Jpa @Converter 获取实体的 id

Question

问题

我需要在实体级别（而不是控制器级别）散列用户密码，@Converter 似乎是正确的选择，使用 JavaEE，没有 spring。

给我看代码

这里使用 Jpa AttributeConverter 的代码：

import java.nio.charset.StandardCharsets;

import javax.inject.Inject;

import javax.persistence.AttributeConverter;

import javax.persistence.Converter;

import org.slf4j.Logger;

import org.slf4j.LoggerFactory;

import com.google.common.hash.Hashing;

@Converter

public class JPACryptoConverter implements AttributeConverter<String, String> {

    private static Logger logger = LoggerFactory.getLogger(JPACryptoConverter.class);

    private String salt = "helloWorld";

    @Inject

    private UserRepository userRepository;

    @Override

    public String convertToDatabaseColumn(String sensitive) {

        return Hashing.sha512().hashString(salt + sensitive, StandardCharsets.UTF_8).toString();

    }

    @Override

    public String convertToEntityAttribute(String sensitive) {

        String tmp = Hashing.sha512().hashUnencodedChars(sensitive).toString();

        return tmp.substring(0, salt.length());

    }

}

我想将 salt 字符串替换为用户表上实体定义的 salt，但如何获取此信息？

为了获取此信息，我需要使用实体 id 访问 userRepository 并获取 salt，有没有办法使用 @Converter 查找此信息？

注意：我尝试过使用生命周期侦听器、预加载、预更新、预持久化，但是因为我使用的是 jpa Criteria，所以在查询之后调用侦听器

Answer 1

我不知道你到底想要什么，是你想要在存储到数据库之前散列用户的密码？您创建了一个转换器并想使用它？要做的是添加@Convert(converter = JPACryptoConverter.class)@Entityclass UserEntity {&nbsp; &nbsp; @Column(name = "pw")&nbsp; &nbsp; @Convert(converter = JPACryptoConverter.class)&nbsp; &nbsp; private String pw;}并请从您的 JPACryptoConverter 中删除 @Converter。它只是：public class JPACryptoConverter implements AttributeConverter<String, String>...不是：@Converterpublic class JPACryptoConverter implements AttributeConverter<String, String>...//To using Strong pw hash&nbsp;public static String hash(String plainPassword) {&nbsp; &nbsp; if (StringUtils.isBlank(plainPassword)) {&nbsp; &nbsp; &nbsp; &nbsp; throw new EmptyPasswordException("Password could not be empty");&nbsp; &nbsp; }&nbsp; &nbsp; return BCrypt.hashpw(plainPassword, BCrypt.gensalt());}public static boolean checkPassword(String plainPassword, String hash) {&nbsp; &nbsp; return BCrypt.checkpw(plainPassword, hash);}

Answer 2

如果用于 SpringBoot 中的身份验证，那么您应该使用 WebSecurityConfigurereAdapter 并实现配置方法。并有这样的事情：@Overridepublic void configure(AuthenticationManagerBuilder auth) throws Exception {&nbsp; &nbsp; auth.userDetailsService(userDetailsServiceImpl).passwordEncoder(passwordEncoder());}private PasswordEncoder passwordEncoder() {&nbsp; &nbsp; return new PasswordEncoder() {&nbsp; &nbsp; &nbsp; &nbsp; @Override&nbsp; &nbsp; &nbsp; &nbsp; public String encode(CharSequence charSequence) {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return charSequence.toString();&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; &nbsp; &nbsp; @Override&nbsp; &nbsp; &nbsp; &nbsp; public boolean matches(CharSequence charSequence, String s) {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; return charSequence.toString().equals(s);&nbsp; &nbsp; &nbsp; &nbsp; }&nbsp; &nbsp; };}