JAVA实现通过绑定邮箱找回密码功能

1.输入用户名及验证码,验证用户名是否存在



(1).生成验证码工具类

package com.utils;

import java.awt.Color;
import java.awt.Font;
import java.awt.Graphics;
import java.awt.image.BufferedImage;
import java.util.HashMap;
import java.util.Map;
import java.util.Random;

/**
* @Title: GraphicsUtil.java
* @copyright
* @Package com.utils
* @Description: TODO(这里用一句话描述这个类的作用)
* @author Mr.chen
* @date 2016-11-2 下午03:31:30
*/
public class GraphicsUtil {

private Font mFont = new Font("Times New Roman", Font.PLAIN, 17);

Color getRandColor(int fc,int bc){
Random random = new Random();
if(fc>255) fc=255;
if(bc>255) bc=255;
int r=fc+random.nextInt(bc-fc);
int g=fc+random.nextInt(bc-fc);
int b=fc+random.nextInt(bc-fc);
return new Color(r,g,b);
}

public Map<String, Object> getGraphics(){

int width=100,height=18;
BufferedImage image=new BufferedImage(width, height, BufferedImage.TYPE_INT_BGR);
Graphics g=image.getGraphics();
Random random = new Random();
g.setColor(getRandColor(200,250));
g.fillRect(1, 1, width-1, height-1);
g.setColor(new Color(102,102,102));
g.drawRect(0, 0, width-1, height-1);
g.setFont(mFont);
g.setColor(getRandColor(160,200));
//画随机线
for (int i=0;i<155;i++){
int x = random.nextInt(width - 1);
int y = random.nextInt(height - 1);
int xl = random.nextInt(6) + 1;
int yl = random.nextInt(12) + 1;
g.drawLine(x,y,x + xl,y + yl);
}

//从另一方向画随机线
for (int i = 0;i < 70;i++){
int x = random.nextInt(width - 1);
int y = random.nextInt(height - 1);
int xl = random.nextInt(12) + 1;
int yl = random.nextInt(6) + 1;
g.drawLine(x,y,x - xl,y - yl);
}

//生成随机数,并将随机数字转换为字母
String sRand="";
for (int i=0;i<6;i++){
int itmp = random.nextInt(26) + 65;
char ctmp = (char)itmp;
sRand += String.valueOf(ctmp);
g.setColor(new Color(20+random.nextInt(110),20+random.nextInt(110),20+random.nextInt(110)));
g.drawString(String.valueOf(ctmp),15*i+10,16);
}

g.dispose();

Map<String, Object> map=new HashMap<String, Object>();
map.put("rand", sRand);
map.put("image", image);
return map;
}

}

(2).生成验证码action
/**
* @Description: 获取验证码
* @author Mr.chen
* @date 2016-11-2 下午03:45:28
*/
public void getCode(){
try {
HttpServletResponse response = ServletActionContext.getResponse();

HttpServletRequest request= ServletActionContext.getRequest();

response.setHeader("Pragma","No-cache");
response.setHeader("Cache-Control","no-cache");
response.setDateHeader("Expires", 0);
//表明生成的响应是图片
response.setContentType("image/jpeg");

Map<String, Object> map=new GraphicsUtil().getGraphics();
System.out.println(map.get("rand"));
request.getSession().setAttribute("rand", map.get("rand"));
ImageIO.write((RenderedImage) map.get("image"), "JPEG", response.getOutputStream());
} catch (IOException e) {
e.printStackTrace();
}
}
(3).验证用户名是否存在

/**
* @Description: 发送邮件
* @author Mr.chen
* @date 2016-11-2 下午05:06:24
*/
@SuppressWarnings("static-access")
public String toFindPassword2(){
HttpServletRequest request= ServletActionContext.getRequest();
String usernumber = request.getParameter("usernumber");
Studentinfo stu= studentinfoService.getStudentinfoByUsernumber(usernumber);
try {
Properties prop = new Properties();
prop.setProperty("mail.transport.protocol", "smtp");
prop.setProperty("mail.smtp.host", "smtp.qq.com");
prop.setProperty("mail.smtp.auth", "true");
prop.put("mail.smtp.port","587");
prop.setProperty("mail.debug", "true");
//验证写信者邮箱,此处使用第三方授权码登陆,使用密码不知道为什么登录不上
Authenticator authenticator = new PopAuthenticator("123456789@qq.com", "**************");
//创建会话
Session session = Session.getInstance(prop,authenticator);
//填写信封写信
Message msg = new MimeMessage(session);
//设置发邮件的原地址
msg.setFrom(new InternetAddress("123456789@qq.com"));
//设置接收人
msg.setRecipient(RecipientType.TO, new InternetAddress(stu.getEmail()));
msg.setSubject("找回密码!");
msg.setText(this.createLink(stu));
//验证用户名密码发送邮件
Transport transport = session.getTransport();
transport.send(msg);
request.setAttribute("stu", stu);
return SUCCESS;

}catch(Exception e){
e.printStackTrace();
}
return ERROR;
}

/**
* @Description: 生成邮箱链接地址
* @author Mr.chen
* @date 2016-11-3 下午01:50:14
*/
public String createLink(Studentinfo stu){

//生成密钥
String secretKey=UUID.randomUUID().toString();
//设置过期时间
Date outDate = new Date(System.currentTimeMillis() + 30 * 60 * 1000);// 30分钟后过期
System.out.println(System.currentTimeMillis());
long date = outDate.getTime() / 1000 * 1000;// 忽略毫秒数 mySql 取出时间是忽略毫秒数的

//此处应该更新Studentinfo表中的过期时间、密钥信息
stu.setOutDate(date);
stu.setValidataCode(secretKey);
studentinfoService.updateStudentinfo(stu);
//将用户名、过期时间、密钥生成链接密钥
String key =stu.getUsernumber() + "$" + date + "$" + secretKey;

String digitalSignature = MD5Util.getMd5(key);// 数字签名

HttpServletRequest request= ServletActionContext.getRequest();

String path=request.getContextPath();

String basePath=request.getScheme()+"://"+request.getServerName()+":"+request.getServerPort()+path;

String resetPassHref = basePath + "/toFindPassword3.action?sid="+ digitalSignature +"&id="+stu.getId();

String emailContent = "请勿回复本邮件.点击下面的链接,重设密码,本邮件超过30分钟,链接将会失效，需要重新申请找回密码." + resetPassHref;

return emailContent;
}
3.邮件发送成功后进入邮箱,通过该链接进入修改密码请求，链接验证通过后进入修改密码页面



/**
* @Description: 该方法用于处理从邮箱链接过来的修改密码请求
* @author Mr.chen
* @date 2016-11-3 下午02:24:17
*/
public String toFindPassword3(){
String message="";
HttpServletRequest request= ServletActionContext.getRequest();
//获取链接中的加密字符串
String sid=request.getParameter("sid");
//获取链接中的用户名
String id=request.getParameter("id");
if(StringUtils.isBlank(sid)||StringUtils.isBlank(id)){
System.out.println("请求的链接不正确,请重新操作.");
message="请求的链接不正确,请重新操作.";
}
Studentinfo stu=studentinfoService.getStudentinfoById(Long.parseLong(id));

if(stu!=null){
//获取当前用户申请找回密码的过期时间
//找回密码链接已经过期
if(stu.getOutDate()<=System.currentTimeMillis()){
System.out.println("链接已经过期");
message="链接已经过期";
}
//获取当前登陆人的加密码
String key = stu.getUsernumber()+"$"+stu.getOutDate()/1000*1000+"$"+stu.getValidataCode();//数字签名

String digitalSignature = MD5Util.getMd5(key);// 数字签名

if(!digitalSignature.equals(sid)){
System.out.println("链接加密密码不正确");
message="链接加密密码不正确";
}else{
//验证成功,跳入到修改密码界面
request.setAttribute("stu", stu);
}

}else{
System.out.println("用户信息不存在");
message="用户信息不存在";
request.setAttribute("message", message);
}
return SUCCESS;
}



4.输入新密码，验证成功后即修改成功



原文