简体   繁体   English

保护Spring Boot API Rest服务

[英]Securing a Spring boot api rest service

I have a spring boot api secured with spring basic security. 我有一个用spring基本安全性保护的spring boot api。 I call the api from another application. 我从另一个应用程序调用了api。 So I currently have the password in plain text in the application.yml files of my api and also the application.yml file from which I am calling the service. 因此,我目前在api的application.yml文件以及从中调用服务的application.yml文件中均具有纯文本格式的密码。

How can I avoid having it in plain text in the yml? 如何避免在yml中使用纯文本格式? is there a way to have an encrypted password in both yml files? 有没有办法在两个yml文件中都具有加密密码?

I ended up using Jasypt (Java Simplified Encryption). 我最终使用了Jasypt(Java简化加密)。 This was very helpful 非常有帮助

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM