Java API中隐藏关联对象敏感数据：@JsonProperty与序列化策略

import com.fasterxml.jackson.annotation.JsonProperty;

public class UserDto {

    private String number_id;
    @JsonProperty(access = JsonProperty.Access.WRITE_ONLY)
    private String username;
    @JsonProperty(access = JsonProperty.Access.WRITE_ONLY)
    private String password;
    private String firstName;
    private String lastName;
    @JsonProperty(access = JsonProperty.Access.WRITE_ONLY)
    private String age;

    // Getters and Setters
    public String getNumber_id() { return number_id; }
    public void setNumber_id(String number_id) { this.number_id = number_id; }
    public String getUsername() { return username; }
    public void setUsername(String username) { this.username = username; }
    public String getPassword() { return password; }
    public void setPassword(String password) { this.password = password; }
    public String getFirstName() { return firstName; }
    public void setFirstName(String firstName) { this.firstName = firstName; }
    public String getLastName() { return lastName; }
    public void setLastName(String lastName) { this.lastName = lastName; }
    public String getAge() { return age; }
    public void setAge(String age) { this.age = age; }
}

import java.util.Date;

public class BillsDto {

    private String numberBills;
    private double amount;
    private Date deadlinePayment;
    private UserDto user; // UserDto中的敏感字段将自动隐藏

    // Getters and Setters
    public String getNumberBills() { return numberBills; }
    public void setNumberBills(String numberBills) { this.numberBills = numberBills; }
    public double getAmount() { return amount; }
    public void setAmount(double amount) { this.amount = amount; }
    public Date getDeadlinePayment() { return deadlinePayment; }
    public void setDeadlinePayment(Date deadlinePayment) { this.deadlinePayment = deadlinePayment; }
    public UserDto getUser() { return user; }
    public void setUser(UserDto user) { this.user = user; }
}

// 自定义UserDto序列化器 (概念性代码，不推荐作为首选方案)
public class UserDtoSerializer extends JsonSerializer<UserDto> {
    @Override
    public void serialize(UserDto user, JsonGenerator gen, SerializerProvider serializers) throws IOException {
        gen.writeStartObject();
        gen.writeStringField("number_id", user.getNumber_id());
        gen.writeStringField("firstName", user.getFirstName());
        gen.writeStringField("lastName", user.getLastName());
        // 敏感字段不写入
        gen.writeEndObject();
    }
}

// BillsDto中应用自定义序列化器
public class BillsDto {
    // ... 其他字段
    @JsonSerialize(using = UserDtoSerializer.class)
    private UserDto user;
    // ... Getters and Setters
}