基于json序列化实现数据脱敏

今天药忘吃喽~ 2023-09-25 22:56 43阅读 0赞

## springboot中基于json序列化实现数据脱敏 ##

#### 序列化器 ####

import com.fasterxml.jackson.core.JsonGenerator;
    import com.fasterxml.jackson.databind.JsonSerializer;
    import com.fasterxml.jackson.databind.SerializerProvider;
    
    import java.io.IOException;
    import java.util.regex.Matcher;
    import java.util.regex.Pattern;
    
    public class SensitiveDataSerializer extends JsonSerializer<String> {
        
    
        // 手机号码正则表达式，匹配前三位和后四位，中间用“****”代替
        private static final Pattern MOBILE_PATTERN = Pattern.compile("(\\d{3})\\d{4}(\\d{4})");
    
        // 身份证号码正则表达式，匹配前四位和后四位，中间用“**********”代替
        private static final Pattern ID_CARD_PATTERN = Pattern.compile("(\\d{4})\\d{10}(\\w{4})");
    
        // 姓名正则表达式，匹配姓名的第一个汉字和后面的字符，后面的字符用“*”代替
        private static final Pattern NAME_PATTERN = Pattern.compile("([\\u4e00-\\u9fa5]{1})(.*)");
    
        // 地址正则表达式，匹配地址中的省、市和区，详细地址用“*”代替
        private static final Pattern ADDRESS_PATTERN = Pattern.compile("(.*[省市区])(.*)");
    
        // 邮箱地址正则表达式，匹配邮箱地址中的用户名和域名，用户名的前几个字符用“*”代替
        private static final Pattern EMAIL_PATTERN = Pattern.compile("(\\w+)(\\w{3}@\\w+\\.\\w+)");
    
        // 银行卡号正则表达式，匹配前六位和后四位，中间用“****”代替
        private static final Pattern BANK_CARD_PATTERN = Pattern.compile("(\\d{6})\\d+(\\d{4})");
    
        @Override
        public void serialize(String value, JsonGenerator gen, SerializerProvider serializers) throws IOException {
        
            if (value == null) {
        
                gen.writeNull();
                return;
            }
            String result = value;
            // 手机号码脱敏
            Matcher mobileMatcher = MOBILE_PATTERN.matcher(value);
            if (mobileMatcher.matches()) {
        
                result = mobileMatcher.replaceAll("$1****$2");
            }
            // 身份证号码脱敏
            Matcher idCardMatcher = ID_CARD_PATTERN.matcher(value);
            if (idCardMatcher.matches()) {
        
                result = idCardMatcher.replaceAll("$1**********$2");
            }
            // 姓名脱敏
            Matcher nameMatcher = NAME_PATTERN.matcher(value);
            if (nameMatcher.matches()) {
        
                String lastName = nameMatcher.group(1);
                String firstName = nameMatcher.group(2);
                result = lastName + firstName.replaceAll(".", "*");
            }
            // 地址脱敏
            Matcher addressMatcher = ADDRESS_PATTERN.matcher(value);
            if (addressMatcher.matches()) {
        
                String area = addressMatcher.group(1);
                String detail = addressMatcher.group(2);
                result = area + detail.replaceAll(".", "*");
            }
            // 邮箱地址脱敏
            Matcher emailMatcher = EMAIL_PATTERN.matcher(value);
            if (emailMatcher.matches()) {
        
                String username = emailMatcher.group(1);
                String domain = emailMatcher.group(2);
                result = username.replaceAll(".", "*") + domain;
            }
            // 银行卡号脱敏
            Matcher bankCardMatcher = BANK_CARD_PATTERN.matcher(value);
            if (bankCardMatcher.matches()) {
        
                result = bankCardMatcher.replaceAll("$1****$2");
            }
            // 将脱敏后的值写入 JSON 输出
            gen.writeString(result);
        }
    }

#### 实体类 ####

import com.fasterxml.jackson.databind.annotation.JsonSerialize;
    import lombok.AllArgsConstructor;
    import lombok.Data;
    import lombok.NoArgsConstructor;
    
    @Data
    @AllArgsConstructor
    @NoArgsConstructor
    public class User {
    
        @JsonSerialize(using= SensitiveDataSerializer.class)
        private String name;        // 姓名
        @JsonSerialize(using= SensitiveDataSerializer.class)
        private String mobile;      // 手机号码
        @JsonSerialize(using= SensitiveDataSerializer.class)
        private String idCard;      // 身份证号码
        @JsonSerialize(using= SensitiveDataSerializer.class)
        private String address;     // 地址
        @JsonSerialize(using= SensitiveDataSerializer.class)
        private String email;       // 邮箱地址
        @JsonSerialize(using= SensitiveDataSerializer.class)
        private String bankCard;    // 银行卡号
    
    }

#### test ####

import org.springframework.web.bind.annotation.RequestMapping;
    import org.springframework.web.bind.annotation.RestController;
    
    @RestController
    @RequestMapping("/sensitive")
    public class SensitiveController {
    
        @RequestMapping("/user")
        public User sensitive() {
            return new User("张三三", "13800138000", "110101199001011234", "北京市朝阳区望京SOHO", "123456@qq.com", "6228480402564890018");
        }
    }

#### 效果 ####

![在这里插入图片描述][ea0a74be73094143809bf02bda52efe9.png]

[ea0a74be73094143809bf02bda52efe9.png]: https://img-blog.csdnimg.cn/ea0a74be73094143809bf02bda52efe9.png