Java 对象的序列化和反序列化

• 先创建一个实现了Serializable接口的对象

    import java.io.Serializable;

    /**
     * 可序列化Person对象.
     * @author Ramer
     * Sep 18, 2016
     */
    public class SerializablePerson implements Serializable{
        private static final long serialVersionUID = 1L;
        private String name;
        private String alia;
        private Integer age;

        public SerializablePerson() {
        }

        public SerializablePerson(String name, String alia, Integer age) {
            this.name = name;
            this.alia = alia;
            this.age = age;
        }

        public Integer getAge() {
            return age;
        }

        public void setAge(Integer age) {
            this.age = age;
        }

        public void setAlia(String alia) {
            this.alia = alia;
        }

        public void setName(String name) {
            this.name = name;
        }

        public String getAlia() {
            return alia;
        }

        public String getName() {
            return name;
        }

        /**
         * 序列化写入对象前会调用本方法,可调试ObjectInputStream.writeObject方法
         *
         * @param stream the stream
         * @throws IOException Signals that an I/O exception has occurred.
         */
        private void writeObject(java.io.ObjectOutputStream stream) throws java.io.IOException {
            // 模拟加密age属性
            age = age << 2;
            stream.defaultWriteObject();
        }

        /**
         * 反序列化读取对象前会调用本方法,可调试ObjectInputStream.readObject方法.
         *
         * @param stream the stream
         * @throws IOException Signals that an I/O exception has occurred.
         * @throws ClassNotFoundException the class not found exception
         */
        private void readObject(java.io.ObjectInputStream stream) throws java.io.IOException, ClassNotFoundException {
            stream.defaultReadObject();
            // 解密age属性
            age = age >> 2;
        }

        @Override
        public String toString() {
            return "Person [name=" + name + ", alia=" + alia + ", age=" + age + "]";
        }
    }

• 序列化对象到本地文件

public void serializationTest() {
    String file = "testSrc/person.ser";
    SerializablePerson person = new SerializablePerson("ramer", "feng", 4);
    try (FileOutputStream out = new FileOutputStream(file);
        ObjectOutputStream objectOutputStream = new ObjectOutputStream(out);) {
        objectOutputStream.writeObject(person);
    } catch (Exception e) {
        e.printStackTrace();
    }
}

• 从指定文件反序列化对象

public void deserializationTest() {
    String file = "testSrc/person.ser";
    try (FileInputStream out = new FileInputStream(file);
        ObjectInputStream objectInputStream = new ObjectInputStream(out);) {
        SerializablePerson person = (SerializablePerson) objectInputStream.readObject(); 
        System.out.println("name: " + person.getName());
        System.out.println("alia: "+ person.getAlia());
        System.out.println("age: " + person.getAge());
    } catch (Exception e) {
        e.printStackTrace();
    }
}

• 在对象序列化时,即调用objectInputStream.writeObject()方法时,会调用实例对象的writeObject()方法,在该方法中,可以实现对某些敏感字段的加密(比如这里的age).
  请注意: 要序列化对象的writeObject() 和readObject()方法签名必须和我上面的一致,否则加密将不会起作用.
• 转载 http://blog.csdn.net/u011699931/article/details/52587647