Because business needs need to deploy code to the customer's local, in order to prevent code leakage, the code needs to be encrypted to prevent being compiled. After searching online, XJAR is used to encrypt the code.

1. Github address

Official document address: https://github.com/core-lib/xjar
Packing integrated plug-in: https://github.com/core-lib/xjar- maven-plugin

2. Environmental support

XJAR needs the support of the GO environment. You can download the installation package through the link below:
Go Language Official Website: https://golang.google.cn

JDK himself uses 1.8

3. Use of XJAR

3.1 POM dependencies

Add the following attributes to pom.xml, pay attention to the copy location

<project>
	<repositories>
        <repository>
            <id>jitpack.io</id>
            <url>https://jitpack.io</url>
        </repository>
    </repositories>
    
	<dependencies>
		<dependency>
	        <groupId>com.github.core-lib</groupId>
	        <artifactId>xjar</artifactId>
	        <version>4.0.2</version>
	    </dependency>
    </dependencies>
</project>

3.2 Write the main method, set the encryption related parameters

    public static void main(String[] args) throws Exception {
        XCryptos.encryption()
                .from("system/start/target/start-1.0.0-SNAPSHOT.jar")
                .use("1qaz2wsx3edc")
                .include("/**/*.class")
                .include("/**/*.yml")
                .include("/**/*.xml")
                .to("D:\\sercetJar\\springboot.jar");
    }

in
"System/Start/Target/Start-1.0.0-Snapshot.jar" is the JAR package path that needs to be encrypted (you can also use the absolute path)
"1QAZ2WSX3EDC" is the secret of encryption
"D: \ Sercentjar \ SpringBoot.jar" is the storage path of the encrypted jar package
More parameters can be viewed on the official website

3.3 Generate decryption files and encrypted jar packages

Run 3.2 code, generate decryption files and encrypted jar packages, as shown below:

3.4 Compilation script

Open the command interface in the directory where the jar package is located, enter Go Build xjar.go to get xjar.exe files

3.5 Start jar package

Start the application, the command interface input xjar.exe java -java -jar generated JAR name items

4. Reverse compile and encrypted jar package

The picture below is the result of using JD-GUI for counter-compilation

It can be found that it can no longer compile.
At this point, the JAR package has been encrypted, and you can also learn more about Github.

5. Integrated plug-in xjar-maven-plugin

Maven projects can be integrated with XJAR-Maven-Plugin to avoid the above code every time you encrypted. As Maven constructs the automatic production of JAR and Go starter source files after automatic production encryption is built

<project>
    <!-Set jitpack.io plug-in warehouse->
    <pluginRepositories>
        <pluginRepository>
            <id>jitpack.io</id>
            <url>https://jitpack.io</url>
        </pluginRepository>
    </pluginRepositories>
    <!-Add XJAR Maven plug-in->
    <build>
        <plugins>
            <plugin>
                <groupId>com.github.core-lib</groupId>
                <artifactId>xjar-maven-plugin</artifactId>
                <version>4.0.2</version>
                <executions>
                    <execution>
                        <goals>
                            <goal>build</goal>
                        </goals>
                        <phase>package</phase>
                        <!- ​​or use
                        <phase>install</phase>
                        -->
                        <configuration>
                        	<!-Password is not recommended to configure in POM files->
                            <!--<password>io.xjar</password> -->
                            <!-- optional
                            <algorithm/>
                            <keySize/>
                            <ivSize/>
                            <includes>
                                <include/>
                            </includes>
                            <excludes>
                                <exclude/>
                            </excludes>
                            <sourceDir/>
                            <sourceJar/>
                            <targetDir/>
                            <targetJar/>
                            -->
                        </configuration>
                    </execution>
                </executions>
            </plugin>
        </plugins>
    </build>
</project>

For the Spring Boot project or module, the plug-in will be executed at Spring-Boot-Maven-Plugin plug-in. There are two ways:
Place the plug-in behind Spring-Boot-Maven-Plugin, because the default Phase of its plugin is also Package
Set the plug -in Phase to Install (the default value is: Package), and the packing command is used by the MVN CLEAN Install
You can also execute it through the Maven command

mvn xjar:build -Dxjar.password=io.xjar
mvn xjar:build -Dxjar.password=io.xjar -Dxjar.targetDir=/directory/to/save/target.xjar

However, it is usually allowed to be bound to the XJAR plug -in to automatically execute in the specified PHASE, so that the encrypted package can be automatically constructed when the project is constructed.

mvn clean package -Dxjar.password=io.xjar
mvn clean install -Dxjar.password=io.xjar -Dxjar.targetDir=/directory/to/save/target.xjar

After executing the packing command, you can automatically build an encrypted jar package.
Step on the pit:
Due to the use of the Alibaba Maven mirror image, it is impossible to download xjar dependencies from Jitpack.io
Refer to the following settings, add in the mirrorof element configuration of the image,! Jitpack.io end.

<mirror>
    <id>alimaven</id>
    <mirrorOf>central,!jitpack.io</mirrorOf>
    <name>aliyun maven</name>
    <url>http://maven.aliyun.com/nexus/content/repositories/central/</url>
</mirror>