11

src/main/java/com/ekexiu/portal/service/SysService.java

@@ -46,6 +46,7 @@ import com.ekexiu.portal.po.Professor;
import com.ekexiu.portal.po.User;
import com.ekexiu.portal.po.UserOpenId;
import com.ekexiu.portal.pojo.SessionUser;
import com.ekexiu.portal.util.PictureVC;
@Path
public class SysService {
@@ -1804,9 +1805,18 @@ public class SysService {
	@Get
	@Path("/vcWithBind")
	public String reqBindBindMobilePhone(@JdbcConn(false) Connection con, String userid, String mobilePhone,String vcode,@SessionVal(value="verification",remove=true) String scode) throws JfwBaseException, SQLException {
		if(!vcode.toUpperCase().equals(scode)){
			throw new JfwBaseException(20001, "valid code error");
	public String reqBindBindMobilePhone(@JdbcConn(false) Connection con, String userid, String mobilePhone,String vcode,@Nullable @SessionVal(value="verification",remove=true) String scode,@Nullable String token) throws JfwBaseException, SQLException {
		if(token!=null){
			if(!PictureVC.match(token, vcode.toUpperCase(), true)){
				throw new JfwBaseException(20001, "valid code error");
			}
		}else{
			if(scode==null) {
				throw new IllegalArgumentException("not found session value:verification");
			}
			if(!vcode.toUpperCase().equals(scode)){
				throw new JfwBaseException(20001, "valid code error");
			}
		}
		User user = this.userDao.query(con, userid);
		if (null == user)
@@ -1856,10 +1866,19 @@ public class SysService {
	 */
	@Get
	@Path("/regmobilephone")
	public String regMobilePhone(@JdbcConn(false) Connection con, String mobilePhone, @DefaultValue("true") boolean checkExists,String vcode,@SessionVal(value="verification",remove=true) String scode)
	public String regMobilePhone(@JdbcConn(false) Connection con, String mobilePhone, @DefaultValue("true") boolean checkExists,String vcode,@Nullable @SessionVal(value="verification",remove=true) String scode,@Nullable String token)
			throws JfwBaseException, SQLException {
		if(!vcode.toUpperCase().equals(scode)){
			throw new JfwBaseException(20001, "valid code error");
		if(token!=null){
			if(!PictureVC.match(token, vcode.toUpperCase(), true)){
				throw new JfwBaseException(20001, "valid code error");
			}
		}else{
			if(scode==null) {
				throw new IllegalArgumentException("not found session value:verification");
			}
			if(!vcode.toUpperCase().equals(scode)){
				throw new JfwBaseException(20001, "valid code error");
			}
		}
		if (checkExists) {
			User user = this.userDao.queryByEmailOrMobilePhone(con, mobilePhone);
@@ -1895,9 +1914,18 @@ public class SysService {
	
	@Get
	@Path("/phoneValidCode")
	public String phoneValidCode(String phone,String vcode,@SessionVal(value="verification",remove=true)String scode) throws JfwBaseException{
		if(!vcode.toUpperCase().equals(scode)){
			throw new JfwBaseException(20001, "valid code error");
	public String phoneValidCode(String phone,String vcode,@Nullable @SessionVal(value="verification",remove=true)String scode,@Nullable String token) throws JfwBaseException{
		if(token!=null){
			if(!PictureVC.match(token, vcode.toUpperCase(), true)){
				throw new JfwBaseException(20001, "valid code error");
			}
		}else{
			if(scode==null) {
				throw new IllegalArgumentException("not found session value:verification");
			}
			if(!vcode.toUpperCase().equals(scode)){
				throw new JfwBaseException(20001, "valid code error");
			}
		}
		StateCode<String, String> sc = new StateCode<String, String>();
		final String key = JfwAppContext.cacheObjectAndGenKey(sc);
@@ -2034,8 +2062,13 @@ public class SysService {
	@Post
	@Path("/checkPicture")
	public boolean checkPictureVC(@SessionVal(value = "verification", defaultvalue = "null", remove = true) String verification, String submitVerification)
	public boolean checkPictureVC(@Nullable @SessionVal(value = "verification", remove = false) String verification, String submitVerification,@Nullable String token)
			throws JfwBaseException {
		if(token!=null){
			return PictureVC.match(token, submitVerification.toUpperCase(), false);
		}
		
		
		if (null == verification) {
			throw new JfwBaseException("Picture is expire !");
		}
@@ -2205,6 +2238,12 @@ public class SysService {
		return emails.length;
	}
	@Get
	@Path("/guid")
	public String guid(){
		return StringUtil.buildUUID();
	}
	public void sendInviteMail(@JdbcConn Connection con, String email, @Nullable String mobilePhone, String inviteCode)
			throws SQLException, MessagingException {
		String mailContent = this.inviteMailContentTempalte;

src/main/java/com/ekexiu/portal/util/PictureVC.java

@@ -1,6 +1,9 @@
package com.ekexiu.portal.util;
import java.io.IOException;
import java.util.LinkedList;
import java.util.concurrent.ConcurrentHashMap;
import java.util.concurrent.TimeUnit;
import javax.servlet.Servlet;
import javax.servlet.ServletException;
@@ -9,23 +12,99 @@ import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
public class PictureVC extends HttpServlet implements Servlet {  
  
import org.jfw.util.context.JfwAppContext;
import org.jfw.util.state.StateCode;
public class PictureVC extends HttpServlet implements Servlet {
	private static final long serialVersionUID = 2459158903781864570L;
	public void service(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {  
        response.setHeader("Pragma", "No-cache");  
        response.setHeader("Cache-Control", "no-cache");  
        response.setDateHeader("Expires", 0);  
        response.setContentType("image/jpeg");  
        HttpSession session = request.getSession();
        //生成随机字符串  
        String verifyCode = VerifyCodeUtils.generateVerifyCode(4);
        //将验证码设置到session里 方便验证
        session.setAttribute("verification", verifyCode);
        //生成图片  
        int w = 100, h = 40;  
        VerifyCodeUtils.outputImage(w, h, response.getOutputStream(), verifyCode);  
  
    }  
} 
	private static long timeout = 1000 * 60 * 5;
	private static long interval = 1000 * 60;
	private static ConcurrentHashMap<String, StateCode<String, String>> tokens = new ConcurrentHashMap<String, StateCode<String, String>>();
	public static void put(String key, String val) {
		StateCode<String, String> code = new StateCode<String, String>();
		code.setBuildTime(System.currentTimeMillis());
		code.setExpiredTime(code.getBuildTime() + timeout);
		code.setKey(key);
		code.setValue(val);
		tokens.put(key, code);
	}
	public static boolean match(String key, String val, boolean removed) {
		boolean result = false;
		StateCode<String, String> code = tokens.get(key);
		if (code != null) {
			if (System.currentTimeMillis() < code.getExpiredTime()) {
				result = code.getValue().equals(val);
				if (removed) {
					tokens.remove(key, code);
				}
			}
		}
		return result;
	}
	public void service(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
		response.setHeader("Pragma", "No-cache");
		response.setHeader("Cache-Control", "no-cache");
		response.setDateHeader("Expires", 0);
		response.setContentType("image/jpeg");
		// 生成随机字符串
		String verifyCode = VerifyCodeUtils.generateVerifyCode(4);
		String token = request.getParameter("token");
		if (token != null && token.length() == 32) {
			put(token, verifyCode);
		} else {
			HttpSession session = request.getSession();
			// 将验证码设置到session里 方便验证
			session.setAttribute("verification", verifyCode);
		}
		// 生成图片
		int w = 100, h = 40;
		VerifyCodeUtils.outputImage(w, h, response.getOutputStream(), verifyCode);
	}
	@Override
	public void init() throws ServletException {
		long longValue = 0;
		String tmp = this.getServletConfig().getInitParameter("timeout");
		try {
			longValue = Long.parseLong(tmp);
			if (longValue > (1000 * 90)) {
				PictureVC.timeout = longValue;
			}
		} catch (Throwable th) {
		}
		tmp = this.getServletConfig().getInitParameter("cleanInterval");
		try {
			longValue = Long.parseLong(tmp);
			if (longValue > (1000)) {
				PictureVC.interval = longValue;
			}
		} catch (Throwable th) {
		}
		JfwAppContext.getScheduledExecutorService().scheduleAtFixedRate(new Runnable() {
			@Override
			public void run() {
				LinkedList<StateCode<String, String>> list = new LinkedList<StateCode<String, String>>();
				long time = System.currentTimeMillis();
				for (StateCode<String, String> st : tokens.values()) {
					if ((time - st.getExpiredTime()) > 1000) {
						list.add(st);
					}
				}
				for (StateCode<String, String> st : list) {
					tokens.remove(st.getKey(), st);
				}
			}
		}, 1000, PictureVC.interval, TimeUnit.MILLISECONDS);
	}
}