Shulou(Shulou.com)06/01 Report--

This article introduces the relevant knowledge of "how Java realizes the CAPTCHA function of OAuth2.0 authorization system". In the operation of actual cases, many people will encounter such a dilemma, so let the editor lead you to learn how to deal with these situations. I hope you can read it carefully and be able to achieve something!

1. Integrated EasyCaptcha:

Com.github.whvcse easy-captcha 1.6.2

two。 Generate the CAPTCHA and save it to Redis:

/ * * @ return * / @ GetMapping ("/ captcha") public Result captcha () {String captchaKey = "captcha_" + UUID.randomUUID (); / / the three parameters are width, height, digit SpecCaptcha captcha = new SpecCaptcha (130,60,4) / / set font with default font, without setting captcha.setFont ("Verdana", Font.PLAIN, 32); / / set type, pure number, pure letter, alphanumeric mixed captcha.setCharType (Captcha.TYPE_ONLY_NUMBER); log.info ("key: [{}], code: [{}]", captchaKey, captcha.text ()) / / save to Redis. Default is two minutes redisBaseUtil.set (captchaKey, captcha.text (), 2, TimeUnit.MINUTES); Map map = new HashMap (4); map.put ("captchaKey", captchaKey); map.put ("image", captcha.toBase64 ()); return Result.success (map);}

3. Filter of the verification code:

Package com.hanxiaozhang.filter; import com.hanxiaozhang.constant.Constant;import com.hanxiaozhang.redis.util.RedisUtil;import com.hanxiaozhang.result.ResultCode;import com.hanxiaozhang.result.Result;import com.hanxiaozhang.util.JsonUtil;import com.netflix.zuul.ZuulFilter;import com.netflix.zuul.context.RequestContext;import lombok.extern.slf4j.Slf4j;import org.springframework.beans.factory.annotation.Autowired;import org.springframework.cloud.netflix.zuul.filters.support.FilterConstants;import org.springframework.stereotype.Component; import javax.servlet.http.HttpServletRequest Import java.util.Map; / * * < brief introduction of one sentence function >

* < CAPTCHA filter > * * @ author hanxinghua * @ create 2021-4-4 * @ since 1.0.0 * / @ Slf4j@Componentpublic class CaptchaFilter extends ZuulFilter {@ Autowired private RedisUtil redisBaseUtil; @ Override public String filterType () {return FilterConstants.PRE_TYPE;} @ Override public int filterOrder () {return 0;} @ Override public boolean shouldFilter () {return true } @ Override public Object run () {RequestContext currentContext = RequestContext.getCurrentContext (); HttpServletRequest serverHttpRequest = currentContext.getRequest (); String uri = serverHttpRequest.getRequestURI (); if (uri.contains ("/ oauth/token")) {String method = serverHttpRequest.getMethod () / / handle cross-domain Post to send two requests if (Constant.OPTIONS.equals (method)) {return null;} Map parameterMap = serverHttpRequest.getParameterMap (); String [] captchaKeys = null, captchaCodes = null If (! parameterMap.isEmpty () & & (captchaKeys = parameterMap.get ("captcha_key"))! = null & & (captchaCodes = parameterMap.get ("captcha_code"))! = null) {String captchaKey = captchaKeys [0]; String captchaCode = captchaCodes [0] Log.info ("Request Captcha Parameters: key: [{}], code: [{}]", captchaKey, captchaCode); String redisCaptchaCode = redisBaseUtil.get (captchaKey); String responseBody = null; if (redisCaptchaCode = = null) {responseBody = JsonUtil.beanToJson (Result.error (ResultCode.LOGIN_CAPTCHA_EXPIRE)) } else if (! captchaCode.trim (). EqualsIgnoreCase (redisCaptchaCode)) {responseBody = JsonUtil.beanToJson (Result.error (ResultCode.LOGIN_CAPTCHA_ERROR));} if (responseBody! = null) {currentContext.setSendZuulResponse (false); currentContext.setResponseStatusCode CurrentContext.getResponse () .setContentType (Constant.APP_JSON_UTF_8); log.info ("Response Parameters: [{}]", responseBody); currentContext.setResponseBody (responseBody);} return null;}}

4. Use, here use the "HTTP Client request Test tool in Idea":

4.1 obtain the verification code:

GET http://localhost/api/system/captcha

4.2 verification code:

This is the end of how POST http://localhost/api/system/oauth/token?username={{username}}&password={{password}}&grant_type=password&scope={{scope}}&client_id={{client_id}}&client_secret={{client_secret}}&captcha_key=captcha_23cacfe5-2751-44af-a34d-5e795caeb46a&captcha_code=5594"Java implements the CAPTCHA function of OAuth2.0 authorization system. Thank you for your reading. If you want to know more about the industry, you can follow the website, the editor will output more high-quality practical articles for you!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.