微信网页授权获取用户基本信息

爱被打了一巴掌 2022-12-25 10:00 229阅读 0赞

# 腾讯云服务器优惠购买链接： #

1核2G云服务器首年88元:[http://url.cn/5Z0ZWGI][http_url.cn_5Z0ZWGI]

## 微信官方文档 ##

[https://developers.weixin.qq.com/doc/offiaccount/OA\_Web\_Apps/Wechat\_webpage\_authorization.html][https_developers.weixin.qq.com_doc_offiaccount_OA_Web_Apps_Wechat_webpage_authorization.html]

## 准备工作 ##

### 公众测试账号获取 ###

[http://mp.weixin.qq.com/debug/cgi-bin/sandboxinfo?action=showinfo&t=sandbox/index][http_mp.weixin.qq.com_debug_cgi-bin_sandboxinfo_action_showinfo_t_sandbox_index]

设置 "网页授权获取用户基本信息"

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3Rhbmdjdg_size_16_color_FFFFFF_t_70][]

### 需要参数 ###

**APPID**: XXXXXXX

**APPSECRET**: XXX

**backUrl**: http://xxxx.cn          \#授权回调页面域名

## 开始 ##

### yml添加配置 ###

# 微信授权登录
    weChat:
      APPID: XXXXXXX
      APPSECRET: XXX
      backUrl:  http://xxxx.cn #授权回调页面域名
      backApi: /wechat/callBack #网页授权回调接口

### WXAuthUtil ###

import com.alibaba.fastjson.JSON;
    import com.alibaba.fastjson.JSONObject;
    import org.apache.http.HttpEntity;
    import org.apache.http.HttpResponse;
    import org.apache.http.client.ClientProtocolException;
    import org.apache.http.client.methods.HttpGet;
    import org.apache.http.impl.client.DefaultHttpClient;
    import org.apache.http.util.EntityUtils;
    
    import java.io.IOException;
    
    /**
     * @author ：admin
     * @date ：Created in 2019/6/27 20:17
     * @Time: 20:17
     * @description：公用网络请求工具类-微信
     * @modified By：
     * @version: 1.0$
     */
    public class WXAuthUtil {
    
        public static JSONObject doGetJson(String url) throws ClientProtocolException, IOException {
            JSONObject jsonObject = null;
            DefaultHttpClient client = new DefaultHttpClient();
            HttpGet httpGet = new HttpGet(url);
            HttpResponse response = client.execute(httpGet);
            HttpEntity entity = response.getEntity();
            if (entity != null) {
                // 把返回的结果转换为JSON对象
                String result = EntityUtils.toString(entity, "UTF-8");
                jsonObject = JSON.parseObject(result);
            }
            return jsonObject;
        }
    }

import com.alibaba.fastjson.JSONObject;
    import io.swagger.annotations.Api;
    import io.swagger.annotations.ApiOperation;
    import lombok.extern.slf4j.Slf4j;
    
    import org.springframework.beans.factory.annotation.Value;
    import org.springframework.stereotype.Controller;
    import org.springframework.web.bind.annotation.RequestMapping;
    import org.springframework.web.bind.annotation.RequestMethod;
    import org.springframework.web.servlet.ModelAndView;
    
    import javax.servlet.http.HttpServletRequest;
    import javax.servlet.http.HttpServletResponse;
    import java.io.IOException;
    import java.net.URLEncoder;
    import java.text.ParseException;
    
    
    /**
     * @author ：admin
     * @date ：Created in 2019/6/27 20:20
     * @Time: 20:20
     * @description：微信登录的实现类
     * @modified By：
     * @version: 1.0$
     */
    @Slf4j
    @Controller
    @RequestMapping("wechat")
    @Api(tags="微信授权")
    public class WXLoginController {
    
        @Value("${weChat.APPID}")
        private String APPID;
    
        @Value("${weChat.APPSECRET}")
        private String APPSECRET;
    
        @Value("${weChat.backUrl}")
        private String backUrl;//授权域名
    
        @Value("${weChat.backApi}")
        private String backApi;//回调接口
    
        /**
         * 公众号微信登录授权
         * @param request
         * @param response
         * @param url 回调地址
         * @return
         * @throws ParseException
         */
        @ApiOperation("微信授权信息")
        @RequestMapping(value = "/authorization", method = RequestMethod.GET)
        public ModelAndView authorization(HttpServletRequest request, HttpServletResponse response, String url) throws ParseException {
            log.info("===================wxLogin微信授权成功后回调==========={}" + url);
            // 这个url的域名必须要进行再公众号中进行注册验证，这个地址是成功后的回调地址
            // 第一步：用户同意授权，获取code
            String getCodeUrl = "https://open.weixin.qq.com/connect/oauth2/authorize?appid=" + APPID + "&redirect_uri="
                    + URLEncoder.encode(backUrl + backApi + "?surveyId=" + url) + "&response_type=code" + "&scope=snsapi_userinfo"
                    + "&state=STATE#wechat_redirect";
            url = "redirect:"+ getCodeUrl;
            log.info("-----------------------第二步重定向到微信callBack方法---------------------" + url);
            return new ModelAndView(url);
        }
    
        /**
         * 公众号微信登录授权回调函数
         * @param request
         * @param response
         * @param url 回调地址
         * @return
         * @throws ParseException
         */
        @ApiOperation("微信授权信息")
        @RequestMapping(value = "/callBack", method = RequestMethod.GET)
        public JSONObject callBack(HttpServletRequest request, HttpServletResponse response, String url) throws IOException {
            //获取code 
            String code = request.getParameter("code");
            // 第二步：通过code换取网页授权access_token
            String getTokenUrl = "https://api.weixin.qq.com/sns/oauth2/access_token?appid=" + APPID + "&secret="
                    + APPSECRET + "&code=" + code + "&grant_type=authorization_code";
    
            JSONObject getTokenJson = WXAuthUtil.doGetJson(getTokenUrl);
    
            String openid = getTokenJson.getString("openid");
            String access_token = getTokenJson.getString("access_token");
            String refresh_token = getTokenJson.getString("refresh_token");
    
            // 第五步验证access_token是否失效；展示都不需要
            String vlidTokenUrl = "https://api.weixin.qq.com/sns/auth?access_token=" + access_token + "&openid=" + openid;
    
            JSONObject validTokenJson = WXAuthUtil.doGetJson(vlidTokenUrl);
    
            if (!"0".equals(validTokenJson.getString("errcode"))) {
                // 第三步：刷新access_token（如果需要）-----暂时没有使用,参考文档https://mp.weixin.qq.com/wiki，
                String refreshTokenUrl = "https://api.weixin.qq.com/sns/oauth2/refresh_token?appid=" + openid
                        + "&grant_type=refresh_token&refresh_token=" + refresh_token;
    
                JSONObject refreshTokenJson = WXAuthUtil.doGetJson(refreshTokenUrl);
    
                access_token = refreshTokenJson.getString("access_token");
            }
            // 第四步：拉取用户信息(需scope为 snsapi_userinfo)
            String getUserInfoUrl = "https://api.weixin.qq.com/sns/userinfo?access_token=" + access_token + "&openid=" + openid + "&lang=zh_CN";
            JSONObject getUserInfoJson = WXAuthUtil.doGetJson(getUserInfoUrl);
    
            //可以根据获取的微信信息查询数据库是否存在数据，存在直接登录，不存在自动注册
            //response.sendRedirect(  url + "&token=ToKen");//重定向到前端
            return getUserInfoJson;
        }
    }

[http_url.cn_5Z0ZWGI]: http://url.cn/5Z0ZWGI
[https_developers.weixin.qq.com_doc_offiaccount_OA_Web_Apps_Wechat_webpage_authorization.html]: https://developers.weixin.qq.com/doc/offiaccount/OA_Web_Apps/Wechat_webpage_authorization.html
[http_mp.weixin.qq.com_debug_cgi-bin_sandboxinfo_action_showinfo_t_sandbox_index]: http://mp.weixin.qq.com/debug/cgi-bin/sandboxinfo?action=showinfo&t=sandbox/index
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3Rhbmdjdg_size_16_color_FFFFFF_t_70]: /images/20221120/3a803cac36af4ed1a8d2e8c865d511f8.png