handle sensitive data

easepan · easepan · commit d0fe7e1d5260 · 2018-09-23T17:20:40.000+08:00
diff --git a/src/main/java/com/zhazhapan/util/Checker.java b/src/main/java/com/zhazhapan/util/Checker.java
@@ -288,7 +288,6 @@ public static <T> CheckResult<T> checkBean(Object bean, Map<String, Object> map)
         for (Field field : fields) {
             FieldChecking checking = field.getAnnotation(FieldChecking.class);
             if (isNotNull(checking)) {
-                field.setAccessible(true);
                 String expression = checking.expression();
                 Object value;
                 try {
@@ -304,6 +303,7 @@ public static <T> CheckResult<T> checkBean(Object bean, Map<String, Object> map)
                 // 设置默认值
                 if (isNull(value) && isNotEmpty(checking.defaultValue())) {
                     try {
+                        field.setAccessible(true);
                         field.set(bean, checking.defaultValue());
                         continue;
                     } catch (IllegalAccessException e) {
diff --git a/src/main/java/com/zhazhapan/util/annotation/SensitiveData.java b/src/main/java/com/zhazhapan/util/annotation/SensitiveData.java
@@ -0,0 +1,14 @@
+package com.zhazhapan.util.annotation;
+
+import java.lang.annotation.*;
+
+/**
+ * 此注解仅作用于 {@link String} 类型
+ *
+ * @author pantao
+ * @since 2018/9/23
+ */
+@Documented
+@Target(ElementType.FIELD)
+@Retention(RetentionPolicy.RUNTIME)
+public @interface SensitiveData {}
diff --git a/src/main/java/com/zhazhapan/util/web/BaseController.java b/src/main/java/com/zhazhapan/util/web/BaseController.java
@@ -1,11 +1,13 @@
 package com.zhazhapan.util.web;
 
-import com.zhazhapan.modules.constant.ValueConsts;
 import com.zhazhapan.util.Checker;
+import com.zhazhapan.util.LoggerUtils;
+import com.zhazhapan.util.annotation.SensitiveData;
 import com.zhazhapan.util.model.CheckResult;
 import com.zhazhapan.util.model.ResultObject;
 
 import javax.servlet.http.HttpServletRequest;
+import java.lang.reflect.Field;
 
 /**
  * @author pantao
@@ -17,12 +19,25 @@ public class BaseController {
 
     private String token;
 
+    private boolean checkSensitiveData = false;
+
+    private String sensitiveDataTip = "******";
+
     public BaseController() {}
 
+    public BaseController(boolean checkSensitiveData) {
+        this.checkSensitiveData = checkSensitiveData;
+    }
+
     public BaseController(HttpServletRequest request) {
         this.request = request;
     }
 
+    public BaseController(HttpServletRequest request, boolean checkSensitiveData) {
+        this.request = request;
+        this.checkSensitiveData = checkSensitiveData;
+    }
+
     protected String getToken() {
         if (Checker.isEmpty(token)) {
             token = request.getHeader("token");
@@ -56,7 +71,21 @@ protected ResultObject parseResult(String okMsg, String errMsg, boolean isOk) {
 
     protected <T> ResultObject<T> parseResult(String okMsg, String errMsg, T t) {
         if (Checker.isNull(t)) {
-            return new ResultObject<>(400, errMsg, ValueConsts.ERROR_EN);
+            return CheckResult.getErrorResult(errMsg);
+        }
+        if (checkSensitiveData) {
+            Field[] fields = t.getClass().getDeclaredFields();
+            try {
+                for (Field field : fields) {
+                    SensitiveData sensitiveData = field.getAnnotation(SensitiveData.class);
+                    if (Checker.isNotNull(sensitiveData) && field.getType() == String.class) {
+                        field.setAccessible(true);
+                        field.set(t, sensitiveDataTip);
+                    }
+                }
+            } catch (IllegalAccessException e) {
+                LoggerUtils.error("set sensitive data error: {}", e.getMessage());
+            }
         }
         return new ResultObject<>(okMsg, t);
     }
diff --git a/src/test/java/com/zhazhapan/util/CommonsTest.java b/src/test/java/com/zhazhapan/util/CommonsTest.java
@@ -4,6 +4,7 @@
 import com.zhazhapan.util.annotation.ToJsonString;
 import com.zhazhapan.util.enums.JsonType;
 import com.zhazhapan.util.model.ResultObject;
+import com.zhazhapan.util.model.TestBean;
 import org.junit.Test;
 
 import java.lang.reflect.InvocationTargetException;
@@ -18,9 +19,15 @@
  */
 public class CommonsTest {
 
+    @Test
+    public void testRefelect() throws NoSuchFieldException {
+        assert TestBean.class.getField("username").getType() == String.class;
+        assert TestBean.class.getField("age").getType() != String.class;
+    }
+
     @Test
     public void testResultObject() {
-        ResultObject resultObject = new ResultObject();
+        ResultObject<String> resultObject = new ResultObject<>();
         System.out.println(resultObject.setCode(200).setMessage("ok").setData("everything is ok"));
     }
 
