《Apache Shiro 源码解析》- 10.加密与解密

/**
 * 实现“记住我”功能的管理器，内部通过读写 cookie 来实现记住用户的功能。
 * 由于 cookie 会被浏览器保存到客户端，所以对保存的信息需要进行加密处理。
 */
public AbstractRememberMeManager() {
    //...

    //注意这里，默认使用 AES 算法
    AesCipherService cipherService = new AesCipherService();
    this.cipherService = cipherService;
    setCipherKey(cipherService.generateNewKey().getEncoded());
}

protected byte[] encrypt(byte[] serialized) {
    byte[] value = serialized;
    CipherService cipherService = getCipherService();
    if (cipherService != null) {
        //调用 cipherService 进行加密操作
        ByteSource byteSource = cipherService.encrypt(serialized, getEncryptionCipherKey());
        value = byteSource.getBytes();
    }
    return value;
}

protected byte[] decrypt(byte[] encrypted) {
    byte[] serialized = encrypted;
    CipherService cipherService = getCipherService();
    if (cipherService != null) {
        //调用 cipherService 进行解密操作
        ByteSource byteSource = cipherService.decrypt(encrypted, getDecryptionCipherKey());
        serialized = byteSource.getBytes();
    }
    return serialized;
}

import org.apache.shiro.crypto.AesCipherService;
import org.apache.shiro.crypto.KeySource;
import org.apache.shiro.crypto.SimpleKeySource;
import org.apache.shiro.crypto.CipherService;

public class CipherServiceExample {
    public static void main(String[] args) {
        // 创建一个 CipherService 实例
        CipherService cipherService = new AesCipherService();

        // 定义要加密的数据
        String originalData = "Hello, World!";

        // 生成一个随机密钥（可以使用安全的方式生成密钥）
        byte[] key = cipherService.generateNewKey(128).getEncoded();

        // 加密数据
        byte[] encryptedData = cipherService.encrypt(originalData.getBytes(), key).getBytes();

        // 打印加密后的数据（以十六进制显示）
        System.out.println("Encrypted Data: " + bytesToHex(encryptedData));

        // 解密数据
        byte[] decryptedData = cipherService.decrypt(encryptedData, key).getBytes();

        // 打印解密后的数据
        System.out.println("Decrypted Data: " + new String(decryptedData));
    }

    // 辅助方法：将字节数组转换为十六进制字符串
    private static String bytesToHex(byte[] bytes) {
        StringBuilder hexString = new StringBuilder();
        for (byte b : bytes) {
            String hex = Integer.toHexString(0xFF & b);
            if (hex.length() == 1) {
                hexString.append('0');
            }
            hexString.append(hex);
        }
        return hexString.toString();
    }
}

public AuthorizingRealm(CacheManager cacheManager, CredentialsMatcher matcher) {
    super();

    //...

    //如果开发者传入了 matcher ，则使用开发者配置的 matcher 。
    if (matcher != null) setCredentialsMatcher(matcher);

}

// 创建自定义 Realm 实现（需要实现 Realm 接口）
MyRealm myRealm = new MyRealm();

// 设置密码匹配器
SimpleCredentialsMatcher matcher = new SimpleCredentialsMatcher();
matcher.setCipherService(cipherService);

// 配置密钥
matcher.setKey(secretKey.getEncoded());

myRealm.setCredentialsMatcher(matcher);

public CookieRememberMeManager rememberMeManager() {
    CookieRememberMeManager cookieRememberMeManager = new CookieRememberMeManager();
    cookieRememberMeManager.setCookie(rememberMeCookie());

    // 注意：密钥需要先手动生成好，存储到安全的地方，例如：数据库、配置文件等
    // 然后这里用代码去读取生成好的密钥。
    cookieRememberMeManager.setCipherKey(Base64.decode("fCq+/xW488hMTCD+cmJ3aQ=="));

    //实际项目中，应该这样编写：封装一个 getCipherKey() 方法去读取预先生成好的密钥
    //cookieRememberMeManager.setCipherKey(getCipherKey());

    return cookieRememberMeManager;
}