From f2921c210290e42692eb77bae0738737c7333990 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=86=B7=E5=86=B7?= <2270033969@qq.com>
Date: Mon, 5 Aug 2024 16:43:25 +0800
Subject: [PATCH] =?UTF-8?q?fix(security):=20=E5=AE=89=E5=85=A8=E9=97=AE?=
 =?UTF-8?q?=E9=A2=98=EF=BC=8C=E6=95=B0=E5=AD=97=E9=AA=8C=E8=AF=81=E7=A0=81?=
 =?UTF-8?q?=E5=A2=9E=E5=8A=A0=E5=8F=82=E6=95=B0=E6=A0=A1=E9=AA=8C=E9=81=BF?=
 =?UTF-8?q?=E5=85=8D=E4=BC=AA=E9=80=A0=E7=BB=95=E8=BF=87?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../pigx/auth/endpoint/ImageCodeEndpoint.java       | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/pigx-auth/src/main/java/com/pig4cloud/pigx/auth/endpoint/ImageCodeEndpoint.java b/pigx-auth/src/main/java/com/pig4cloud/pigx/auth/endpoint/ImageCodeEndpoint.java
index b8920c1f8..5d9126868 100644
--- a/pigx-auth/src/main/java/com/pig4cloud/pigx/auth/endpoint/ImageCodeEndpoint.java
+++ b/pigx-auth/src/main/java/com/pig4cloud/pigx/auth/endpoint/ImageCodeEndpoint.java
@@ -1,5 +1,6 @@
 package com.pig4cloud.pigx.auth.endpoint;
 
+import cn.hutool.core.lang.Validator;
 import com.anji.captcha.model.vo.CaptchaVO;
 import com.anji.captcha.service.CaptchaService;
 import com.pig4cloud.pigx.common.core.constant.CacheConstants;
@@ -46,6 +47,12 @@ public class ImageCodeEndpoint {
         ArithmeticCaptcha captcha = new ArithmeticCaptcha(DEFAULT_IMAGE_WIDTH, DEFAULT_IMAGE_HEIGHT);
 
         String result = captcha.text();
+
+        // 如果是手机号码，不存储下发验证码
+        if (Validator.isMobile(randomStr)) {
+            return;
+        }
+
         redisTemplate.opsForValue()
                 .set(CacheConstants.DEFAULT_CODE_KEY + randomStr, result, SecurityConstants.CODE_TIME, TimeUnit.SECONDS);
         // 转换流信息写出
@@ -53,8 +60,7 @@ public class ImageCodeEndpoint {
     }
 
     /**
-     * 行为
-     * 创建滑块图形验证码
+     * 行为 创建滑块图形验证码
      */
     @SneakyThrows
     @GetMapping("/create")
@@ -66,8 +72,7 @@ public class ImageCodeEndpoint {
     }
 
     /**
-     * 行为
-     * 创建滑块图形验证码
+     * 行为 创建滑块图形验证码
      */
     @SneakyThrows
     @PostMapping("/check")