当前位置：首页 > news >正文

Java实现密码加密实现步骤【bcrypt算法】

news 2025/7/15 10:29:27

一、SpringBoot和SSM框架均可实现密码加密的方法

在Spring Boot和SSM中实现密码加密可以使用bcrypt算法。bcrypt是一种密码哈希函数，通过将密码与随机生成的盐值进行混合，然后再进行多次迭代的计算，最终生成一个安全的哈希密码。

下面是使用bcrypt算法实现密码加密的步骤和代码示例：

1.在`pom.xml`文件中添加Spring Security依赖。

<dependency><groupId>org.springframework.boot</groupId><artifactId>spring-boot-starter-security</artifactId>
</dependency>

2.创建一个配置类来配置Spring Security。

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {@Overrideprotected void configure(AuthenticationManagerBuilder auth) throws Exception {auth.userDetailsService(userDetailsService()).passwordEncoder(passwordEncoder());}@Overrideprotected void configure(HttpSecurity http) throws Exception {http.authorizeRequests().antMatchers("/admin/**").hasRole("ADMIN").antMatchers("/user/**").hasAnyRole("USER", "ADMIN").anyRequest().authenticated().and().formLogin().permitAll().and().logout().permitAll();}@Beanpublic BCryptPasswordEncoder passwordEncoder() {return new BCryptPasswordEncoder();}@Beanpublic UserDetailsService userDetailsService() {// 返回自定义的UserDetailsService实现类，用于从数据库中获取用户信息return new UserDetailsServiceImpl();}
}

3.创建自定义的UserDetailsService实现类：实现`UserDetailsService`接口，用于从数据库中获取用户信息。

@Service
public class UserDetailsServiceImpl implements UserDetailsService {@Autowiredprivate UserMapper userMapper;@Overridepublic UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {User user = userMapper.findByUsername(username);if (user == null) {throw new UsernameNotFoundException("User not found");}return new org.springframework.security.core.userdetails.User(user.getUsername(), user.getPassword(), getAuthorities(user));}private Collection<GrantedAuthority> getAuthorities(User user) {List<String> roles = user.getRoles();List<GrantedAuthority> authorities = new ArrayList<>();for (String role : roles) {authorities.add(new SimpleGrantedAuthority(role));}return authorities;}
}

4.实现密码加密：在注册或更新密码时，使用`BCryptPasswordEncoder`类的`encode()`方法进行密码加密。

@Autowired
private BCryptPasswordEncoder passwordEncoder;public void registerUser(User user) {// 加密密码String encryptedPassword = passwordEncoder.encode(user.getPassword());user.setPassword(encryptedPassword);// 保存到数据库userMapper.save(user);
}