blocks|key|5334244|text|您可以将其标记为@JsonIgnore。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|5334245|在1.9版本中，您可以为getter添加@JsonIgnore，为setter添加@JsonProperty，以使其反序列化但不序列化。|5334246|entityMap^0|8|B|0|K|B|15|D|0^^$0|@$1|2|3|4|5|6|7|J|8|@$9|K|A|L|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|M|8|@$9|N|A|O|B|C]|$9|P|A|Q|B|C]]|D|@]|E|$]]|$1|H|3|-4|5|6|7|R|8|@]|D|@]|E|$]]]|I|$]]

You can mark it as <code>@JsonIgnore</code>.

With 1.9, you can add <code>@JsonIgnore</code> for getter, <code>@JsonProperty</code> for setter, to make it deserialize but not serialize.

blocks|key|1521107|text|为了说明StaxMan所说的，这对我是有效的|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1521108|private+String+password;

@JsonIgnore
public+String+getPassword()+{
++++return+password;
}

@JsonProperty
public+void+setPassword(String+password)+{
++++this.password+=+password;
}|code-block|syntax|javascript|1521109|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Illustrating what StaxMan has stated, this works for me

<pre><code>private String password;

@JsonIgnore
public String getPassword() {
 return password;
}

@JsonProperty
public void setPassword(String password) {
 this.password = password;
}
</code></pre>

blocks|key|3916666|text|最简单的方法是注释getter和setter。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3916667|以下是修改后的原始示例，以排除纯文本密码，但随后注释了一个新方法，该方法只是将密码字段作为加密文本返回。|3916668|class+User+{

++++private+String+password;

++++public+void+setPassword(String+password)+{
++++++++this.password+=+password;
++++}

++++@JsonIgnore
++++public+String+getPassword()+{
++++++++return+password;
++++}

++++@JsonProperty("password")
++++public+String+getEncryptedPassword()+{
++++++++//+encryption+logic
++++}
}|code-block|syntax|javascript|3916669|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|L|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|M|8|@]|9|@]|A|$G|H]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

The easy way is to annotate your getters and setters. 

Here is the original example modified to exclude the plain text password, but then annotate a new method that just returns the password field as encrypted text.

<pre><code>class User {

 private String password;

 public void setPassword(String password) {
 this.password = password;
 }

 @JsonIgnore
 public String getPassword() {
 return password;
 }

 @JsonProperty("password")
 public String getEncryptedPassword() {
 // encryption logic
 }
}
</code></pre>

blocks|key|3916727|text|从Jackson+2.6开始，可以将属性标记为只读或只写。这比修改两个访问器上的注释更简单，并将所有信息保存在一个位置：|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|3916728|public+class+User+{
++++@JsonProperty(access+=+JsonProperty.Access.WRITE_ONLY)
++++private+String+password;
}|code-block|syntax|javascript|3916729|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.6#annotations^0|1|B|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@$A|R|B|S|1|T]]|C|$]]|$1|D|3|E|5|F|7|U|8|@]|9|@]|C|$G|H]]|$1|I|3|-4|5|6|7|V|8|@]|9|@]|C|$]]]|J|$K|$5|L|M|N|C|$O|P]]]]

Starting with <a href="https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.6#annotations" rel="noreferrer">Jackson 2.6</a>, a property can be marked as read- or write-only. It's simpler than hacking the annotations on both accessors and keeps all the information in one place:

<pre class="lang-java prettyprint-override"><code>public class User {
 @JsonProperty(access = JsonProperty.Access.WRITE_ONLY)
 private String password;
}
</code></pre>

blocks|key|5334255|text|除了@JsonIgnore之外，还有几种其他的可能性：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|5334256|5334257|使用JSON+Views有条件地过滤出字段(默认情况下，不用于反序列化；在2.0中将可用，但您可以使用不同的序列化视图，类上的deserialization)|unordered-list-item|5334258|@JsonIgnoreProperties可能对|5334259|很有用|5334260|entityMap|0|LINK|mutability|MUTABLE|url|http://wiki.fasterxml.com/JacksonJsonViews^0|2|B|0|0|2|A|0|0|0|L|0|0^^$0|@$1|2|3|4|5|6|7|V|8|@$9|W|A|X|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|Y|8|@]|D|@]|E|$]]|$1|G|3|H|5|I|7|Z|8|@]|D|@$9|10|A|11|1|12]]|E|$]]|$1|J|3|K|5|I|7|13|8|@$9|14|A|15|B|C]]|D|@]|E|$]]|$1|L|3|M|5|6|7|16|8|@]|D|@]|E|$]]|$1|N|3|-4|5|6|7|17|8|@]|D|@]|E|$]]]|O|$P|$5|Q|R|S|E|$T|U]]]]

Aside from <code>@JsonIgnore</code>, there are a couple of other possibilities:

<ul>
<li>Use <a href="http://wiki.fasterxml.com/JacksonJsonViews" rel="noreferrer">JSON Views</a> to filter out fields conditionally (by default, not used for deserialization; in 2.0 will be available but you can use different view on serialization, deserialization)</li>
<li><code>@JsonIgnoreProperties</code> on class may be useful</li>
</ul>

blocks|key|3916647|text|transient是我的解决方案。谢谢!它是Java原生的，避免了您添加另一个特定于框架的注释。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|3916648|entityMap^0|0|9|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|K|8|@]|D|@]|E|$]]]|G|$]]

<code>transient</code> is the solution for me. thanks! it's native to Java and avoids you to add another framework-specific annotation.

blocks|key|3916699|text|人们应该问一下，为什么需要一个公共的getter方法作为密码。Hibernate或任何其他ORM框架都可以使用私有的getter方法。要检查密码是否正确，可以使用|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3916700|public+boolean+checkPassword(String+password){
++return+this.password.equals(anyHashingMethod(password));
}|code-block|syntax|javascript|3916701|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

One should ask why you would want a public getter method for the password. Hibernate, or any other ORM framework, will do with a private getter method. For checking whether the password is correct, you can use

<pre><code>public boolean checkPassword(String password){
 return this.password.equals(anyHashingMethod(password));
}
</code></pre>

blocks|key|3916751|text|Jackson有一个名为SimpleBeanPropertyFilter的类，它在序列化和反序列化过程中帮助过滤字段；而不是全局过滤。我想这就是你想要的。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3916752|@JsonFilter("custom_serializer")
class+User+{
++++private+String+password;

++++//setter,+getter..
}|code-block|syntax|javascript|3916753|然后在你的代码中：|3916754|String[]+fieldsToSkip+=+new+String[]+{+"password"+};

ObjectMapper+mapper+=+new+ObjectMapper();

final+SimpleFilterProvider+filter+=+new+SimpleFilterProvider();
filter.addFilter("custom_serializer",
++++++++++++SimpleBeanPropertyFilter.serializeAllExcept(fieldsToSkip));

mapper.setFilters(filter);

String+jsonStr+=+mapper.writeValueAsString(currentUser);|3916755|这将防止password字段被序列化。此外，您还可以按原样反序列化password字段。只需确保在ObjectMapper对象上没有应用任何过滤器。|offset|length|style|CODE|3916756|ObjectMapper+mapper+=+new+ObjectMapper();
User+user+=+mapper.readValue(yourJsonStr,+User.class);++++//+user+object+does+have+non-null+password+field|3916757|entityMap^0|0|0|0|0|4|8|X|8|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|V|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|W|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|X|8|@]|9|@]|A|$E|F]]|$1|K|3|L|5|6|7|Y|8|@$M|Z|N|10|O|P]|$M|11|N|12|O|P]]|9|@]|A|$]]|$1|Q|3|R|5|D|7|13|8|@]|9|@]|A|$E|F]]|$1|S|3|-4|5|6|7|14|8|@]|9|@]|A|$]]]|T|$]]

Jackson has a class named SimpleBeanPropertyFilter that helps to filter fields during serialization and deserialization; not globally. I think that's what you wanted.

<pre><code>@JsonFilter("custom_serializer")
class User {
 private String password;

 //setter, getter..
}
</code></pre>

Then in your code:

<pre><code>String[] fieldsToSkip = new String[] { "password" };

ObjectMapper mapper = new ObjectMapper();

final SimpleFilterProvider filter = new SimpleFilterProvider();
filter.addFilter("custom_serializer",
 SimpleBeanPropertyFilter.serializeAllExcept(fieldsToSkip));

mapper.setFilters(filter);

String jsonStr = mapper.writeValueAsString(currentUser);
</code></pre>

This will prevent <code>password</code> field to get serialized. Also you will be able to deserialize <code>password</code> fields as it is. Just make sure no filters are applied on the ObjectMapper object.

<pre><code>ObjectMapper mapper = new ObjectMapper();
User user = mapper.readValue(yourJsonStr, User.class); // user object does have non-null password field
</code></pre>

blocks|key|1525707|text|将变量设置为|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1525708|@JsonIgnore|1525709|这允许json序列化程序跳过变量。|1525710|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|H|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|I|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|J|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|G|$]]

set variable as 

@JsonIgnore

This allows variable to get skipped by json serializer

I have an entity class with a password field:
<pre><code>class User {
 private String password;

 //setter, getter..
}
</code></pre>
I want this field to be skipped during serialization. But it should still be able to deserialize. This is needed, so that the client can send me a new password, but is not able to read the current one.
How do I accomplish this with Jackson?

Jackson: how to prevent field serialization

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋 

腾讯云代码助手

CODING DevOps

Cloud Studio

SDK中心

API中心

命令行工具

我有一个带有密码字段的实体类：class User {    private String password;    //setter, getter..}我希望在序列化过程中跳过此字段。但它仍然应该能够反序列化。这是必需的，以便客户端可以向我发送新密码，但不能读取当前密码。我该如何和Jackson一起完成这个任务呢？

问Jackson:如何防止字段序列化
EN

回答 9

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Jackson:如何防止字段序列化EN

回答 9

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Jackson:如何防止字段序列化
EN