SpringSceurity如何實(shí)現(xiàn)短信驗(yàn)證碼功能

@Data
@AllArgsConstructor
@NoArgsConstructor
public class ValidateCode {

 private String code;

 private LocalDateTime expireTime;

 public boolean isExpired() {
 return LocalDateTime.now().isAfter(expireTime);
 }

}

@Data
public class ImageCode extends ValidateCode {

 private BufferedImage image;

 public ImageCode(BufferedImage image, String code, LocalDateTime expireTime) {
 super(code, expireTime);
 this.image = image;
 }

 public ImageCode(BufferedImage image, String code, int expireIn) {
 super(code, LocalDateTime.now().plusSeconds(expireIn));
 this.image = image;
 }
}

public class SmsCode extends ValidateCode {

 public SmsCode(String code, LocalDateTime expireTime) {
 super(code, expireTime);
 }

 public SmsCode(String code, int expireIn) {
 super(code, LocalDateTime.now().plusSeconds(expireIn));
 }
}

public interface ValidateCodeProcessorService {

 /**
 * 因?yàn)楝F(xiàn)在有兩種驗(yàn)證碼，所以存放到seesion的key不能一樣，所以前綴+具體type
 */
 String SESSION_KEY_PREFIX = "SESSION_KEY_FOR_CODE_";
 /**
 * 通過也是 type+CODE_PROCESSOR獲取對(duì)于的bean
 */
 String CODE_PROCESSOR = "CodeProcessorService";

 /**
 * 這個(gè)接口要做三件事
 * 1、獲取驗(yàn)證碼。
 * 2、將驗(yàn)證碼存入session
 * 3、將驗(yàn)證碼信息通過短信或者圖形驗(yàn)證碼發(fā)送出去。
 * （將spring-boot-security-study-03接口里的那三步進(jìn)行里封裝）
 *
 */
 void processor(ServletWebRequest request) throws Exception;

@Component
public abstract class AbstractValidateCodeProcessorService<C> implements ValidateCodeProcessorService {

 private static final String SEPARATOR = "/code/";

 /**
 * 操作session的工具集
 */
 private SessionStrategy sessionStrategy = new HttpSessionSessionStrategy();

 /**
 * 這是Spring的一個(gè)特性，就是在項(xiàng)目啟動(dòng)的時(shí)候會(huì)自動(dòng)收集系統(tǒng)中 {@link ValidateCodeGeneratorService} 接口的實(shí)現(xiàn)類對(duì)象
 *
 * key為bean name
 */
 @Autowired
 private Map<String, ValidateCodeGeneratorService> validateCodeGeneratorMap;

 @Override
 public void processor(ServletWebRequest request) throws Exception {
 //第一件事
 C validateCode = generate(request);
 //第二件事
 save(request, validateCode);
 //第三件事
 send(request, validateCode);
 }

 /**
 * 生成驗(yàn)證碼
 *
 */
 private C generate(ServletWebRequest request) {
 String type = getProcessorType(request);
 //這里 image+CodeGenerator = imgCodeGenerator 對(duì)應(yīng)的就是ImageCodeGeneratorServiceService
 ValidateCodeGeneratorService validateCodeGenerator = validateCodeGeneratorMap.get(type.concat(ValidateCodeGeneratorService.CODE_GENERATOR));
 return (C) validateCodeGenerator.generate(request);
 }

 /**
 * 保存驗(yàn)證碼到session中
 */
 private void save(ServletWebRequest request, C validateCode) {
 //這里也是封裝了一下
 sessionStrategy.setAttribute(request, SESSION_KEY_PREFIX.concat(getProcessorType(request).toUpperCase()), validateCode);
 }

 /**
 * 發(fā)送驗(yàn)證碼 （只有發(fā)送驗(yàn)證碼是需要自己去實(shí)現(xiàn)的。）
 */
 protected abstract void send(ServletWebRequest request, C validateCode) throws Exception;

 /**
 * 獲取請(qǐng)求URL中具體請(qǐng)求的驗(yàn)證碼類型
 *
 */
 private String getProcessorType(ServletWebRequest request) {
 // 獲取URI分割后的第二個(gè)片段 (/code/image 通過/code/ 切割后就只剩下 image
 return StringUtils.substringAfter(request.getRequest().getRequestURI(), SEPARATOR);
 }
}

public interface ValidateCodeGeneratorService {

 /**
 * 這個(gè)常量也是用來 type+CodeGeneratorService獲取對(duì)于bean對(duì)象
 */
 String CODE_GENERATOR = "CodeGeneratorService";

 /**
 * 生成驗(yàn)證碼
 * 具體是圖片驗(yàn)證碼 還是短信驗(yàn)證碼就需要對(duì)應(yīng)的實(shí)現(xiàn)類
 */
 ValidateCode generate(ServletWebRequest request);
}

@Data
@Component("imageCodeGeneratorService")
public class ImageCodeGeneratorServiceImpl implements ValidateCodeGeneratorService {

 private static final String IMAGE_WIDTH_NAME = "width";
 private static final String IMAGE_HEIGHT_NAME = "height";
 private static final Integer MAX_COLOR_VALUE = 255;

 @Autowired
 private ValidateCodeProperties validateCodeProperties;

 @Override
 public ImageCode generate(ServletWebRequest request) {
 int width = ServletRequestUtils.getIntParameter(request.getRequest(), IMAGE_WIDTH_NAME, validateCodeProperties.getImage().getWidth());
 int height = ServletRequestUtils.getIntParameter(request.getRequest(), IMAGE_HEIGHT_NAME,validateCodeProperties.getImage().getHeight());
 BufferedImage image = new BufferedImage(width, height, BufferedImage.TYPE_INT_RGB);
 Graphics g = image.getGraphics();

 Random random = new Random();

 // 生成畫布
 g.setColor(getRandColor(200, 250));
 g.fillRect(0, 0, width, height);
 g.setFont(new Font("Times New Roman", Font.ITALIC, 20));
 g.setColor(getRandColor(160, 200));
 for (int i = 0; i < 155; i++) {
 int x = random.nextInt(width);
 int y = random.nextInt(height);
 int xl = random.nextInt(12);
 int yl = random.nextInt(12);
 g.drawLine(x, y, x + xl, y + yl);
 }

 // 生成數(shù)字驗(yàn)證碼
 StringBuilder sRand = new StringBuilder();
 for (int i = 0; i < validateCodeProperties.getImage().getLength(); i++) {
 String rand = String.valueOf(random.nextInt(10));
 sRand.append(rand);
 g.setColor(new Color(20 + random.nextInt(110), 20 + random.nextInt(110), 20 + random.nextInt(110)));
 g.drawString(rand, 13 * i + 6, 16);
 }

 g.dispose();

 return new ImageCode(image, sRand.toString(), validateCodeProperties.getImage().getExpireIn());
 }

 /**
 * 生成隨機(jī)背景條紋
 *
 * @param fc 前景色
 * @param bc 背景色
 * @return RGB顏色
 */
 private Color getRandColor(int fc, int bc) {
 Random random = new Random();
 if (fc > MAX_COLOR_VALUE) {
 fc = MAX_COLOR_VALUE;
 }
 if (bc > MAX_COLOR_VALUE) {
 bc = MAX_COLOR_VALUE;
 }
 int r = fc + random.nextInt(bc - fc);
 int g = fc + random.nextInt(bc - fc);
 int b = fc + random.nextInt(bc - fc);
 return new Color(r, g, b);
 }
}

@Data
@Component("smsCodeGeneratorService")
public class SmsCodeGeneratorServiceImpl implements ValidateCodeGeneratorService {

 @Autowired
 private ValidateCodeProperties validateCodeProperties;


 @Override
 public SmsCode generate(ServletWebRequest request) {
 //生成隨機(jī)數(shù)
 String code = RandomStringUtils.randomNumeric(validateCodeProperties.getSms().getLength());
 return new SmsCode(code, validateCodeProperties.getSms().getExpireIn());
 }
}

@Component("imageCodeProcessorService")
public class ImageCodeProcessorServiceImpl extends AbstractValidateCodeProcessorService<ImageCode> {

 private static final String FORMAT_NAME = "JPEG";

 /**
 * 發(fā)送圖形驗(yàn)證碼，將其寫到相應(yīng)中
 *
 * @param request ServletWebRequest實(shí)例對(duì)象
 * @param imageCode 驗(yàn)證碼
 */
 @Override
 protected void send(ServletWebRequest request, ImageCode imageCode) throws Exception {
 ImageIO.write(imageCode.getImage(), FORMAT_NAME, request.getResponse().getOutputStream());
 }
}

@Component("smsCodeProcessorService")
public class SmsCodeProcessorServiceImpl extends AbstractValidateCodeProcessorService<SmsCode> {
 private static final String SMS_CODE_PARAM_NAME = "mobile";

 @Override
 protected void send(ServletWebRequest request, SmsCode smsCode) throws Exception {
 //這里有一個(gè)參數(shù)也是前端需要傳來的 就是用戶的手機(jī)號(hào)
 String mobile = ServletRequestUtils.getRequiredStringParameter(request.getRequest(), SMS_CODE_PARAM_NAME);
 // 這里僅僅寫個(gè)打印，具體邏輯一般都是調(diào)用第三方接口發(fā)送短信
 System.out.println("向手機(jī)號(hào)為：" + mobile + "的用戶發(fā)送驗(yàn)證碼：" + smsCode.getCode());
 }

@RestController
@Slf4j
public class ValidateCodeController {


 @Autowired
 private Map<String, ValidateCodeProcessorService> validateCodeProcessorMap;


 @RequestMapping("/code/{type}")
 public void createCode(HttpServletRequest request, HttpServletResponse response, @PathVariable String type) throws Exception {
 if(!StringUtils.equalsAny(type, "image", "sms")){
 log.info("type類型錯(cuò)誤 type={}",type);
 return;
 };

 //根據(jù)type獲取具體的實(shí)現(xiàn)類
 ValidateCodeProcessorService validateCodeProcessorService = validateCodeProcessorMap.get(type.concat(ValidateCodeProcessorService.CODE_PROCESSOR));
 validateCodeProcessorService.processor(new ServletWebRequest(request, response));

 }

}