短信验证码登录源码及解析~~

在构建网站时,我们经常会在登录页面进行短信验证码功能的开发,这里,给大家分享一个常用的短信验证码源码

步骤

1、构造手机验证码:使用random对象生成要求的随机数作为验证码,例如4位验证码:1000~9999之间随机数;
2、使用接口向短信平台发送手机号和验证码数据,然后短信平台再把验证码发送到制定手机号上,接口参数一般包括:目标手机号,随机验证码(或包含失效时间),平台接口地址,平台口令;
3、保存接口返回的信息(一般为json文本数据,然后需转换为json对象格式);
4、将手机号–验证码、操作时间存入Session中,作为后面验证使用;
5、接收用户填写的验证码及其他数据;
6、对比提交的验证码与Session中的验证码是否一致,同时判断提交动作是否在有效期内;
7、验证码正确且在有效期内,请求通过,处理相应的业务。

具体操作

一、首先添加一个jar包,工具类会用到。

commons-codec commons-codec 1.11 我这里只是编写一个简单的短信验证功能,要是用其他的语音验证。。。。下面是编写的一个config文档,专门存放一些参数。 图片 ***二、编写http请求工具类***

public class HttpUtil
{
/**
* 构造通用参数timestamp、sig和respDataType
*
* @return
*/
public static String createCommonParam()
{
// 时间戳
SimpleDateFormat sdf = new SimpleDateFormat(“yyyyMMddHHmmss”);
String timestamp = sdf.format(new Date());

  // 签名
  String sig = DigestUtils.md5Hex(Config.ACCOUNT_SID + Config.AUTH_TOKEN + timestamp);

  return "&timestamp=" + timestamp + "&sig=" + sig + "&respDataType=" + Config.RESP_DATA_TYPE;

}

/**
* post请求
*
* @param url
* 功能和操作
* @param body
* 要post的数据
* @return
* @throws IOException
*/
public static String post(String url, String body)
{
System.out.println(“url:” + System.lineSeparator() + url);
System.out.println(“body:” + System.lineSeparator() + body);

  String result = "";
  try
  {
     OutputStreamWriter out = null;
     BufferedReader in = null;
     URL realUrl = new URL(url);
     URLConnection conn = realUrl.openConnection();

     // 设置连接参数
     conn.setDoOutput(true);
     conn.setDoInput(true);
     conn.setConnectTimeout(5000);
     conn.setReadTimeout(20000);
     conn.setRequestProperty("Content-Type", "application/x-www-form-urlencoded");
     // 提交数据
     out = new OutputStreamWriter(conn.getOutputStream(), "UTF-8");
     out.write(body);
     out.flush();

     // 读取返回数据
     in = new BufferedReader(new InputStreamReader(conn.getInputStream(), "UTF-8"));
     String line = "";
     boolean firstLine = true; // 读第一行不加换行符
     while ((line = in.readLine()) != null)
     {
        if (firstLine)
        {
           firstLine = false;
        } else
        {
           result += System.lineSeparator();
        }
        result += line;
     }
  } catch (Exception e)
  {
     e.printStackTrace();
  }
  return result;

}

/**
* 回调测试工具方法
*
* @param url
* @param reqStr
* @return
*/
public static String postHuiDiao(String url, String body)
{
String result = “”;
try
{
OutputStreamWriter out = null;
BufferedReader in = null;
URL realUrl = new URL(url);
URLConnection conn = realUrl.openConnection();

     // 设置连接参数
     conn.setDoOutput(true);
     conn.setDoInput(true);
     conn.setConnectTimeout(5000);
     conn.setReadTimeout(20000);

     // 提交数据
     out = new OutputStreamWriter(conn.getOutputStream(), "UTF-8");
     out.write(body);
     out.flush();

     // 读取返回数据
     in = new BufferedReader(new InputStreamReader(conn.getInputStream(), "UTF-8"));
     String line = "";
     boolean firstLine = true; // 读第一行不加换行符
     while ((line = in.readLine()) != null)
     {
        if (firstLine)
        {
           firstLine = false;
        } else
        {
           result += System.lineSeparator();
        }
        result += line;
     }
  } catch (Exception e)
  {
     e.printStackTrace();
  }
  return result;

}
}
三、生成四位数的方法

public static String runNumber() {
String str=“ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789”;
StringBuilder sb=new StringBuilder(4);
for(int i=0;i<4;i++)
{
char ch=str.charAt(new Random().nextInt(str.length()));
sb.append(ch);
}
System.out.println(sb.toString());
String code = sb.toString();
return code;
}
四、执行方法execute(),便会发送成功

public class IndustrySMS
{
private static String operation = “/industrySMS/sendSMS”;

private static String accountSid = Config.ACCOUNT_SID;
private static String to = “15342349382”;
private static String smsContent = “【小陶科技】登录验证码:{”+runNumber().toString()+"},如非本人操作,请忽略此短信。";

/**
* 验证码通知短信
*/
public static void execute()
{
String tmpSmsContent = null;
try{
tmpSmsContent = URLEncoder.encode(smsContent, “UTF-8”);
}catch(Exception e){

   }
   String url = Config.BASE_URL + operation;
   String body = "accountSid=" + accountSid + "&to=" + to + "&smsContent=" + tmpSmsContent
       + HttpUtil.createCommonParam();

   // 提交请求
   String result = HttpUtil.post(url, body);
   System.out.println("result:" + System.lineSeparator() + result);

}

that’s all

  • 0
    点赞
  • 1
    收藏
    觉得还不错? 一键收藏
  • 打赏
    打赏
  • 0
    评论
好的,以下是Spring Security实现自定义短信验证码登录源码: 1. 自定义短信验证码登录过滤器 ```java public class SmsAuthenticationFilter extends AbstractAuthenticationProcessingFilter { private String mobileParameter = "mobile"; private boolean postOnly = true; public SmsAuthenticationFilter() { super(new AntPathRequestMatcher("/login/mobile", "POST")); } @Override public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response) throws AuthenticationException, IOException, ServletException { if (postOnly && !request.getMethod().equals("POST")) { throw new AuthenticationServiceException("Authentication method not supported: " + request.getMethod()); } String mobile = obtainMobile(request); if (mobile == null) { mobile = ""; } mobile = mobile.trim(); SmsAuthenticationToken authRequest = new SmsAuthenticationToken(mobile); setDetails(request, authRequest); return this.getAuthenticationManager().authenticate(authRequest); } protected String obtainMobile(HttpServletRequest request) { return request.getParameter(mobileParameter); } protected void setDetails(HttpServletRequest request, SmsAuthenticationToken authRequest) { authRequest.setDetails(authenticationDetailsSource.buildDetails(request)); } public void setMobileParameter(String mobileParameter) { this.mobileParameter = mobileParameter; } public void setPostOnly(boolean postOnly) { this.postOnly = postOnly; } } ``` 2. 自定义短信验证码登录认证提供者 ```java public class SmsAuthenticationProvider implements AuthenticationProvider { private UserDetailsService userDetailsService; public Authentication authenticate(Authentication authentication) throws AuthenticationException { SmsAuthenticationToken authenticationToken = (SmsAuthenticationToken) authentication; UserDetails user = userDetailsService.loadUserByUsername((String) authenticationToken.getPrincipal()); if (user == null) { throw new InternalAuthenticationServiceException("无法获取用户信息"); } SmsAuthenticationToken authenticationResult = new SmsAuthenticationToken(user, user.getAuthorities()); authenticationResult.setDetails(authenticationToken.getDetails()); return authenticationResult; } public boolean supports(Class<?> authentication) { return SmsAuthenticationToken.class.isAssignableFrom(authentication); } public void setUserDetailsService(UserDetailsService userDetailsService) { this.userDetailsService = userDetailsService; } } ``` 3. 自定义短信验证码登录配置 ```java @Configuration @EnableWebSecurity public class SecurityConfig extends WebSecurityConfigurerAdapter { @Autowired private UserDetailsService userDetailsService; @Autowired private SmsCodeAuthenticationSecurityConfig smsCodeAuthenticationSecurityConfig; @Override protected void configure(HttpSecurity http) throws Exception { http.apply(smsCodeAuthenticationSecurityConfig) .and() .authorizeRequests() .antMatchers("/login/mobile").permitAll() .anyRequest().authenticated() .and() .csrf().disable(); } @Override protected void configure(AuthenticationManagerBuilder auth) throws Exception { auth.userDetailsService(userDetailsService); } } ``` 4. 自定义短信验证码登录安全配置 ```java @Configuration public class SmsCodeAuthenticationSecurityConfig extends SecurityConfigurerAdapter<DefaultSecurityFilterChain, HttpSecurity> { @Autowired private UserDetailsService userDetailsService; @Override public void configure(HttpSecurity http) throws Exception { SmsAuthenticationFilter smsAuthenticationFilter = new SmsAuthenticationFilter(); smsAuthenticationFilter.setAuthenticationManager(http.getSharedObject(AuthenticationManager.class)); smsAuthenticationFilter.setAuthenticationSuccessHandler(new LoginSuccessHandler()); smsAuthenticationFilter.setAuthenticationFailureHandler(new LoginFailureHandler()); SmsAuthenticationProvider smsAuthenticationProvider = new SmsAuthenticationProvider(); smsAuthenticationProvider.setUserDetailsService(userDetailsService); http.authenticationProvider(smsAuthenticationProvider) .addFilterAfter(smsAuthenticationFilter, UsernamePasswordAuthenticationFilter.class); } } ``` 这就是自定义短信验证码登录的完整源码。需要注意的是,这里的 UserDetailsService 和 AuthenticationSuccessHandler、AuthenticationFailureHandler 都需要自己实现。
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

南风1789

时间宝贵,希望给与支持

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付:¥1
获取中
扫码支付

您的余额不足,请更换扫码支付或充值

打赏作者

实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值