构建坚不可摧的日志堡垒——Java日志系统的安全性与合规性管理深度解析

    import org.apache.commons.lang3.StringUtils;
    
    public class LogSanitizer {
    /** * 对输入字符串中的敏感信息进行遮蔽。
     * * @param originalString 原始字符串
     * @return 经过遮蔽处理后的字符串
     */
    public static String maskSensitiveInfo(String originalString) {
        // 假设我们要遮蔽所有以"password="开头并跟随任意数量非空字符的内容
        return StringUtils.replacePattern(originalString, "password=[^&]*", "password=***");
    }
    }

    import javax.crypto.Cipher;
    import javax.crypto.KeyGenerator;
    import javax.crypto.SecretKey;
    import javax.crypto.spec.GCMParameterSpec;
    import java.nio.file.Files;
    import java.nio.file.Paths;
    import java.security.SecureRandom;
    import java.util.Base64;
    
    public class LogEncryptor {
    
    private static final int GCM_TAG_LENGTH = 128; // 指定GCM模式下的标签长度
    private static final int IV_LENGTH = 12;       // 初始化向量长度
    
    /** * 使用AES/GCM/NoPadding模式加密给定的文本。
     * * @param plainText 明文
     * @param key       AES密钥
     * @return 已加密的数据
     * @throws Exception 如果加密过程中出现错误，则抛出异常
     */
    public static byte[] encrypt(String plainText, SecretKey key) throws Exception {
        Cipher cipher = Cipher.getInstance("AES/GCM/NoPadding");
        byte[] iv = new byte[IV_LENGTH];
        SecureRandom random = new SecureRandom();
        random.nextBytes(iv);
        GCMParameterSpec spec = new GCMParameterSpec(GCM_TAG_LENGTH, iv);
        cipher.init(Cipher.ENCRYPT_MODE, key, spec);
        byte[] encryptedData = cipher.doFinal(plainText.getBytes());
        byte[] combined = new byte[iv.length + encryptedData.length];
        System.arraycopy(iv, 0, combined, 0, iv.length);
        System.arraycopy(encryptedData, 0, combined, iv.length, encryptedData.length);
        return combined;
    }
    
    /** * 解密之前由本类加密的数据。
     * * @param combined 加密后的数据加上IV
     * @param key      AES密钥
     * @return 解密后的原文
     * @throws Exception 如果解密过程中出现错误，则抛出异常
     */
    public static String decrypt(byte[] combined, SecretKey key) throws Exception {
        Cipher cipher = Cipher.getInstance("AES/GCM/NoPadding");
        byte[] iv = Arrays.copyOfRange(combined, 0, IV_LENGTH);
        byte[] encryptedData = Arrays.copyOfRange(combined, IV_LENGTH, combined.length);
        GCMParameterSpec spec = new GCMParameterSpec(GCM_TAG_LENGTH, iv);
        cipher.init(Cipher.DECRYPT_MODE, key, spec);
        byte[] decryptedData = cipher.doFinal(encryptedData);
        return new String(decryptedData);
    }
    
    /** * 生成一个新的AES密钥。
     * * @return 新的AES密钥
     * @throws Exception 如果生成密钥失败，则抛出异常
     */
    public static SecretKey generateKey() throws Exception {
        KeyGenerator keyGen = KeyGenerator.getInstance("AES");
        keyGen.init(256); // 设置密钥长度为256位
        return keyGen.generateKey();
    }
    }

    import org.apache.logging.log4j.LogManager;
    import org.apache.logging.log4j.Logger;
    import org.apache.logging.log4j.ThreadContext;
    
    public class AuditLoggerExample {
    
    private static final Logger logger = LogManager.getLogger(AuditLoggerExample.class);
    
    /** * 在执行业务逻辑之前设置MDC变量。
     */
    public void setMdcVariables() {
        ThreadContext.put("userId", "user123"); // 用户ID
        ThreadContext.put("transactionId", "txn456"); // 交易ID
    }
    
    /** * 记录审计日志。
     * * @param action 执行的动作描述
     */
    public void logAuditEvent(String action) {
        logger.info("{} performed by {} in transaction {}", action, ThreadContext.get("userId"), ThreadContext.get("transactionId"));
    }
    
    /** * 清理MDC变量以避免内存泄漏。
     */
    public void clearMdcVariables() {
        ThreadContext.clearMap();
    }
    }