验证码提交1

@@ -14,6 +14,7 @@ import configure
 from app.decorators.auth_decorator import auth_decorator
 from app.decorators.auth_decorator import auth_decorator
 import time
 import time
 from app.models import SM3, AESHelper
 from app.models import SM3, AESHelper
+from PIL import Image
 
 
 
 
 def current_user():
 def current_user():
@@ -47,9 +48,14 @@ class DataManager(BlueprintApi):
             except OAuth2Error as error:
             except OAuth2Error as error:
                 return jsonify(dict(error.get_body()))
                 return jsonify(dict(error.get_body()))
             if not user:
             if not user:
+                #生成验证码
+                
                 return render_template("auth/authorize.html", user=user, grant=grant)
                 return render_template("auth/authorize.html", user=user, grant=grant)
         error = ""
         error = ""
         if not user:
         if not user:
+            # 验证码校验
+            
+            
             if not "username" in request.form or not request.form.get("username"):
             if not "username" in request.form or not request.form.get("username"):
                 error = "用户名不可为空"
                 error = "用户名不可为空"
             elif not "password" in request.form or not request.form.get("password"):
             elif not "password" in request.form or not request.form.get("password"):

+'''
+生成验证码图片
+'''
+
+from PIL import Image, ImageDraw, ImageFont, ImageFilter
+import random
+
+
+# 随机字符
+def rndChar():
+    num = 0
+    while num == 0 and ((num >= 58 and num <= 64) or (num >= 91 and num <= 96)):
+        num = random.randint(48, 122)
+    return num
+
+# 随机颜色
+
+
+def rndColor():
+    return ''

-# 权限控制
+101映射域名
+dmap.apps.chinadci.com
+
+# Web安全
 ## 1 接口权限控制
 ## 1 接口权限控制
 [swagger](https://swagger.io/docs/specification/2-0/what-is-swagger/)
 [swagger](https://swagger.io/docs/specification/2-0/what-is-swagger/)
 
 
@@ -34,7 +37,8 @@ password = SM3.encode('test')
 ~~前端使用sm-crypto，用户与python-gmssl互通~~
 ~~前端使用sm-crypto，用户与python-gmssl互通~~
 ~~[npm_sm-crypto](https://www.npmjs.com/package/sm-crypto)~~
 ~~[npm_sm-crypto](https://www.npmjs.com/package/sm-crypto)~~
 
 
-使用AES加密敏感信息，前端加密，后端解密。偏移量iv、加密密钥key与前端保持一致，保证解密正确。封装在models.py中
+使用AES对称加密敏感信息，前端加密，后端解密。偏移量iv、加密密钥key与前端保持一致，保证解密正确。封装在models.py中。
+
 依赖组件：
 依赖组件：
 * pycryptodome
 * pycryptodome
 * Crypto
 * Crypto
@@ -42,10 +46,17 @@ password = SM3.encode('test')
 参考资料
 参考资料
 [pycryptodome]()
 [pycryptodome]()
 
 
-
+**demo**
 ```python
 ```python
 from app.models import  AESHelper
 from app.models import  AESHelper
 
 
-encryption=AESHelper.encode('message')
+encryption=AESHelper.encode('test_data')
 result=AESHelper.decode(encryption)
 result=AESHelper.decode(encryption)
-```
+```
+
+## 4 使用验证码，防止恶意破解密码、刷票、论坛灌水、刷页
+验证码又叫CAPTCHA
+
+[验证码基础知识](https://baike.baidu.com/item/%E9%AA%8C%E8%AF%81%E7%A0%81/31701)
+[使用python图像处理标准库](https://www.liaoxuefeng.com/wiki/1016959663602400/1017785454949568)
+[pillow](https://pillow.readthedocs.io/en/stable/index.html)