github
/
jumpserver
mirror of https://github.com/jumpserver/jumpserver
1
0
Fork 0
Code Issues Releases Wiki Activity

fix: 修复暴力校验验证码

pull/11700/head
ibuler 2023-09-25 21:49:47 +08:00 committed by Bryan
parent a4ff9dace3
commit 9520a23f4c
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
apps/common/utils/verify_code.py
View File

@ -26,6 +26,7 @@ class SendAndVerifyCodeUtil(object):
self.target = target self.target = target
self.backend = backend self.backend = backend
self.key = key or self.KEY_TMPL.format(target) self.key = key or self.KEY_TMPL.format(target)
self.verify_key = self.key + '_verify'
self.timeout = settings.VERIFY_CODE_TTL if timeout is None else timeout self.timeout = settings.VERIFY_CODE_TTL if timeout is None else timeout
self.other_args = kwargs self.other_args = kwargs
@ -47,6 +48,11 @@ class SendAndVerifyCodeUtil(object):
raise raise
def verify(self, code): def verify(self, code):
times = cache.get(self.verify_key, 0)
if times >= 3:
self.__clear()
raise CodeExpired
cache.set(self.verify_key, times + 1, timeout=self.timeout)
right = cache.get(self.key) right = cache.get(self.key)
if not right: if not right:
raise CodeExpired raise CodeExpired
@ -59,6 +65,7 @@ class SendAndVerifyCodeUtil(object):
def __clear(self): def __clear(self):
cache.delete(self.key) cache.delete(self.key)
cache.delete(self.verify_key)
def __ttl(self): def __ttl(self):
return cache.ttl(self.key) return cache.ttl(self.key)