Server

import hmac
import hashlib

def generate_sign_token(lot_number, captcha_key):
    """生成验证签名"""
    sign_token = hmac.new(
        captcha_key.encode('utf-8'),
        lot_number.encode('utf-8'),
        digestmod=hashlib.sha256
    ).hexdigest()
    return sign_token

# 使用示例
sign_token = generate_sign_token(lot_number, CAPTCHA_KEY)

const crypto = require('crypto');

function generateSignToken(lotNumber, captchaKey) {
    return crypto
        .createHmac('sha256', captchaKey)
        .update(lotNumber)
        .digest('hex');
}

// 使用示例
const signToken = generateSignToken(lotNumber, CAPTCHA_KEY);

import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;

public String generateSignToken(String lotNumber, String captchaKey)
    throws Exception {
    Mac mac = Mac.getInstance("HmacSHA256");
    SecretKeySpec secretKey = new SecretKeySpec(
        captchaKey.getBytes("UTF-8"),
        "HmacSHA256"
    );
    mac.init(secretKey);

    byte[] hash = mac.doFinal(lotNumber.getBytes("UTF-8"));
    return bytesToHex(hash);
}

private String bytesToHex(byte[] bytes) {
    StringBuilder result = new StringBuilder();
    for (byte b : bytes) {
        result.append(String.format("%02x", b));
    }
    return result.toString();
}

<?php
function generateSignToken($lotNumber, $captchaKey) {
    return hash_hmac('sha256', $lotNumber, $captchaKey);
}

// 使用示例
$signToken = generateSignToken($lotNumber, $captchaKey);
?>

package main

import (
    "crypto/hmac"
    "crypto/sha256"
    "encoding/hex"
)

func GenerateSignToken(lotNumber, captchaKey string) string {
    h := hmac.New(sha256.New, []byte(captchaKey))
    h.Write([]byte(lotNumber))
    return hex.EncodeToString(h.Sum(nil))
}

// 使用示例
signToken := GenerateSignToken(lotNumber, captchaKey)

import hmac
import hashlib
import requests

def validate_captcha(request_data):
    """验证码二次校验"""
    # 配置参数
    CAPTCHA_ID = 'YOUR_CAPTCHA_ID'
    CAPTCHA_KEY = 'YOUR_CAPTCHA_KEY'
    API_URL = 'https://cap-global.geelabapi.com/validate'

    # 获取客户端参数
    lot_number = request_data.get('lot_number')
    captcha_output = request_data.get('captcha_output')
    pass_token = request_data.get('pass_token')
    gen_time = request_data.get('gen_time')

    # 生成签名
    sign_token = hmac.new(
        CAPTCHA_KEY.encode(),
        lot_number.encode(),
        hashlib.sha256
    ).hexdigest()

    # 构造请求参数
    params = {'captcha_id': CAPTCHA_ID}
    data = {
        'lot_number': lot_number,
        'captcha_output': captcha_output,
        'pass_token': pass_token,
        'gen_time': gen_time,
        'sign_token': sign_token
    }

    # 发起请求
    try:
        response = requests.post(API_URL, params=params, data=data, timeout=5)

        if response.status_code != 200:
            # 接口异常，建议放行
            return {'result': 'success', 'reason': 'api error, fallback'}

        result = response.json()
        return result

    except Exception as e:
        # 请求异常，建议放行
        print(f'验证异常: {e}')
        return {'result': 'success', 'reason': 'request fail, fallback'}

const crypto = require('crypto');
const axios = require('axios');

async function validateCaptcha(requestData) {
    // 配置参数
    const CAPTCHA_ID = 'YOUR_CAPTCHA_ID';
    const CAPTCHA_KEY = 'YOUR_CAPTCHA_KEY';
    const API_URL = 'https://cap-global.geelabapi.com/validate';

    // 获取客户端参数
    const { lot_number, captcha_output, pass_token, gen_time } = requestData;

    // 生成签名
    const sign_token = crypto
        .createHmac('sha256', CAPTCHA_KEY)
        .update(lot_number)
        .digest('hex');

    // 构造请求参数
    const params = new URLSearchParams({
        lot_number,
        captcha_output,
        pass_token,
        gen_time,
        sign_token
    });

    // 发起请求
    try {
        const response = await axios.post(
            `${API_URL}?captcha_id=${CAPTCHA_ID}`,
            params,
            {
                timeout: 5000,
                headers: {
                    'Content-Type': 'application/x-www-form-urlencoded'
                }
            }
        );

        if (response.status !== 200) {
            // 接口异常，建议放行
            return { result: 'success', reason: 'api error, fallback' };
        }

        return response.data;

    } catch (error) {
        // 请求异常，建议放行
        console.error('验证异常:', error);
        return { result: 'success', reason: 'request fail, fallback' };
    }
}

import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import java.net.http.*;
import java.net.URI;
import com.fasterxml.jackson.databind.ObjectMapper;

public class CaptchaValidator {
    private static final String CAPTCHA_ID = "YOUR_CAPTCHA_ID";
    private static final String CAPTCHA_KEY = "YOUR_CAPTCHA_KEY";
    private static final String API_URL = "https://cap-global.geelabapi.com/validate";

    public ValidationResult validate(CaptchaRequest request) {
        try {
            // 生成签名
            String signToken = generateSignToken(
                request.getLotNumber(),
                CAPTCHA_KEY
            );

            // 构造请求参数
            String params = String.format(
                "lot_number=%s&captcha_output=%s&pass_token=%s&gen_time=%s&sign_token=%s",
                request.getLotNumber(),
                request.getCaptchaOutput(),
                request.getPassToken(),
                request.getGenTime(),
                signToken
            );

            String url = API_URL + "?captcha_id=" + CAPTCHA_ID;

            // 发起请求
            HttpClient client = HttpClient.newHttpClient();
            HttpRequest httpRequest = HttpRequest.newBuilder()
                .uri(URI.create(url))
                .header("Content-Type", "application/x-www-form-urlencoded")
                .POST(HttpRequest.BodyPublishers.ofString(params))
                .timeout(Duration.ofSeconds(5))
                .build();

            HttpResponse<String> response = client.send(
                httpRequest,
                HttpResponse.BodyHandlers.ofString()
            );

            // 处理响应
            if (response.statusCode() != 200) {
                // 接口异常，建议放行
                return ValidationResult.fallback();
            }

            ObjectMapper mapper = new ObjectMapper();
            return mapper.readValue(
                response.body(),
                ValidationResult.class
            );

        } catch (Exception e) {
            // 请求异常，建议放行
            e.printStackTrace();
            return ValidationResult.fallback();
        }
    }

    private String generateSignToken(String lotNumber, String key)
        throws Exception {
        Mac mac = Mac.getInstance("HmacSHA256");
        SecretKeySpec secretKey = new SecretKeySpec(
            key.getBytes("UTF-8"),
            "HmacSHA256"
        );
        mac.init(secretKey);

        byte[] hash = mac.doFinal(lotNumber.getBytes("UTF-8"));
        return bytesToHex(hash);
    }

    private String bytesToHex(byte[] bytes) {
        StringBuilder result = new StringBuilder();
        for (byte b : bytes) {
            result.append(String.format("%02x", b));
        }
        return result.toString();
    }
}

<?php
function validateCaptcha($requestData) {
    // 配置参数
    $CAPTCHA_ID = 'YOUR_CAPTCHA_ID';
    $CAPTCHA_KEY = 'YOUR_CAPTCHA_KEY';
    $API_URL = 'https://cap-global.geelabapi.com/validate';

    // 获取客户端参数
    $lot_number = $requestData['lot_number'];
    $captcha_output = $requestData['captcha_output'];
    $pass_token = $requestData['pass_token'];
    $gen_time = $requestData['gen_time'];

    // 生成签名
    $sign_token = hash_hmac('sha256', $lot_number, $CAPTCHA_KEY);

    // 构造请求参数
    $params = http_build_query([
        'lot_number' => $lot_number,
        'captcha_output' => $captcha_output,
        'pass_token' => $pass_token,
        'gen_time' => $gen_time,
        'sign_token' => $sign_token
    ]);

    $url = $API_URL . '?captcha_id=' . $CAPTCHA_ID;

    // 发起请求
    $context = stream_context_create([
        'http' => [
            'method' => 'POST',
            'header' => 'Content-Type: application/x-www-form-urlencoded',
            'content' => $params,
            'timeout' => 5
        ]
    ]);

    try {
        $response = @file_get_contents($url, false, $context);

        if ($response === false) {
            // 请求异常，建议放行
            return ['result' => 'success', 'reason' => 'request fail, fallback'];
        }

        $result = json_decode($response, true);
        return $result;

    } catch (Exception $e) {
        // 异常处理，建议放行
        error_log('验证异常: ' . $e->getMessage());
        return ['result' => 'success', 'reason' => 'exception, fallback'];
    }
}
?>

package main

import (
    "crypto/hmac"
    "crypto/sha256"
    "encoding/hex"
    "encoding/json"
    "net/http"
    "net/url"
    "strings"
    "time"
)

const (
    CAPTCHA_ID  = "YOUR_CAPTCHA_ID"
    CAPTCHA_KEY = "YOUR_CAPTCHA_KEY"
    API_URL     = "https://cap-global.geelabapi.com/validate"
)

type ValidationResult struct {
    Status string                 `json:"status"`
    Result string                 `json:"result"`
    Reason string                 `json:"reason"`
    Args   map[string]interface{} `json:"captcha_args"`
}

func ValidateCaptcha(requestData map[string]string) (*ValidationResult, error) {
    // 获取客户端参数
    lotNumber := requestData["lot_number"]
    captchaOutput := requestData["captcha_output"]
    passToken := requestData["pass_token"]
    genTime := requestData["gen_time"]

    // 生成签名
    h := hmac.New(sha256.New, []byte(CAPTCHA_KEY))
    h.Write([]byte(lotNumber))
    signToken := hex.EncodeToString(h.Sum(nil))

    // 构造请求参数
    data := url.Values{}
    data.Set("lot_number", lotNumber)
    data.Set("captcha_output", captchaOutput)
    data.Set("pass_token", passToken)
    data.Set("gen_time", genTime)
    data.Set("sign_token", signToken)

    // 发起请求
    client := &http.Client{Timeout: 5 * time.Second}
    apiURL := API_URL + "?captcha_id=" + CAPTCHA_ID

    resp, err := client.Post(
        apiURL,
        "application/x-www-form-urlencoded",
        strings.NewReader(data.Encode()),
    )

    if err != nil || resp.StatusCode != 200 {
        // 请求异常，建议放行
        return &ValidationResult{
            Result: "success",
            Reason: "request fail, fallback",
        }, nil
    }

    defer resp.Body.Close()

    var result ValidationResult
    json.NewDecoder(resp.Body).Decode(&result)
    return &result, nil
}