实现传统验证码(标准制定(请求和响应)和验证码服务端的适配)

[zfdx123]

在某些情况下需要脱离第三方依赖但是又需要验证码，所以想请问能不能自己搭建一个验证码服务使用

[zfdx123]

未测试的代码

addCap.patch

package main

import (
	"encoding/json"
	"log"
	"net/http"
	"time"

	"github.com/dchest/captcha"
)

// CustomCaptchaRequestModel represents the verification request sent from C# code
type CustomCaptchaRequestModel struct {
	Secret    string `json:"secret"`
	Challenge string `json:"challenge"`
	RemoteIp  string `json:"remoteip"`
}

// CustomCaptchaResponseModel represents the verification response sent back to C# code
type CustomCaptchaResponseModel struct {
	Success       bool     `json:"success"`
	ChallengeTime string   `json:"challenge_ts"`
	Hostname      string   `json:"hostname"`
	Action        string   `json:"action"`
	ErrorCodes    []string `json:"error-codes"`
}

// Secret key for verification (this should be stored securely)
var secretKey = "your-secret-key"

// Handler to generate captcha images
func generateCaptchaHandler(w http.ResponseWriter, r *http.Request) {
	// Create a new captcha id with 6 characters
	captchaId := captcha.NewLen(6)

	// Set content type and write the captcha image to the response
	w.Header().Set("Content-Type", "image/png")
	captcha.WriteImage(w, captchaId, 240, 80)
}

// Handler to verify the captcha challenge
func verifyCaptchaHandler(w http.ResponseWriter, r *http.Request) {
	var req CustomCaptchaRequestModel

	// Decode the request body into the request model
	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
		http.Error(w, "Invalid request", http.StatusBadRequest)
		return
	}

	// Prepare the response model
	var res CustomCaptchaResponseModel

	// Verify secret key
	if req.Secret != secretKey {
		res.Success = false
		res.ErrorCodes = append(res.ErrorCodes, "invalid-secret")
	} else if captcha.VerifyString(req.Challenge, req.Challenge) {
		// If the captcha challenge is valid
		res.Success = true
		res.ChallengeTime = time.Now().Format(time.RFC3339) // Generate the current timestamp in RFC 3339 format
		res.Hostname = r.Host
	} else {
		// If the captcha challenge is invalid
		res.Success = false
		res.ErrorCodes = append(res.ErrorCodes, "invalid-captcha")
	}

	// Return the response as JSON
	w.Header().Set("Content-Type", "application/json")
	if err := json.NewEncoder(w).Encode(res); err != nil {
		http.Error(w, "Error encoding response", http.StatusInternalServerError)
	}
}

func main() {
	// Route for generating captcha images
	http.HandleFunc("/generate", generateCaptchaHandler)

	// Route for verifying captcha challenges
	http.HandleFunc("/verify", verifyCaptchaHandler)

	// Start the server
	log.Println("Serving at localhost:8080...")
	log.Fatal(http.ListenAndServe(":8080", nil))
}

[zfdx123]

今天看前端部分才意识到现在使用的不是传统意义上的验证码，所以我的这种写法存在问题。。。