SpringBoot 集成 AJ-Captcha实现滑动验证码保姆级教程 + 避坑指南(最新推荐)

<!-- AJ-Captcha 滑动验证码核心依赖 -->
<dependency>
    <groupId>com.anji-plus</groupId>
    <artifactId>captcha-spring-boot-starter</artifactId>
    <version>1.4.0</version>
</dependency>

com.itl.project
├── system/controller/CaptchaCodeController.java  # 验证码接口控制器
├── framework/config/SecurityConfig.java          # SpringSecurity配置
└── application.yml                               # 验证码配置文件

package com.itl.project.system.controller;
import com.anji.captcha.model.common.ResponseModel;
import com.anji.captcha.model.vo.CaptchaVO;
import com.anji.captcha.service.CaptchaService;
import org.springframework.web.bind.annotation.*;
import javax.annotation.Resource;
/**
 * 滑动验证码接口控制器
 */
@RestController
@RequestMapping("/captcha")
public class CaptchaCodeController {
    // AJ-Captcha 核心服务类
    @Resource
    private CaptchaService captchaService;
    /**
     * 获取验证码（支持GET/POST）
     * @param captchaType 验证码类型：slide(滑动)、block(点选)
     * @return 验证码图片、坐标等数据
     */
    @RequestMapping(value = "/get", method = {RequestMethod.GET, RequestMethod.POST})
    public ResponseModel get(@RequestParam(value = "type", defaultValue = "slide") String captchaType) {
        CaptchaVO captchaVO = new CaptchaVO();
        captchaVO.setCaptchaType(captchaType);
        return captchaService.get(captchaVO);
    }
    /**
     * 校验验证码
     * @param captchaVO 前端传递的验证数据（唯一标识+滑动坐标）
     * @return 验证结果：成功/失败
     */
    @PostMapping("/check")
    public ResponseModel check(@RequestBody CaptchaVO captchaVO) {
        return captchaService.check(captchaVO);
    }
}

aj:
  captcha:
    aes-status: false                # 关闭AES加密（测试环境，生产可开启）
    cache-type: local                # 缓存类型：local(本地)、redis(分布式)
    expires-in: 300                  # 验证码有效期：5分钟（单位秒）
    req-frequency-limit-count: 50    # 接口限流：50次/分钟
    cache-number: 1000               # 本地缓存最大数量
    jigsaw: classpath:images/jigsaw  # 滑动验证码背景图存放路径
    pic-click: classpath:images/pic-click # 点选验证码背景图路径
    slip-offset: 30               # 滑动误差允许值（像素）   越大精度越好 也就是越容易通过

// SecurityConfig.java 核心配置
@Override
protected void configure(HttpSecurity httpSecurity) throws Exception {
    httpSecurity
        .csrf().disable()
        .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and()
        .authorizeRequests()
        // 放行登录、验证码接口
        .antMatchers(
            "/login", 
            "/captcha/get",    // 放行获取验证码
            "/captcha/check"   // 放行校验验证码
        ).permitAll()
        // 其他请求需要认证
        .anyRequest().authenticated();
}

// 获取验证码成功
{
    "repCode": "0000",
    "repMsg": "success",
    "data": {
        "captchaType": "slide",
        "token": "xxxx-xxxx-xxxx",
        "backgroundImage": "data:image/png;base64,xxxx",
        "sliderImage": "data:image/png;base64,xxxx"
    }
}
// 验证成功
{
    "repCode": "0000",
    "repMsg": "验证成功",
    "data": true
}