一：环境

1. 创建个spring boot 2.1.2版本
2. 有个能正常调用的接口

二：pom配置

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>
    <parent>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-parent</artifactId>
        <version>2.1.2.RELEASE</version>
        <relativePath/> <!-- lookup parent from repository -->
    </parent>
    <groupId>com.example</groupId>
    <artifactId>demo</artifactId>
    <version>0.0.1-SNAPSHOT</version>
    <name>demo</name>
    <description>Demo project for Spring Boot</description>

    <properties>
        <java.version>1.8</java.version>
    </properties>

    <dependencies>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter</artifactId>
        </dependency>
        <dependency>
            <groupId>com.alibaba</groupId>
            <artifactId>fastjson</artifactId>
            <version>1.2.41</version>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-web</artifactId>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-devtools</artifactId>
            <scope>runtime</scope>
            <optional>true</optional>
        </dependency>
        <dependency>
            <groupId>org.projectlombok</groupId>
            <artifactId>lombok</artifactId>
            <optional>true</optional>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-test</artifactId>
            <scope>test</scope>
            <exclusions>
                <exclusion>
                    <groupId>org.junit.vintage</groupId>
                    <artifactId>junit-vintage-engine</artifactId>
                </exclusion>
            </exclusions>
        </dependency>
    </dependencies>

    <build>
        <plugins>
            <plugin>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-maven-plugin</artifactId>
            </plugin>
        </plugins>
    </build>

</project>

三：创建个注解类

package com.example.demo.config;

import java.lang.annotation.*;

/**
 * @author huang(jy)
 * @version 1.0
 * @date 2020/5/8 14:39
 */
@Target(ElementType.METHOD)
@Retention(RetentionPolicy.RUNTIME)
//是否需要登录拦截
public @interface NeedLogin {
	//是否需要登录拦截，默认不需要
    boolean needLoginValue() default false;

}

四：创建自定义拦截器类

package com.example.demo.config;

import com.alibaba.fastjson.JSONObject;
import org.springframework.web.method.HandlerMethod;
import org.springframework.web.servlet.HandlerInterceptor;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.PrintWriter;


/**
 * @author huang(jy)
 * @version 1.0
 * @date 2020/5/8 14:48
 */
public class NeedLoginInterceptors implements HandlerInterceptor {


    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        //判断是否有注解
        boolean isNeed = handler.getClass().isAssignableFrom(HandlerMethod.class);
        if (isNeed) {
            //获取到这个注解信息
            NeedLogin needLogin = ((HandlerMethod) handler).getMethodAnnotation(NeedLogin.class);
            if (needLogin != null && needLogin.needLoginValue()) {
                return true;
            }
        }
        //重置response
        response.reset();
        //设置编码格式
        response.setCharacterEncoding("UTF-8");
        response.setContentType("application/json;charset=UTF-8");
        PrintWriter pw = response.getWriter();
        pw.write(JSONObject.toJSONString("无权限"));
        return false;
    }

}

五：拦截器注入WebMvcConfigurerAdapter

package com.example.demo.config;

import org.springframework.stereotype.Component;
import org.springframework.web.servlet.config.annotation.InterceptorRegistration;
import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;

/**
 * @author huang(jy)
 * @version 1.0
 * @date 2020/5/8 15:05
 */
@Component
public class WebMvcConfigurerAdapter implements WebMvcConfigurer {


    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        //注册NeedLoginInterceptors拦截器
        InterceptorRegistration registration = registry.addInterceptor(new NeedLoginInterceptors());
        registration.addPathPatterns("/**");//拦截所有路径
    }
}

六：测试是否生效
1.注解为：true，结果如下图

2.注解不填，默认为false，结果如下图（返回为拦截器里的提示信息）

3.不写注解，结果如下（返回为拦截器里的提示信息）；

总结：

创建注解类
自定义拦截器实现 HandlerInterceptor类，重写preHandle方法，在其实现判断逻辑
注入自定义的拦截器，实现WebMvcConfigurer ，重写addInterceptors方法，配置拦截所有路径

如有转载请请务必保留此出处：https://blog.csdn.net/hometing218/article/details/105998169

数据库中加密数据

新建注解类：

@Target({ElementType.FIELD})
@Retention(RetentionPolicy.RUNTIME)
public @interface EncryptField {
String value() default “”;
}

根据执行的sql包含update和query拦截到有注解的字段，通过反射机制获取指定参数的值：

@Target({ElementType.FIELD})
@Retention(RetentionPolicy.RUNTIME)
public @interface EncryptField {
    String value() default "";
}

```java
// 解密密拦截
@Intercepts({
        @Signature(type=Executor.class,method="update",args={MappedStatement.class,Object.class}),
        @Signature(type=Executor.class,method="query",args={MappedStatement.class,Object.class,RowBounds.class,ResultHandler.class})
})
public class ParameterInterceptor implements Interceptor {

    protected final Logger log = Logger.getLogger(getClass());

    public static final String  KEY = "BDA52970EFA896C18A5D37C0";

    @Override
    public Object intercept(Invocation invocation) throws Throwable {
        MappedStatement statement = (MappedStatement) invocation.getArgs()[0];
        String methodName = invocation.getMethod().getName();
        Object parameter = invocation.getArgs()[1];
        BoundSql sql = statement.getBoundSql(parameter);
        log.error(sql.getSql());
        Object returnValue = invocation.proceed();
        if(returnValue instanceof ArrayList<?>){
            List<?> list = (ArrayList<?>)returnValue;
            for(Object val:list){
                //通过反射获取修改参数
                Field[] fields = val.getClass().getDeclaredFields();
                for (int i = 0; i < fields.length; i++) {
                    fields[i].setAccessible(true);
                    if(fields[i].isAnnotationPresent(EncryptField.class) && fields[i].getType().toString().endsWith("String"))
                    {
                        String   data = "";
                        String par = (String) getFieldValueByName(fields[i].getName(),val);
                        try {
                            //AppDESUtil解密的方法，根据你自己需求定义
                            data = AppDESUtil.decrypt(par, KEY);
                            if (null == data || "".equals(data)){
                                data = par;
                            }
                        } catch (Exception e){
                            // 如果之前没有加密数据直接用直接前的
                            data = par;
                        }
                        fields[i].set(val,data);
                    }
                }

            }
        }
        return returnValue;
    }

    @Override
    public Object plugin(Object target) {
        return Plugin.wrap(target, this);
    }

    @Override
    public void setProperties(Properties properties) {
        // TODO Auto-generated method stub

    }

    /* 根据属性名获取属性值
     * */
    private static Object getFieldValueByName(String fieldName, Object o) {
        try {
            String firstLetter = fieldName.substring(0, 1).toUpperCase();
            String getter = "get" + firstLetter + fieldName.substring(1);
            Method method = o.getClass().getMethod(getter, new Class[] {});
            Object value = method.invoke(o, new Object[] {});
            return value;
        } catch (Exception e) {

            return null;
        }
    }


}

数据库的user实体类代码如下：

总结：数据库加上对应注解，update和query的语句进入实体找到注解的拦截器过滤解密在返回，如此写完解密的加上注解即可