feat: 敏感信息掩码

src/main/java/cn/quantgroup/customer/rest/UserRest.java

@@ -277,9 +277,9 @@ public class UserRest {
      *根据userId和phoneNo查询基本信息
      */
     @PostMapping(value = "/search/userInfo")
-    public JsonResult getBasicUserInfo(UserQueryParam userQueryParam) {
+    public JsonResult<UserBasicInfo> getBasicUserInfo(UserQueryParam userQueryParam) {
         //JsonResult result = userService.findUserInfoByUserParam(userQueryParam);
-        JsonResult result = userService.findUserInfoByUserParamNew(userQueryParam);
+        JsonResult<UserBasicInfo> result = userService.findUserInfoByUserParamNew(userQueryParam);
         if(!result.isSuccess()){
             return JsonResult.buildErrorStateResult(result.getMsg(),result.getData());
         }

src/main/java/cn/quantgroup/customer/service/impl/ThirdWorkOrderServiceImpl.java

@@ -12,6 +12,7 @@ import cn.quantgroup.customer.service.IThirdWorkOrderService;
 import cn.quantgroup.customer.util.DateUtil;
 import cn.quantgroup.customer.util.EasyExcelUtil;
 import cn.quantgroup.customer.util.MailUtil;
+import cn.quantgroup.customer.util.MaskingUtil;
 import cn.quantgroup.third.customer.entity.LhpdsSysUser;
 import cn.quantgroup.third.customer.entity.WorkflowProcessInstanceTaskAssignee;
 import cn.quantgroup.third.customer.repo.LhpdsCustomer2Repo;
@@ -201,7 +202,7 @@ public class ThirdWorkOrderServiceImpl implements IThirdWorkOrderService {
                 vo.setProcessDefinitionId(objects[8].toString());
             }
             if (objects[9] != null) {
-                vo.setRealContact(objects[9].toString());
+                vo.setRealContact(MaskingUtil.maskPhoneNumber(objects[9].toString()));
             }
             if (objects[10] != null) {
                 vo.setCreateTime(objects[10].toString());

src/main/java/cn/quantgroup/customer/service/impl/UserServiceImpl.java

@@ -150,6 +150,7 @@ public class UserServiceImpl implements IUserService {
                 it.setPrevPhoneNo(DesensitizeUtil.mobileDesensitization(it.getPrevPhoneNo()));
                 it.setCurPhoneNo(DesensitizeUtil.mobileDesensitization(it.getCurPhoneNo()));
                 it.setIdCard(DesensitizeUtil.idcardDesensitization(it.getIdCard()));
+                it.setName(MaskingUtil.maskName(it.getName()));
             }).collect(Collectors.toList());
 
             data.put("content", list);
@@ -1323,7 +1324,6 @@ public class UserServiceImpl implements IUserService {
             Map<String, String> header = Maps.newHashMap();
             header.put("Content-type", "application/x-www-form-urlencoded");
             String result = httpService.post(url, header, param);
-            System.out.println(result);
             JSONObject userJsonObject =null;
             if(result != null){
                 userJsonObject = JSONObject.parseObject(result);
@@ -1406,7 +1406,7 @@ public class UserServiceImpl implements IUserService {
             XUser xUser = (XUser) xUserData;
             userBasicInfo.setUserId(xUser.getId());
             userBasicInfo.setPhoneNo(DesensitizeUtil.phoneMark(xUser.getPhoneNo()));
-            userBasicInfo.setPhoneNumber(xUser.getPhoneNo());
+            userBasicInfo.setPhoneNumber(DesensitizeUtil.phoneMark(xUser.getPhoneNo()));
             String createAt = DateUtil.format(xUser.getCreatedAt(), DateUtil.DATE_FORMAT_1);
             userBasicInfo.setCreatedAt(createAt);
             Boolean enable = xUser.getEnable();
@@ -1423,7 +1423,7 @@ public class UserServiceImpl implements IUserService {
                 XUserDetail userDetail = (XUserDetail) detailUser;
                 userBasicInfo.setGender(userDetail.getGender().getName());
                 userBasicInfo.setIdNo(DesensitizeUtil.idNoMark(userDetail.getIdNo()));
-                userBasicInfo.setName(userDetail.getName());
+                userBasicInfo.setName(MaskingUtil.maskName(userDetail.getName()));
             }
         }
         return JsonResult.buildSuccessResult(null, userBasicInfo);

src/main/java/cn/quantgroup/customer/util/MaskingUtil.java

+package cn.quantgroup.customer.util;
+
+import org.apache.commons.lang3.StringUtils;
+
+public class MaskingUtil {
+
+    /**
+     * 对姓名进行掩码处理，只显示第一个字，其余用 * 号替换。
+     * 例如：张三 -> 张**
+     *
+     * @param name 姓名
+     * @return 掩码后的姓名
+     */
+    public static String maskName(String name) {
+        if (name == null || name.isEmpty()) {
+            return "";
+        }
+        // 姓名只显示第一个字
+        return name.charAt(0) + "**";
+    }
+
+    /**
+     * 对手机号进行掩码处理，只显示前三位和后四位，其余用 * 号替换。
+     * 例如：13812345678 -> 138****5678
+     *
+     * @param phoneNumber 手机号
+     * @return 掩码后的手机号
+     */
+    public static String maskPhoneNumber(String phoneNumber) {
+        if (StringUtils.isEmpty(phoneNumber) || phoneNumber.length() < 7) {
+            throw new IllegalArgumentException("手机号格式错误");
+        }
+        return phoneNumber.substring(0,3) + "****" + phoneNumber.substring(7);
+    }
+
+    /**
+     * 对收货地址进行掩码处理，只显示前两个字，其余用 * 号替换。
+     * 例如：广东省广州市天河区 -> 广东******
+     *
+     * @param address 收货地址
+     * @return 掩码后的收货地址
+     */
+    public static String maskAddress(String address) {
+        if (address == null || address.length() < 2) {
+            throw new IllegalArgumentException("地址格式错误");
+        }
+        return address.substring(0, 3) + "*********";
+    }
+
+}