@ApiOperation(value = "獲取驗(yàn)證碼", notes = "此接口用于獲取驗(yàn)證碼")
    @GetMapping("captcha.jpg")
    public void captcha(HttpServletResponse response, HttpServletRequest request) throws ServletException, IOException {
        response.setHeader("Cache-Control", "no-store, no-cache");
        response.setContentType("image/jpeg");
        // 生成文字驗(yàn)證碼
        String text = producer.createText();
        // 生成圖片驗(yàn)證碼
        BufferedImage image = producer.createImage(text);
        // 保存到驗(yàn)證碼到 session
        System.out.println("=============================");
        request.getSession().setAttribute(Constants.KAPTCHA_SESSION_KEY, text);
        System.out.println("生成文字驗(yàn)證碼：" + text);
        System.out.println("獲取驗(yàn)證碼 session：" + request.getSession().getAttribute(Constants.KAPTCHA_SESSION_KEY));
        System.out.println("獲取驗(yàn)證碼 request.getSession().getId()：" + request.getSession().getId());
        System.out.println("=============================");
        ServletOutputStream out = response.getOutputStream();
        ImageIO.write(image, "jpg", out);
        IOUtils.closeQuietly(out);
    }

@ApiOperation(value = "系統(tǒng)登錄", notes = "此接口用于系統(tǒng)登錄")
    @PostMapping(value = "/login")
    public ApiResponses login(@RequestBody LoginParam loginPARAM, HttpServletRequest request) {
        String username = loginPARAM.getUsername();
        String password = loginPARAM.getPassword();
        String captcha = loginPARAM.getCaptcha();
        System.out.println("=============================");
        System.out.println("系統(tǒng)登錄時(shí) request.getSession().getAttribute(Constants.KAPTCHA_SESSION_KEY)：" + request.getSession().getAttribute(Constants.KAPTCHA_SESSION_KEY));
        System.out.println("系統(tǒng)登錄時(shí) request.getSession().getId()：" + request.getSession().getId());
。
。
.
}

@Configuration
public class CorsConfig implements WebMvcConfigurer {
    @Override
    public void addCorsMappings(CorsRegistry registry) {
        // 允許跨域訪問的路徑
        registry.addMapping("/**")
                // 允許跨域訪問的源
                .allowedOrigins("http://服務(wù)器Ip:9528","http://服務(wù)器Ip:9001")
                // 允許請(qǐng)求方法
                .allowedMethods("POST", "GET", "PUT", "OPTIONS", "DELETE")
                // 預(yù)檢間隔時(shí)間
                .maxAge(168000)
                // 允許頭部設(shè)置
                .allowedHeaders("*")
                // 是否發(fā)送cookie
                .allowCredentials(true);
    }
}

const service = axios.create({
  baseURL: process.env.VUE_APP_BASE_API, // url = base url + request url
  withCredentials: true, // send cookies when cross-domain requests
  timeout: 5000 // request timeout
})

@Configuration
public class SpringSessionConfig {
    // 最新的chrome，設(shè)置null會(huì)默認(rèn)成lax 但是如果設(shè)置samesite為NONE,又需要設(shè)置secure。https支持secure，http不行
    @Bean
    public CookieSerializer httpSessionIdResolver() {
        DefaultCookieSerializer cookieSerializer = new DefaultCookieSerializer();
        cookieSerializer.setUseHttpOnlyCookie(false);
        cookieSerializer.setSameSite("None");
        cookieSerializer.setCookiePath("/");
        cookieSerializer.setUseSecureCookie(true);
        return cookieSerializer;
    }
}

@Autowired
private RedisTemplate redisTemplate;
 @ApiOperation(value = "獲取驗(yàn)證碼", notes = "此接口用于獲取驗(yàn)證碼")
    @GetMapping("captcha.jpg")
    public void captcha(HttpServletResponse response, HttpServletRequest request) throws ServletException, IOException {
        response.setHeader("Cache-Control", "no-store, no-cache");
        response.setContentType("image/jpeg");
        // 生成文字驗(yàn)證碼
        String text = producer.createText();
        // 生成圖片驗(yàn)證碼
        BufferedImage image = producer.createImage(text);
        // 保存到驗(yàn)證碼到 redis 設(shè)置1分鐘過期
        redisTemplate.opsForValue().set(Constants.KAPTCHA_SESSION_KEY,text,1, TimeUnit.MINUTES);
        ServletOutputStream out = response.getOutputStream();
        ImageIO.write(image, "jpg", out);
        IOUtils.closeQuietly(out);
}
 @ApiOperation(value = "系統(tǒng)登錄", notes = "此接口用于系統(tǒng)登錄")
    @PostMapping(value = "/login")
    public ApiResponses login(@RequestBody LoginParam loginPARAM, HttpServletRequest request) {
        String username = loginPARAM.getUsername();
        String password = loginPARAM.getPassword();
        String captcha = loginPARAM.getCaptcha();
        Object kaptcha = redisTemplate.opsForValue().get(Constants.KAPTCHA_SESSION_KEY);
。
。
。
}

  /**
     * 生成驗(yàn)證碼
     *
     * @return
     */
public CaptchaDTO getCaptcha() {
        //1.在內(nèi)存中創(chuàng)建一張圖片
        BufferedImage bi = new BufferedImage(WIDTH, HEIGHT, BufferedImage.TYPE_INT_RGB);
        // 畫布顏色數(shù)組
        Color[] colors = new Color[]{Color.BLUE, Color.CYAN, Color.GRAY, Color.GREEN, Color.ORANGE, Color.RED, Color.BLACK};
        //2.得到圖片
        Graphics g = bi.getGraphics();
        //3.設(shè)置圖片的背影色
        setBackGround(g, WIDTH, HEIGHT);
        //4.設(shè)置圖片的邊框
        //setBorder(g,width,height);
        //5.在圖片上畫干擾線
        drawRandomLine(g, colors, WIDTH, HEIGHT);
        String random = drawRandomNum((Graphics2D) g, colors);
        ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
        try {
            ImageIO.write(bi, "jpg", outputStream);
        } catch (IOException e) {
            e.printStackTrace();
        }
        // 對(duì)字節(jié)數(shù)組Base64編碼
        BASE64Encoder encoder = new BASE64Encoder();
        String imageCode = encoder.encode(outputStream.toByteArray()).replaceAll("\r|\n", "");
        String token = JwtTokenUtils.generateCheckCode(random);
        CaptchaDTO captchaDTO = new CaptchaDTO();
        captchaDTO.setCodeToken(token);
        captchaDTO.setImageCode(imageCode);
        // 保存到驗(yàn)證碼到 redis 設(shè)置1分鐘過期
        redisTemplate.opsForValue().set(Constants.KAPTCHA_SESSION_KEY + token, random, 1, TimeUnit.MINUTES);
        return captchaDTO;
    }

// 登錄部分代碼
    String username = loginPARAM.getUsername();
        String password = loginPARAM.getPassword();
        String imageCode = loginPARAM.getImageCode();
        String codeToken = loginPARAM.getCodeToken();
        // 校驗(yàn)驗(yàn)證碼
        String code = (String) redisTemplate.opsForValue().get(Constants.KAPTCHA_SESSION_KEY + codeToken);
        if (StringUtils.isBlank(code)) {
            ApiAssert.failure(ErrorCodeEnum.KAPTCHA_NOT_FOUND);
        }
        // 清除token，防止重用
        redisTemplate.delete(Constants.KAPTCHA_SESSION_KEY + codeToken);
        if (!imageCode.equalsIgnoreCase(code)) {
            ApiAssert.failure(ErrorCodeEnum.KAPTCHA_ERROR);
        }