微信自定义分享 laraverl 框架，前后端分离 报错 签名失效 63002

Posted 2022-10-05

<?php
class JSSDK
private $appId;
private $appSecret;
private $url;//如果是前后端分离，是接口请求，必须自定义当前页面地址 送过来 否则签名错误20190905
public function __construct($appId, $appSecret,$url)
$this->appId = $appId;
$this->appSecret = $appSecret;
$this->url = $url;

public function getSignPackage()
$jsapiTicket = $this->getJsApiTicket();

// 注意 URL 一定要动态获取，不能 hardcode.如果是前后端分离，是接口请求，必须自定义当前页面地址 否则签名错误20190905
$protocol = (!empty($_SERVER[‘HTTPS‘]) && $_SERVER[‘HTTPS‘] !== ‘off‘ || $_SERVER[‘SERVER_PORT‘] == 443) ? "https://" : "http://";
//$url = "$protocol$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";
  $url = $this->url;

$timestamp = time();
$nonceStr = $this->createNonceStr();

// 这里参数的顺序要按照 key 值 ASCII 码升序排序
$string = "jsapi_ticket=$jsapiTicket&noncestr=$nonceStr×tamp=$timestamp&url=$url";

$signature = sha1($string);

$signPackage = array(
  "appId"     => $this->appId,
  "nonceStr"  => $nonceStr,
  "timestamp" => $timestamp,
  "url"       => $url,
  "signature" => $signature,
  "rawString" => $string
);
return $signPackage; 

private function createNonceStr($length = 16)
$chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
$str = "";
for ($i = 0; $i < $length; $i++)
$str .= substr($chars, mt_rand(0, strlen($chars) - 1), 1);

return $str;

private function getJsApiTicket()
// jsapi_ticket 应该全局存储与更新，以下代码以写入到文件中做示例
$data = json_decode($this->get_php_file("jsapi_ticket.php"));

if ($data->expire_time < time()) 
  $accessToken = $this->getAccessToken();
  // 如果是企业号用以下 URL 获取 ticket
  // $url = "https://qyapi.weixin.qq.com/cgi-bin/get_jsapi_ticket?access_token=$accessToken";
  $url = "https://api.weixin.qq.com/cgi-bin/ticket/getticket?type=jsapi&access_token=$accessToken";
  $res = json_decode($this->httpGet($url));
  $ticket = $res->ticket;
  if ($ticket) 
    $data->expire_time = time() + 7000;
    $data->jsapi_ticket = $ticket;
    $this->set_php_file("jsapi_ticket.php", json_encode($data));
  
 else 

  $ticket = $data->jsapi_ticket;


return $ticket;

private function getAccessToken()
// access_token 应该全局存储与更新，以下代码以写入到文件中做示例
$data = json_decode($this->get_php_file("access_token.php"));

if ($data->expire_time < time()) 

  // 如果是企业号用以下URL获取access_token
  // $url = "https://qyapi.weixin.qq.com/cgi-bin/gettoken?corpid=$this->appId&corpsecret=$this->appSecret";
  $url = "https://api.weixin.qq.com/cgi-bin/token?grant_type=client_credential&appid=$this->appId&secret=$this->appSecret";
  $res = json_decode($this->httpGet($url));

  $access_token = $res->access_token;
  if ($access_token) 
    $data->expire_time = time() + 7000;
    $data->access_token = $access_token;
    $this->set_php_file("access_token.php", json_encode($data));
  
 else 

  $access_token = $data->access_token;

return $access_token;

private function httpGet($url)
$curl = curl_init();
curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
curl_setopt($curl, CURLOPT_TIMEOUT, 500);
// 为保证第三方服务器与微信服务器之间数据传输的安全性，所有微信接口采用https方式调用，必须使用下面2行代码打开ssl安全校验。
// 如果在部署过程中代码在此处验证失败，请到 http://curl.haxx.se/ca/cacert.pem 下载新的证书判别文件。
curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false);
curl_setopt($curl, CURLOPT_URL, $url);

$res = curl_exec($curl);
curl_close($curl);

return $res;

private function get_php_file($filename)
return trim(substr(file_get_contents($filename), 15));

private function set_php_file($filename, $content)
$fp = fopen($filename, "w");
fwrite($fp, "<?php exit();?>" . $content);
fclose($fp);

==============接口方法

/**

• 获取jssdk
  */
  public function getjssdk(Request $request)
  

  $requestData = $request->all();
  
  var_dump($requestData);die;
  $jssdk = new \JSSDK("wxed179f31e9bd43e5", "d1cd540d0********90284e7d3231");
  $signPackage = $jssdk->GetSignPackage();
  $returnData = Result::getResult(1, "获取成功", $signPackage);
  return json_encode($returnData);

  ==============前端
  
  // 获取jssdk
          getJssdk() 
              //console.log(top.location.href,‘999999‘);
              this.myurl.url = top.location.href;
  
              getReqData(‘phone/mail/getjssdk‘,this.myurl).then(res => 
                  console.log(res);
                  var resdata =res.data;
                  wx.config(
                      debug: true,
                      appId: resdata.appId,
                      timestamp:resdata.timestamp ,
                      nonceStr:resdata.nonceStr ,
                      signature:resdata.signature ,
                      jsApiList: [
                      // 所有要调用的 API 都要加到这个列表中
                          "checkJsApi",
                          ‘onMenuShareTimeline‘, // 分享到朋友圈接口
                          ‘onMenuShareAppMessage‘, //  分享到朋友
                          ‘onMenuShareQQ‘, // 分享到QQ接口
                          ‘onMenuShareWeibo‘, // 分享到微博接口
                          ‘openLocation‘
                  ]
              )
                  wx.ready(function ()
                      var shareData = 
                          title: ‘国酒茅台‘,
                          desc: ‘国酒茅台已经更名，但是国酒名不虚传，喜欢就多喝，因为，很贵‘,//这里请特别注意是要去除html
                          link: ‘http://tapi.1qibang.cn/qbb_move/webpage/index.html‘,
                          imgUrl: ‘http://pingtai.1qibang.cn/upload/photos/2019/07/31/2dd145a928d50e469a1fea415d9353e4.jpg‘
                      ;
                      wx.onMenuShareAppMessage(shareData);
  
                  );
              )
          ,