// AES 工具類（128位密鑰）
public class AESUtils {
    private static final String KEY = "your_16bit_secret_key";
    private static final String ALGORITHM = "AES/ECB/PKCS5Padding";
    public static String encrypt(String data) throws Exception {
        Cipher cipher = Cipher.getInstance(ALGORITHM);
        cipher.init(Cipher.ENCRYPT_MODE, new SecretKeySpec(KEY.getBytes(), "AES"));
        return Base64.getEncoder().encodeToString(cipher.doFinal(data.getBytes()));
    }
    public static String decrypt(String data) throws Exception {
        Cipher cipher = Cipher.getInstance(ALGORITHM);
        cipher.init(Cipher.DECRYPT_MODE, new SecretKeySpec(KEY.getBytes(), "AES"));
        return new String(cipher.doFinal(Base64.getDecoder().decode(data)));
    }
}

// RSA 工具類（生成公鑰私鑰對(duì)）
public class RSAUtils {
    private static final int KEY_SIZE = 1024;
    private static final String ALGORITHM = "RSA";
    public static Map<String, String> generateKeyPair() throws Exception {
        KeyPairGenerator generator = KeyPairGenerator.getInstance(ALGORITHM);
        generator.initialize(KEY_SIZE);
        KeyPair pair = generator.generateKeyPair();
        return Map.of(
            "publicKey", Base64.getEncoder().encodeToString(pair.getPublic().getEncoded()),
            "privateKey", Base64.getEncoder().encodeToString(pair.getPrivate().getEncoded())
        );
    }
}

@Target(ElementType.METHOD)
@Retention(RetentionPolicy.RUNTIME)
public @interface Encrypt {
    // 排除字段（如時(shí)間戳等無(wú)需加密字段）
    String[] excludeFields() default {};
}
@Target(ElementType.METHOD)
@Retention(RetentionPolicy.RUNTIME)
public @interface Decrypt {
    // 解密失敗是否拋出異常
    boolean throwOnFailure() default true;
}

@Aspect
@Component
public class DataEncryptAspect {
    @Around("@annotation(Encrypt)")
    public Object encryptAround(ProceedingJoinPoint joinPoint) throws Throwable {
        // 執(zhí)行原始方法
        Object result = joinPoint.proceed();
        // 對(duì)響應(yīng)結(jié)果進(jìn)行AES加密
        return AESUtils.encrypt(JSON.toJSONString(result));
    }
    @Around("@annotation(Decrypt)")
    public Object decryptAround(ProceedingJoinPoint joinPoint) throws Throwable {
        // 獲取請(qǐng)求參數(shù)（假設(shè)參數(shù)為JSON字符串）
        Object[] args = joinPoint.getArgs();
        String encryptedData = (String) args[0];
        // 解密請(qǐng)求參數(shù)
        String decryptedData = AESUtils.decrypt(encryptedData);
        // 替換原始參數(shù)為解密后的數(shù)據(jù)
        args[0] = decryptedData;
        return joinPoint.proceed(args);
    }
}

@RestController
@RequestMapping("/api")
public class UserController {
    @PostMapping("/register")
    @Decrypt
    public UserRegisterResponse register(@RequestBody String encryptedData) {
        // 處理解密后的明文數(shù)據(jù)
        UserRegisterRequest request = JSON.parseObject(encryptedData, UserRegisterRequest.class);
        // 業(yè)務(wù)邏輯...
        return new UserRegisterResponse("注冊(cè)成功", request.getUserId());
    }
    @GetMapping("/profile")
    @Encrypt
    public UserProfile getProfile(@RequestParam String userId) {
        // 業(yè)務(wù)邏輯獲取用戶信息
        return new UserProfile("張三", "138****1234");
    }
}

@Component
public class DataEncryptFilter implements Filter {
    @Override
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) 
            throws IOException, ServletException {
        // 處理請(qǐng)求解密（假設(shè)請(qǐng)求體為加密的JSON）
        HttpServletRequest httpRequest = (HttpServletRequest) request;
        String encryptedBody = IOUtils.toString(httpRequest.getInputStream(), StandardCharsets.UTF_8);
        String decryptedBody = AESUtils.decrypt(encryptedBody);


        // 包裝請(qǐng)求體為可重復(fù)讀取的流
        HttpServletRequestWrapper requestWrapper = new HttpServletRequestWrapper(httpRequest, decryptedBody);


        // 處理響應(yīng)加密
        final ByteArrayOutputStream buffer = new ByteArrayOutputStream();
        HttpServletResponseWrapper responseWrapper = new HttpServletResponseWrapper((HttpServletResponse) response, buffer);


        chain.doFilter(requestWrapper, responseWrapper);


        // 對(duì)響應(yīng)結(jié)果加密并寫(xiě)出
        String encryptedResult = AESUtils.encrypt(buffer.toString());
        response.getWriter().write(encryptedResult);
    }
}
// 請(qǐng)求包裝類（重寫(xiě)getInputStream）
class HttpServletRequestWrapper extends HttpServletRequestWrapper {
    private final String body;
    public HttpServletRequestWrapper(HttpServletRequest request, String body) {
        super(request);
        this.body = body;
    }
    @Override
    public ServletInputStream getInputStream() throws IOException {
        final ByteArrayInputStream bis = new ByteArrayInputStream(body.getBytes());
        return new ServletInputStream() {
            @Override
            public int read() throws IOException {
                return bis.read();
            }
            // 省略其他抽象方法實(shí)現(xiàn)
        };
    }
}

@Configuration
public class FilterConfig {
    @Bean
    public FilterRegistrationBean<DataEncryptFilter> encryptFilterRegistration() {
        FilterRegistrationBean<DataEncryptFilter> registration = new FilterRegistrationBean<>();
        registration.setFilter(new DataEncryptFilter());
        registration.addUrlPatterns("/api/v1/**"); // 配置需要加解密的接口路徑
        registration.setOrder(Ordered.HIGHEST_PRECEDENCE); // 保證過(guò)濾器優(yōu)先執(zhí)行
        return registration;
    }
}

public class EncryptingHttpMessageConverter extends AbstractHttpMessageConverter<Object> {
    @Override
    protected boolean supports(Class<?> clazz) {
        return true; // 支持所有類型
    }
    @Override
    protected Object readInternal(Class<?> clazz, HttpInputMessage inputMessage) 
            throws IOException, HttpMessageNotReadableException {
        // 讀取加密的請(qǐng)求體并解密
        String encrypted = IOUtils.toString(inputMessage.getBody(), StandardCharsets.UTF_8);
        String decrypted = AESUtils.decrypt(encrypted);
        return JSON.parseObject(decrypted, clazz);
    }
    @Override
    protected void writeInternal(Object object, HttpOutputMessage outputMessage) 
            throws IOException, HttpMessageNotWritableException {
        // 將響應(yīng)對(duì)象加密后寫(xiě)出
        String plain = JSON.toJSONString(object);
        String encrypted = AESUtils.encrypt(plain);
        outputMessage.getBody().write(encrypted.getBytes(StandardCharsets.UTF_8));
    }
}

@Configuration
public class WebMvcConfig implements WebMvcConfigurer {
    @Override
    public void configureMessageConverters(List<HttpMessageConverter<?>> converters) {
        converters.add(new EncryptingHttpMessageConverter());
        // 保留默認(rèn)轉(zhuǎn)換器（可選）
        // converters.addAll(Collections.singletonList(new MappingJackson2HttpMessageConverter()));
    }
}

@RestControllerAdvice
public class EncryptExceptionHandler {
    @ExceptionHandler(DecryptionException.class)
    public ResponseEntity<String> handleDecryptionError(DecryptionException e) {
        return ResponseEntity.status(HttpStatus.BAD_REQUEST)
                .body("數(shù)據(jù)解密失?。? + e.getMessage());
    }
}