springboot項目登錄圖像驗證碼實現

圖像校驗如上圖。是在用戶登錄時，增加一步圖像校驗，防止登錄接口被瘋狂調用導致登錄接口癱瘓。增加在登錄註冊接口前置這麼一個幾乎不需要消耗服務器資源的驗證頁。下面是具體實現。

1.圖形驗證碼工具類。這個依賴於jdk.不需要外來的依賴

package com.home.base.util;

import javax.imageio.ImageIO;
import java.awt.*;
import java.awt.geom.AffineTransform;
import java.awt.image.BufferedImage;
import java.io.File;
import java.io.FileOutputStream;
import java.io.IOException;
import java.io.OutputStream;
import java.util.Arrays;
import java.util.Random;

/**
 * 驗證碼工具類
 * 使用到Algerian字體，系統裏沒有的話需要安裝字體
 *
 */
public class VerifyCodeUtils {

	// 字體只顯示大寫，去掉了1,0,i,o幾個容易混淆的字符
	public static final String VERIFY_CODES = "23456789abcdefghgkmnpqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ";
	private static Random random = new Random();

	/** 
	 * 使用系統默認字符源生成驗證碼 
	 * 
	 * @param verifySize 驗證碼長度 
	 * @return 
	 */
	public static String generateVerifyCode(int verifySize) {
		return generateVerifyCode(verifySize, VERIFY_CODES);
	}

	/** 
	 * 使用指定源生成驗證碼
	 * 
	 * @param verifySize 驗證碼長度 
	 * @param sources 驗證碼字符源 
	 * @return 
	 */
	public static String generateVerifyCode(int verifySize, String sources) {
		if (sources == null || sources.length() == 0) {
			sources = VERIFY_CODES;
		}
		int codesLen = sources.length();
		Random rand = new Random(System.currentTimeMillis());
		StringBuilder verifyCode = new StringBuilder(verifySize);
		for (int i = 0; i < verifySize; i++) {
			verifyCode.append(sources.charAt(rand.nextInt(codesLen - 1)));
		}
		return verifyCode.toString();
	}

	/** 
	 * 生成隨機驗證碼文件,並返回驗證碼值
	 * 
	 * @param w 
	 * @param h 
	 * @param outputFile 
	 * @param verifySize 
	 * @return 
	 * @throws IOException 
	 */
	public static String outputVerifyImage(int w, int h, File outputFile, int verifySize) throws IOException {
		String verifyCode = generateVerifyCode(verifySize);
		outputImage(w, h, outputFile, verifyCode);
		return verifyCode;
	}

	/** 
	* 輸出隨機驗證碼圖片流,並返回驗證碼值
	* 
	* @param w 
	* @param h 
	* @param os 
	* @param verifySize 
	* @return 
	* @throws IOException 
	*/
	public static String outputVerifyImage(int w, int h, OutputStream os, int verifySize) throws IOException {
		String verifyCode = generateVerifyCode(verifySize);
		outputImage(w, h, os, verifyCode);
		return verifyCode;
	}

	/** 
	 * 生成指定驗證碼圖像文件
	 * 
	 * @param w 
	 * @param h 
	 * @param outputFile 
	 * @param code 
	 * @throws IOException 
	 */
	public static void outputImage(int w, int h, File outputFile, String code) throws IOException {
		if (outputFile == null) {
			return;
		}
		File dir = outputFile.getParentFile();
		if (!dir.exists()) {
			dir.mkdirs();
		}
		try {
			outputFile.createNewFile();
			FileOutputStream fos = new FileOutputStream(outputFile);
			outputImage(w, h, fos, code);
			fos.close();
		} catch (IOException e) {
			throw e;
		}
	}

	/** 
	 * 輸出指定驗證碼圖片流
	 * 
	 * @param w 
	 * @param h 
	 * @param os 
	 * @param code 
	 * @throws IOException 
	 */
	public static void outputImage(int w, int h, OutputStream os, String code) throws IOException {
		int verifySize = code.length();
		BufferedImage image = new BufferedImage(w, h, BufferedImage.TYPE_INT_RGB);
		Random rand = new Random();
		Graphics2D g2 = image.createGraphics();
		g2.setRenderingHint(RenderingHints.KEY_ANTIALIASING, RenderingHints.VALUE_ANTIALIAS_ON);
		Color[] colors = new Color[5];
		//Color[] colorSpaces = new Color[] { Color.WHITE, Color.CYAN, Color.GRAY, Color.LIGHT_GRAY, Color.MAGENTA, Color.ORANGE, Color.PINK, Color.YELLOW };
		Color[] colorSpaces = new Color[] { Color.WHITE, Color.blue, Color.GRAY, Color.RED, Color.GREEN, Color.ORANGE, Color.CYAN, Color.YELLOW };
		float[] fractions = new float[colors.length];
		for (int i = 0; i < colors.length; i++) {
			colors[i] = colorSpaces[rand.nextInt(colorSpaces.length)];
			fractions[i] = rand.nextFloat();
		}
		Arrays.sort(fractions);

		g2.setColor(Color.RED);// 設置邊框色
		g2.fillRect(0, 0, w, h);

		Color c = getRandColor(200, 250);
		g2.setColor(c);// 設置背景色
		g2.fillRect(0, 2, w, h - 4);

		// 繪製干擾線
		Random random = new Random();
		//g2.setColor(getRandColor(160, 200));// 設置線條的顏色
		g2.setColor(getRandColor(100, 255));// 設置線條的顏色
		for (int i = 0; i < 20; i++) {
			int x = random.nextInt(w - 1);
			int y = random.nextInt(h - 1);
			int xl = random.nextInt(6) + 1;
			int yl = random.nextInt(12) + 1;
			g2.drawLine(x, y, x + xl + 40, y + yl + 20);
		}

		// 添加噪點// 噪聲率
		float yawpRate = 0.02f;
		int area = (int) (yawpRate * w * h);
		for (int i = 0; i < area; i++) {
			int x = random.nextInt(w);
			int y = random.nextInt(h);
			int rgb = getRandomIntColor();
			image.setRGB(x, y, rgb);
		}
// 使圖片扭曲
		shear(g2, w, h, c);

		//g2.setColor(getRandColor(100, 160));
		g2.setColor(getRandColor(100, 255));
		int fontSize = h - 4;
		Font font = new Font("Algerian", Font.ITALIC, fontSize);
		g2.setFont(font);
		char[] chars = code.toCharArray();
		for (int i = 0; i < verifySize; i++) {
			AffineTransform affine = new AffineTransform();
			affine.setToRotation(Math.PI / 4 * rand.nextDouble() * (rand.nextBoolean() ? 1 : -1), (w / verifySize) * i + fontSize / 2, h / 2);
			g2.setTransform(affine);
			g2.drawChars(chars, i, 1, ((w - 10) / verifySize) * i + 5, h / 2 + fontSize / 2 - 10);
		}

		g2.dispose();
		ImageIO.write(image, "jpg", os);
	}

	private static Color getRandColor(int fc, int bc) {
		if (fc > 255){
			fc = 255;
		}
		if (bc > 255){
			bc = 255;
		}
		int r = fc + random.nextInt(bc - fc);
		int g = fc + random.nextInt(bc - fc);
		int b = fc + random.nextInt(bc - fc);
		return new Color(r, g, b);
	}

	private static int getRandomIntColor() {
		int[] rgb = getRandomRgb();
		int color = 0;
		for (int c : rgb) {
			color = color << 8;
			color = color | c;
		}
		return color;
	}

	private static int[] getRandomRgb() {
		int[] rgb = new int[3];
		for (int i = 0; i < 3; i++) {
			rgb[i] = random.nextInt(255);
		}
		return rgb;
	}

	private static void shear(Graphics g, int w1, int h1, Color color) {
		shearX(g, w1, h1, color);
		shearY(g, w1, h1, color);
	}

	private static void shearX(Graphics g, int w1, int h1, Color color) {
		int period = random.nextInt(2);

		boolean borderGap = true;
		int frames = 1;
		int phase = random.nextInt(2);

		for (int i = 0; i < h1; i++) {
			double d = (double) (period >> 1) * Math.sin((double) i / (double) period + (6.2831853071795862D * (double) phase) / (double) frames);
			g.copyArea(0, i, w1, 1, (int) d, 0);
			if (borderGap) {
				g.setColor(color);
				g.drawLine((int) d, i, 0, i);
				g.drawLine((int) d + w1, i, w1, i);
			}
		}

	}

	private static void shearY(Graphics g, int w1, int h1, Color color) {
		// 50
		int period = random.nextInt(40) + 10;

		boolean borderGap = true;
		int frames = 20;
		int phase = 7;
		for (int i = 0; i < w1; i++) {
			double d = (double) (period >> 1) * Math.sin((double) i / (double) period + (6.2831853071795862D * (double) phase) / (double) frames);
			g.copyArea(i, 0, 1, h1, 0, (int) d);
			if (borderGap) {
				g.setColor(color);
				g.drawLine(i, (int) d, i, 0);
				g.drawLine(i, (int) d + h1, i, h1);
			}
		}
	}
}

2.然後在contoller引用這個工具類，生成對應的數據流，通過response返回到頁面。

    @ApiOperation("獲取圖片驗證碼")
    @GetMapping("/getVerifyCode")
    public void getVerifyCodeImage(@ApiParam(value = "圖片驗證碼類型(1:註冊驗證,2:登陸驗證,3:重置密碼,4:綁定手機 )", required = true)
                                       @RequestParam(value = "verifyCodeType") String verifyCodeType, HttpServletResponse response) throws IOException {
        response.setHeader("Pragma", "No-cache");
        response.setHeader("Cache-Control", "no-cache");
        response.setDateHeader("Expires", 0);
        response.setContentType("image/jpeg");
        // 生成隨機字串
        String verifyCode = VerifyCodeUtils.generateVerifyCode(4);
        // 生成圖片
        int w = 200, h = 80;
        VerifyCodeUtils.outputImage(w, h, response.getOutputStream(), verifyCode);
        //獲取類型
        switch (verifyCodeType) {
            case "1":
                redisUtil.setEx(RedisKey.MAGE_VERIFY_CODE_REGIST.getId().concat(verifyCodeType), verifyCode, 90L, TimeUnit.SECONDS);
                return;
            case "2":
                redisUtil.setEx(RedisKey.IMAGE_VERIFY_CODE_LOGIN.getId().concat(verifyCodeType), verifyCode, 90L, TimeUnit.SECONDS);
                return;
            case "3":
                redisUtil.setEx(RedisKey.IMAGE_VERIFY_CODE_RESET_PASSWORD.getId().concat(verifyCodeType), verifyCode, 90L, TimeUnit.SECONDS);
                return;
            case "4":
                redisUtil.setEx(RedisKey.IMAGE_VERIFY_CODE_BIND_MOBILE.getId().concat(verifyCodeType), verifyCode, 90L, TimeUnit.SECONDS);
                return;
            default:
                throw new IllegalArgumentException("Unexpected value: " + verifyCodeType);
        }
    }

3.通過接口校驗輸入的code和生成的code是否一致。

@ApiOperation("圖片驗證碼驗證")
    @ApiImplicitParams({
            @ApiImplicitParam(name = "verifyCode", value = "動態驗證碼", paramType = "query", required = true),
            @ApiImplicitParam(name = "verifyCodeType", value = "動態驗證碼類型(1:註冊 2:登錄 3:重置密碼 4:綁定手機號)", paramType = "query", required = true),
    })
    @ApiResponses({
            @ApiResponse(code = 0, message = "操作成功!"),
            @ApiResponse(code = 1, message = "系統異常!"),
            @ApiResponse(code = 18, message = "圖片驗證碼失效!"),
            @ApiResponse(code = 19, message = "圖片驗證碼錯誤!"),
    })
    @PostMapping("/checkVerifyCode")
    public ResponseJson checkVerifyCode(@RequestParam(value = "verifyCode", required = true) String verifyCode,
                                        @RequestParam(value = "verifyCodeType", required = true) String verifyCodeType) {
        if (StringUtil.isEmpty(verifyCode) || StringUtil.isEmpty(verifyCodeType)) {
            return ResponseUtil.getResponseCode(ResponseCode.RESPONSE_CODE_ERROR);
        }
        String redisVerifyCode = null;
        switch (verifyCodeType) {
            case "1":
                redisVerifyCode = redisUtil.get(RedisKey.MAGE_VERIFY_CODE_REGIST.getId().concat(verifyCodeType));
                break;
            case "2":
                redisVerifyCode = redisUtil.get(RedisKey.IMAGE_VERIFY_CODE_LOGIN.getId().concat(verifyCodeType));
                break;
            case "3":
                redisVerifyCode = redisUtil.get(RedisKey.IMAGE_VERIFY_CODE_RESET_PASSWORD.getId().concat(verifyCodeType));
                break;
            case "4":
                redisVerifyCode = redisUtil.get(RedisKey.IMAGE_VERIFY_CODE_BIND_MOBILE.getId().concat(verifyCodeType));
                break;
            default:
                break;
        }

        LOGGER.info("redis verify code: {}", redisVerifyCode);

        if (StringUtil.isEmpty(redisVerifyCode)) {
            return ResponseUtil.getResponseMsg(ResponseCode.RESPONSE_CODE_ERROR,"驗證碼無效");
        }
        if (!redisVerifyCode.equalsIgnoreCase(verifyCode.trim())) {
            return ResponseUtil.getResponseMsg(ResponseCode.RESPONSE_CODE_ERROR,"驗證碼錯誤");
        }
        return ResponseUtil.getResponseCode(ResponseCode.RESPONSE_CODE_SUCCESS);
    }