Browse Source

安全漏洞修复,获取短信和登录都要图形验证码

LAPTOP-KB9HII50\70708 2 years ago
parent
commit
effed408e5

+ 3 - 3
server/svr-authentication/src/main/java/com/yihu/jw/security/oauth2/provider/endpoint/WlyyIotLoginEndpoint.java

@ -69,7 +69,7 @@ public class WlyyIotLoginEndpoint {
        String text = parameters.get("text");
        if(!verifyCaptcha(key,text)){
            throw new ImgCaptchaException("验证码错误!");
            throw new ImgCaptchaException("图形验证码错误!");
        }
        //验证请求间隔超时,防止频繁获取验证码
@ -127,7 +127,7 @@ public class WlyyIotLoginEndpoint {
        String text = parameters.get("text");
        if(!verifyCaptcha(key,text)){
            throw new ImgCaptchaException("验证码错误!");
            throw new ImgCaptchaException("图形验证码错误!");
        }
        Oauth2Envelop<Boolean> oauth2Envelop;
@ -144,7 +144,7 @@ public class WlyyIotLoginEndpoint {
                    oauth2Envelop = new Oauth2Envelop<>(jsonObject.getString("msg"), ResultStatus.INVALID_GRANT, false);
                }
            } else {
                oauth2Envelop = new Oauth2Envelop<>("验证码错误", ResultStatus.INVALID_GRANT, false);
                oauth2Envelop = new Oauth2Envelop<>("短信验证码错误", ResultStatus.INVALID_GRANT, false);
            }
        }
        HttpHeaders headers = new HttpHeaders();