如何使用Springboot密码？

Question

我已经完成了用户注册和登录。但是我想在创建配置文件时加密密码。

这是我当前的配置

MongoDB连接

spring.data.mongodb.uri= mongodb://127.0.0.1:27017/Student
server.port=8080

模型类:@ Document @ AllArgsConstructor @ NoArgsConstructor @ Data公共类用户{ @Id @Indexed私有字符串Id；@索引私有字符串地址；@索引私有字符串名称；@索引的私有字符串电子邮件；@索引私有字符串密码；@索引私有字符串角色；}

存储库类：

public interface userReporsitory extends MongoRepository<User,String> {
    Optional<User> findByEmail(String email);
    List<User> findAllByRole(String role);
}

服务等级:

@AllArgsConstructor
@Service
public class userService {
    private userReporsitory userReporsitory;
    public User saveUser(User user){
        return userReporsitory.save(user);    
    }
    public User login(User user){
          User response = userReporsitory.findByEmail(user.getEmail()).orElseThrow(()->new RuntimeException("User Not Found"));
          
          if(!response.getPassword().equals(user.getPassword())){
            throw new RuntimeException("Bad Credincials");
          }

          return response;
    }

    public List<User> findAllUsers(){
      return userReporsitory.findAllByRole("user");
    }
}

控制器类：

    @CrossOrigin
@RestController
@AllArgsConstructor
@RequestMapping("api/v1/user")
public class userController {
   private userService userService;

    @PostMapping("/create")
    public ResponseEntity<User> save(@RequestBody User user){
        HttpStatus status = HttpStatus.EXPECTATION_FAILED;
        User response = userService.saveUser(user);

        if(response != null){
           status = HttpStatus.CREATED;
        }

        return new ResponseEntity<>(response, status);
        
    }
    @PostMapping("/login")
    public ResponseEntity<User> login(@RequestBody User user){
        return new ResponseEntity<>(userService.login(user),HttpStatus.ACCEPTED);
        
    }
    @GetMapping("/userList")
    public ResponseEntity<List<User>> userList(){
        return new ResponseEntity<>(userService.findAllUsers(),HttpStatus.ACCEPTED);
    }
        

}

Answer 1

使用

BCryptPasswordEncoder

类在保存密码时DataBase.it将普通文本转换为随机值。

定义 BCrypt密码编码器 In config 类。

@Bean
public PasswordEncoder encoder() {
    return new BCryptPasswordEncoder();
}

存储库类：

   @Autowired
private PasswordEncoder passwordEncoder;

public User newUserAccount(UserDto accountDto) {
        User user = new User();
    user.setFirstName(accountDto.getFirstName());
    user.setLastName(accountDto.getLastName());
   
    user.setPassword(passwordEncoder.encode(accountDto.getPassword()));
    
    
    return repository.save(user);
}