github
/
jumpserver
mirror of https://github.com/jumpserver/jumpserver
1
0
Fork 0
Code Issues Releases Wiki Activity

fix: 修复暴力校验验证码

pull/11702/head
ibuler 2023-09-25 21:49:47 +08:00 committed by Bryan
parent 10363dcc5b
commit c369b5478c
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
apps/common/utils/verify_code.py
View File

@ -26,6 +26,7 @@ class SendAndVerifyCodeUtil(object):
self.target = target self.target = target
self.backend = backend self.backend = backend
self.key = key or self.KEY_TMPL.format(target) self.key = key or self.KEY_TMPL.format(target)
self.verify_key = self.key + '_verify'
self.timeout = settings.VERIFY_CODE_TTL if timeout is None else timeout self.timeout = settings.VERIFY_CODE_TTL if timeout is None else timeout
self.other_args = kwargs self.other_args = kwargs
@ -47,6 +48,11 @@ class SendAndVerifyCodeUtil(object):
raise raise
def verify(self, code): def verify(self, code):
times = cache.get(self.verify_key, 0)
if times >= 3:
self.__clear()
raise CodeError
cache.set(self.verify_key, times + 1, timeout=self.timeout)
right = cache.get(self.key) right = cache.get(self.key)
if not right: if not right:
raise CodeExpired raise CodeExpired