2022年了，密码该如何保存都不会？！

publicinterface PasswordEncoder {
    String encode(CharSequence rawPassword);

    boolean matches(CharSequence rawPassword, String encodedPassword);

    default boolean upgradeEncoding(String encodedPassword){
        returnfalse;
    }
}

String plainPassword = "123456";
// 工作因子
int strength = 10;
BCryptPasswordEncoder bCryptPasswordEncoder = new BCryptPasswordEncoder(strength, new SecureRandom());
String encodedPassword = bCryptPasswordEncoder.encode(plainPassword);
System.out.println(encodedPassword);

$2a$10$pYxXvggEgN7znYKofHIr/uRTw.dsYeW9mbxzNMSNOoGIYZU8twXNG

String plainPassword = "123456";
//加密秘钥
String pepper = "小黑说JAVA";
// 哈希次数
int iterations = 200000;
// 哈希长度
int hashWidth = 256;

Pbkdf2PasswordEncoder pbkdf2PasswordEncoder = new Pbkdf2PasswordEncoder(pepper, iterations, hashWidth);
pbkdf2PasswordEncoder.setEncodeHashAsBase64(true);
String encodedPassword = pbkdf2PasswordEncoder.encode(plainPassword);
System.out.println(encodedPassword);

WnCG4wMZFHPAD9DGg+SChNceQqbeAZRQyf2OHCK5WKdYBRzbeAGsQg==

String plainPassword = "123456";
// cpu消耗
int cpuCost = (int) Math.pow(2, 14);
// 内存消耗
int memoryCost = 8;
// currently not supported by Spring Security
int parallelization = 1;
// 秘钥长度
int keyLength = 32;
// 盐值长度
int saltLength = 64;

SCryptPasswordEncoder sCryptPasswordEncoder = new SCryptPasswordEncoder(
    cpuCost,
    memoryCost,
    parallelization,
    keyLength,
    saltLength);
String encodedPassword = sCryptPasswordEncoder.encode(plainPassword);
System.out.println(encodedPassword);

$e0801$PgZZvXdDjbxMZJi4eidFCHblUdvwOT/n0FZFyCWIHloqL6Wkbk7bAJ2nwVIWsW9PJTodncEtok1qcaWR+u+pZg==$lcqK7ACDTv8gG3ZwGoz0X7rn4EnZvnEcZ7rS0Qq31Ng=

int saltLength = 16;
int hashLength = 32;
int parallelism = 1;
int memory = 4096;
int iterations = 3;

Argon2PasswordEncoder argon2PasswordEncoder = new Argon2PasswordEncoder(
    saltLength,
    hashLength,
    parallelism,
    memory,
    iterations);
String encodePassword = argon2PasswordEncoder.encode(plainPassword);

$argon2id$v=19$m=4096,t=3,p=1$uft4b+crs6tiwOhDnuFsIg$d/GXjYZnEw+/ubVnPqNeQDFX32GRYe+yTwuwydXLjos

@RestController
publicclass BlogRest {

    @GetMapping(path = "/blogs")
    public List<Blog> blogs(){
        return Lists.newArrayList(new Blog("hello world", "小黑说Java"));
    }
}

/**
 * @author 小黑说Java
 * @ClassName SecurityConfiguration
 * @Description
 * @date 2022/2/3
 **/
@Configuration
@EnableWebSecurity
publicclass SecurityConfiguration extends WebSecurityConfigurerAdapter {

    @Override
    protected void configure(HttpSecurity httpSecurity) throws Exception {
        httpSecurity
            .csrf()
            .disable()
            .authorizeRequests()
            .antMatchers("/registration")
            .permitAll()
            .anyRequest()
            .authenticated()
            .and()
            .httpBasic();
    }
    // other codes.
}

/**
 * @author 小黑说Java
 * @ClassName DataBaseUserDetailService
 * @Description
 * @date 2022/2/3
 **/
@Service
@Transactional
publicclass DataBaseUserDetailService implements UserDetailsService {

    privatefinal UserDAO userDAO;

    privatefinal UserMapper userMapper;

    public DataBaseUserDetailService(UserDAO userDAO, UserMapper userMapper){
        this.userDAO = userDAO;
        this.userMapper = userMapper;
    }

    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        User user = userDAO.selectByUserName(username);
        return userMapper.toUserDetails(user);
    }
}

@Configuration
@EnableWebSecurity
class SecurityConfiguration extends WebSecurityConfigurerAdapter {

    privatefinal DatabaseUserDetailsService databaseUserDetailsService;

    // constructor ...

    @Bean
    public AuthenticationProvider daoAuthenticationProvider(){
        DaoAuthenticationProvider provider = new DaoAuthenticationProvider();
        // 设置密码加密器
        provider.setPasswordEncoder(passwordEncoder2());
        // 设置用户信息查询服务
        provider.setUserDetailsService(this.databaseUserDetailsService);
        return provider;
    }

    @Bean
    public PasswordEncoder passwordEncoder(){
        returnnew BCryptPasswordEncoder();
    }

    // ...

}

@RestController
publicclass UserRest {

    privatefinal UserRegistrationService userRegistrationService;

    public UserRest(UserRegistrationService userRegistrationService){
        this.userRegistrationService = userRegistrationService;
    }

    @PostMapping("/registration")
    @ResponseStatus(code = HttpStatus.CREATED)
    public void register(@RequestBody UserDTO user){
        // 注册用户
        userRegistrationService.register(user);
    }
}

@Service
@Transactional
publicclass UserRegistrationService {

    privatefinal UserDAO userDAO;

    privatefinal PasswordEncoder passwordEncoder;

    public UserRegistrationService(UserDAO userDAO, PasswordEncoder passwordEncoder){
        this.userDAO = userDAO;
        this.passwordEncoder = passwordEncoder;
    }

    public void register(UserDTO userDTO){
        User user = new User();
        user.setUserStatus(UserStatusEnum.INFORCE.getStatus());
        user.setUsername(userDTO.getUsername());
        user.setPassword(passwordEncoder.encode(userDTO.getPassword()));
        userDAO.insert(user);
    }
}