decryption while fetching data from database

Question

I am working on Spring MVC project with Hibernate. I have an table where some columns having encrypted data. Whenever I want to fetch data (unique result or list) I have to loop over the data and perform decryption logic then again set into models/entity.

Currently we are doing like :

            query = session.createSQLQuery("SELECT C.* FROM CITY C");
            query.addEntity(City.class);                
            List<City> list = query.list();
            for (City city : list)
            {
                city.setName(AESHelper.decrypt(city.getName(), "key"));
            }

can we have something in Hibernate by using we can apply such logic while hibernate is transforming data into entity, can we use ResultTransformer for this?

Zeus · Accepted Answer · 2014-12-10 19:04:51Z

1

You can use ResultTransformer without doubt. But, if you have a lot of columns/entities which requires this then use Hibernate Interceptors.

In your example annotate name with custom annotation like below

City {
 @CustomAnnotation(decrypt = true) 
 private String name;
..
}

Within the interceptor when ever data is loaded, check the entities property for this custom annotation. If it is set to true then decrypt it.

This approach is non intrusive.

Example

Update: ResultTransformer

sess.createSQLQuery("SELECT name from City where name like 'xxyy'")
        .setResultTransformer(new ResultTransformer(){
   Object transformTuple(Object[] tuple, String[] aliases){
       // assign each tuple value to your object and return
   }

})

edited Dec 10, 2014 at 19:04

answered Dec 10, 2014 at 18:47

Zeus

6,6347 gold badges60 silver badges94 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Amogh Over a year ago

I have only one column in my case. Can you show how can it be done using ResultTransformer.

Zeus Over a year ago

@Amogh I think the resultTransformer returns nonMangedEntity bean, is that fine with you?

Amogh Over a year ago

Yes, I will make an DTO class.

Collectives™ on Stack Overflow

decryption while fetching data from database

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related