当前位置：首页 > 后端开发 > 正文

如何在Java登录系统中巧妙集成并实现验证码功能？

admin
后端开发
2025-10-18
6

在Java中实现登录功能时,添加验证码是一种常见的安全措施，可以防止自动化攻破和恶意用户，以下是一个详细的步骤，用于在Java登录系统中添加验证码功能。

准备工作

在开始之前,请确保您已经安装了Java开发环境，并且有了一个基本的Java Web项目。

如何在Java登录系统中巧妙集成并实现验证码功能？第1张

创建验证码

我们需要创建一个验证码,这里我们可以使用Java的图形库来生成一个图片验证码。

1 创建验证码类

import javax.imageio.ImageIO; import java.awt.*; import java.awt.image.BufferedImage; import java.io.ByteArrayOutputStream; import java.io.IOException; import java.util.Random; public class CaptchaGenerator { private static final int WIDTH = 120; private static final int HEIGHT = 40; private static final String CHARACTERS = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"; public static byte[] generateCaptcha() throws IOException { BufferedImage bufferedImage = new BufferedImage(WIDTH, HEIGHT, BufferedImage.TYPE_INT_RGB); Graphics2D g2d = bufferedImage.createGraphics(); // 设置背景色 g2d.setColor(Color.WHITE); g2d.fillRect(0, 0, WIDTH, HEIGHT); // 生成随机字符 StringBuilder captchaText = new StringBuilder(); Random random = new Random(); for (int i = 0; i < 6; i++) { int index = random.nextInt(CHARACTERS.length()); char c = CHARACTERS.charAt(index); captchaText.append(c); g2d.setColor(new Color(random.nextInt(255), random.nextInt(255), random.nextInt(255))); g2d.setFont(new Font("Arial", Font.BOLD, 18)); g2d.drawString(String.valueOf(c), 20 + i * 20, 30); } // 添加干扰线 for (int i = 0; i < 10; i++) { g2d.setColor(new Color(random.nextInt(255), random.nextInt(255), random.nextInt(255))); g2d.drawLine(random.nextInt(WIDTH), random.nextInt(HEIGHT), random.nextInt(WIDTH), random.nextInt(HEIGHT)); } // 添加干扰点 for (int i = 0; i < 50; i++) { g2d.setColor(new Color(random.nextInt(255), random.nextInt(255), random.nextInt(255))); g2d.fillOval(random.nextInt(WIDTH), random.nextInt(HEIGHT), 2, 2); } g2d.dispose(); ByteArrayOutputStream baos = new ByteArrayOutputStream(); ImageIO.write(bufferedImage, "png", baos); return baos.toByteArray(); } }

验证码存储

为了验证用户输入的验证码,我们需要将生成的验证码存储起来，这里我们可以使用一个简单的HashMap来存储验证码和对应的用户会话。

1 创建验证码存储类

import java.util.HashMap; import java.util.Map; public class CaptchaStore { private static final Map<String, String> captchaMap = new HashMap<>(); public static void addCaptcha(String sessionKey, String captcha) { captchaMap.put(sessionKey, captcha); } public static boolean verifyCaptcha(String sessionKey, String inputCaptcha) { String storedCaptcha = captchaMap.get(sessionKey); return storedCaptcha != null && storedCaptcha.equals(inputCaptcha); } }

集成验证码到登录页面

现在我们需要在登录页面中集成验证码,以下是一个简单的HTML和JavaScript示例：

如何在Java登录系统中巧妙集成并实现验证码功能？第2张

<!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF8">Login</title> <script> function generateCaptcha() { var xhr = new XMLHttpRequest(); xhr.open("GET", "/generatecaptcha", true); xhr.responseType = "blob"; xhr.onload = function() { var img = document.getElementById("captchaimage"); img.src = URL.createObjectURL(this.response); }; xhr.send(); } </script> </head> <body> <form action="/login" method="post"> <label for="username">Username:</label> <input type="text" id="username" name="username" required> <br> <label for="password">Password:</label> <input type="password" id="password" name="password" required> <br> <label for="captcha">Captcha:</label> <input type="text" id="captcha" name="captcha" required> <img id="captchaimage" src="" onclick="generateCaptcha()"> <br> <button type="submit">Login</button> </form> <script> generateCaptcha(); </script> </body> </html>

集成验证码到后端

我们需要在Java后端处理验证码验证逻辑。

1 创建验证码处理类

import javax.servlet.ServletException; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import java.io.IOException; public class CaptchaServlet extends HttpServlet { @Override protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { try { byte[] captchaBytes = CaptchaGenerator.generateCaptcha(); req.getSession().setAttribute("CAPTCHA", new String(captchaBytes)); resp.getOutputStream().write(captchaBytes); } catch (IOException e) { e.printStackTrace(); } } }

2 创建登录处理类

import javax.servlet.ServletException; import javax.servlet.http.HttpServlet; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import javax.servlet.http.HttpSession; import java.io.IOException; public class LoginServlet extends HttpServlet { @Override protected void doPost(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { String username = req.getParameter("username"); String password = req.getParameter("password"); String inputCaptcha = req.getParameter("captcha"); HttpSession session = req.getSession(); String storedCaptcha = (String) session.getAttribute("CAPTCHA"); if (storedCaptcha != null && storedCaptcha.equals(inputCaptcha)) { // 验证成功，处理登录逻辑 // ... } else { // 验证失败，返回错误信息 resp.getWriter().write("Invalid captcha"); } } }