### BCrypt ``` 強哈希算法 ``` ``` Spring Security提供了BCryptPasswordEncoder類,實現Spring的PasswordEncoder接口使用BCrypt強哈希方法來加密密碼 ``` ### 依賴 ~~~ <dependency> <groupId>org.springframework.boot</groupId> <artifactId>spring-boot-starter-security</artifactId> </dependency> ~~~ ### 添加依賴后，所有地址都被spring security所控制了，添加配置類，配置所有地址都可以匿名訪問 ~~~ @Configuration @EnableWebSecurity public class WebSecurityConfig extends WebSecurityConfigurerAdapter { @Override protected void configure(HttpSecurity http) throws Exception { http.authorizeRequests() .antMatchers("/**").permitAll() .anyRequest().authenticated() .and().csrf().disable(); } } ~~~ ### BCryptPasswordEncoder ~~~ @Bean public BCryptPasswordEncoder bCryptPasswordEncoder(){ return new BCryptPasswordEncoder(); } ~~~ ### 加密 ~~~ bCryptPasswordEncoder.encode("123456") ~~~ ### 校驗 ~~~ bCryptPasswordEncoder.matches("123456", "$2a$10$ALque7RFwlv3rqdDF5JdDebMsmsjIQRfFJYgJ.2IxUwxTMz.XAvBu") ~~~