feat(jasypt): 引入jasypt配置加密支持敏感信息脱敏

根pom与启动模块引入jasypt-spring-boot-starter， application.yml配置encryptor口令走环境变量/JVM参数注入。
2026-08-04 16:09:56 +08:00
parent 0cc3e3bec6
commit 3bfcaeca6c
3 changed files with 26 additions and 1 deletions
@@ -3,4 +3,14 @@ spring:
    name: jeecg-system
  profiles:
    active: '@profile.name@'
-    include: flow
+    include: flow
+
+# ============================================
+# 敏感配置加密（jasypt）
+# 口令 JASYPT_ENCRYPTOR_PASSWORD 走环境变量/JVM参数注入，严禁写死明文
+# ============================================
+jasypt:
+  encryptor:
+    password: ${JASYPT_ENCRYPTOR_PASSWORD:}
+    algorithm: PBEWITHHMACSHA512ANDAES_256
+    iv-generator-classname: org.jasypt.iv.RandomIvGenerator