From a36de2a232aa4e791bfafb29b8141858d24a67f6 Mon Sep 17 00:00:00 2001
From: xyc <jc_xiong@hotmail.com>
Date: 星期五, 28 八月 2026 11:39:20 +0800
Subject: [PATCH] feat: 登录行为验证码支持配置跳过（app.captcha.required，测试阶段关闭，正式发布开启）
---
traffic-audit-server/src/main/resources/application.yml.example | 5 ++
traffic-audit-web/src/views/Login.vue | 25 +++++++++---
traffic-audit-server/src/main/java/com/trafficaudit/security/controller/LoginController.java | 31 +++++++++++----
3 files changed, 46 insertions(+), 15 deletions(-)
diff --git a/traffic-audit-server/src/main/java/com/trafficaudit/security/controller/LoginController.java b/traffic-audit-server/src/main/java/com/trafficaudit/security/controller/LoginController.java
index 92b43c1..212fd36 100644
--- a/traffic-audit-server/src/main/java/com/trafficaudit/security/controller/LoginController.java
+++ b/traffic-audit-server/src/main/java/com/trafficaudit/security/controller/LoginController.java
@@ -9,6 +9,7 @@
import org.springframework.security.crypto.password.PasswordEncoder;
import org.springframework.web.bind.annotation.*;
+import org.springframework.beans.factory.annotation.Value;
import javax.annotation.Resource;
import java.util.Collections;
import java.util.HashMap;
@@ -31,6 +32,9 @@
@Resource
private PasswordEncoder passwordEncoder;
+ @Value("${app.captcha.required:true}")
+ private boolean captchaRequired;
+
@PostMapping("/login")
public Result<Map<String, Object>> login(@RequestBody Map<String, Object> params) {
String username = (String) params.get("username");
@@ -38,15 +42,17 @@
String captchaId = (String) params.get("captchaId");
List<String> clickIds = strList(params.get("captchaClickIds"));
- CaptchaService.ConsumeResult cr = captchaService.consume(captchaId, clickIds);
- if (cr == CaptchaService.ConsumeResult.NOT_FOUND) {
- return Result.error(4002, "楠岃瘉鐮佷笉瀛樺湪鎴栧凡杩囨湡锛岃鍒锋柊閲嶈瘯");
- }
- if (cr == CaptchaService.ConsumeResult.NOT_VERIFIED) {
- return Result.error(4003, "璇峰厛瀹屾垚琛屼负楠岃瘉");
- }
- if (cr == CaptchaService.ConsumeResult.WRONG) {
- return Result.error(4001, "琛屼负楠岃瘉鏈�氳繃锛岃閲嶆柊楠岃瘉");
+ if (captchaRequired) {
+ CaptchaService.ConsumeResult cr = captchaService.consume(captchaId, clickIds);
+ if (cr == CaptchaService.ConsumeResult.NOT_FOUND) {
+ return Result.error(4002, "楠岃瘉鐮佷笉瀛樺湪鎴栧凡杩囨湡锛岃鍒锋柊閲嶈瘯");
+ }
+ if (cr == CaptchaService.ConsumeResult.NOT_VERIFIED) {
+ return Result.error(4003, "璇峰厛瀹屾垚琛屼负楠岃瘉");
+ }
+ if (cr == CaptchaService.ConsumeResult.WRONG) {
+ return Result.error(4001, "琛屼负楠岃瘉鏈�氳繃锛岃閲嶆柊楠岃瘉");
+ }
}
if (username == null || username.trim().isEmpty() || password == null || password.isEmpty()) {
@@ -77,6 +83,13 @@
return Result.ok(data);
}
+ @GetMapping("/captcha-config")
+ public Result<Map<String, Object>> captchaConfig() {
+ Map<String, Object> data = new HashMap<>();
+ data.put("required", captchaRequired);
+ return Result.ok(data);
+ }
+
@SuppressWarnings("unchecked")
private List<String> strList(Object o) {
if (o instanceof List) {
diff --git a/traffic-audit-server/src/main/resources/application.yml.example b/traffic-audit-server/src/main/resources/application.yml.example
index 1a5477c..115bdd9 100644
--- a/traffic-audit-server/src/main/resources/application.yml.example
+++ b/traffic-audit-server/src/main/resources/application.yml.example
@@ -55,3 +55,8 @@
api-key: ${DEEPSEEK_API_KEY:your-deepseek-api-key}
api-url: https://api.deepseek.com/v1/chat/completions
model: deepseek-chat
+
+# Behavior captcha on login. Set to false to skip verification during test phase; enable before production release.
+app:
+ captcha:
+ required: false
diff --git a/traffic-audit-web/src/views/Login.vue b/traffic-audit-web/src/views/Login.vue
index 5dda4c7..2227171 100644
--- a/traffic-audit-web/src/views/Login.vue
+++ b/traffic-audit-web/src/views/Login.vue
@@ -9,8 +9,11 @@
<el-form-item prop="password">
<el-input v-model="form.password" type="password" placeholder="瀵嗙爜" @keyup.enter.native="login"></el-input>
</el-form-item>
- <el-form-item>
+ <el-form-item v-if="captchaRequired">
<captcha3-d ref="captcha" @verified="onCaptchaVerified" @reset="onCaptchaReset"></captcha3-d>
+ </el-form-item>
+ <el-form-item v-else>
+ <div class="captcha-skip-tip">娴嬭瘯妯″紡锛氳涓洪獙璇佺爜宸茶烦杩囷紝鍙洿鎺ョ偣鍑荤櫥褰曪紙姝ｅ紡鍙戝竷鍚庡皢鍚敤锛�</div>
</el-form-item>
<el-form-item>
<el-button type="primary" :loading="loggingIn" @click="login" style="width:100%">鐧� 褰�</el-button>
@@ -36,8 +39,17 @@
captchaVerified: false,
captchaId: '',
clickIds: [],
- loggingIn: false
+ loggingIn: false,
+ captchaRequired: true
}
+ },
+ created() {
+ axios.get('/api/auth/captcha-config')
+ .then(res => {
+ const d = res.data
+ if (d && d.code === 200) this.captchaRequired = d.data.required !== false
+ })
+ .catch(() => {})
},
methods: {
onCaptchaVerified(payload) {
@@ -53,7 +65,7 @@
login() {
this.$refs.form.validate(valid => {
if (!valid) return
- if (!this.captchaVerified) {
+ if (this.captchaRequired && !this.captchaVerified) {
this.$message.warning('璇峰厛瀹屾垚琛屼负楠岃瘉')
return
}
@@ -75,13 +87,13 @@
this.$router.push('/dashboard')
} else if (d.code === 401) {
this.$message.error(d.message || '鐢ㄦ埛鍚嶆垨瀵嗙爜閿欒')
- this.$refs.captcha.load()
+ if (this.$refs.captcha) this.$refs.captcha.load()
} else if (d.code === 4001 || d.code === 4002 || d.code === 4003) {
this.$message.error(d.message || '楠岃瘉鏈�氳繃锛岃閲嶆柊楠岃瘉')
- this.$refs.captcha.load()
+ if (this.$refs.captcha) this.$refs.captcha.load()
} else {
this.$message.error(d.message || '鐧诲綍澶辫触锛岃閲嶈瘯')
- this.$refs.captcha.load()
+ if (this.$refs.captcha) this.$refs.captcha.load()
}
}).catch(() => {
this.loggingIn = false
@@ -94,6 +106,7 @@
</script>
<style scoped>
.login-container { display: flex; justify-content: center; align-items: center; min-height: 100vh; padding: 20px 0; box-sizing: border-box; background: #f0f2f5; }
+.captcha-skip-tip { font-size: 12px; color: #909399; line-height: 1.6; padding: 8px 10px; background: #F5F7FA; border-radius: 4px; }
.login-card { width: 400px; }
.login-card h2 { text-align: center; margin-bottom: 18px; }
.login-card .el-form-item { margin-bottom: 16px; }
--
Gitblit v1.9.1