map")
publicMapmap(){
//測試嵌套對象脫敏
MapuserMap=newHashMap<>();
userMap.put("user",userMapper.selectById(1L));
userMap.put("test",123);
userMap.put("userMap",newHashMap(){{
put("user2",userMapper.selectById(2L));
put("test2","hichina");
}});
//手動調用策略脫敏
userMap.put("mobile",sensitiveStrategy.getStrategyFunctionMap()
.get(SensitiveType.mobile).apply("15315388888"));
returnuserMap;
}

//測試訪問http://localhost:8080/list
//不脫敏http://localhost:8080/list?skip=1
@GetMapping("/list")
publicListlist(HttpServletRequestrequest){
if("1".equals(request.getParameter("skip"))){
//跳過脫密處理
RequestDataTransfer.skipSensitive();
}
returnuserMapper.selectList(null);
}
}

UserMapper

packagemybatis.mate.sensitive.jackson.mapper;

importcom.baomidou.mybatisplus.core.mapper.BaseMapper;
importmybatis.mate.sensitive.jackson.entity.User;
importorg.apache.ibatis.annotations.Mapper;

@Mapper
publicinterfaceUserMapperextendsBaseMapper{

}

6、測試

GET http://localhost:8080/list

[
{
"id":1,
"username":"Jone***test***",
"mobile":"153******81",
"email":"t****@baomidou.com"
},
{
"id":2,
"username":"Jack***test***",
"mobile":"153******82",
"email":"t****@baomidou.com"
},
{
"id":3,
"username":"Tom***test***",
"mobile":"153******83",
"email":"t****@baomidou.com"
}
]

GET http://localhost:8080/list?skip=1

[
{
"id":1,
"username":"Jone",
"mobile":"15315388881",
"email":"[email protected]"
},
{
"id":2,
"username":"Jack",
"mobile":"15315388882",
"email":"[email protected]"
},
{
"id":3,
"username":"Tom",
"mobile":"15315388883",
"email":"[email protected]"
}
]