Google验证码ReCaptcha V3

因为工作的原因需要使用Google验证码ReCaptcha v3，所以我就上网了解了一下，下面是我的一些学习分享。

大家应该都是用过google的验证码，如

这种情况的需要我们手动去选择，ReCaptcha V3则不需要了，不需要用户去手动的验证。

大白话：用户不用再选择哪些图里有飞机，哪些图里有汽车等。ReCaptcha V3 会在后台对用户的行为进行监测，然后会返回一个分数（0-1）之间，我们就可以自定义了，小于0.5的就是机器人，他们就需要被验证，验证手机号等。

1.首先是去reCaptcha官网网站:https://developers.google.com/recaptcha/

很不幸，这个网站需要翻墙，如果你没有能力，那就算了，因为我不能告诉你怎么翻墙。

标签随便写，这个无所谓

选择第三版

域名可以写自己的域名，也可以用localhost去测试

所有者就是你的google账号了，自己去注册

2.提交之后就会显示两个密钥，一个是客户端的，一个是服务端的

他会提示你怎么去实现，我在这里写我用的实现方法

3.前端页面html

<!DOCTYPE html>
<html>
<head><meta charset="UTF-8"><title>谷歌ReCaptcha</title>
</head>
<body>
<button>点击我执行验证</button><script src="https://www.recaptcha.net/recaptcha/api.js?render=这里写你的客户端密钥"></script>
<script type="text/javascript">const CAPTCHA_CLIENT_SECRET = "这里也写你的客户端密钥";window.onload = () => {document.querySelector('button').addEventListener('click', () => {grecaptcha.execute(CAPTCHA_CLIENT_SECRET, {action: 'homepage'}).then(function(token) {console.log('客户端token:' + token);fetch('/validate?token=' + token, {method: 'GET'}).then(response => {if (response.ok){response.json().then(message => {console.log('服务端验证');console.log(message);});}});});});};
</script>
</body>
</html>

关键的代码

grecaptcha.execute(CAPTCHA_CLIENT_SECRET, {action: 'homepage'}).then(function(token) {    //执行请求到google去获得一个takenconsole.log('客户端token:' + token);fetch('/validate?token=' + token, {  //将得到的请求发送到服务端，服务端做相应的处理method: 'GET'}).then(response => {if (response.ok){response.json().then(message => {console.log('服务端验证');console.log(message);});}});
}

4.后端代码

@RequestMapping("/validate")@ResponseBodypublic String check(HttpServletRequest request) {String checkCode = request.getParameter("token");String secret = "6LdTTf8cAAAAAJnW4jipqR0t03pG-84zpPwGPXfQ";String param = "secret="+secret+"&response="+ checkCode;String json = HttpSendUtil.instance().sendPost("https://www.recaptcha.net/recaptcha/api/siteverify", param, "UTF-8");return json;}

首先你会发现你没有这个HttpSendUtil，没关系，我有

package com.sendy.boot.controller;import java.io.*;
import java.net.HttpURLConnection;
import java.net.URL;public class HttpSendUtil {private HttpSendUtil() {}private static class HttpSendUtilInstance {private static final HttpSendUtil INSTANCE = new HttpSendUtil();}public static HttpSendUtil instance() {return HttpSendUtilInstance.INSTANCE;}public String sendPost(String sendUrl, String params, String encodType) {StringBuffer receive = new StringBuffer();HttpURLConnection URLConn = null;BufferedWriter bw = null;BufferedReader br = null;try {URL url = new URL(sendUrl);URLConn = (HttpURLConnection) url.openConnection();URLConn.setRequestMethod("POST");URLConn.setDoOutput(true);URLConn.setDoInput(true);URLConn.setUseCaches(false);URLConn.setAllowUserInteraction(true);HttpURLConnection.setFollowRedirects(true);URLConn.setInstanceFollowRedirects(true);URLConn.setRequestProperty("Content-Type", "application/x-www-form-urlencoded;charset=UTF-8");URLConn.setRequestProperty("Content-Length", String.valueOf(params.getBytes().length));DataOutputStream dos = new DataOutputStream(URLConn.getOutputStream());dos.writeBytes(params);br = new BufferedReader(new InputStreamReader(URLConn.getInputStream(), encodType));String line;while ((line = br.readLine()) != null) {receive.append(line).append("\r\n");}br.close();} catch (java.io.IOException e) {receive.append("访问产生了异常-->").append(e.getMessage());e.printStackTrace();} finally {if (bw != null) {try {bw.close();} catch (IOException ex) {bw = null;ex.printStackTrace();} finally {if (URLConn != null) {URLConn.disconnect();URLConn = null;}}}if (br != null) {try {br.close();} catch (IOException e) {br = null;throw new RuntimeException(e);} finally {if (URLConn != null) {URLConn.disconnect();URLConn = null;}}}}return receive.toString();}public String sendGet(String sendUrl, String encodType) {StringBuffer receive = new StringBuffer();BufferedReader br = null;HttpURLConnection URLConn = null;try {URL url = new URL(sendUrl);URLConn = (HttpURLConnection) url.openConnection();URLConn.setDoInput(true);URLConn.setDoOutput(true);URLConn.connect();URLConn.getOutputStream().flush();br = new BufferedReader(new InputStreamReader(URLConn.getInputStream(), encodType));String line;while ((line = br.readLine()) != null) {receive.append(line).append("\r\n");}} catch (IOException e) {receive.append("访问产生了异常-->").append(e.getMessage());e.printStackTrace();} finally {if (br != null) {try {br.close();} catch (java.io.IOException ex) {br = null;ex.printStackTrace();} finally {if (URLConn != null) {URLConn.disconnect();URLConn = null;}}}}return receive.toString();}
}

上面这个代码直接用就可以

5.返回的数据

action: "homepage"
challenge_ts: "2021-10-30T03:11:43Z" //验证的时间
hostname: "localhost" //请求的地址
score: 0.9 //验证得到的分数 0-1
success: true //是否验证成功

我们可以对这个score进行自定义处理，比你得分低于0.5，你就让他进行验证，怎么验证取决于你自己

上面的地址我都是给你们替换过的，为什么要替换？因为你不能翻墙啊

www.google.com 替换成 www.recaptcha.net

这一步你不需要做，我在上面已经换好了。

拜拜