微信小程序中短信验证码登录全流程及代码

短信验证码实现流程

1、构造手机验证码，生成一个6位的随机数字串；
2、使用接口向短信平台发送手机号和验证码，然后短信平台再把验证码发送到制定手机号上
3、将手机号验证码、操作时间存入Session，redis中，作为后面验证使用；
4、接收用户填写的验证码、手机号及其他注册数据；
5、对比提交的验证码与Session，redis中的验证码是否一致，同时判断提交动作是否在有效期内；
6、验证码正确且在有效期内，请求通过，处理相应的业务。

package com.foen.utils;


import java.text.SimpleDateFormat;

import java.util.Date;
import java.util.Timer;
import java.util.TimerTask;


import com.aliyuncs.CommonRequest;
import com.aliyuncs.CommonResponse;
import com.aliyuncs.DefaultAcsClient;
import com.aliyuncs.IAcsClient;
import com.aliyuncs.exceptions.ClientException;
import com.aliyuncs.exceptions.ServerException;
import com.aliyuncs.http.HttpRequest;
import com.aliyuncs.http.MethodType;
import com.aliyuncs.profile.DefaultProfile;
import com.foen.car.dto.BaseResultDto;
import com.foen.car.service.RedisService;
import org.apache.commons.lang.StringUtils;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.session.Session;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;

/**
 * 手机短信通信类
 * @auther: 作者 gzh
 * @description: 类说明
 * @Date: created in 9:45 2020/5/27
 */
public class MoblieMessageUtil {

    private static final Logger logger = LoggerFactory.getLogger(MoblieMessageUtil.class);
    // 产品名称:云通信短信API产品,开发者无需替换
    private static final String product = "Dysmsapi";
    private static final String domain = "dysmsapi.aliyuncs.com";

    // 此处需要替换成开发者自己的AK(在阿里云访问控制台寻找)
    private static String accessKeyId = "---";
    private static String accessKeySecret = "---";
    private static String signName = "--";
    private static String identifyingTempleteCode = "{\"code\":\"1111\"}";
    private static String registTempleteCode = "---";


    public static BaseResultDto sendSmsCode(String tel, String code, HttpServletRequest httpServletRequest) {
        BaseResultDto baseResultDto = Utils.baseDefaultResultMessageError();
        DefaultProfile profile = DefaultProfile.getProfile("cn-hangzhou", accessKeyId, accessKeySecret);
        IAcsClient client = new DefaultAcsClient(profile);
        CommonRequest request = new CommonRequest();
        request.setSysMethod(MethodType.POST);
        request.setSysDomain("dysmsapi.aliyuncs.com");
        request.setSysVersion("2017-05-25");
        request.setSysAction("SendSms");
        request.putQueryParameter("RegionId", "cn-hangzhou");
        request.putQueryParameter("PhoneNumbers", tel);
        request.putQueryParameter("SignName", signName);
        request.putQueryParameter("TemplateCode", registTempleteCode);
        request.putQueryParameter("TemplateParam","{\"code\":"+code+"}" );
        request.putQueryParameter("SmsUpExtendCode", code);
        try {
            CommonResponse response = client.getCommonResponse(request);

            logger.info("==>"+response.getData());
            if(response.getData().indexOf("OK")!=-1){
                baseResultDto=Utils.renderBaseResultDtoSuccess("短信发送成功");
            }else{
                baseResultDto=Utils.renderBaseResultDtoError(response.getData());
            }
        } catch (ServerException e) {
            e.printStackTrace();
        } catch (ClientException e) {
            e.printStackTrace();
        }
        return  baseResultDto;
    }


    /**
     * 保存数据到session
     * @param request
     * @param code
     * @param phone
     */
    private static void setSendSmsCode(HttpServletRequest request,String code,String phone){
        Session session = SecurityUtils.getSubject().getSession();
        session.setAttribute(Constants.CRM_STR+phone, code);
        try {
            final Timer timer=new Timer();
            timer.schedule(new TimerTask() {
                @Override
                public void run() {
                    String yxcode1 =  (String) session.getAttribute(Constants.CRM_STR+phone);
                    if(StringUtils.isNotEmpty(yxcode1)){
                        session.removeAttribute(Constants.CRM_STR+phone);
                    }
                    timer.cancel();
                }
            },Constants.SIGN_EXPIRED_TIME);
        } catch (Exception e) {
            e.printStackTrace();
        }
    }


    public static void setRegistData(RedisService service, String phone, String code){
        service.setValue(Constants.CRM_STR+phone,code);
        service.setValue(Constants.CRM_TIME+phone,DateUtils.dateToStringFromat());
        try {
            //TimerTask实现5分钟后从session.resdis中删除checkCode
            final Timer timer=new Timer();
            timer.schedule(new TimerTask() {
                @Override
                public void run() {
                    String phone_ =  service.getValue(Constants.CRM_STR+phone);
                    String vcode_ =  service.getValue(Constants.CRM_TIME+phone);
                    if(StringUtils.isNotEmpty(phone_)){
                        service.delete(Constants.CRM_STR+phone);
                    }
                    if(StringUtils.isNotEmpty(vcode_)){
                        service.delete(Constants.CRM_TIME+phone);
                    }
                    timer.cancel();
                }
            },Constants.SIGN_EXPIRED_TIME);
        } catch (Exception e) {
            e.printStackTrace();
        }
    }


}

短信通信类

短信验证码实现流程

//构造手机验证码，生成一个6位的随机数字串；
public static String runNumber() {
   String str="ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
   StringBuilder sb=new StringBuilder(4);
   for(int i=0;i<6;i++)
   {
      char ch=str.charAt(new Random().nextInt(str.length()));
      sb.append(ch);
   }
   System.out.println(sb.toString());
   String code = sb.toString();
   return code;
}