Laravel敏感数据可逆加密与解密教程

<?php

namespace App\Http\Controllers;

use Illuminate\Support\Facades\Crypt;
use Illuminate\Http\Request;

class PasswordManagerController extends Controller
{
    public function storePassword(Request $request)
    {
        $plainTextPassword = $request->input('password_to_store');

        // 加密字符串
        $encryptedString = Crypt::encryptString($plainTextPassword);

        // 将 $encryptedString 存储到数据库中
        // 例如：
        // PasswordEntry::create([
        //     'user_id' => auth()->id(),
        //     'service_name' => $request->input('service_name'),
        //     'encrypted_password' => $encryptedString,
        // ]);

        return response()->json(['message' => '密码已加密存储']);
    }
}

<?php

namespace App\Http\Controllers;

use Illuminate\Support\Facades\Crypt;
use Illuminate\Http\Request;
use App\Models\PasswordEntry; // 假设您有一个PasswordEntry模型

class PasswordManagerController extends Controller
{
    public function showPassword($id)
    {
        // 从数据库中获取加密的密码
        $passwordEntry = PasswordEntry::findOrFail($id);
        $encryptedString = $passwordEntry->encrypted_password;

        try {
            // 解密字符串
            $decryptedPassword = Crypt::decryptString($encryptedString);

            return response()->json([
                'service_name' => $passwordEntry->service_name,
                'password' => $decryptedPassword
            ]);
        } catch (\Illuminate\Contracts\Encryption\DecryptException $e) {
            // 处理解密失败的情况，例如APP_KEY变更或数据损坏
            return response()->json(['error' => '无法解密密码，请联系管理员。'], 500);
        }
    }
}