feat(jasypt): 引入jasypt配置加密支持敏感信息脱敏

根pom与启动模块引入jasypt-spring-boot-starter,
application.yml配置encryptor口令走环境变量/JVM参数注入。
This commit is contained in:
wsm
2026-08-04 16:09:56 +08:00
parent 0cc3e3bec6
commit 3bfcaeca6c
3 changed files with 26 additions and 1 deletions
@@ -48,6 +48,12 @@
<groupId>org.flywaydb</groupId>
<artifactId>flyway-core</artifactId>
</dependency>
<!-- jasypt 配置加密(启动时解密 ENC() 包裹的敏感配置) -->
<dependency>
<groupId>com.github.ulisesbocchio</groupId>
<artifactId>jasypt-spring-boot-starter</artifactId>
</dependency>
</dependencies>
<build>
@@ -3,4 +3,14 @@ spring:
name: jeecg-system
profiles:
active: '@profile.name@'
include: flow
include: flow
# ============================================
# 敏感配置加密(jasypt
# 口令 JASYPT_ENCRYPTOR_PASSWORD 走环境变量/JVM参数注入,严禁写死明文
# ============================================
jasypt:
encryptor:
password: ${JASYPT_ENCRYPTOR_PASSWORD:}
algorithm: PBEWITHHMACSHA512ANDAES_256
iv-generator-classname: org.jasypt.iv.RandomIvGenerator