springboot项目使用proguard配置代码混淆

SpringBoot项目使用proguard配置代码混淆

代码混淆是一些软件开发过程中必不可少的步骤。常用的代码混淆技术有proguard Maven plugin ,yguard maven plugin,procyon maven plugin,dex maven plugin .这些代码混淆技术大同小异，都是对maven打包生成class时进行干预，来完成对java字节码的代码混淆。本文以springboot项目使用proguard为例，讲一下如何使用proguard完成代码混淆。

物料准备:
1.pom引入proguard-maven-plugin插件
2.在proguard.cfg配置文件里设置具体的代码混淆配置
3.maven package 打包测试

pom.xml配置proguard插件

<project xmlns="Http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">    <modelVersion>4.0.0modelVersion>    <groupId>cn.thinkpetgroupId>    <artifactId>springboot-app-scaffoldartifactId>    <version>0.0.1-SNAPSHOTversion>    <name>springboot-app-scaffoldname>    <description>Demo project for Spring Bootdescription>    <properties>        <java.version>1.8java.version>        <project.build.sourceEncoding>UTF-8project.build.sourceEncoding>        <project.reporting.outputEncoding>UTF-8project.reporting.outputEncoding>        <spring-boot.version>2.4.2spring-boot.version>    properties>    <dependencies>        <dependency>            <groupId>cn.hutoolgroupId>            <artifactId>hutool-allartifactId>            <version>5.8.16version>        dependency>        <dependency>            <groupId>org.dom4jgroupId>            <artifactId>dom4jartifactId>            <version>2.0.0version>        dependency>        <dependency>            <groupId>org.springframework.bootgroupId>            <artifactId>spring-boot-starter-WEBartifactId>        dependency>        <dependency>            <groupId>org.springframework.bootgroupId>            <artifactId>spring-boot-starter-validationartifactId>        dependency>        <dependency>            <groupId>org.springframework.bootgroupId>            <artifactId>spring-boot-configuration-processorartifactId>        dependency>                 <dependency>            <groupId>org.apache.cxfgroupId>            <artifactId>cxf-spring-boot-starter-jaxwsartifactId>            <version>3.2.4version>        dependency>        <dependency>            <groupId>org.projectlombokgroupId>            <artifactId>lombokartifactId>            <optional>trueoptional>        dependency>        <dependency>            <groupId>org.springframework.bootgroupId>            <artifactId>spring-boot-starter-testartifactId>            <scope>testscope>        dependency>    dependencies>    <dependencyManagement>        <dependencies>            <dependency>                <groupId>org.springframework.bootgroupId>                <artifactId>spring-boot-dependenciesartifactId>                <version>${spring-boot.version}version>                <type>pomtype>                <scope>importscope>            dependency>        dependencies>    dependencyManagement>    <build>        <plugins>            <plugin>                <groupId>org.apache.maven.pluginsgroupId>                <artifactId>maven-compiler-pluginartifactId>                <version>3.8.1version>                <configuration>                    <source>1.8source>                    <target>1.8target>                    <encoding>UTF-8encoding>                configuration>            plugin>            <plugin>                <groupId>com.GitHub.wvengengroupId>                <artifactId>proguard-maven-pluginartifactId>                <version>2.6.0version>                <executions>                    <execution>                        <phase>packagephase>                        <Goals><goal>proguardgoal>                        goals>                    execution>                executions>                <configuration>                            <proguardVersion>7.2.2proguardVersion>                              <injar>${project.build.finalName}.jarinjar>                      <outjar>${project.build.finalName}.jaroutjar>                      <proguardInclude>${project.basedir}/proguard.cfgproguardInclude>                      <libs>                        <lib>${java.home}/lib/rt.jarlib>                        <lib>${java.home}/lib/jce.jarlib>                        <lib>${java.home}/lib/jsse.jarlib>                    libs>                         <outputDirectory>${project.basedir}/targetoutputDirectory>                configuration>            plugin>            <plugin>                <groupId>org.springframework.bootgroupId>                <artifactId>spring-boot-maven-pluginartifactId>                <version>${spring-boot.version}version>                <executions>                    <execution>                        <id>repackageid>                        <goals><goal>repackagegoal>                        goals>                        <configuration><mainClass>cn.thinkpet.springbootappscaffold.SpringbootAppScaffoldApplicationmainClass>                        configuration>                    execution>                executions>                <configuration>                    <addResources>trueaddResources>                configuration>            plugin>        plugins>        <resources>            <resource>                <directory>src/main/javadirectory>                <includes>                    <include>***.xmlinclude>                includes>                <filtering>falsefiltering>            resource>            <resource>                <directory>src/main/resourcesdirectory>                <includes>                    <include>***.xmlinclude>                    <include>**Dockerfileinclude>                    <include>***.xlsxinclude>                includes>                <filtering>falsefiltering>            resource>        resources>    build>project>

配置proguard.cfg文件

需要注意这个文件要配置到maven项目的根目录下

#jdk版本1.8#-target 1.8#不做收缩(不删除注释以及未被引用的代码)-dontshrink#不做优化(不变更代码实现逻辑)-dontoptimize#-dontobfuscate#-microedition#不使用大小写混合,混淆后的类名为小写-dontusemixedcaseclassnames#使用唯一的类名来混淆-useuniqueclaSSMembernames#允许访问并修改有修饰符的类和类的成员-allowaccessmodification#保持 包名不变-keeppackagenames#需要保持的属性：异常，内部类，注解等-keepattributes Exceptions,InnerClass,Signature,Deprecated,SourceFile,LineNumberTable,LocalVariable*Table,*Annotation*,Synthetic,EnclosingMethod#spring 相关的注解，不要混淆-keepclassmembers class * {  @org.springframework.** *;  @org.springframework.beans.factory.annotation.Autowired >;  @org.springframework.beans.factory.annotation.Autowired >;  @javax.annotation.PostConstruct *;  @javax.annotation.PreDestroy *;  @javax.annotation.Resource *;  @org.springframework.scheduling.annotation.Async >;}#不混淆所有的get/set方法-keepclassmembers public class *{  void set*(***); *** get*();}-keepnames interface ** {*;}-keep interface * extends * {*;}-keepparameternames-keepclassmembers enum * {*;}# 保持启动类不变-keep public class cn.thinkpet.springbootappscaffold.SpringbootAppScaffoldApplication {*;}#不混淆被Component等注解标记的类-keep @org.springframework.stereotype.Component class * {*;}-keep @org.springframework.stereotype.Service class * {*;}-keep @org.springframework.web.bind.annotation.RestController class * {*;}-keep @org.springframework.context.annotation.Configuration class * {*;}#-keep @org.aspectj.lang.annotation.Aspect class * {*;}-adaptclassstrings#跳过非公共库的类-skipnonpubliclibraryclasses#忽略警告-ignorewarnings-dontnote# 打印配置内容-printconfiguration# 配置不混淆某些类-keep class org.slf4j.** {*;}

打包测试

执行命令

mvn clean package -DskipTests

观察控制台，等待打包完成后，看下target目录如下

图中的
springboot-app-springbootappscaffold-0.0.1-SNAPSHOT.jar 即为代码混淆后的jar包

proguard_map.txt里记录了jar里哪些代码被混淆了，
如Apple.class 被混淆成 a.class 这种详细的内容 ，它是依据proguard.cfg里配置的项目来进行代码混淆的。

来源地址：https://blog.csdn.net/ThinkPet/article/details/131196712