### 实现自定义短信验证码认证 在 Python 中实现自定义短信验证码认证涉及多个方面的工作，包括但不限于生成验证码、发送验证码至用户的移动设备以及验证用户提交的验证码。下面将详细介绍这一过程。 #### 1. 验证码生成与管理 首先需要设计一个函数用于生成特定长度的随机数作为验证码，并将其保存在一个合适的位置以便后续对比使用。考虑到安全性，建议采用加密方式处理验证码及其关联信息。对于验证码的有效期控制，可以在生成时记录时间戳并设置合理的过期间隔[^4]。 ```python import random from datetime import datetime, timedelta def generate_verification_code(length=6): """Generate a verification code.""" start = pow(10, length - 1) end = pow(10, length) - 1 return str(random.randint(start, end)) def save_verification_record(phone_number, code): """Save the generated verification record with timestamp.""" expiration_time = (datetime.now() + timedelta(minutes=5)).timestamp() # Here should be replaced by actual database operation or cache mechanism. verification_records[phone_number] = { "code": code, "expires_at": expiration_time } ``` #### 2. 发送验证码 接下来是通过第三方服务商提供的 SDK 或者 RESTful API 接口向指定电话号码发送包含验证码的消息内容。此部分依赖于所选的服务提供商文档指导完成集成工作。例如，可以参照 `ronglian_sms_sdk` 库的方式调用短信发送方法[^1]。 ```python from ronglian_sms_sdk import SmsSDK accId = 'your_account_id' accToken = 'your_account_token' appId = 'your_app_id' sdk = SmsSDK(accId, accToken, appId) def send_verification_message(phone_number, message_template_id='1'): """Send SMS containing the verification code to given phone number.""" try: code = generate_verification_code() data_tuple = (code,) # Adjust according to template requirements response = sdk.sendMessage(message_template_id, phone_number, data_tuple) if isinstance(response, dict) and response.get('statusCode') == '000000': save_verification_record(phone_number, code) return True except Exception as e: print(f"Failed to send message due to {e}") return False ``` #### 3. 用户端输入及服务器端校验 当接收到客户端发来的带有验证码的数据包后，需对其进行有效性检查——确认未超出规定时限内且匹配预存数据中的相应项。一旦发现异常情况立即反馈给前端提示重试；反之，则允许继续执行下一步操作流程[^5]。 ```python import hashlib secret_key = b'secret-key-used-for-hashing' # Replace this value. def verify_user_input(phone_number, input_code, received_timestamp): """Verify user-provided verification code against stored one.""" now = int(datetime.utcnow().timestamp()) if abs(now - float(received_timestamp)) > 300: # Allow up to five minutes delay. raise ValueError("Verification has expired.") expected_md5_hash = _compute_md5(input_code.encode(), secret_key, received_timestamp).hexdigest() recorded_info = verification_records.get(phone_number) if not recorded_info or expected_md5_hash != recorded_info['md5']: raise ValueError("Invalid verification code entered.") def _compute_md5(code_bytes, key_bytes, ts_str): m = hashlib.md5() concatenated_data = f"{ts_str}{key_bytes.decode()}".encode() m.update(concatenated_data) m.update(code_bytes) return m ```