package com.example.demo.entity;
import lombok.AllArgsConstructor;
import lombok.Data;
import lombok.NoArgsConstructor;
@Data                       //get,set 方法
@AllArgsConstructor         //有參構(gòu)造
@NoArgsConstructor          //無參構(gòu)造
public class User {
    private String username;
    private String password;
    private String salt;
    @Override
    public boolean equals(Object o) {
        if (this == o) return true;
        if (!(o instanceof User)) return false;
        User user = (User) o;
        if (getUsername() != null ? !getUsername().equals(user.getUsername()) : user.getUsername() != null)
            return false;
        if (getPassword() != null ? !getPassword().equals(user.getPassword()) : user.getPassword() != null)
            return false;
        return getSalt() != null ? getSalt().equals(user.getSalt()) : user.getSalt() == null;
    }
    @Override
    public int hashCode() {
        int result = getUsername() != null ? getUsername().hashCode() : 0;
        result = 31 * result + (getPassword() != null ? getPassword().hashCode() : 0);
        result = 31 * result + (getSalt() != null ? getSalt().hashCode() : 0);
        return result;
    }
}

spring.datasource.url=jdbc:mysql://localhost:3306/user?useUnicode=true&characterEncoding=utf-8&serverTimezone=Asia/Shanghai
spring.datasource.username=root
spring.datasource.password=123456
mybatis.mapper-locations=classpath:mapper/*.xml
#user.address.max-count=20
# 服務(wù)器向客戶端不響應(yīng)為null的屬性
#spring.jackson.default-property-inclusion=NON_NULL
# server.servlet.context-path=/store
# spring.servlet.multipart.maxFileSize=10MB
# spring.servlet.multipart.maxRequestSize=10MB

<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
<mapper namespace="com.example.demo.mapper.UserMapper">
    <!--    注冊(cè)-->
    <insert id="addUser">
        insert into user(username,password,salt) values (#{username},#{password},#{salt})
    </insert>
</mapper>

package com.example.demo.mapper;
import com.example.demo.entity.User;
import org.apache.ibatis.annotations.Mapper;
@Mapper
public interface UserMapper {
    void addUser(User user);
}

package com.example.demo.service;
import com.example.demo.entity.User;
import org.springframework.stereotype.Service;
public interface IUserService {
    void addUser(User user);
}

package com.example.demo.service.Impl;
import com.example.demo.entity.User;
import com.example.demo.mapper.UserMapper;
import com.example.demo.service.IUserService;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;
import org.springframework.util.DigestUtils;
import java.util.Date;
import java.util.Locale;
import java.util.UUID;
@Service
public class UserServiceImpl implements IUserService {
    @Autowired
    private UserMapper userMapper;
    @Override
    public void addUser(User user) {
        //密碼加密處理的實(shí)現(xiàn)：md5算法的形式
        //串 + password + 串 ------md5算法進(jìn)行加密，連續(xù)加載三次
        //鹽值 + password + 鹽值 --------- 鹽值就是一個(gè)隨機(jī)的字符串
        String oldPassword = user.getPassword();
        //獲取鹽值（隨機(jī)生成一個(gè)鹽值）
        String salt = UUID.randomUUID().toString().toUpperCase();
        //補(bǔ)全數(shù)據(jù)：鹽值的記錄
        user.setSalt(salt);
        //將密碼和鹽值作為一個(gè)整體加密處理,忽略原有密碼強(qiáng)度，提升了數(shù)據(jù)的安全性
        String md5Password = getMD5Password(oldPassword, salt);
        //將加密后的密碼重新補(bǔ)全設(shè)置到user對(duì)象中
        user.setPassword(md5Password);
        userMapper.addUser(user);
    }
    private String getMD5Password(String password,String salt){
        for (int i = 0;i <3; i++){
            //md5加密算法方法的調(diào)用(進(jìn)行三次加密)
            password = DigestUtils.md5DigestAsHex((salt+password+salt).getBytes()).toUpperCase();
        }
        //返回加密后的密碼
        return password;
    }
}

package com.example.demo.controller;
import com.example.demo.entity.User;
import com.example.demo.service.IUserService;
import com.example.demo.service.Impl.UserServiceImpl;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;
@RestController
public class UserController {
    @Autowired
    private IUserService iUserService;
    @RequestMapping("addUser")
    public String addUser(@RequestBody User user){
        System.out.println(user);
        iUserService.addUser(user);
        return "添加成功";
    }
}