Apollo配置中心登陆页面添加验证码

<!--  在密码表单的div后面添加如下代码    -->
<div class="form-group"><input type="text" name="captcha" tabindex="3"class="form-control" placeholder="Enter Captcha"><img src="/createCaptcha" alt="Captcha" />
</div>

<!-- 工具包，包含验证码、加解密（无底层实现） -->
<dependency><groupId>cn.hutool</groupId><artifactId>hutool-all</artifactId><version>5.8.36</version>
</dependency><!-- 加解密（底层实现），低版本的可能需要升级 -->
<dependency><groupId>org.bouncycastle</groupId><artifactId>bcprov-jdk18on</artifactId><version>1.80</version>
</dependency>

public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {HttpServletRequest httpRequest = (HttpServletRequest) request;HttpServletResponse httpResponse = (HttpServletResponse) response;....... // 其他代码// 验证码支持if(isLoginRequest2(httpRequest, httpResponse)){String captchaCode1 = obtainCaptchaCode1(httpRequest );String captcha = obtainCaptchaCode( httpRequest );if(StringUtil.isEmpty(captcha)){httpResponse.sendRedirect("signin#/error");return;}if(!captcha.equalsIgnoreCase(captchaCode1)){httpResponse.sendRedirect("signin#/error");return;}}....... // 其他代码chain.doFilter(request, response);
}/*** 判断是否登陆请求* * @param request* @param response* @return*/
private boolean isLoginRequest2(HttpServletRequest request, HttpServletResponse response) {String url = request.getRequestURI();if(url.endsWith("signin") && "POST".equalsIgnoreCase(request.getMethod())){return true;}else{return false;}
}/*** 从session中取captchaCode1属性（登陆页面初始化时记录）* @param request* @return*/
protected String obtainCaptchaCode1(HttpServletRequest request) {return (String)request.getSession().getAttribute("captchaCode1" );
}/*** 从表单参数中取captcha* @param request* @return*/
protected String obtainCaptchaCode(HttpServletRequest request) {return request.getParameter("captcha" );
}

import cn.hutool.captcha.CaptchaUtil;
import cn.hutool.captcha.LineCaptcha;
import org.springframework.http.MediaType;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.RequestParam;import javax.imageio.ImageIO;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.awt.image.BufferedImage;
import java.io.IOException;/*** @author brickerman 2025-04-03*/
@Controller
public class SignInController {......//其他方法/*** 用于登陆页面初始化时创建验证码，并记录在 session 中* @param request* @param response* @throws IOException*/@RequestMapping(value = "/createCaptcha", method = RequestMethod.GET)public void createCaptcha(HttpServletRequest request, HttpServletResponse response) throws IOException {// 设置响应的内容类型为PNGresponse.setContentType(MediaType.IMAGE_PNG_VALUE);// 创建一个线型验证码对象，宽130，高50，4个字符长度LineCaptcha lineCaptcha = CaptchaUtil.createLineCaptcha(130, 50, 4, 5);// 获取验证码文本String captchaCode = lineCaptcha.getCode();System.out.println("验证码内容: " + captchaCode);request.getSession().setAttribute("captchaCode1", captchaCode);javax.servlet.ServletOutputStream out = response.getOutputStream();// 获取验证码图片BufferedImageBufferedImage image = lineCaptcha.getImage();// 将图片输出到文件（例如：captcha.png）ImageIO.write(image, "PNG", out);image.flush();response.flushBuffer(); // 确保数据被发送到客户端}
}

// 举例
@Configuration
public class AuthConfiguration {@Overrideprotected void configure(HttpSecurity http) throws Exception {http.csrf().disable();http.headers().frameOptions().sameOrigin();http.authorizeRequests().antMatchers("/openapi/**", "/vendor/**","/styles/**", "/scripts/**","/views/**", "/img/**","/prometheus","/createCaptcha")  // 取消验证码请求鉴权.permitAll().antMatchers("/**").hasAnyRole(USER_ROLE);http.formLogin().loginPage("/signin").permitAll().failureUrl("/signin?#/error").and().addFilter(authenticationFilter());http.logout().invalidateHttpSession(true).clearAuthentication(true).logoutSuccessUrl("/signin?#/logout");http.exceptionHandling().authenticationEntryPoint(new LoginUrlAuthenticationEntryPoint("/signin"));}
}

// LoginController.js
login_module.controller('LoginController',['$scope', '$window', '$location', 'toastr', 'AppUtil',LoginController]);function LoginController($scope, $window, $location, toastr, AppUtil) {if ($location.$$url) {var params = AppUtil.parseParams($location.$$url);if (params.error) {$scope.info = "用户名或密码或验证码错误";}if (params.logout) {$scope.info = "登出成功";}}
}

# application-sso.properties
sso.enabled=true
sso.login-url=https://sso.company.com/login
sso.callback-url=https://apollo.company.com/callback
sso.token-header=X-Auth-Token