springboot springsecurity怎么实现图片验证码登录-mile米乐体育

后端代码:

获取验证码,将结果放到session里

packagecom.liruilong.hros.controller;importcom.liruilong.hros.model.respbean;importorg.springframework.web.bind.annotation.getmapping;importorg.springframework.web.bind.annotation.restcontroller;importcom.wf.captcha.arithmeticcaptcha;importjavax.servlet.http.httpservletrequest;importjavax.servlet.http.httpservletresponse;importjava.util.hashmap;importjava.util.map;/***@description:*@author:liruilong*@date:2019/12/1919:58*/@restcontrollerpublicclasslogincontroller{@getmapping(value="/auth/code")publicmapgetcode(httpservletrequestrequest,httpservletresponseresponse){//算术类型https://gitee.com/whvse/easycaptchaarithmeticcaptchacaptcha=newarithmeticcaptcha(111,36);//几位数运算，默认是两位captcha.setlen(2);//获取运算的结果stringresult=captcha.text();system.err.println("生成的验证码：" result);//保存//验证码信息mapimgresult=newhashmap(2){{put("img",captcha.tobase64());}};request.getsession().setattribute("yanzhengma",result);returnimgresult;}}

定义一个verifycodefilter过滤器

packagecom.liruilong.hros.filter;importcom.liruilong.hros.exception.validatecodeexception;importcom.liruilong.hros.config.myauthenticationfailurehandler;importorg.apache.commons.lang3.stringutils;importorg.springframework.beans.factory.annotation.autowired;importorg.springframework.context.annotation.bean;importorg.springframework.security.core.authenticationexception;importorg.springframework.stereotype.component;importorg.springframework.web.filter.onceperrequestfilter;importjavax.servlet.filterchain;importjavax.servlet.servletexception;importjavax.servlet.http.httpservletrequest;importjavax.servlet.http.httpservletresponse;importjava.io.ioexception;/***@description:*@author:liruilong*@date:2020/2/719:39*/@componentpublicclassverifycodefilterextendsonceperrequestfilter{@beanpublicverifycodefiltergetverifycodefilter(){returnnewverifycodefilter();}@autowiredmyauthenticationfailurehandlermyauthenticationfailurehandler;@overrideprotectedvoiddofilterinternal(httpservletrequestrequest,httpservletresponseresponse,filterchainfilterchain)throwsservletexception,ioexception{if(stringutils.equals("/dologin",request.getrequesturi())&&stringutils.equalsignorecase(request.getmethod(),"post")){//1.进行验证码的校验try{stringrequestcaptcha=request.getparameter("code");if(requestcaptcha==null){thrownewvalidatecodeexception("验证码不存在");}stringcode=(string)request.getsession().getattribute("yanzhengma");if(stringutils.isblank(code)){thrownewvalidatecodeexception("验证码过期！");}code=code.equals("0.0")?"0":code;logger.info("开始校验验证码，生成的验证码为：" code "，输入的验证码为：" requestcaptcha);if(!stringutils.equals(code,requestcaptcha)){thrownewvalidatecodeexception("验证码不匹配");}}catch(authenticationexceptione){//2.捕获步骤1中校验出现异常，交给失败处理类进行进行处理myauthenticationfailurehandler.onauthenticationfailure(request,response,e);}finally{filterchain.dofilter(request,response);}}else{filterchain.dofilter(request,response);}}}

定义一个自定义异常处理，继承authenticationexception

packagecom.liruilong.hros.exception;importorg.springframework.security.core.authenticationexception;/***@description:*@author:liruilong*@date:2020/2/87:24*/publicclassvalidatecodeexceptionextendsauthenticationexception{publicvalidatecodeexception(stringmsg){super(msg);}}

security配置.

在之前的基础上加filter的基础上加了

http.addfilterbefore(verifycodefilter, usernamepasswordauthenticationfilter.class)，验证处理上，验证码和表单验证失败用同一个失败处理器，

packagecom.liruilong.hros.config;importcom.fasterxml.jackson.databind.objectmapper;importcom.liruilong.hros.filter.verifycodefilter;importcom.liruilong.hros.model.hr;importcom.liruilong.hros.model.respbean;importcom.liruilong.hros.service.hrservice;importorg.springframework.beans.factory.annotation.autowired;importorg.springframework.context.annotation.bean;importorg.springframework.context.annotation.configuration;importorg.springframework.security.authentication.*;importorg.springframework.security.config.annotation.objectpostprocessor;importorg.springframework.security.config.annotation.authentication.builders.authenticationmanagerbuilder;importorg.springframework.security.config.annotation.web.builders.httpsecurity;importorg.springframework.security.config.annotation.web.builders.websecurity;importorg.springframework.security.config.annotation.web.configuration.websecurityconfigureradapter;importorg.springframework.security.core.authentication;importorg.springframework.security.core.authenticationexception;importorg.springframework.security.crypto.bcrypt.bcryptpasswordencoder;importorg.springframework.security.crypto.password.passwordencoder;importorg.springframework.security.web.authenticationentrypoint;importorg.springframework.security.web.access.intercept.filtersecurityinterceptor;importorg.springframework.security.web.authentication.authenticationsuccesshandler;importorg.springframework.security.web.authentication.usernamepasswordauthenticationfilter;importorg.springframework.security.web.authentication.logout.logoutsuccesshandler;importjavax.servlet.servletexception;importjavax.servlet.http.httpservletrequest;importjavax.servlet.http.httpservletresponse;importjava.io.ioexception;importjava.io.printwriter;/***@description:*@author:liruilong*@date:2019/12/1819:11*/@configurationpublicclasssecurityconfigextendswebsecurityconfigureradapter{@autowiredhrservicehrservice;@autowiredcustomfilterinvocationsecuritymetadatasourcecustomfilterinvocationsecuritymetadatasource;@autowiredcustomurldecisionmanagercustomurldecisionmanager;@autowiredverifycodefilterverifycodefilter;@autowiredmyauthenticationfailurehandlermyauthenticationfailurehandler;@beanpasswordencoderpasswordencoder(){returnnewbcryptpasswordencoder();}@overrideprotectedvoidconfigure(authenticationmanagerbuilderauth)throwsexception{auth.userdetailsservice(hrservice);}/***@authorliruilong*@description放行的请求路径*@date19:252020/2/7*@param[web]*@returnvoid**/@overridepublicvoidconfigure(websecurityweb)throwsexception{web.ignoring().antmatchers("/auth/code","/login","/css/**","/js/**","/index.html","/img/**","/fonts/**","/favicon.ico");}@overrideprotectedvoidconfigure(httpsecurityhttp)throwsexception{http.addfilterbefore(verifycodefilter,usernamepasswordauthenticationfilter.class).authorizerequests()//.anyrequest().authenticated().withobjectpostprocessor(newobjectpostprocessor(){@overridepublicopostprocess(oobject){object.setaccessdecisionmanager(customurldecisionmanager);object.setsecuritymetadatasource(customfilterinvocationsecuritymetadatasource);returnobject;}}).and().formlogin().usernameparameter("username").passwordparameter("password").loginprocessing.loginpage("/login")//登录成功回调.successhandler(newauthenticationsuccesshandler(){@overridepublicvoidonauthenticationsuccess(httpservletrequesthttpservletrequest,httpservletresponsehttpservletresponse,authenticationauthentication)throwsioexception,servletexception{httpservletresponse.setcontenttype("application/json;charset=utf-8");printwriterout=httpservletresponse.getwriter();hrhr=(hr)authentication.getprincipal();//密码不回传hr.setpassword(null);respbeanok=respbean.ok("登录成功！",hr);//将hr转化为stingstrings=newobjectmapper().writevalueasstring(ok);out.write(s);out.flush();out.close();}})//登失败回调.failurehandler(myauthenticationfailurehandler)//相关的接口直接返回.permitall().and().logout()//注销登录//.logoutsuccess.logoutsuccesshandler(newlogoutsuccesshandler(){@overridepublicvoidonlogoutsuccess(httpservletrequesthttpservletrequest,httpservletresponsehttpservletresponse,authenticationauthentication)throwsioexception,servletexception{httpservletresponse.setcontenttype("application/json;charset=utf-8");printwriterout=httpservletresponse.getwriter();out.write(newobjectmapper().writevalueasstring(respbean.ok("注销成功!")));out.flush();out.close();}}).permitall().and().csrf().disable().exceptionhandling()//没有认证时，在这里处理结果，不要重定向.authenticationentrypoint(newauthenticationentrypoint(){@overridepublicvoidcommence(httpservletrequestreq,httpservletresponseresp,authenticationexceptionauthexception)throwsioexception,servletexception{resp.setcontenttype("application/json;charset=utf-8");resp.setstatus(401);printwriterout=resp.getwriter();respbeanrespbean=respbean.error("访问失败!");if(authexceptioninstanceofinsufficientauthenticationexception){respbean.setmsg("请求失败，请联系管理员!");}out.write(newobjectmapper().writevalueasstring(respbean));out.flush();out.close();}});}}

读到这里，这篇“springboot springsecurity怎么实现图片验证码登录”文章已经介绍完毕，想要掌握这篇文章的知识点还需要大家自己动手实践使用过才能领会，如果想了解更多相关内容的文章，欢迎关注恰卡编程网行业资讯频道。