diff --git a/sa-token-demo/sa-token-demo-solon-redisson/src/main/java/com/pj/satoken/SaLogForSlf4j.java b/sa-token-demo/sa-token-demo-solon-redisson/src/main/java/com/pj/satoken/SaLogForSlf4j.java index 41f47c65d6a424dec9e3ab55b21ca6603f50907f..b1ccf4cae1ede19fa864293429a9d0153addf809 100644 --- a/sa-token-demo/sa-token-demo-solon-redisson/src/main/java/com/pj/satoken/SaLogForSlf4j.java +++ b/sa-token-demo/sa-token-demo-solon-redisson/src/main/java/com/pj/satoken/SaLogForSlf4j.java @@ -17,6 +17,22 @@ import org.slf4j.LoggerFactory; public class SaLogForSlf4j extends SaLogForConsole implements SaLog { static final Logger log = LoggerFactory.getLogger(SaLogForSlf4j.class); + // 添加敏感信息过滤器 + private static final Pattern SENSITIVE_PATTERN = + Pattern.compile("(token|password|secret|key)=([^&,\\s]+)", Pattern.CASE_INSENSITIVE); + + /** + * 过滤字符串中的敏感信息 + * + * @param msg 待处理的字符串 + */ + private String filterSensitiveInfo(String msg) { + if (msg == null) { + return null; + } + return SENSITIVE_PATTERN.matcher(msg).replaceAll("$1=***"); + } + /** * 打印日志到控制台 * @@ -27,23 +43,24 @@ public class SaLogForSlf4j extends SaLogForConsole implements SaLog { public void println(int level, String str, Object... args) { SaTokenConfig config = SaManager.getConfig(); + String filteredMsg = filterSensitiveInfo(format(str, args)); if (config.getIsLog() && level >= config.getLogLevelInt()) { switch (level) { case trace: - log.trace(LOG_PREFIX + StrFormatter.format(str, args)); + log.trace(LOG_PREFIX + StrFormatter.format(filteredMsg, args)); break; case debug: - log.debug(LOG_PREFIX + StrFormatter.format(str, args)); + log.debug(LOG_PREFIX + StrFormatter.format(filteredMsg, args)); break; case info: - log.info(LOG_PREFIX + StrFormatter.format(str, args)); + log.info(LOG_PREFIX + StrFormatter.format(filteredMsg, args)); break; case warn: - log.warn(LOG_PREFIX + StrFormatter.format(str, args)); + log.warn(LOG_PREFIX + StrFormatter.format(filteredMsg, args)); break; case error: case fatal: - log.error(LOG_PREFIX + StrFormatter.format(str, args)); + log.error(LOG_PREFIX + StrFormatter.format(filteredMsg, args)); break; } }