73 lines
2.0 KiB
PHP
73 lines
2.0 KiB
PHP
<?php
|
||
|
||
namespace App\Service\common;
|
||
|
||
use App\BaseApp\BaseNotAuthService;
|
||
use App\Core\DatabaseEncryptor;
|
||
|
||
/**
|
||
* 库内敏感字段加解密服务（API Key 等）
|
||
* 入库写 nl_ase_256_；读取兼容历史 ***
|
||
*/
|
||
class FieldEncryptService extends BaseNotAuthService
|
||
{
|
||
private ?DatabaseEncryptor $encryptor = null;
|
||
|
||
/**
|
||
* 获取加解密器（懒加载，密钥来自 config/nl.php）
|
||
*/
|
||
private function encryptor(): DatabaseEncryptor
|
||
{
|
||
if ($this->encryptor === null) {
|
||
$key = (string) config('nl.encrypt_key', '');
|
||
if ($key === '') {
|
||
$this->utils->errorThrow('未配置 ENCRYPT_KEY，无法加解密敏感字段');
|
||
}
|
||
$this->encryptor = new DatabaseEncryptor($key);
|
||
}
|
||
return $this->encryptor;
|
||
}
|
||
|
||
/**
|
||
* 入库前加密：明文 → nl_ase_256_...
|
||
*
|
||
* @param string|null $plain 明文
|
||
*/
|
||
public function encryptForStorage(?string $plain): string
|
||
{
|
||
try {
|
||
return $this->encryptor()->encrypt($plain);
|
||
} catch (\Throwable $e) {
|
||
$this->utils->errorThrow('敏感字段加密失败：' . $e->getMessage());
|
||
}
|
||
return '';
|
||
}
|
||
|
||
/**
|
||
* 读取后解密：nl_ase_256_ / 历史 *** → 明文
|
||
*
|
||
* @param string|null $cipher 库内值
|
||
* @param bool $silentFail true 时解密失败返回空串；false 抛业务异常
|
||
*/
|
||
public function decryptFromStorage(?string $cipher, bool $silentFail = false): string
|
||
{
|
||
try {
|
||
return $this->encryptor()->decrypt($cipher);
|
||
} catch (\Throwable $e) {
|
||
if ($silentFail) {
|
||
return '';
|
||
}
|
||
$this->utils->errorThrow('敏感字段解密失败：' . $e->getMessage());
|
||
}
|
||
return '';
|
||
}
|
||
|
||
/**
|
||
* 是否已是库内密文
|
||
*/
|
||
public function isEncrypted(?string $value): bool
|
||
{
|
||
return DatabaseEncryptor::isEncrypted($value);
|
||
}
|
||
}
|