password: ${DB_PASSWORD:ENC@[bxXEba+WWXFUqdxUkobtVw==]} nowt working

[sonersivri]

password: ${DB_PASSWORD:ENC(bxXEba+WWXFUqdxUkobtVw==)} property default environment variable not working

[sonersivri]

com.ulisesbocchio.jasyptspringboot.detector.DefaultPropertyDetector.isEncrypted(String)

return (trimmedValue.startsWith(prefix) && trimmedValue.endsWith(suffix)); regex control not startsWith solves problem

[ulisesbocchio]

yeah, there is a sort of bug in Spring property resolvers that for some reason, when it looks for properties with default values, it does not resolve the default part of the property through the same mechanism of resolving a property and instead just resolves the default property value. The workaround you found is valid, otherwise another workaround is depicted in jasypt-spring-boot-demo-simple where this would work also:

defaultPassword=ENC(bxXEba+WWXFUqdxUkobtVw==)
password=${DB_PASSWORD:${defaultPassword}}

[mwiede]

the solution has one problem: if you have different master passwords for the defaultPassword and the encrypted password passed in as DB_PASSWORD, then the decryption will fail, because both values are tried being resolved.