敏感信息在 Spring Boot 配置文件里藏不住？这套加密方法帮你 "捂严实"

<dependency>
    <groupId>com.github.ulisesbocchio</groupId>
    <artifactId>jasypt-spring-boot-starter</artifactId>
    <version>3.0.5</version>
</dependency>

import org.jasypt.encryption.StringEncryptor;
import org.junit.jupiter.api.Test;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.boot.test.context.SpringBootTest;
@SpringBootTest
public class JasyptTest {
    @Autowired
    private StringEncryptor encryptor; // Spring 会自动注入加密器
    @Test
    public void testEncrypt() {
        String plaintext = "root123"; // 要加密的明文（如数据库密码）
        String ciphertext = encryptor.encrypt(plaintext);
        System.out.println("加密后：" + ciphertext); // 输出密文，复制备用
    }
    @Test
    public void testDecrypt() {
        String ciphertext = "刚才生成的密文"; // 测试解密是否正确
        String plaintext = encryptor.decrypt(ciphertext);
        System.out.println("解密后：" + plaintext); // 应输出原明文
    }
}

# Linux/Mac
./encrypt.sh input="root123" password="你的密钥" algorithm=PBEWithMD5AndDES
# Windows
encrypt.bat input="root123" password="你的密钥" algorithm=PBEWithMD5AndDES

 <build>
        <plugins>
            <plugin>
                <groupId>com.github.ulisesbocchio</groupId>
                <artifactId>jasypt-maven-plugin</artifactId>
                <version>3.0.5</version>
            </plugin>
        </plugins>
    </build>

mvn jasypt:encrypt-value -Djasypt.encryptor.password=你的密钥 -Djasypt.plugin.value=root123