QQ登录

分手后的思念是犯贱 2022-05-09 06:08 338阅读 0赞

![在这里插入图片描述][70]

## api包 接口 ##

public interface QQ {
    	QQUserInfo getUserInfo();
    }

## 接口实现 ##

百度搜索QQ互联
    //实现对应的抽象类
    public class QQImpl extends AbstractOAuth2ApiBinding implements QQ {
    	//定义 openId url
    	private static final String URL_GET_OPENID = "https://graph.qq.com/oauth2.0/me?access_token=%s";
    	//定义 获取用户信息的url
    	private static final String URL_GET_USERINFO = "https://graph.qq.com/user/get_user_info?oauth_consumer_key=%s&openid=%s";
    	//app id
    	private String appId;
    	//open id
    	private String openId;
    	// json 解析对象
    	private ObjectMapper objectMapper = new ObjectMapper();
    	
    	public QQImpl(String accessToken, String appId) {
    		//调用 父类 传递 token , 参数的类型 ，把token 作为 普通的参数
    		super(accessToken, TokenStrategy.ACCESS_TOKEN_PARAMETER);
    		//app id 赋值
    		this.appId = appId;
    		//获得 获取openId的url
    		String url = String.format(URL_GET_OPENID, accessToken);
    		String result = getRestTemplate().getForObject(url, String.class); //得到返回的json
    		
    		System.out.println(result);
    		//取出 对应 openId
    		this.openId = StringUtils.substringBetween(result, "\"openid\":\"", "\"}");
    	}
    	
    	@Override
    	public QQUserInfo getUserInfo() {
    		//获取用户的信息的url
    		String url = String.format(URL_GET_USERINFO, appId, openId);
    		//得到 用户的返回
    		String result = getRestTemplate().getForObject(url, String.class);
    		
    		System.out.println(result);
    		
    		QQUserInfo userInfo = null;
    		try {
    		  //转换成QQ对象
    			userInfo = objectMapper.readValue(result, QQUserInfo.class);
    			userInfo.setOpenId(openId); //赋值openId
    			return userInfo;
    		} catch (Exception e) {
    			throw new RuntimeException("获取用户信息失败", e);
    		}
    	}
    
    }

## QQ返回的实体类 ##

public class QQUserInfo {
    	/**
    	 * 	返回码
    	 */
    	private String ret;
    	/**
    	 * 如果ret<0，会有相应的错误信息提示，返回数据全部用UTF-8编码。
    	 */
    	private String msg;
    	/**
    	 * 
    	 */
    	private String openId;
    	/**
    	 * 不知道什么东西，文档上没写，但是实际api返回里有。
    	 */
    	private String is_lost;
    	/**
    	 * 省(直辖市)
    	 */
    	private String province;
    	/**
    	 * 市(直辖市区)
    	 */
    	private String city;
    	/**
    	 * 出生年月
    	 */
    	private String year;
    	/**
    	 * 	用户在QQ空间的昵称。
    	 */
    	private String nickname;
    	/**
    	 * 	大小为30×30像素的QQ空间头像URL。
    	 */
    	private String figureurl;
    	/**
    	 * 	大小为50×50像素的QQ空间头像URL。
    	 */
    	private String figureurl_1;
    	/**
    	 * 	大小为100×100像素的QQ空间头像URL。
    	 */
    	private String figureurl_2;
    	/**
    	 * 	大小为40×40像素的QQ头像URL。
    	 */
    	private String figureurl_qq_1;
    	/**
    	 * 	大小为100×100像素的QQ头像URL。需要注意，不是所有的用户都拥有QQ的100×100的头像，但40×40像素则是一定会有。
    	 */
    	private String figureurl_qq_2;
    	/**
    	 * 	性别。 如果获取不到则默认返回”男”
    	 */
    	private String gender;
    	/**
    	 * 	标识用户是否为黄钻用户（0：不是；1：是）。
    	 */
    	private String is_yellow_vip;
    	/**
    	 * 	标识用户是否为黄钻用户（0：不是；1：是）
    	 */
    	private String vip;
    	/**
    	 * 	黄钻等级
    	 */
    	private String yellow_vip_level;
    	/**
    	 * 	黄钻等级
    	 */
    	private String level;
    	/**
    	 * 标识是否为年费黄钻用户（0：不是； 1：是）
    	 */
    	private String is_yellow_year_vip;
    	}

## 服务提供商 QQServiceProvider ##

public class QQServiceProvider extends AbstractOAuth2ServiceProvider<QQ> {
    
    	private String appId;//app id
    	//获得认证的url
    	private static final String URL_AUTHORIZE = "https://graph.qq.com/oauth2.0/authorize";
    	//获得 token的 url
    	private static final String URL_ACCESS_TOKEN = "https://graph.qq.com/oauth2.0/token";
    	
    	public QQServiceProvider(String appId, String appSecret) {
    		//使用 自定义的template  也可以使用 socail定义的 auth2Template
    		super(new QQOAuth2Template(appId, appSecret, URL_AUTHORIZE, URL_ACCESS_TOKEN));
    		this.appId = appId;
    	}
    	
    
    	@Override
    	public QQ getApi(String accessToken) {
    		// api 的 实现
    		return new QQImpl(accessToken, appId);
    	}
    
    }

## QQAdapter ##

public class QQAdapter implements ApiAdapter<QQ> {
    
    	@Override
    	public boolean test(QQ api) {
    		return true;
    	}
    
    	@Override
    	public void setConnectionValues(QQ api, ConnectionValues values) {
    		QQUserInfo userInfo = api.getUserInfo();
    		
    		values.setDisplayName(userInfo.getNickname());
    		values.setImageUrl(userInfo.getFigureurl_qq_1());
    		values.setProfileUrl(null);//类似于微博主页的url
    		values.setProviderUserId(userInfo.getOpenId());
    	}
    
    	@Override
    	public UserProfile fetchUserProfile(QQ api) {
    		// TODO Auto-generated method stub
    		return null;
    	}
    
    	@Override
    	public void updateStatus(QQ api, String message) {
    		//do noting 通过发信息更新微博，这些对于QQ不需要
    	}
    
    }

## 链接工厂 ##

public class QQConnectionFactory extends OAuth2ConnectionFactory<QQ> {
    	public QQConnectionFactory(String providerId, String appId, String appSecret) {
    		super(providerId, new QQServiceProvider(appId, appSecret), new QQAdapter());
    	}
    }

## JDBC 链接配置 ##

@Configuration
    @EnableSocial
    public class SocialConfig extends SocialConfigurerAdapter {
    
    	@Autowired
    	private DataSource dataSource;
    
    	@Autowired
    	private SecurityProperties securityProperties;
    	
    	@Autowired(required = false)
    	private ConnectionSignUp connectionSignUp;
    	
    	@Autowired(required = false)
    	private SocialAuthenticationFilterPostProcessor socialAuthenticationFilterPostProcessor;
    
    	/* (non-Javadoc)
    	 * @see org.springframework.social.config.annotation.SocialConfigurerAdapter#getUsersConnectionRepository(org.springframework.social.connect.ConnectionFactoryLocator)
    	 */
    	@Override
    	public UsersConnectionRepository getUsersConnectionRepository(ConnectionFactoryLocator connectionFactoryLocator) {
    		JdbcUsersConnectionRepository repository = new JdbcUsersConnectionRepository(dataSource,
    				connectionFactoryLocator, Encryptors.noOpText());
    		repository.setTablePrefix("imooc_"); //配置前缀，自定前缀
    		if(connectionSignUp != null) {
    			repository.setConnectionSignUp(connectionSignUp);
    		}
    		return repository;
    	}
    	
    	/**
    	 * 社交登录配置类，供浏览器或app模块引入设计登录配置用。
    	 * @return
    	 */
    	@Bean
    	public SpringSocialConfigurer imoocSocialSecurityConfig() {
    		String filterProcessesUrl = securityProperties.getSocial().getFilterProcessesUrl();
    		ImoocSpringSocialConfigurer configurer = new ImoocSpringSocialConfigurer(filterProcessesUrl);
    		configurer.signupUrl(securityProperties.getBrowser().getSignUpUrl());
    		configurer.setSocialAuthenticationFilterPostProcessor(socialAuthenticationFilterPostProcessor);
    		return configurer;
    	}
    
    	/**
    	 * 用来处理注册流程的工具类
    	 * 
    	 * @param connectionFactoryLocator
    	 * @return
    	 */
    	@Bean
    	public ProviderSignInUtils providerSignInUtils(ConnectionFactoryLocator connectionFactoryLocator) {
    		return new ProviderSignInUtils(connectionFactoryLocator,
    				getUsersConnectionRepository(connectionFactoryLocator)) {
    		};
    	}
    }

## 建表的脚本 在JdbcUsersConnectionRepository 类 旁边 ##

> userid 业务系统的用户id  
> providerid 服务提供商id  
> providerUserid 是 open id  
> 某一个 业务用户 在 服务提供商 上 的open id是什么 这是三个字段 联合成主键

## 配置socail ##

@Component
    @Transactional
    public class DemoUserDetailsService implements UserDetailsService, SocialUserDetailsService {
    
    	private Logger logger = LoggerFactory.getLogger(getClass());
    	
    	@Autowired
    	private PasswordEncoder passwordEncoder;
    	
    
    	/*
    	 * (non-Javadoc)
    	 * 
    	 * @see org.springframework.security.core.userdetails.UserDetailsService#
    	 * loadUserByUsername(java.lang.String)
    	 */
    	@Override
    	public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
    //		logger.info("表单登录用户名:" + username);
    //		Admin admin = adminRepository.findByUsername(username);
    //		admin.getUrls();
    //		return admin;
    		return buildUser(username);
    	}
    
    	@Override
    	public SocialUserDetails loadUserByUserId(String userId) throws UsernameNotFoundException {
    		logger.info("设计登录用户Id:" + userId);
    		return buildUser(userId);
    	}
    
    	private SocialUserDetails buildUser(String userId) {
    		// 根据用户名查找用户信息
    		//根据查找到的用户信息判断用户是否被冻结
    		String password = passwordEncoder.encode("123456");
    		logger.info("数据库密码是:"+password);
    		
    		return new SocialUser(userId, password,
    				true, true, true, true,
    				AuthorityUtils.commaSeparatedStringToAuthorityList("xxx"));
    	}
    
    }

## 配置属性 ##

@Configuration
    @ConditionalOnProperty(prefix = "imooc.security.social.qq", name = "app-id")
    public class QQAutoConfig extends SocialAutoConfigurerAdapter {
    	@Autowired
    	private SecurityProperties securityProperties;
    	@Override
    	protected ConnectionFactory<?> createConnectionFactory() {
    		QQProperties qqConfig = securityProperties.getSocial().getQq();
    		return new QQConnectionFactory(qqConfig.getProviderId(), qqConfig.getAppId(), qqConfig.getAppSecret());
    	}
    
    }

/**
    	 * 社交登录配置
    	 */
    	private SocialProperties social = new SocialProperties();

private QQProperties qq = new QQProperties();

public class QQProperties extends SocialProperties {
    	
    	/**
    	 * 第三方id，用来决定发起第三方登录的url，默认是 qq。
    	 */
    	private String providerId = "qq";
    	}

父类：
        private String appId;
        private String appSecret;

#QQ登录配置，参见QQProperties
    imooc.security.social.qq.app-id = 
    imooc.security.social.qq.app-secret = 
    imooc.security.social.qq.providerId = callback.do

## 配置SpringSocialConfigurer ##

/**
     * 社交登录配置主类
     * 
     * @author zhailiang
     *
     */
    @Configuration
    @EnableSocial
    public class SocialConfig extends SocialConfigurerAdapter {
    
    	@Autowired
    	private DataSource dataSource;
    
    	@Autowired
    	private SecurityProperties securityProperties;
    	
    	@Autowired(required = false)
    	private ConnectionSignUp connectionSignUp;
    	
    	@Autowired(required = false)
    	private SocialAuthenticationFilterPostProcessor socialAuthenticationFilterPostProcessor;
    
    	/* (non-Javadoc)
    	 * @see org.springframework.social.config.annotation.SocialConfigurerAdapter#getUsersConnectionRepository(org.springframework.social.connect.ConnectionFactoryLocator)
    	 */
    	@Override
    	public UsersConnectionRepository getUsersConnectionRepository(ConnectionFactoryLocator connectionFactoryLocator) {
    		JdbcUsersConnectionRepository repository = new JdbcUsersConnectionRepository(dataSource,
    				connectionFactoryLocator, Encryptors.noOpText());
    		repository.setTablePrefix("imooc_");
    		if(connectionSignUp != null) {
    			repository.setConnectionSignUp(connectionSignUp);
    		}
    		return repository;
    	}
    	
    	/**
    	 * 社交登录配置类，供浏览器或app模块引入设计登录配置用。
    	 * @return
    	 */
    	@Bean
    	public SpringSocialConfigurer imoocSocialSecurityConfig() {
    		String filterProcessesUrl = securityProperties.getSocial().getFilterProcessesUrl();
    		ImoocSpringSocialConfigurer configurer = new ImoocSpringSocialConfigurer(filterProcessesUrl);
    		//这里用的是自定义的url
    		configurer.signupUrl(securityProperties.getBrowser().getSignUpUrl()); //退出成功时跳转的url，如果配置了，则跳到指定的url，如果没配置，则返回json数据。
    		configurer.setSocialAuthenticationFilterPostProcessor(socialAuthenticationFilterPostProcessor);
    		return configurer;
    	}
    
    	/**
    	 * 用来处理注册流程的工具类
    	 * 
    	 * @param connectionFactoryLocator
    	 * @return
    	 */
    	@Bean
    	public ProviderSignInUtils providerSignInUtils(ConnectionFactoryLocator connectionFactoryLocator) {
    		return new ProviderSignInUtils(connectionFactoryLocator,
    				getUsersConnectionRepository(connectionFactoryLocator)) {
    		};
    	}
    }

## 加到浏览器安全配置里面 ##

@Configuration
    public class BrowserSecurityConfig extends WebSecurityConfigurerAdapter {
    	@Autowired
    	private SpringSocialConfigurer imoocSocialSecurityConfig;
    	@Override
    	protected void configure(HttpSecurity http) throws Exception {
    		if(CollectionUtils.isNotEmpty(configCallbacks)) {
    			configCallbacks.forEach(callback -> callback.config(http));
    		}
    	http.apply(validateCodeSecurityConfig)
    				.and().apply(imoocSocialSecurityConfig)

<h3>社交登录</h3>
    	<a href="/auth/qq">QQ登录</a>
    		<a href="/qqLogin/callback.do">QQ登录</a> 自定义配置的

## 自定义跳转 ##

#社交登录功能拦截的url,参见SocilaProperties
    imooc.security.social.filterProcessesUrl = /qqLogin
    imooc.security.social.qq.providerId = callback.do

## ImoocSpringSocialConfigurer ##

/**
     * 继承默认的社交登录配置，加入自定义的后处理逻辑
     * 
     * @author zhailiang
     *
     */
    public class ImoocSpringSocialConfigurer extends SpringSocialConfigurer {
    
    	private String filterProcessesUrl;
    
    	private SocialAuthenticationFilterPostProcessor socialAuthenticationFilterPostProcessor;
    
    	public ImoocSpringSocialConfigurer(String filterProcessesUrl) {
    		this.filterProcessesUrl = filterProcessesUrl;
    	}
    
    	/* (non-Javadoc)
    	 * @see org.springframework.security.config.annotation.SecurityConfigurerAdapter#postProcess(java.lang.Object)
    	 */
    	@SuppressWarnings("unchecked")
    	@Override
    	protected <T> T postProcess(T object) {
    		SocialAuthenticationFilter filter = (SocialAuthenticationFilter) super.postProcess(object);
    		filter.setFilterProcessesUrl(filterProcessesUrl);
    		if (socialAuthenticationFilterPostProcessor != null) {
    			socialAuthenticationFilterPostProcessor.process(filter);
    		}
    		return (T) filter;
    	}
    
    	public String getFilterProcessesUrl() {
    		return filterProcessesUrl;
    	}
    
    	public void setFilterProcessesUrl(String filterProcessesUrl) {
    		this.filterProcessesUrl = filterProcessesUrl;
    	}
    
    	public SocialAuthenticationFilterPostProcessor getSocialAuthenticationFilterPostProcessor() {
    		return socialAuthenticationFilterPostProcessor;
    	}
    
    	public void setSocialAuthenticationFilterPostProcessor(
    			SocialAuthenticationFilterPostProcessor socialAuthenticationFilterPostProcessor) {
    		this.socialAuthenticationFilterPostProcessor = socialAuthenticationFilterPostProcessor;
    	}
    
    }

public class SocialProperties {
    	/**
    	 * 社交登录功能拦截的url
    	 */
    	private String filterProcessesUrl = "/auth";

![在这里插入图片描述][70 1]

[70]: /images/20220509/7a3d4657580745a6ac291ec6d275e271.png
[70 1]: /images/20220509/7c7dfcd976984560a4bb7db6f68e0980.png