本文共 4646 字，大约阅读时间需要 15 分钟。

SSH和SSM整合Redis存储验证码

SSM框架下Redis存储验证码

在SSM框架中，我们可以使用Redis存储验证码，解决后端和前端之间的验证问题。以下是详细的解决方案。

思路

验证流程

实现步骤

重要技术点

• Redis存储：使用Redis的角色主要是为了快速存取和验证验证码，避免了数据库的IO压力。
• Jwt令牌验证：使用JwtUtils生成和验证令牌，确保通信安全。
• 前后端协同：前台提交验证码时，带上verificationJwt令牌，后台根据令牌查询Redis数据。

解决方案代码

前端

// State.jsexport default {    verificationJwt: null,    options: [],    activeIndex: '',    showName: 'show',    role: "nopass",}// Mutations.jssetVerificationJwt: (state, payload) => {    state.verificationJwt = payload.verificationJwt;}// Getters.jsgetVerificationJwt: (state) => {    return state.verificationJwt;}

// action.jsexport default {    url: {        SYSTEM_USER_DOLOGIN: '/vue/user/login',        VERAIFICATION: '/vue/user/verificationCode'    }}

// http.jsconst axios = require('axios').create({    baseURL: action.SERVER,    headers: {        'verificationJwt': '',        'jwt': ''    }});axios.interceptors.request.use((config) => {    const verificationJwt = store.get('verificationJwt');    config.headers.verificationJwt = verificationJwt;    config.headers.jwt = verificationJwt;    return config;});axios.interceptors.response.use((response) => {    const verificationJwt = response.headers.verificationJwt;    if (verificationJwt) {        store.commit('setVerificationJwt', {            verificationJwt: verificationJwt        });    }    return response;});

后端

// UserActionpublic String login(User user) {    String verificationCode = request.getParameter("verificationCode");    String jwt = request.getHeader(JwtConstants.verificationJwt);    Object redisVerificationCode = redisTemplate.opsForValue().get(jwt);    if (StringUtils.isBlank(verificationCode)) {        return ResponseUtil.error("验证码已超时");    }    if (!StringUtils.equals(verificationCode.toLowerCase(), redisVerificationCode.toString().toLowerCase())) {        return ResponseUtil.error("验证码错误");    }    User loginUser = userService.login(user);    if (loginUser != null) {        Map
   
     claims = new HashMap<>();        claims.put("username", loginUser.getUsername());        claims.put("password", loginUser.getPassword());        String jwtToken = JwtUtils.createJwt(claims, JwtUtils.JWT_WEB_TTL);        response.setHeader(JwtConstants.verificationJwt, jwtToken);        return ResponseUtil.success(loginUser);    } else {        return ResponseUtil.error("账号或密码错误");    }}
   

// ImageUtilpublic static String createImageWithVerifyCode(String word, int width, int height) {    BufferedImage bufferedImage = new BufferedImage(width, height, BufferedImage.TYPE_INT_RGB);    Graphics graphics = bufferedImage.getGraphics();    graphics.setColor getRandomColor(160, 200);    graphics.fillRect(0, 0, width, height);    graphics.setColor(Color.white);    graphics.drawRect(0, 0, width - 1, height - 1);    Graphics2D graphics2d = (Graphics2D) graphics;    Random random = new Random();    int x = 10;    for (int i = 0; i < word.length(); i++) {        graphics2d.setColor(new Color(random.nextInt(110) + 20, random.nextInt(110) + 20, random.nextInt(110) + 20));        int jiaodu = random.nextInt(60) - 30;        double theta = jiaodu * Math.PI / 180;        char c = word.charAt(i);        graphics2d.rotate(theta, x, 20);        graphics2d.drawString(String.valueOf(c), x, 20);        graphics2d.rotate(-theta, x, 20);        x += 30;    }    graphics.dispose();    ByteArrayOutputStream baos = new ByteArrayOutputStream();    ImageIO.write(bufferedImage, "png", baos);    byte[] bytes = baos.toByteArray();    BASE64Encoder encoder = new BASE64Encoder();    String pngBase64 = encoder.encodeBuffer(bytes).trim().replace("\\n", "").replace("\\r", "");    return pngBase64;}

其他配置

   
       
    
     redis.clients
        
    
     jedis
        
    
     ${redis.version}
    
   

2. 用户登录验证：

        from t_vue_user     where uname = #{uname} and pwd = #{pwd}

---

通过以上方案，我们可以实现一个高效的RFC 7633规范的验证码登录系统，确保用户信息的安全性和访问的唯一性。

转载地址：http://qfoyk.baihongyu.com/