钉钉H5免登录流程前后端实现

太过爱你忘了你带给我的痛 2024-04-06 13:16 70阅读 0赞

这里简单介绍一下实现过程和整合后的代码，官网的代码比较分散，新手看起来有点困难

**免登流程**

免登是指用户进入应用后，无需输入钉钉用户名和密码，应用程序可自动获取当前用户身份，进而登录系统的流程。

### 获取微应用免登授权码 ###

使用以下代码获取免登授权码（调用此api不需要进行鉴权，即不需要进行dd.config）。获取的免登授权码有效期5分钟，且只能使用一次。接口说明，请参考[获取微应用免登授权码][Link 1]

**说明** 第三方企业应用可以在微应用的首页URL中使用$CORPID$做为参数占位符，钉钉容器会将$CORPID$替换为当前访问用户的企业corpId。

例如，微应用首页地址为https://www.dingtalk.com，需要获取当前访问用户的企业corpId值，微应用首页地址可改为**https://www.dingtalk.com?corpId=$CORPID$**。在进入该首页地址页面时，使用js方法获取当前页面URL，即可获取corpId值。

**CORPID获取**

![c6e3dc15a4a645139a6982537c34c62f.png][]

**地址配置**

![f9f5ec8efb5b417585aea126193f51ba.png][]

![30470058cc3f41598beffe1e7a0fd9b3.png][]

前端实现代码，移动端和PC端可以用同样的代码实现

**后端获取登录用户信息的接口代码**

调用过程和步骤

**这里的代码是自己封装的框架，不必完全照抄，可按照自己实际情况进行参数接收和处理即可，主要关注中间部分**

@MethodAnnotation(method = "getUserInfo", methodWay = "ALL", methoddes = "获取钉钉用户信息")
        public void getUserInfo(HttpServletRequest request, HttpServletResponse response) throws Exception {
        	String authCode=request.getParameter("code");
        	 // 1. 获取access_token
            String accessToken = TestDingDing.getAccessToken();
            
    		// 2. 获取用户ID
            String userId = getUserId(authCode, accessToken);
             //3. 获取用户详情
            UserGetResponse r = getOapiV2UserGetResponseByUserId(userId, accessToken);
            System.out.println(JSON.toJSONString(r));
            
            qury(request, response, r, false, 0);
        }

**获取授权token**

public static String getAccessToken() {
            try {
    			return (JSON.parseObject(getAccessTokenJSON())).getString("access_token");
    		} catch (Exception e) {
    			e.printStackTrace();
    		}
    		return null;
    	}
    	private static String getAccessTokenJSON() {
            try {
    			String token = HttpClient.doGetStr(access_token_url.replaceAll("_appkey", appkey).replaceAll("_appsecret", appsecret));
    			return token;
    		} catch (Exception e) {
    			e.printStackTrace();
    		}
    		return null;
    	}

**根据授权码和accessToken获取用户ID信息**

/**
         * 根据authCode获取用户ID
         *
         * @param authCode
         * @param accessToken
         * @return
         */
        private static String getUserId(String authCode, String accessToken) {
            DingTalkClient client = new DefaultDingTalkClient(GET_USER_INFO_URL);
            OapiV2UserGetuserinfoRequest req = new OapiV2UserGetuserinfoRequest();
            req.setCode(authCode);
            OapiV2UserGetuserinfoResponse oapiV2UserGetuserinfoResponse;
            try {
                oapiV2UserGetuserinfoResponse = client.execute(req, accessToken);
                if (oapiV2UserGetuserinfoResponse.isSuccess()) {
                    OapiV2UserGetuserinfoResponse.UserGetByCodeResponse userGetByCodeResponse = oapiV2UserGetuserinfoResponse.getResult();
                    return userGetByCodeResponse.getUserid();
                } else {
                    System.out.println(oapiV2UserGetuserinfoResponse.getErrcode()+oapiV2UserGetuserinfoResponse.getErrmsg());
                }
    
            } catch (ApiException e) {
                // 需要自己处理异常
                e.printStackTrace();
            }
    		return null;
        }

**根据用户ID信息获取钉钉用户详情**

/**
         * 根据用户ID获取用户详情
         *
         * @param userId
         * @param accessToken
         * @return
         */
        private static OapiV2UserGetResponse.UserGetResponse getOapiV2UserGetResponseByUserId(String userId, String accessToken) {
            DingTalkClient client = new DefaultDingTalkClient(USER_GET_URL);
            OapiV2UserGetRequest req = new OapiV2UserGetRequest();
            req.setUserid(userId);
            req.setLanguage("zh_CN");
    
            try {
                OapiV2UserGetResponse oapiV2UserGetResponse = client.execute(req, accessToken);
                if (oapiV2UserGetResponse.isSuccess()) {
                    return oapiV2UserGetResponse.getResult();
                } else {
                	  System.out.println(oapiV2UserGetResponse.getErrcode()+oapiV2UserGetResponse.getErrmsg());
                }
            } catch (ApiException e) {
                // 需要自己处理异常
                e.printStackTrace();
            }
    		return null;
        }

**接下来将数据返回给前端,前端根据身份信息做登录的业务逻辑处理**

[Link 1]: https://open.dingtalk.com/document/orgapp-client/obtain-the-micro-application-logon-free-authorization-code#topic-2024939
[c6e3dc15a4a645139a6982537c34c62f.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/06/db326c3330634abfa50483c3c1893b67.png
[f9f5ec8efb5b417585aea126193f51ba.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/06/5664e53d66d24a2096c9ab54d0bb494c.png
[30470058cc3f41598beffe1e7a0fd9b3.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/04/06/2fa55b2879fe43e79a918912d63d3767.png