微信小程序登陆授权

Posted 2020-10-21 wcu1117

小程序前端代码

function WXlogin(){
  wx.login({
    success: function (code) {
      wx.getUserInfo({
        success:function(userInfo){
            //发起请求
            wx.request({
              url: domain+‘wxopen/wxapp/login‘,
              method:"POST",
              data:{
                code: code.code,
                encryptedData: userInfo.encryptedData,
                iv: userInfo.iv,
                rawData: userInfo.rawData,
                signature: userInfo.signature,
                appid:extConfig.appid
              },
              success:function(res){
                console.log(res,‘login‘)
                wx.setStorageSync(‘session_3rd‘, res.data);//存token
              }
            })
        }
      })
      
    }
  });
}

//重新登陆更新
function reLogin(sess_3rd){
  console.log(sess_3rd,‘s3rd‘)
  //发起请求
  wx.request({
    url: domain + ‘wxopen/wxapp/reLogin‘,
    method: "POST",
    data: {
      session: sess_3rd,
    },
    success: function (res) {
      console.log(res, ‘relogin‘)
      if(res.data == 0){
        WXlogin();//重新登陆
      }else{
        wx.setStorageSync(‘session_3rd‘, res.data);//存token
      }
      
    }
  })
}

　　

后端php代码

 

function login(){
        $code = input(‘code‘);//登陆凭证
        $encryptedData = input(‘encryptedData‘);//
        $iv = input(‘iv‘);//
        $rawData = input(‘rawData‘);//
        $signature = input(‘signature‘);//
        $appid = input(‘appid‘);


        //第三方token,换取session_key
        $comp_token = $this->component->getAccessToken();
        $url =‘https://api.weixin.qq.com/sns/component/jscode2session?appid=‘.$appid.‘&js_code=‘.$code.‘&grant_type=authorization_code&component_appid=‘.$this->appid.‘&component_access_token=‘.$comp_token;

        $result = send_get($url);
        $result = json_decode($result,true);
        trace($result,‘登陆返回‘);

        //根据业务需要对数据包进行签名校验，确保数据的完整性。
        $signature2 = sha1( $rawData.$result[‘session_key‘]);
        if ($signature != $signature2){
            return [‘msg‘=>‘签名检验失败‘,‘status‘=>0];
        }

        //解密获得用户的完整敏感信息
        $pc = new wxappBizDataCrypt($appid, $result[‘session_key‘]);

        $errCode = $pc->decryptData($encryptedData, $iv, $data );

        if ($errCode == 0) {
            $data = json_decode($data,true);
            $data[‘appid‘] = $data[‘watermark‘][‘appid‘];
            $session_3rd = bin2hex(random_bytes(9));

            $data[‘session_3rd‘] = $session_3rd;

            //检查用户是否存在，进行增加更新操作
            $userInfo = new UserInfo();
            $users = $userInfo::get([‘openid‘=>$result[‘openid‘]]);
            if ($users){
                $ret = $userInfo->allowField(true)->isUpdate(true)->save($data,[‘openid‘=>$result[‘openid‘]]);

            }else{
                $ret = $userInfo->allowField(true)->isUpdate(false)->save($data);
            }

            if ($ret)
                return $session_3rd;
        }
        return 0;
    }


    //登陆过期，重新登陆
    function reLogin(){
        $session = input(‘session‘);
        $users = $this->user->where([‘session_3rd‘=>$session])->find();
        if ($users){
            $session_3rd = bin2hex(random_bytes(9));
            $ret = $this->user->where(‘id‘,$users[‘id‘])->update([‘session_3rd‘=>$session_3rd]);//更新3rd

            return $session_3rd;
        }else{
            return 0;
        }
    }