加入kaptcha验证码框架并实现验证码

xwj-vic · Mar 8, 2017 · 3b253d8 · 3b253d8
1 parent 6b39120
commit 3b253d8
Show file tree

Hide file tree

Showing 5 changed files with 130 additions and 24 deletions.
diff --git a/pom.xml b/pom.xml
@@ -213,6 +213,13 @@
       <version>1.0</version>
     </dependency>
 
+    <!--kaptcha验证码-->
+    <dependency>
+      <groupId>com.github.penggle</groupId>
+      <artifactId>kaptcha</artifactId>
+      <version>2.3.2</version>
+    </dependency>
+
   </dependencies>
   <build>
     <finalName>ssmshiro</finalName>

diff --git a/src/main/java/web/CaptchaController.java b/src/main/java/web/CaptchaController.java
@@ -0,0 +1,49 @@
+package web;
+
+import com.google.code.kaptcha.Constants;
+import com.google.code.kaptcha.Producer;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.stereotype.Controller;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.servlet.ModelAndView;
+
+import javax.imageio.ImageIO;
+import javax.servlet.ServletOutputStream;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.awt.image.BufferedImage;
+
+/**
+ * Created by xuweijie on 2017/3/8.
+ * 生成验证码Controller.
+ */
+@Controller
+public class CaptchaController {
+
+    private Producer kaptchaProducer=null;
+
+    @Autowired
+    public void setCaptchaProducer(Producer kaptchaProducer) {
+        this.kaptchaProducer = kaptchaProducer;
+    }
+
+    @RequestMapping("/kaptcha")
+    public ModelAndView handleRequest(HttpServletRequest request, HttpServletResponse response) throws Exception{
+        response.setDateHeader("Expires",0);
+        response.setHeader("Cache-Control", "no-store, no-cache, must-revalidate");
+        response.addHeader("Cache-Control", "post-check=0, pre-check=0");
+        response.setHeader("Pragma", "no-cache");
+        response.setContentType("image/jpeg");
+        String capText = kaptchaProducer.createText();
+        request.getSession().setAttribute(Constants.KAPTCHA_SESSION_KEY, capText);
+        BufferedImage bi = kaptchaProducer.createImage(capText);
+        ServletOutputStream out = response.getOutputStream();
+        ImageIO.write(bi, "jpg", out);
+        try {
+            out.flush();
+        } finally {
+            out.close();
+        }
+        return null;
+    }
+}
diff --git a/src/main/java/web/LoginController.java b/src/main/java/web/LoginController.java
@@ -1,22 +1,16 @@
 package web;
 
-import entity.User;
+import com.google.code.kaptcha.Constants;
 import exception.CustomException;
 import org.apache.shiro.SecurityUtils;
 import org.apache.shiro.authc.AuthenticationException;
 import org.apache.shiro.authc.UsernamePasswordToken;
-import org.apache.shiro.crypto.hash.Md5Hash;
 import org.apache.shiro.subject.Subject;
-import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.stereotype.Controller;
 import org.springframework.ui.Model;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RequestMethod;
-import service.ShiroUserService;
-import util.MD5Util;
-
 import javax.servlet.http.HttpServletRequest;
-import java.rmi.activation.UnknownObjectException;
 
 /**
  * Created by xuweijie on 2017/3/3.
@@ -27,24 +21,29 @@ public class LoginController {
     @RequestMapping(value = "/login",method = RequestMethod.POST)
     public String login(HttpServletRequest request, Model model){
         CustomException customException=null;
+        String verifyCode=request.getParameter("verifyCode").toUpperCase();
         String username=request.getParameter("username");
         String password=request.getParameter("password");
-        if((username!=null && password!=null)){
-            UsernamePasswordToken token=new UsernamePasswordToken(username,password);
-            Subject subject= SecurityUtils.getSubject();
-            try{
-                subject.login(token);
-            }catch (AuthenticationException e){
-                customException=new CustomException(e.getMessage());
-            }
-            if( subject.isAuthenticated()){
-                subject.logout();
-                model.addAttribute("username",username);
-                return "/loginsuccess";
-            }else {
-                model.addAttribute("exception",customException.getMessage());
-                return "/refuse";
+        if(verifyCode.equals(request.getSession().getAttribute(Constants.KAPTCHA_SESSION_KEY))){
+            if((username!=null && password!=null)){
+                UsernamePasswordToken token=new UsernamePasswordToken(username,password);
+                Subject subject= SecurityUtils.getSubject();
+                try{
+                    subject.login(token);
+                }catch (AuthenticationException e){
+                    customException=new CustomException(e.getMessage());
+                }
+                if( subject.isAuthenticated()){
+                    subject.logout();
+                    model.addAttribute("username",username);
+                    return "/loginsuccess";
+                }else {
+                    model.addAttribute("exception",customException.getMessage());
+                    return "/refuse";
+                }
             }
+        }else {
+            System.out.print("验证码输入不正确");
         }
         return "login";
     }

diff --git a/src/main/resources/spring/spring-kaptcha.xml b/src/main/resources/spring/spring-kaptcha.xml
@@ -0,0 +1,43 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<beans xmlns="http://www.springframework.org/schema/beans"
+       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd">
+
+    <bean id="defaultKaptcha" class="com.google.code.kaptcha.impl.DefaultKaptcha">
+        <property name="config">
+            <bean class="com.google.code.kaptcha.util.Config">
+                <constructor-arg>
+                    <props>
+                        <!-- 验证码宽度 -->
+                        <prop key="kaptcha.image.width">110</prop>
+                        <!-- 验证码高度 -->
+                        <prop key="kaptcha.image.height">50</prop>
+                        <!-- 生成验证码内容范围 -->
+                        <prop key="kaptcha.textproducer.char.string">0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ</prop>
+                        <!-- 验证码个数 -->
+                        <prop key="kaptcha.textproducer.char.length">4</prop>
+                        <!-- 是否有边框 -->
+                        <prop key="kaptcha.border">no</prop>
+                        <!-- 边框颜色 -->
+                        <prop key="kaptcha.border.color">105,179,90</prop>
+                        <!-- 边框厚度 -->
+                        <prop key="kaptcha.border.thickness">1</prop>
+                        <!-- 验证码字体颜色 -->
+                        <prop key="kaptcha.textproducer.font.color">black</prop>
+                        <!-- 验证码字体大小 -->
+                        <prop key="kaptcha.textproducer.font.size">30</prop>
+                        <!-- 验证码所属字体样式 -->
+                        <prop key="kaptcha.textproducer.font.names">楷体</prop>
+                        <!-- 干扰线颜色 -->
+                        <prop key="kaptcha.noise.color">black</prop>
+                        <!-- 验证码文本字符间距 -->
+                        <prop key="kaptcha.textproducer.char.space">3</prop>
+                        <!-- 图片样式 :阴影-->
+                        <prop key="kaptcha.obscurificator.impl">com.google.code.kaptcha.impl.ShadowGimpy</prop>
+                    </props>
+                </constructor-arg>
+            </bean>
+        </property>
+    </bean>
+
+</beans>
diff --git a/src/main/webapp/WEB-INF/jsp/login.jsp b/src/main/webapp/WEB-INF/jsp/login.jsp
@@ -2,6 +2,12 @@
 <html>
 <head>
     <title>用户登录</title>
+    <script type="text/javascript">
+        function changeVerifyCode() {
+            var time=new Date().getTime();
+            document.getElementById("kaptchaImage").src="/kaptcha?d="+time;//为了不让验证码缓存，为了安全起见，需要次次都刷新
+        }
+    </script>
 </head>
 
 <body>
@@ -10,8 +16,10 @@
         <h1>登录</h1>
         <br><br><br>
         <form action="/login" method="POST">
-            用&nbsp;&nbsp;户&nbsp;&nbsp;名：<input type="text" name="username"><br><br><br>
-            密&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;码：<input type="password" name="password"><br><br>
+            用&nbsp;&nbsp;户&nbsp;&nbsp;名：<input type="text" name="username" placeholder="请输入用户名"><br><br><br>
+            密&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;码：<input type="password" name="password" placeholder="请输入密码"><br><br>
+            验&nbsp;&nbsp;证&nbsp;&nbsp;码：<input type="text" name="verifyCode" placeholder="请输入验证码"/>
+            <img src="/kaptcha.jpg" id="kaptchaImage" title="看不清，点击换一张" onclick="changeVerifyCode()"><br><br>
             <input type="submit" value="登录">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type="reset" value="取消">
         </form>
     </div>