AI代码生成工具

app/Service/common/FieldEncryptService.php

@@ -0,0 +1,72 @@
+<?php
+
+namespace App\Service\common;
+
+use App\BaseApp\BaseNotAuthService;
+use App\Core\DatabaseEncryptor;
+
+/**
+ * 库内敏感字段加解密服务（API Key 等）
+ * 入库写 nl_ase_256_；读取兼容历史 ***
+ */
+class FieldEncryptService extends BaseNotAuthService
+{
+    private ?DatabaseEncryptor $encryptor = null;
+
+    /**
+     * 获取加解密器（懒加载，密钥来自 config/nl.php）
+     */
+    private function encryptor(): DatabaseEncryptor
+    {
+        if ($this->encryptor === null) {
+            $key = (string) config('nl.encrypt_key', '');
+            if ($key === '') {
+                $this->utils->errorThrow('未配置 ENCRYPT_KEY，无法加解密敏感字段');
+            }
+            $this->encryptor = new DatabaseEncryptor($key);
+        }
+        return $this->encryptor;
+    }
+
+    /**
+     * 入库前加密：明文 → nl_ase_256_...
+     *
+     * @param string|null $plain 明文
+     */
+    public function encryptForStorage(?string $plain): string
+    {
+        try {
+            return $this->encryptor()->encrypt($plain);
+        } catch (\Throwable $e) {
+            $this->utils->errorThrow('敏感字段加密失败：' . $e->getMessage());
+        }
+        return '';
+    }
+
+    /**
+     * 读取后解密：nl_ase_256_ / 历史 *** → 明文
+     *
+     * @param string|null $cipher 库内值
+     * @param bool $silentFail true 时解密失败返回空串；false 抛业务异常
+     */
+    public function decryptFromStorage(?string $cipher, bool $silentFail = false): string
+    {
+        try {
+            return $this->encryptor()->decrypt($cipher);
+        } catch (\Throwable $e) {
+            if ($silentFail) {
+                return '';
+            }
+            $this->utils->errorThrow('敏感字段解密失败：' . $e->getMessage());
+        }
+        return '';
+    }
+
+    /**
+     * 是否已是库内密文
+     */
+    public function isEncrypted(?string $value): bool
+    {
+        return DatabaseEncryptor::isEncrypted($value);
+    }
+}