Web前端图形验证码登录验证功能

<div class="col-xs-4">
<button type="button" id="TencentCaptcha"
        data-appid="2017233567"
        data-cbfn="callback" class="btn btn-primary btn-block btn-flat">登录</button>
</div>

<script src="https://ssl.captcha.qq.com/TCaptcha.js"></script>

window.callback = function(res){
        if(res.ret === 0){
            var data = "username="+vm.username+"&password="+vm.password+"&ticket="+res.ticket+"&randstr="+res.randstr;
            $.ajax({
                type: "POST",
                url: "sys/login",
                data: data,
                dataType: "json",
                success: function (result) {
                    if(result.code == 0){//登录成功
                        parent.location.href ='index.html';
                    }else{
                        vm.error = true;
                        vm.errorMsg = result.msg;
                    }
                }
            });
        }
    };

@Value("${tencent.captcha.url}")
private String url;
@Value("${tencent.captcha.aid}")
private String aid;
@Value("${tencent.captcha.AppSecretKey}")
private String appSecretKey;

@ResponseBody
@PostMapping(value = "/sys/login")
public R login(String username, String password, String ticket, String randstr, HttpServletRequest request) {
  try{
    Subject subject = ShiroUtils.getSubject();
    UsernamePasswordToken token = new UsernamePasswordToken(username, password);
    subject.login(token);
  }catch (UnknownAccountException e) {
    return R.error(e.getMessage());
  }catch (IncorrectCredentialsException e) {
    return R.error("账号或密码不正确");
  }catch (LockedAccountException e) {
    return R.error("账号已被锁定,请联系管理员");
  }catch (AuthenticationException e) {
    return R.error("账户验证失败");
  }
  HttpMethod method =HttpMethod.POST;
  MultiValueMap<String, String> params= new LinkedMultiValueMap<String, String>();
  params.add("aid", aid);
  params.add("AppSecretKey", appSecretKey);
  params.add("Ticket", ticket);
  params.add("Randstr", randstr);
  params.add("UserIP", IPUtils.getIpAddr(request));
  String msg = httpClient.client(url,method,params);
  JSONObject json = JSONObject.parseObject(msg);
  String response = (String) json.get("response");
  String evilLevel = (String) json.get("evil_level");
  String errMsg = (String) json.get("err_msg");
  if("1".equals(response)){
    return R.ok();
  }else {
    return R.error("验证失败");
  }
}

tencent:
  captcha:
    url: https://ssl.captcha.qq.com/ticket/verify
    aid: ***********
    AppSecretKey: ***********