微信网页登录

r囧r小猫 2023-08-17 16:47 148阅读 0赞

第一：微信公众号测试平台

http://mp.weixin.qq.com/debug/cgi-bin/sandboxinfo?action=showinfo&t=sandbox/index

![1309547-20190828164039788-1090900262.png][]

http://393.104.170.232/chainStore/userController/pcAuth.do

第二：

![1309547-20190828164204372-1610930728.png][]

![1309547-20190828164230302-1050095289.png][]

只填ip地址,不要加http或https

第三：登录页面加入

第四：controller层

//pc点击微信登录，生成登录二维码  
@ResponseBody  
@RequestMapping("/wxLoginPage")  
public Map<String,String> wxLoginPage(HttpServletRequest request) \{  
Map<String,String> map = new HashMap<String,String>();  
try \{  
String sessionId = request.getSession().getId();  
logger.info("sessionId:"+sessionId);  
String uri = this.weChatAuthServiceImpl.getAuthorizationUrl("pc",sessionId);//设置redirect\_uri和state=sessionId以及测试号信息，返回授权url  
logger.info(uri);  
map.put("sessionId", sessionId);  
map.put("uri", uri);//用来前端生成二维码  
\} catch (Exception e) \{  
e.printStackTrace();  
\}  
return map;  
\}  
//扫描二维码授权成功，取到code，回调方法  
@RequestMapping("/pcAuth")  
@ResponseBody  
public String pcCallback(String code,String state,HttpServletRequest request,HttpServletResponse response) throws Exception \{  
logger.info("code:"+code+" = state:"+state);  
String result = weChatAuthServiceImpl.getAccessToken(code);//根据code获取access\_token和openId，不懂看微信文档  
JSONObject jsonObject = JSONObject.parseObject(result);  
  
//String refresh\_token = jsonObject.getString("refresh\_token");  
String access\_token = jsonObject.getString("access\_token");  
String openId = jsonObject.getString("openId");  
  
logger.info("------------授权成功----------------");  
JSONObject infoJson = weChatAuthServiceImpl.getUserInfo(access\_token,openId);//根据token和openId获取微信用户信息，不懂看我上一篇文章开始分享的链接  
if(infoJson!=null)\{  
String nickname = infoJson.getString("nickName");  
logger.info("-----nickname-----"+nickname);  
logger.info("-----sessionId-----"+state);  
infoJson.put("openId", openId);  
//redisTemplate.opsForValue().set(state, infoJson, 10\*60, TimeUnit.SECONDS);  
this.userInfoService.saveWxUser(state,infoJson);  
return "登录成功！";  
\}  
return "登录失败！";  
\}  
//轮询查询key  
@RequestMapping(value="/polling")  
@ResponseBody  
public Map<String, Object> polling(String sessionId,HttpServletRequest request,HttpServletResponse response)\{  
Map<String, Object> resultMap = new LinkedHashMap<String, Object>();  
String infoJsonstr = this.userInfoService.getWxUser(sessionId);  
if(infoJsonstr!=null)\{  
JSONObject infoJson = JSON.parseObject(infoJsonstr);  
this.userInfoService.delWxUser(sessionId);  
String openId = (String)infoJson.get("openId");  
//根据openId判断我们网站是否存在该用户，数据库用户表会保存用户  
SysUserInfo user = this.userInfoService.selectUserByWechat(openId);  
if (user == null) \{  
String nickname = (String)infoJson.get("nickName");  
String sex = (String)infoJson.get("sex");  
SysUserInfo newuser = new SysUserInfo();  
newuser.setCharSex(sex.equals("男")?"1":"0");  
newuser.setCharUserName(openId);  
newuser.setCharPassWord(openId);  
newuser.setCharRealName(nickname);  
String i = (String) userInfoService.save(newuser);//新增用户  
if(i.length()<1)\{  
resultMap.put("status", 500);  
resultMap.put("message", "登录失败:");  
resultMap.put("success", false);  
resultMap.put("msg", "登录失败!");  
return resultMap;  
\}  
\}  
//登录操作  
try \{  
UsernamePasswordToken token = new UsernamePasswordToken(openId, openId);//这里是用shiro登录，反正该openId已经微信扫码验证  
token.setRememberMe(true);  
Subject currentUser = SecurityUtils.getSubject();  
currentUser.login(token);  
if(currentUser.isAuthenticated())\{  
resultMap.put("status", 200);  
resultMap.put("message", "登录成功");  
resultMap.put("success", true);  
resultMap.put("msg", "登录成功");  
\}else\{  
resultMap.put("status", 500);  
resultMap.put("message", "登录失败");  
resultMap.put("success", false);  
resultMap.put("msg", "登录失败");  
\}  
//更新用户最后登录时间  
/\*Subject currentUser = SecurityUtils.getSubject();  
SysUserInfo luser = (SysUserInfo) currentUser.getPrincipal();  
SysUserInfo user1 = this.userInfoService.getById(luser.getId());  
Map<String,String> map= this.userInfoService.getUserAgent(request);  
user1.setCharLastIp(luser.getCharCurrIp());  
user1.setCharCurrIp(request.getRemoteAddr());  
user1.setDateModifyTime(new Date());  
user1.setDateLoginTime(new Date());  
user1.setCharBrowserType(map.get("type"));  
user1.setCharBrowserVersion(map.get("version"));  
user1.setDateLoginTime(new Date());  
this.userInfoService.update(user1);\*///更新用户方法  
\} catch (Exception e) \{  
resultMap.put("message", "未知系统错误:" + e.getMessage());  
\}  
return resultMap;  
\}else\{//not has key  
resultMap.put("status", 0);  
return resultMap;  
\}  
/\*if(redisTemplate.hasKey(sessionId))\{  
JSONObject infoJson = (JSONObject)redisTemplate.opsForValue().get(sessionId);  
redisTemplate.opsForValue().getOperations().delete(sessionId);  
String openId = (String)infoJson.get("openId");  
//根据openId判断我们网站是否存在该用户，数据库用户表会保存用户  
User user = userService.selectUserByWechat(openId);  
if (user == null) \{  
String nickname = (String)infoJson.get("nickName");  
String sex = (String)infoJson.get("sex");  
User newuser = new User();  
newuser.setSex(sex);  
newuser.setWechat(openId);  
newuser.setNickname(nickname);  
int i = userService.insertUser(newuser);//新增用户  
if(i<1)\{  
resultMap.put("status", 500);  
resultMap.put("message", "登录失败:");  
return resultMap;  
\}  
\}  
//登录操作  
try \{  
UsernamePasswordToken token = new UsernamePasswordToken(openId, openId);//这里是用shiro登录，反正该openId已经微信扫码验证  
SecurityUtils.getSubject().login(token);  
resultMap.put("status", 200);  
resultMap.put("message", "登录成功");  
  
//更新用户最后登录时间  
Subject currentUser = SecurityUtils.getSubject();  
User luser = (User) currentUser.getPrincipal();  
User user1 = new User();  
user1.setId(luser.getId());  
user1.setLastLogDate(new Date());  
userService.updateUserByIdSelective(user1);//更新用户方法  
  
  
\} catch (Exception e) \{  
resultMap.put("message", "未知系统错误:" + e.getMessage());  
\}  
return resultMap;  
\}else\{//not has key  
resultMap.put("status", 0);  
return resultMap;  
\}\*/  
\}

第五servie

1:userService

@Override  
public void saveWxUser(String state, JSONObject infoJson) \{  
logger.info("state:"+state+"==infoJson:"+infoJson);  
SysUserInfo userInfo = new SysUserInfo();  
userInfo.setCharUserCode(state);  
userInfo.setCharUserName(infoJson.toJSONString());  
this.save(userInfo);  
\}

@Override  
public String getWxUser(String sessionId) \{  
List<Map<String,Object>> list = this.findBySql("select charUserName from SysUserInfo where charUserCode='"+sessionId+"'");  
if(list!=null&&list.size()>0)\{  
return list.get(0).get("CHARUSERNAME").toString();  
\}  
return null;  
\}

@Override  
public void delWxUser(String sessionId) \{  
this.executeSql("update SysUserInfo set charUserCode='"+sessionId+"已删除' where charUserCode='"+sessionId+"'");  
\}

@Override  
public SysUserInfo selectUserByWechat(String openId) \{  
List<SysUserInfo> list = this.find("from SysUserInfo where charUserName='"+openId+"'");  
if(list!=null&&list.size()>0)\{  
return list.get(0);  
\}  
return null;  
\}

2:AuthService

public interface AuthService \{  
public abstract String getAccessToken(String code);  
public abstract String getOpenId(String accessToken);  
public abstract String refreshToken(String code);  
public abstract String getAuthorizationUrl(String type,String state) throws UnsupportedEncodingException;  
public abstract JSONObject getUserInfo(String accessToken,String openId);  
\}

3:DefaultAuthServiceImpl

public abstract class DefaultAuthServiceImpl implements AuthService\{  
public static RestTemplate getRestTemplate() \{// 手动添加  
SimpleClientHttpRequestFactory requestFactory=new SimpleClientHttpRequestFactory();  
requestFactory.setReadTimeout(120000);  
List<HttpMessageConverter<?>> messageConverters = new LinkedList<>();  
messageConverters.add(new ByteArrayHttpMessageConverter());  
messageConverters.add(new StringHttpMessageConverter(StandardCharsets.UTF\_8));  
messageConverters.add(new ResourceHttpMessageConverter());  
messageConverters.add(new SourceHttpMessageConverter<Source>());  
messageConverters.add(new AllEncompassingFormHttpMessageConverter());  
messageConverters.add(new MappingJackson2HttpMessageConverter());  
RestTemplate restTemplate=new RestTemplate(messageConverters);  
restTemplate.setRequestFactory(requestFactory);  
return restTemplate;  
\}  
\}

4:WeChatAuthServiceImpl

@Service("weChatAuthServiceImpl")  
public class WeChatAuthServiceImpl extends DefaultAuthServiceImpl implements WeChatAuthService \{  
  
private final Logger logger = LoggerFactory.getLogger(this.getClass());  
  
//请求此地址即跳转到二维码登录界面  
private static final String AUTHORIZATION\_URL =  
"https://open.weixin.qq.com/connect/oauth2/authorize?appid=%s&redirect\_uri=%s&response\_type=code&scope=%s&state=%s\#wechat\_redirect";  
  
// 获取用户 openid 和access——toke 的 URL  
private static final String ACCESSTOKE\_OPENID\_URL =  
"https://api.weixin.qq.com/sns/oauth2/access\_token?appid=%s&secret=%s&code=%s&grant\_type=authorization\_code";  
  
private static final String REFRESH\_TOKEN\_URL =  
"https://api.weixin.qq.com/sns/oauth2/refresh\_token?appid=%s&grant\_type=refresh\_token&refresh\_token=%s";  
  
private static final String USER\_INFO\_URL =  
"https://api.weixin.qq.com/sns/userinfo?access\_token=%s&openid=%s&lang=zh\_CN";  
  
private static final String APP\_ID="wx58fa4136c0f";  
private static final String APP\_SECRET="127b28f355110eef97be9eae";  
private static final String SCOPE = "snsapi\_userinfo";//"snsapi\_userinfo"; snsapi\_login snsapi\_userinfo snsapi\_base  
  
//private String pcCallbackUrl = "https://7dc6440a.ngrok.io//wechat/pcAuth"; //pc回调域名  
private String pcCallbackUrl = "http://39.23.234.21/chainStore/userController/pcAuth.do"; //pc回调域名  
  
private String mobileCallbackUrl = "https://7dc6440a.ngrok.io//wechat/mobileAuth"; //mobile回调域名  
  
/\*\*  
\* 第一步，带着参数  
\* appid：公众号的唯一标识  
\* redirect\_uri：授权后重定向的回调链接地址  
\* response\_type：返回类型，填写code  
\* scope：应用授权作用域，snsapi\_base / snsapi\_userinfo  
\* state：非必传，重定向后会带上state参数，开发者可以填写a-zA-Z0-9的参数值，最多128字节  
\* wechat\_redirect：无论直接打开还是做页面302重定向时候，必须带此参数  
\* \*/  
@Override  
public String getAuthorizationUrl(String type,String state) throws UnsupportedEncodingException \{  
String callbackUrl = "";  
Object urlState = "";  
if("pc".equals(type))\{//移动端 pc端回调方法不一样  
callbackUrl = URLEncoder.encode(pcCallbackUrl,"utf-8");  
urlState = state;  
\}else if("mobile".equals(type))\{  
callbackUrl = URLEncoder.encode(mobileCallbackUrl,"utf-8");  
urlState = System.currentTimeMillis();  
\}  
String url = String.format(AUTHORIZATION\_URL,APP\_ID,callbackUrl,SCOPE,urlState);  
return url;  
\}  
  
/\*\*  
\* 第二步  
\* 传appid secret code grant\_type=authorization\_code  
\* 获得 access\_token openId等  
\* \*/  
@Override  
public String getAccessToken(String code) \{  
String url = String.format(ACCESSTOKE\_OPENID\_URL,APP\_ID,APP\_SECRET,code);  
  
UriComponentsBuilder builder = UriComponentsBuilder.fromHttpUrl(url);  
URI uri = builder.build().encode().toUri();  
  
String resp = getRestTemplate().getForObject(uri, String.class);  
logger.error("getAccessToken resp = "+resp);  
if(resp.contains("openid"))\{  
JSONObject jsonObject = JSONObject.parseObject(resp);  
String access\_token = jsonObject.getString("access\_token");  
String openId = jsonObject.getString("openid");;  
  
JSONObject res = new JSONObject();  
res.put("access\_token",access\_token);  
res.put("openId",openId);  
res.put("refresh\_token",jsonObject.getString("refresh\_token"));  
  
return res.toJSONString();  
\}else\{  
logger.error("获取用户信息错误，msg = "+resp);  
return null;  
\}  
\}  
  
//微信接口中，token和openId是一起返回，故此方法不需实现  
@Override  
public String getOpenId(String accessToken) \{  
return null;  
\}  
  
@Override  
public JSONObject getUserInfo(String accessToken, String openId)\{  
String url = String.format(USER\_INFO\_URL, accessToken, openId);  
UriComponentsBuilder builder = UriComponentsBuilder.fromHttpUrl(url);  
URI uri = builder.build().encode().toUri();  
  
String resp = getRestTemplate().getForObject(uri, String.class);  
logger.error("getUserInfo resp = "+resp);  
if(resp.contains("errcode"))\{  
logger.error("获取用户信息错误，msg = "+resp);  
return null;  
\}else\{  
JSONObject data =JSONObject.parseObject(resp);  
  
JSONObject result = new JSONObject();  
result.put("id",data.getString("unionid"));  
result.put("sex",data.getString("sex"));  
result.put("nickName",data.getString("nickname"));  
result.put("avatar",data.getString("headimgurl"));  
  
return result;  
\}  
\}  
  
//微信的token只有2小时的有效期，过时需要重新获取，所以官方提供了  
//根据refresh\_token 刷新获取token的方法，本项目仅仅是获取用户  
//信息，并将信息存入库，所以两个小时也已经足够了  
@Override  
public String refreshToken(String refresh\_token) \{  
  
String url = String.format(REFRESH\_TOKEN\_URL,APP\_ID,refresh\_token);  
  
UriComponentsBuilder builder = UriComponentsBuilder.fromHttpUrl(url);  
URI uri = builder.build().encode().toUri();  
  
ResponseEntity<JSONObject> resp = getRestTemplate().getForEntity(uri,JSONObject.class);  
JSONObject jsonObject = resp.getBody();  
  
String access\_token = jsonObject.getString("access\_token");  
return access\_token;  
\}  
\}

5:WeChatAuthService

public interface WeChatAuthService \{

public String getAuthorizationUrl(String string, String sessionId) throws UnsupportedEncodingException;

public String getAccessToken(String code);  
  
public JSONObject getUserInfo(String accessToken, String openId);  
  
\}

需要三个jar包

![1309547-20190828165240720-1131334419.png][]

转载于:https://www.cnblogs.com/cxqx/p/11425048.html

[1309547-20190828164039788-1090900262.png]: /images/20230809/286a4fcc91424abeab3302b691cd5cb1.png
[1309547-20190828164204372-1610930728.png]: /images/20230809/8890ac3e51c841549ccc05897f0d2ed9.png
[1309547-20190828164230302-1050095289.png]: /images/20230809/19956664b5b642abbc0efeb855af3585.png
[1309547-20190828165240720-1131334419.png]: /images/20230809/795c6b4ae8354eae9df7a15c56253bed.png