<!-- kaptcha -->
        <dependency>
            <groupId>com.github.axet</groupId>
            <artifactId>kaptcha</artifactId>
            <version>0.0.9</version>
        </dependency>

package com.louis.mango.admin.config;

import java.util.Properties;

import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

import com.google.code.kaptcha.impl.DefaultKaptcha;
import com.google.code.kaptcha.util.Config;

/**
 * 验证码配置
 * @author Louis
 * @date Jan 14, 2019
 */
@Configuration
public class KaptchaConfig {

    @Bean
    public DefaultKaptcha producer() {
        Properties properties = new Properties();
        properties.put("kaptcha.border", "no");
        properties.put("kaptcha.textproducer.font.color", "black");
        properties.put("kaptcha.textproducer.char.space", "5");
        Config config = new Config(properties);
        DefaultKaptcha defaultKaptcha = new DefaultKaptcha();
        defaultKaptcha.setConfig(config);
        return defaultKaptcha;
    }
}

package com.louis.mango.admin.controller;

import java.awt.image.BufferedImage;
import java.io.IOException;

import javax.imageio.ImageIO;
import javax.servlet.ServletException;
import javax.servlet.ServletOutputStream;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.springframework.beans.factory.annotation.Autowired;
//import org.springframework.security.authentication.AuthenticationManager;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RestController;

import com.google.code.kaptcha.Constants;
import com.google.code.kaptcha.Producer;
import com.louis.mango.admin.model.SysUser;
//import com.louis.mango.admin.security.JwtAuthenticatioToken;
import com.louis.mango.admin.service.SysUserService;
import com.louis.mango.admin.util.PasswordUtils;
//import com.louis.mango.admin.util.SecurityUtils;
//import com.louis.mango.admin.vo.LoginBean;
import com.louis.mango.common.utils.IOUtils;
import com.louis.mango.core.http.HttpResult;

/**
 * 登录控制器
 * @author Louis
 * @date Jan 14, 2019
 */
@RestController
public class SysLoginController {

    @Autowired
    private Producer producer;
    @Autowired
    private SysUserService sysUserService;
//    @Autowired
//    private AuthenticationManager authenticationManager;

    @GetMapping("captcha.jpg")
    public void captcha(HttpServletResponse response, HttpServletRequest request) throws ServletException, IOException {
        response.setHeader("Cache-Control", "no-store, no-cache");
        response.setContentType("image/jpeg");

        // 生成文字验证码
        String text = producer.createText();
        // 生成图片验证码
        BufferedImage image = producer.createImage(text);
        // 保存到验证码到 session
        request.getSession().setAttribute(Constants.KAPTCHA_SESSION_KEY, text);

        ServletOutputStream out = response.getOutputStream();
        ImageIO.write(image, "jpg", out);    
        IOUtils.closeQuietly(out);
    }

    /**
     * 登录接口
     */
    /*
     * @PostMapping(value = "/login") public HttpResult login(@RequestBody LoginBean
     * loginBean, HttpServletRequest request) throws IOException { String username =
     * loginBean.getAccount(); String password = loginBean.getPassword(); String
     * captcha = loginBean.getCaptcha(); // 从session中获取之前保存的验证码跟前台传来的验证码进行匹配 Object
     * kaptcha = request.getSession().getAttribute(Constants.KAPTCHA_SESSION_KEY);
     * if(kaptcha == null){ return HttpResult.error("验证码已失效"); }
     * if(!captcha.equals(kaptcha)){ return HttpResult.error("验证码不正确"); } // 用户信息
     * SysUser user = sysUserService.findByName(username); // 账号不存在、密码错误 if (user ==
     * null) { return HttpResult.error("账号不存在"); } if
     * (!PasswordUtils.matches(user.getSalt(), password, user.getPassword())) {
     * return HttpResult.error("密码不正确"); } // 账号锁定 if (user.getStatus() == 0) {
     * return HttpResult.error("账号已被锁定,请联系管理员"); } // 系统登录认证 JwtAuthenticatioToken
     * token = SecurityUtils.login(request, username, password,
     * authenticationManager); return HttpResult.ok(token); }
     */

}