1. 数据脱敏存储

hmit-api/src/main/java/io/hmit/controller/ApiLoginController.java

@@ -157,7 +157,7 @@ public class ApiLoginController {
             Map<String,Object> user_map = (Map<String, Object>) userInfoByToken.get("personInfo");
             if (user_map.get("idNo") !=null){
                 //判断是否已经存在了这条信息
-                UserEntity oldUser=userService.queryByIdnum(URLEncoder.encode(user_map.get("idNo").toString(), "UTF8"));
+                UserEntity oldUser=userService.queryByIdnum(SMUtil.SM4Encrypt(URLEncoder.encode(user_map.get("idNo").toString(), "UTF8")));
 
                 try {
                     userMap.put("userId", user_map.get("userId"));
@@ -169,9 +169,9 @@ public class ApiLoginController {
                     String idNo = user_map.get("idNo").toString();
                     UserEntity user=new UserEntity();
                     user.setUsername(user_map.get("userName").toString());
-                    user.setMobile(URLEncoder.encode(user_map.get("phone").toString(), "UTF8"));
+                    user.setMobile(SMUtil.SM4Encrypt(URLEncoder.encode(user_map.get("phone").toString(), "UTF8")));
                     user.setPassword(URLEncoder.encode(DigestUtils.sha256Hex(idNo), "UTF8"));
-                    user.setIdCardNo(URLEncoder.encode(idNo, "UTF8"));
+                    user.setIdCardNo(SMUtil.SM4Encrypt(URLEncoder.encode(idNo, "UTF8")));
                     userService.insert(user);
 
                     userId = user.getId();

hmit-api/src/main/java/io/hmit/resolver/LoginUserHandlerMethodArgumentResolver.java

 package io.hmit.resolver;
 
 import io.hmit.annotation.LoginUser;
+import io.hmit.common.utils.sm.SMUtil;
 import io.hmit.entity.UserEntity;
 import io.hmit.interceptor.AuthorizationInterceptor;
 import io.hmit.service.UserService;
@@ -41,6 +42,8 @@ public class LoginUserHandlerMethodArgumentResolver implements HandlerMethodArgu
 
         //获取用户信息
         UserEntity user = userService.getUserByUserId((Long) object);
+        user.setMobile(SMUtil.SM4Decrypt(user.getMobile()));
+        user.setIdCardNo(SMUtil.SM4Decrypt(user.getIdCardNo()));
 
         return user;
     }