import java.io.*;

// 可序列化的類
public class Person implements Serializable {
    // 序列化版本號（強(qiáng)烈建議）
    private static final long serialVersionUID = 1L;
    
    private String name;
    private int age;
    
    // transient 關(guān)鍵字：該字段不會被序列化
    private transient String password;
    
    public Person(String name, int age, String password) {
        this.name = name;
        this.age = age;
        this.password = password;
    }
    
    // getters and setters...
    @Override
    public String toString() {
        return "Person{name='" + name + "', age=" + age + ", password='" + password + "'}";
    }
}

public class SerializationDemo {
    public static void serialize(Object obj, String filename) throws IOException {
        try (ObjectOutputStream oos = new ObjectOutputStream(
                new FileOutputStream(filename))) {
            oos.writeObject(obj);
            System.out.println("對象序列化成功！");
        }
    }
    
    public static Object deserialize(String filename) throws IOException, ClassNotFoundException {
        try (ObjectInputStream ois = new ObjectInputStream(
                new FileInputStream(filename))) {
            Object obj = ois.readObject();
            System.out.println("對象反序列化成功！");
            return obj;
        }
    }
    
    public static void main(String[] args) {
        Person person = new Person("張三", 25, "123456");
        
        try {
            // 序列化
            serialize(person, "person.ser");
            
            // 反序列化
            Person deserializedPerson = (Person) deserialize("person.ser");
            System.out.println("反序列化后的對象: " + deserializedPerson);
            // 輸出: Person{name='張三', age=25, password='null'} (password為null因為transient)
            
        } catch (IOException | ClassNotFoundException e) {
            e.printStackTrace();
        }
    }
}

private static final long serialVersionUID = 1L;

private transient String password;  // 不會被序列化

public class CustomPerson implements Serializable {
    private String name;
    private int age;
    
    // 自定義序列化方法
    private void writeObject(ObjectOutputStream oos) throws IOException {
        oos.defaultWriteObject();  // 默認(rèn)序列化
        // 可以添加額外的序列化邏輯
    }
    
    // 自定義反序列化方法
    private void readObject(ObjectInputStream ois) 
            throws IOException, ClassNotFoundException {
        ois.defaultReadObject();  // 默認(rèn)反序列化
        // 可以添加額外的反序列化邏輯
    }
}

import java.io.*;

public class ExternalizablePerson implements Externalizable {
    private String name;
    private int age;
    
    // 必須有無參構(gòu)造器
    public ExternalizablePerson() {}
    
    public ExternalizablePerson(String name, int age) {
        this.name = name;
        this.age = age;
    }
    
    @Override
    public void writeExternal(ObjectOutput out) throws IOException {
        out.writeObject(name);
        out.writeInt(age);
    }
    
    @Override
    public void readExternal(ObjectInput in) 
            throws IOException, ClassNotFoundException {
        name = (String) in.readObject();
        age = in.readInt();
    }
}

// 反序列化可能存在安全風(fēng)險
Object obj = ois.readObject();  // 可能執(zhí)行惡意代碼

import com.fasterxml.jackson.databind.ObjectMapper;

ObjectMapper mapper = new ObjectMapper();

// 序列化為 JSON
String json = mapper.writeValueAsString(person);

// 從 JSON 反序列化
Person person = mapper.readValue(json, Person.class);

// 需要定義 .proto 文件
// 高性能、跨語言、體積小