上门链接是上次分享了在jfinal中添加jcaptcha验证码

后看到@的jfinal-shiro插件，顺便将验证码加入

MyShiroRealm.java

/**	 * 认证回调函数, 登录时调用.	 */	@Override	protected AuthenticationInfo doGetAuthenticationInfo(AuthenticationToken authcToken) throws AuthenticationException {		//是否启用验证码		if (useCaptcha) {			CaptchaUsernamePasswordToken token = (CaptchaUsernamePasswordToken) authcToken;			String parm = token.getCaptcha();			if (StringUtils.isNotBlank(parm))				parm = parm.toUpperCase();			try {				if (!CaptchaServiceSingleton.getInstance().validateResponseForID(SecurityUtils						.getSubject().getSession().getId().toString(), parm)) {					throw new IncorrectCaptchaException("验证码错误！");				}			} catch (Exception e) {				// session如果没有刷新，validateResponseForID会抛出com.octo.captcha.service.CaptchaServiceException的异常				throw new IncorrectCaptchaException("验证码错误！");			}		} 		UsernamePasswordToken token = (UsernamePasswordToken) authcToken;		String password = String.valueOf(token.getPassword());		// 调用操作数据库的方法查询user信息		User user = User.dao.getUserByName(token.getUsername());		if (user != null) {			byte[] salt = Encodes.decodeHex(user.getStr(User.SALT));			List
    
      roles = Role.dao.getRoleByUser(user.getStr(User.ID));			ShiroUser shiroUser = new ShiroUser(user.getStr(User.ID), user.getStr(User.USERNAME), user,roles);			Session session = SecurityUtils.getSubject().getSession();			session.setAttribute(SecurityConstants.LOGIN_USER, shiroUser);			// 这里可以缓存认证			return new SimpleAuthenticationInfo(shiroUser, user.getStr(User.PASSWORD),					ByteSource.Util.bytes(salt), getName());		} else {			return null;		}	}
    

view-login.ftl

      
    
         
         
     
          
      
           
       
            
        
             
         
              
          
               
           
                 
            
                 
             
                  
              
                   
                   
                    
               
                        $(function (){         $("#signupForm").validate({         rules: {    username: "required",    captcha_key: "required",    password: {     required: true,     minlength: 5    }   },   messages: {    username: "请输入用户名",    captcha_key: "请输入验证码",    password: {     required: "请输入密码",     minlength: jQuery.format("密码不能小于{0}个字 符")    }   }     });        });          
                
                  input.error { border: 1px solid red; } label.error {   padding-left: 16px;   padding-bottom: 2px;   font-weight: bold;   color: #EA5200; }            
                   
                   
                   
                   
                    
                 
                           
                  
                       
                   
                            
                    
                     CMS.
                     
        
                     
                                  
                      
                                       
                       
登录
                        
                       
                                        
                        用户名                
                                        
                        
                                         
                         密码                
                                          
                         
                                          
                          验证码               
                          
                                          
                                            
                           
                                            
                            
                                              
                                                 
                             
                                                      <#if shiroLoginFailure?exists> <#assign error=shiroLoginFailure/> 
                                      <#if error?exists>        
                              
                                           
                               
                                            
                                Warning!            <#if error?contains("AuthenticationException")>             请检查您输入的账户、密码、验证码是否正确. <#elseif error?contains("UnknownAccountException")>  请检查您输入的账户、密码、验证码是否正确. <#elseif error?contains("DisabledAccountException")>  未经审核的账户不允许登录. <#elseif error?contains("IncorrectCaptchaException")>   验证码错误. <#else> 登录失败，请重试.            
                                                
                                                          
                                  
                               
                              
                             
                            
                           
                          
                         
                        
                       
                      
                     
                    
                   
                  
                 
                
               
              
             
            
           
          
         
        
       
      
     
    

@ControllerBind(controllerKey="/admin/validateLogin")@Before(AdminInterceptorStack.class)public class LoginController extends Controller {	private Collection
    
      moduleSets = new TreeSet
     
      ();	//主页	public void index() throws Exception{			String username = getPara(CaptchaFormAuthenticationFilter.DEFAULT_USERNAME_PARAM);		 	setAttr(CaptchaFormAuthenticationFilter.DEFAULT_USERNAME_PARAM, username);//	        render(IndexController.LOGIN_PAGE);		 	returnTo(this,Constants.NO_LOGIN, getRequest(),getResponse());	} 		private void returnTo(Controller controller,String result, HttpServletRequest request,			HttpServletResponse response) throws IOException {		if (AJAXResponseUtils.isAjaxRequest(request)) {			 AJAXResponseUtils.response(controller,response, Constants.NO_LOGIN);		}else if(Constants.NO_LOGIN.equals(result)){			controller.render(Constants.LOGIN_PAGE);		}else{			controller.render(result);		}	}}