PHP 钉钉第三方扫码登录全套开发

雨点打透心脏的1/2处 2023-01-16 14:30 184阅读 0赞

创建登录应用：  
[https://open-dev.dingtalk.com/fe/old\#/loginMan][https_open-dev.dingtalk.com_fe_old_loginMan]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQzMzk3MA_size_16_color_FFFFFF_t_70]

前端1：（复制放入浏览打开获得一个登录二维码，新页面，无法设置style）

https://oapi.dingtalk.com/connect/qrconnect?
    appid=dingoakgih94vbqex8d8tn&response_type=code&scope=snsapi_login&state=STATE&redirect_uri=http://api.321.design/dingresult.php

或者2：（代码嵌入式，可以调整二维码格式等）

<div class="text-center">
        <h1 class="display-4">Welcome</h1>
        <div id="login_container"></div>
        <button type="button" class="btn btn-primary" id="JumpToLogin">跳转登录</button>
    </div>
    
    
    <script src="https://g.alicdn.com/dingding/dinglogin/0.0.5/ddLogin.js"></script>
    <script type="text/javascript"> /* * 解释一下goto参数，参考以下例子： * var url = encodeURIComponent('http://localhost.me/index.php?test=1&aa=2'); * var goto = encodeURIComponent('https://oapi.dingtalk.com/connect/oauth2/sns_authorize?appid=appid&response_type=code&scope=snsapi_login&state=STATE&redirect_uri='+url) */ // var url = "http://api.321.com/dingresult.php"; var url = "http://api.321.com/home/index/tests"; var obj = DDLogin({ id: "login_container",//这里需要你在自己的页面定义一个HTML标签并设置id，例如<div id="login_container"></div>或<span id="login_container"></span> goto: encodeURIComponent('https://oapi.dingtalk.com/connect/oauth2/sns_authorize?appid=dingoakgih94vbqex8d8tn&response_type=code&scope=snsapi_login&state=STATE&redirect_uri=' + url), //请参考注释里的方式 style: "border:none;background-color:#FFFFFF;", width: "365", height: "400" }); var handleMessage = function (event) { var origin = event.origin; console.log("loginTmpCode", event.data); console.log(origin); console.log("origin", event.origin); if (origin == "https://login.dingtalk.com") { //判断是否来自ddLogin扫码事件。 var loginTmpCode = event.data; //拿到loginTmpCode后就可以在这里构造跳转链接进行跳转了 console.log("loginTmpCode", loginTmpCode); window.location.href = "https://oapi.dingtalk.com/connect/oauth2/sns_authorize?appid=dingoakgi***qex8d8tn&response_type=code&scope=snsapi_login&state=STATE&redirect_uri=" + url + "&loginTmpCode=" + loginTmpCode; } }; if (typeof window.addEventListener != 'undefined') { window.addEventListener('message', handleMessage, false); } else if (typeof window.attachEvent != 'undefined') { window.attachEvent('onmessage', handleMessage); } </script>

# 扫码后跳转的回调地址获得用户的初步信息，以下信息是在调用了用户接口获得，初期返回的只有一个code,这个code可以启动其他接口，是一个凭证，使用$\_GET【‘code’】获得，他会自动添加至回调地址的后面。 #

{
    "errcode":0,
    "errmsg":"ok",
    "user_info":
     {   "nick":"***",
    	"unionid":"PlrUHRKOHkDUqpsUR0iSCOQiEiE",
    	"dingId":"$:LWCP_v1:$q5Bx7MIbiSPcGfsJ0l7PuA==",
    	"openid":"L8RhI2PKcKTwmxbplYlkAQiEiE",
    	"main_org_auth_high_level":false}
     }

详情参考：[https://developers.dingtalk.com/document/app/scan-qr-code-to-log-on-to-third-party-websites?spm=a2q3p.21071111.0.0.4711TknDTknDii][https_developers.dingtalk.com_document_app_scan-qr-code-to-log-on-to-third-party-websites_spm_a2q3p.21071111.0.0.4711TknDTknDii]

## 后端接口 ##

public function tests()
        { 
    
            $time = time() . '000';#毫秒时间戳
            $s = hash_hmac('sha256', $time, 'QQ3cM_N2z_roCN_5EOmo1Bz8UFL7kveGAdb3E90J7d6_LjUzC_z2CZSeH47-WYad', true);
            $signature = base64_encode($s);
            $urlencode_signature = urlencode($signature);#签名
    
    
            $remote_server = 'https://oapi.dingtalk.com/sns/getuserinfo_bycode?accessKey=dingoakgih94vbqex8d8tn&timestamp=' . $time . '&signature=' . $urlencode_signature;#地址组装
            $post_string = json_encode(['tmp_auth_code' => $_GET['code']]);#扫码获得的临时code
            $json = $this->PostCurlRequest($remote_server, $post_string);
            d(($json));#获得用户相关信息
    
    
        }
    
        /** * post 请求 * @param $remote_server * @param $post_string * @return bool|string */
        protected function PostCurlRequest($remote_server, $post_string)
        { 
            $ch = curl_init();
            curl_setopt($ch, CURLOPT_URL, $remote_server);
            curl_setopt($ch, CURLOPT_POST, 1);
            curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
            curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Type: application/json;charset=utf-8'));
            curl_setopt($ch, CURLOPT_POSTFIELDS, $post_string);
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
            $data = curl_exec($ch);
            curl_close($ch);
            return $data;
        }

[https_open-dev.dingtalk.com_fe_old_loginMan]: https://open-dev.dingtalk.com/fe/old#/loginMan
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQzMzk3MA_size_16_color_FFFFFF_t_70]: /images/20221022/4de69986c98a4c4aaa4bdea6e29262f1.png
[https_developers.dingtalk.com_document_app_scan-qr-code-to-log-on-to-third-party-websites_spm_a2q3p.21071111.0.0.4711TknDTknDii]: https://developers.dingtalk.com/document/app/scan-qr-code-to-log-on-to-third-party-websites?spm=a2q3p.21071111.0.0.4711TknDTknDii