jasypt-spring-boot
jasypt-spring-boot copied to clipboard
Maven plugin incorrectly encrypts passwords with ")" in
Example Input password=DEC(aaa)bbb)
Output: password=ENC(aNUBHFyXZxvq4hGBSRSOSmwK0ZEZVvp/1fBP0mTUR9zyyFuGeS4zprlUZuJO2qH6)bbb)
It has only encrypted the "aaa". and the trailing "bbb)" has been copied across in plaintext.
Presumably because the regex at: https://github.com/ulisesbocchio/jasypt-spring-boot/blob/master/jasypt-maven-plugin/src/main/java/com/ulisesbocchio/jasyptmavenplugin/encrypt/EncryptionService.java#L56
is not greedy, so it matches on the first ")" it find.
I'll see if I can write a fix and send a PR.
Good Morning, @markvr.
I faced same trouble and I have used as workaround changing jasypt prefix and suffix in the pom.xml configuration:
<jasypt.plugin.decrypt.prefix>DEC('</jasypt.plugin.decrypt.prefix> <jasypt.plugin.decrypt.suffix>')</jasypt.plugin.decrypt.suffix> <jasypt.plugin.encrypt.prefix>ENC('</jasypt.plugin.encrypt.prefix> <jasypt.plugin.encrypt.suffix>')</jasypt.plugin.encrypt.suffix>
Now, you can define configuration below described and it should run fine.
password=DEC('aaa)bbb')
Regards.