/* * Symphony - A modern community (forum/SNS/blog) platform written in Java. * Copyright (C) 2012-2017, b3log.org & hacpai.com * * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see <http://www.gnu.org/licenses/>. */ package org.b3log.symphony.processor; import org.apache.commons.io.IOUtils; import org.apache.commons.lang.StringUtils; import org.b3log.latke.image.Image; import org.b3log.latke.logging.Level; import org.b3log.latke.logging.Logger; import org.b3log.latke.servlet.HTTPRequestContext; import org.b3log.latke.servlet.HTTPRequestMethod; import org.b3log.latke.servlet.annotation.RequestProcessing; import org.b3log.latke.servlet.annotation.RequestProcessor; import org.b3log.latke.servlet.renderer.PNGRenderer; import org.b3log.symphony.model.Common; import org.json.JSONObject; import org.patchca.color.SingleColorFactory; import org.patchca.filter.predefined.CurvesRippleFilterFactory; import org.patchca.service.Captcha; import org.patchca.service.ConfigurableCaptchaService; import org.patchca.word.RandomWordFactory; import javax.imageio.ImageIO; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpServletResponse; import java.awt.*; import java.awt.image.BufferedImage; import java.io.ByteArrayOutputStream; import java.util.HashSet; import java.util.Set; /** * Captcha processor. * * @author <a href="http://88250.b3log.org">Liang Ding</a> * @version 2.2.0.7, Jan 10, 2017 * @since 0.2.2 */ @RequestProcessor public class CaptchaProcessor { /** * Logger. */ private static final Logger LOGGER = Logger.getLogger(CaptchaProcessor.class.getName()); /** * Key of captcha. */ public static final String CAPTCHA = "captcha"; /** * Captchas. */ public static final Set<String> CAPTCHAS = new HashSet<>(); /** * Gets captcha. * * @param context the specified context */ @RequestProcessing(value = "/captcha", method = HTTPRequestMethod.GET) public void get(final HTTPRequestContext context) { final PNGRenderer renderer = new PNGRenderer(); context.setRenderer(renderer); try { final HttpServletRequest request = context.getRequest(); final HttpServletResponse response = context.getResponse(); final ConfigurableCaptchaService cs = new ConfigurableCaptchaService(); cs.setColorFactory(new SingleColorFactory(new Color(25, 60, 170))); cs.setFilterFactory(new CurvesRippleFilterFactory(cs.getColorFactory())); final RandomWordFactory randomWordFactory = new RandomWordFactory(); randomWordFactory.setMinLength(4); randomWordFactory.setMaxLength(4); cs.setWordFactory(randomWordFactory); final Captcha captcha = cs.getCaptcha(); final String challenge = captcha.getChallenge(); final BufferedImage bufferedImage = captcha.getImage(); if (CAPTCHAS.size() > 64) { CAPTCHAS.clear(); } CAPTCHAS.add(challenge); response.setHeader("Pragma", "no-cache"); response.setHeader("Cache-Control", "no-cache"); response.setDateHeader("Expires", 0); final ByteArrayOutputStream baos = new ByteArrayOutputStream(); ImageIO.write(bufferedImage, "png", baos); final byte[] data = baos.toByteArray(); IOUtils.closeQuietly(baos); final Image captchaImg = new Image(); captchaImg.setData(data); renderer.setImage(captchaImg); } catch (final Exception e) { LOGGER.log(Level.ERROR, e.getMessage(), e); } } /** * Gets captcha for login. * * @param context the specified context */ @RequestProcessing(value = "/captcha/login", method = HTTPRequestMethod.GET) public void getLoginCaptcha(final HTTPRequestContext context) { try { final HttpServletRequest request = context.getRequest(); final HttpServletResponse response = context.getResponse(); final String userId = request.getParameter(Common.NEED_CAPTCHA); if (StringUtils.isBlank(userId)) { return; } final JSONObject wrong = LoginProcessor.WRONG_PWD_TRIES.get(userId); if (null == wrong) { return; } if (wrong.optInt(Common.WRON_COUNT) < 3) { return; } final PNGRenderer renderer = new PNGRenderer(); context.setRenderer(renderer); final ConfigurableCaptchaService cs = new ConfigurableCaptchaService(); cs.setColorFactory(new SingleColorFactory(new Color(26, 52, 96))); cs.setFilterFactory(new CurvesRippleFilterFactory(cs.getColorFactory())); final RandomWordFactory randomWordFactory = new RandomWordFactory(); randomWordFactory.setMinLength(4); randomWordFactory.setMaxLength(4); cs.setWordFactory(randomWordFactory); final Captcha captcha = cs.getCaptcha(); final String challenge = captcha.getChallenge(); final BufferedImage bufferedImage = captcha.getImage(); wrong.put(CAPTCHA, challenge); response.setHeader("Pragma", "no-cache"); response.setHeader("Cache-Control", "no-cache"); response.setDateHeader("Expires", 0); final ByteArrayOutputStream baos = new ByteArrayOutputStream(); ImageIO.write(bufferedImage, "png", baos); final byte[] data = baos.toByteArray(); IOUtils.closeQuietly(baos); final Image captchaImg = new Image(); captchaImg.setData(data); renderer.setImage(captchaImg); } catch (final Exception e) { LOGGER.log(Level.ERROR, e.getMessage(), e); } } }