SpringBoot下整合Druid連接池的兩種方式（數據庫密碼加密及解密）

參考博客：

https://www.jianshu.com/p/4a8e56f557ea

https://blog.csdn.net/u010513756/article/details/80235876

 前言

在springboot中使用druid有兩種引包方式。一是“druid-spring-boot-starter”，二是“druid”。不同的引包方式配置也稍稍不同。

 

druid-spring-boot-starter方式

引入依賴

<dependency>
    <groupId>com.alibaba</groupId>
    <artifactId>druid-spring-boot-starter</artifactId>
    <version>1.1.10</version>
</dependency>

在application.yml中寫入配置

spring:
  datasource:
    driver-class-name: com.mysql.cj.jdbc.Driver
    url: 
    username: 
    password: 
    #druid連接池配置
    type: com.alibaba.druid.pool.DruidDataSource
    druid:
      #初始化時建立物理連接的個數
      initial-size: 5
      #最小連接池數量
      min-idle: 5
      #最大連接池數量 maxIdle已經不再使用
      max-active: 20
      #獲取連接時最大等待時間，單位毫秒
      max-wait: 60000
      #申請連接的時候檢測，如果空閒時間大於timeBetweenEvictionRunsMillis，執行validationQuery檢測連接是否有效。
      test-while-idle: true
      #既作爲檢測的間隔時間又作爲testWhileIdel執行的依據
      time-between-eviction-runs-millis: 60000
      #銷燬線程時檢測當前連接的最後活動時間和當前時間差大於該值時，關閉當前連接
      min-evictable-idle-time-millis: 30000
      #用來檢測連接是否有效的sql 必須是一個查詢語句
      #mysql中爲 select 'x'
      #oracle中爲 select 1 from dual
      validation-query: select 'x'
      #申請連接時會執行validationQuery檢測連接是否有效,開啓會降低性能,默認爲true
      test-on-borrow: false
      #歸還連接時會執行validationQuery檢測連接是否有效,開啓會降低性能,默認爲true
      test-on-return: false
      #當數據庫拋出不可恢復的異常時,拋棄該連接
      exception-sorter: true
      #是否緩存preparedStatement,mysql5.5+建議開啓
      pool-prepared-statements: true
      #當值大於0時poolPreparedStatements會自動修改爲true
      max-pool-prepared-statement-per-connection-size: 20
      #配置擴展插件
      filters: stat,wall,slf4j
      #通過connectProperties屬性來打開mergeSql功能；慢SQL記錄
      connection-properties: druid.stat.mergeSql=true;druid.stat.slowSqlMillis=5000
      #合併多個DruidDataSource的監控數據
      use-global-data-source-stat: true
      #設置訪問druid監控頁的賬號和密碼,默認沒有
      stat-view-servlet:
        login-username: admin
        login-password: admin

啓動項目驗證

 輸入項目地址拼上/druid/index.html

輸入配置文件中的賬號密碼

druid方式

 引入依賴

        <dependency>
            <groupId>com.alibaba</groupId>
            <artifactId>druid</artifactId>
            <version>1.1.9</version>
        </dependency>

在application.properties中寫入配置

#Mysql database
spring.datasource.driver-class-name=com.mysql.jdbc.Driver
#spring.datasource.url=
#spring.datasource.username=
#spring.datasource.password=

#連接池的設置
#初始化時建立物理連接的個數
spring.datasource.initialSize=5
#最小連接池數量
spring.datasource.minIdle=5
#最大連接池數量 maxIdle已經不再使用
spring.datasource.maxActive=20
#獲取連接時最大等待時間，單位毫秒
spring.datasource.maxWait=60000
#申請連接的時候檢測，如果空閒時間大於timeBetweenEvictionRunsMillis，執行validationQuery檢測連接是否有效。
spring.datasource.testWhileIdle=true
#既作爲檢測的間隔時間又作爲testWhileIdel執行的依據
spring.datasource.timeBetweenEvictionRunsMillis=60000
#銷燬線程時檢測當前連接的最後活動時間和當前時間差大於該值時，關閉當前連接
spring.datasource.minEvictableIdleTimeMillis=30000
#用來檢測連接是否有效的sql 必須是一個查詢語句
#mysql中爲 select 'x'
#oracle中爲 select 1 from dual
spring.datasource.validationQuery=select 'x'
#申請連接時會執行validationQuery檢測連接是否有效,開啓會降低性能,默認爲true
spring.datasource.testOnBorrow=false
#歸還連接時會執行validationQuery檢測連接是否有效,開啓會降低性能,默認爲true
spring.datasource.testOnReturn=false
#是否緩存preparedStatement,mysql5.5+建議開啓
spring.datasource.poolPreparedStatements=true
#當值大於0時poolPreparedStatements會自動修改爲true
spring.datasource.maxPoolPreparedStatementPerConnectionSize=20
#配置擴展插件
spring.datasource.filters=stat,wall,slf4j
#通過connectProperties屬性來打開mergeSql功能；慢SQL記錄
spring.datasource.connectionProperties=druid.stat.mergeSql=true;druid.stat.slowSqlMillis=5000
#合併多個DruidDataSource的監控數據
spring.datasource.useGlobalDataSourceStat=true

新建配置類DruidConfig讀取上面文件的配置

 

import javax.sql.DataSource;

import org.springframework.beans.factory.annotation.Value;
import org.springframework.boot.web.servlet.FilterRegistrationBean;
import org.springframework.boot.web.servlet.ServletRegistrationBean;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.context.annotation.Primary;

import com.alibaba.druid.pool.DruidDataSource;
import com.alibaba.druid.support.http.StatViewServlet;
import com.alibaba.druid.support.http.WebStatFilter;

import java.sql.SQLException;

/**
 * Druid連接池配置類
 */
@Configuration
public class DruidConfig {

    @Value("${spring.datasource.url}")
    private String dbUrl;
    @Value("${spring.datasource.username}")
    private String username;
    @Value("${spring.datasource.password}")
    private String password;
    @Value("${spring.datasource.driver-class-name}")
    private String driverClassName;
    @Value("${spring.datasource.initialSize}")
    private int initialSize;
    @Value("${spring.datasource.minIdle}")
    private int minIdle;
    @Value("${spring.datasource.maxActive}")
    private int maxActive;
    @Value("${spring.datasource.maxWait}")
    private int maxWait;
    @Value("${spring.datasource.timeBetweenEvictionRunsMillis}")
    private int timeBetweenEvictionRunsMillis;
    @Value("${spring.datasource.minEvictableIdleTimeMillis}")
    private int minEvictableIdleTimeMillis;
    @Value("${spring.datasource.validationQuery}")
    private String validationQuery;
    @Value("${spring.datasource.testWhileIdle}")
    private boolean testWhileIdle;
    @Value("${spring.datasource.testOnBorrow}")
    private boolean testOnBorrow;
    @Value("${spring.datasource.testOnReturn}")
    private boolean testOnReturn;
    @Value("${spring.datasource.poolPreparedStatements}")
    private boolean poolPreparedStatements;
    @Value("${spring.datasource.maxPoolPreparedStatementPerConnectionSize}")
    private int maxPoolPreparedStatementPerConnectionSize;
    @Value("${spring.datasource.filters}")
    private String filters;
    @Value("{spring.datasource.connectionProperties}")
    private String connectionProperties;

    @Bean   //聲明其爲Bean實例
    @Primary //在同樣的DataSource中，首先使用被標註的DataSource
    public DataSource dataSource(){
        DruidDataSource datasource = new DruidDataSource();
        datasource.setUrl(this.dbUrl);
        datasource.setUsername(username);
        datasource.setPassword(password);
        datasource.setDriverClassName(driverClassName);

        //configuration
        datasource.setInitialSize(initialSize);
        datasource.setMinIdle(minIdle);
        datasource.setMaxActive(maxActive);
        datasource.setMaxWait(maxWait);
        datasource.setTimeBetweenEvictionRunsMillis(timeBetweenEvictionRunsMillis);
        datasource.setMinEvictableIdleTimeMillis(minEvictableIdleTimeMillis);
        datasource.setValidationQuery(validationQuery);
        datasource.setTestWhileIdle(testWhileIdle);
        datasource.setTestOnBorrow(testOnBorrow);
        datasource.setTestOnReturn(testOnReturn);
        datasource.setPoolPreparedStatements(poolPreparedStatements);
        datasource.setMaxPoolPreparedStatementPerConnectionSize(maxPoolPreparedStatementPerConnectionSize);
        try {
            datasource.setFilters(filters);
        } catch (SQLException e) {
            System.err.println("druid configuration initialization filter: "+ e);
        }
        datasource.setConnectionProperties(connectionProperties);
        return datasource;
    }
    @Bean
    public ServletRegistrationBean statViewServlet(){
        //創建servlet註冊實體
        ServletRegistrationBean servletRegistrationBean = new ServletRegistrationBean(new StatViewServlet(),"/druid/*");
        //設置ip白名單
        servletRegistrationBean.addInitParameter("allow","127.0.0.1");
        //設置ip黑名單
        servletRegistrationBean.addInitParameter("deny","192.168.0.2");
        //設置控制檯管理用戶__登錄用戶名和密碼
        servletRegistrationBean.addInitParameter("loginUsername","druid");
        servletRegistrationBean.addInitParameter("loginPassword","123456");
        //是否可以重置數據
        servletRegistrationBean.addInitParameter("resetEnable","false");
        return servletRegistrationBean;
    }
    @Bean
    public FilterRegistrationBean statFilter(){
        //創建過濾器
        FilterRegistrationBean filterRegistrationBean = new FilterRegistrationBean(new WebStatFilter());
        //設置過濾器過濾路徑
        filterRegistrationBean.addUrlPatterns("/*");
        //忽略過濾的形式
        filterRegistrationBean.addInitParameter("exclusions","*.js,*.gif,*.png,*.css,*.ico,/druid/*");
        return filterRegistrationBean;
    }

}

啓動項目驗證

 

 數據庫密碼加密

基於第一種druid的配置

使用druid生成加密密碼

找到druid jar包的位置執行cmd命令

java -cp druid-1.1.10.jar com.alibaba.druid.filter.config.ConfigTools 密碼

privateKey:MIIBVARylePGNhpQhAiEA1kwaOwdpueozaMVRCBhurjxiKCRaLYKQ1Dq/J0//710CIQCnx8sNOMfvuIxCHdHzPBzmiRnnCF0H/qNLJdf6uBEbNwIgE8QvQzSa1vA4TIBADANBgkqhkiG9w0BAQEFAASCAT4wggE6AgEAAkEAjHLkPk/q4uhZfUfzIecNjODeQSGNUN+AU9dGeHAQX/Z9J1eEDOPtyEgfLMwanD0iOAd1nuG6jrOnTFa962g7+wIDAQABAkAcBcBsfl2LMHjKelSUaxlVBnjR3fPoMu/TypwQ46sgui06oAw2Z0sZggRRviCzmUVzmUSzerBZZ7irkcCXLPEa6LL5smrxqvHEQf8KD20CIE1gRrSCSzKy2XxkZD7YqjtnXxq9MKpPNN+jREfMO5dhAiEAux2IqAPnyZn+CpUjkG0B0dN0z0CdRb7EgWgFep7NunI=
publicKey:MFwwDQYJKoZIhvcNAuLoWX1H8yHnDYzg3kEhjVDfgFPXRnhwEF/2fSdXhAzj7chIHyzMGpw9IjgHdQEBBQADSwAwSAJBAIxy5D5P6Z7huo6zp0xWvetoO/sCAwEAAQ==
password:j6b+VCA7OErouBmtuJCqYPtH77V+l7chOUprh6rZVA==Mjkf3R2967wSSDJnQ6dFQByZZ38kN6nL9O7dlMv4A06B

 

修改application.yml

#database配置
password: 加密後的密碼

#druid
#插件配置，增加config
filters: stat,wall,slf4j,config
#config.decrypt=true; 讓ConfigFilter解密密碼
connection-properties: druid.stat.mergeSql=true;druid.stat.slowSqlMillis=5000;config.decrypt=true;config.decrypt.key=公鑰

 這裏容易出現個問題，因爲把加密後的密碼和公鑰都暴露在了配置文件，所以只要調用如下方法就可以解密

ConfigTools.decrypt(公鑰, 密碼);

建議將公鑰放到class配置文件中讀取，獲取讀取本地文件或者放在另外服務器讀取服務器。

 

編輯修改後：

公鑰和加密密碼不在放在配置文件，數據庫的url、username、password不寫在配置類，全部通過class配置類的形式寫入。

spring:
  datasource:
    #druid連接池配置
    type: com.alibaba.druid.pool.DruidDataSource
    druid:
      driver-class-name: com.mysql.cj.jdbc.Driver

 將加密密碼和公鑰放在配置類寫入就沒必要用加密的必要了，因爲還得解密。如果是將公鑰和加密密碼分別放在別處讀取過來則可以使用。

import com.alibaba.druid.filter.config.ConfigTools;
import com.zaxxer.hikari.HikariDataSource;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

import javax.sql.DataSource;

@Configuration
public class DataSourceConfig {

    @Value("${spring.datasource.druid.driver-class-name}")
    private String driverClassName;

    @Bean
    public DataSource dataSource() throws Exception {
        HikariDataSource dataSource = new HikariDataSource();
        dataSource.setDriverClassName(driverClassName);
        dataSource.setJdbcUrl("jdbc:mysql://XXXXXXXX:3306/XXXXXX?useUnicode=true&characterEncoding=utf-8");
        dataSource.setUsername("XXXX");
        //有需求可以將publicKey和password放在別處讀取，如本地文件或其它服務器
        dataSource.setPassword(ConfigTools.decrypt(publicKey, password));
        return dataSource;
    }

}