微信公众平台之网页授权
此功能必须是服务号或者测试号,订阅号没有此权限。测试号可以在【开发】=》【开发者工具】=》【公众平台测试账号】申请,本文以测试号为例:
一:公众平台设置回调域名和测试账号
注:设置成你网站域名,不要加协议,举例:www.aaa.com,本地域名也可以
二:将下面Oauth.php放到此域名下(更改成你自己的appID和appsecret):
<?php class Oauth { private $appID = \'xxxxxxx\'; private $appsecret = \'xxxxxxxxxxxxxxxxxxxxxxxx\'; private $code; private $token; private $openid; //授权地址,未授权会跳转到这个路径进行授权(power方法的访问路径) private $power_url = \'http://www.wx.com/Oauth.php?method=power\'; //授权成功回调地址,授权成功后会跳转到这个路径获取用户信息(getUser方法的访问路径) private $redirect_uri = \'http://www.wx.com/Oauth.php?method=getUser\'; //授权日志目录 private $log_filedir = "./logs/oauth/"; //获取用户信息 function getUser() { //判断用户session是否存在,存在直接返回[省略] //没有用户session则去授权获取 $this->code = $_GET[\'code\']; $token = $this->getToken(); if($token[\'code\']){ header(\'location:\' . $this->power_url);//跳转到授权页面 } $url = \'https://api.weixin.qq.com/sns/userinfo?access_token=\'.$this->token.\'&openid=\'.$this->openid.\'&lang=zh_CN\'; $user = $this->send($url); $this->_log(\'获取用户信息:\' . $this->ajax($user)); if(!isset($user[\'openid\'])) { $this->_log(\'获取用户信息失败!\'); return "获取信息失败,请重新进入"; } //入库存session,将openid作为唯一标识[省略] //返回用户信息 return $this->ajax($user); } //获取token public function getToken() { $url = \'https://api.weixin.qq.com/sns/oauth2/access_token?appid=\'.$this->appID.\'&secret=\'.$this->appsecret.\'&code=\'.$this->code.\'&grant_type=authorization_code\'; $token = $this->send($url); $this->_log(\'获取access_token:\' . $this->ajax($token)); if(isset($token[\'access_token\'])) { $this->token = $token[\'access_token\']; $this->openid = $token[\'openid\']; return [\'code\'=>0, \'msg\'=>\'获取access_token成功\']; }else{ return [\'code\'=>1, \'msg\'=>\'获取access_token失败\']; } } //网页授权 function power() { //请求授权 header(\'location:https://open.weixin.qq.com/connect/oauth2/authorize?appid=\'.$this->appID.\'&redirect_uri=\'.$this->redirect_uri.\'&response_type=code&scope=snsapi_userinfo&state=STATE#wechat_redirect\'); } /** * @param $url * @param null $_input * @param string $data_type * @return mixed * $_input= ["post"=>[],"refer"=>"",cookiefile=\'\'] */ function send($url, $input=null, $data_type=\'json\') { $ch = curl_init(); $useragent = isset($input[\'useragent\']) ? $input[\'useragent\'] : \'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:10.0.2) Gecko/20100101 Firefox/10.0.2\'; curl_setopt( $ch, CURLOPT_URL, $url ); curl_setopt( $ch, CURLOPT_RETURNTRANSFER, true ); curl_setopt( $ch, CURLOPT_AUTOREFERER, true ); curl_setopt( $ch, CURLOPT_FOLLOWLOCATION, true ); curl_setopt( $ch, CURLOPT_POST, isset($input[\'post\']) ); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); //不验证证书 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false); //不验证证书 if( isset($input[\'post\']) ) curl_setopt( $ch, CURLOPT_POSTFIELDS, $input[\'post\'] ); if( isset($input[\'refer\']) ) curl_setopt( $ch, CURLOPT_REFERER, $input[\'refer\'] ); curl_setopt( $ch, CURLOPT_USERAGENT, $useragent ); curl_setopt( $ch, CURLOPT_CONNECTTIMEOUT, ( isset($input[\'timeout\']) ? $input[\'timeout\'] : 5 ) ); $result = curl_exec( $ch ); curl_close( $ch ); if ($data_type == \'json\') { $result = json_decode($result,true); } return $result; } //日志记录 private function _log($log_content){ !is_dir($this->log_filedir) && mkdir($this->log_filedir, 0755, true);//目录不存在则创建目录 $log_filename = $this->log_filedir . date("Ymd") . \'.log\';//日志文件路径 file_put_contents($log_filename, \'[\'.date("H:i:s").\']\' .PHP_EOL . $log_content . PHP_EOL."------------------------ --------------------------".PHP_EOL, FILE_APPEND); } function ajax($data) { return json_encode($data, JSON_UNESCAPED_UNICODE); } } $oauth = new Oauth(); $method = isset($_GET[\'method\'])?$_GET[\'method\']:\'getUser\'; echo $oauth->$method();
三:打开微信开发者工具,访问【域名/Oauth.php】
<?php class Oauth{private $appID = \’xxxxxxx\’;private $appsecret = \’xxxxxxxxxxxxxxxxxxxxxxxx\’;
private $code;private $token;private $openid;
//授权地址,未授权会跳转到这个路径进行授权(power方法的访问路径)private $power_url = \’http://www.wx.com/Oauth.php?method=power\’;//授权成功回调地址,授权成功后会跳转到这个路径获取用户信息(getUser方法的访问路径)private $redirect_uri = \’http://www.wx.com/Oauth.php?method=getUser\’;//授权日志目录private $log_filedir = “./logs/oauth/”;
//获取用户信息function getUser() {//判断用户session是否存在,存在直接返回[省略]
//没有用户session则去授权获取$this->code = $_GET[\’code\’];$token = $this->getToken();if($token[\’code\’]){header(\’location:\’ . $this->power_url);//跳转到授权页面}$url = \’https://api.weixin.qq.com/sns/userinfo?access_token=\’.$this->token.\’&openid=\’.$this->openid.\’&lang=zh_CN\’;$user = $this->send($url);$this->_log(\’获取用户信息:\’ . $this->ajax($user));if(!isset($user[\’openid\’])) {$this->_log(\’获取用户信息失败!\’);return “获取信息失败,请重新进入”;}
//入库存session[省略]
//返回用户信息return $this->ajax($user);}
//获取tokenpublic function getToken() {$url = \’https://api.weixin.qq.com/sns/oauth2/access_token?appid=\’.$this->appID.\’&secret=\’.$this->appsecret.\’&code=\’.$this->code.\’&grant_type=authorization_code\’;$token = $this->send($url);$this->_log(\’获取access_token:\’ . $this->ajax($token));if(isset($token[\’access_token\’])) {$this->token = $token[\’access_token\’];$this->openid = $token[\’openid\’];return [\’code\’=>0, \’msg\’=>\’获取access_token成功\’];}else{return [\’code\’=>1, \’msg\’=>\’获取access_token失败\’];}}
//网页授权function power() {//请求授权header(\’location:https://open.weixin.qq.com/connect/oauth2/authorize?appid=\’.$this->appID.\’&redirect_uri=\’.$this->redirect_uri.\’&response_type=code&scope=snsapi_userinfo&state=STATE#wechat_redirect\’);}
/*** @param $url* @param null $_input* @param string $data_type* @return mixed* $_input= [“post”=>[],”refer”=>””,cookiefile=\’\’]*/function send($url, $input=null, $data_type=\’json\’) {$ch = curl_init();$useragent = isset($input[\’useragent\’]) ? $input[\’useragent\’] : \’Mozilla/5.0 (Windows NT 6.1; WOW64; rv:10.0.2) Gecko/20100101 Firefox/10.0.2\’;curl_setopt( $ch, CURLOPT_URL, $url );curl_setopt( $ch, CURLOPT_RETURNTRANSFER, true );curl_setopt( $ch, CURLOPT_AUTOREFERER, true );curl_setopt( $ch, CURLOPT_FOLLOWLOCATION, true );curl_setopt( $ch, CURLOPT_POST, isset($input[\’post\’]) );curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); //不验证证书curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false); //不验证证书if( isset($input[\’post\’]) ) curl_setopt( $ch, CURLOPT_POSTFIELDS, $input[\’post\’] );if( isset($input[\’refer\’]) ) curl_setopt( $ch, CURLOPT_REFERER, $input[\’refer\’] );curl_setopt( $ch, CURLOPT_USERAGENT, $useragent );curl_setopt( $ch, CURLOPT_CONNECTTIMEOUT, ( isset($input[\’timeout\’]) ? $input[\’timeout\’] : 5 ) );$result = curl_exec( $ch );curl_close( $ch );if ($data_type == \’json\’) {$result = json_decode($result,true);}return $result;}
//日志记录private function _log($log_content){ !is_dir($this->log_filedir) && mkdir($this->log_filedir, 0755, true);//目录不存在则创建目录 $log_filename = $this->log_filedir . date(“Ymd”) . \’.log\’;//日志文件路径
file_put_contents($log_filename, \'[\’.date(“H:i:s”).\’]\’ .PHP_EOL . $log_content . PHP_EOL.”———————— ————————–“.PHP_EOL, FILE_APPEND);}
function ajax($data){ return json_encode($data, JSON_UNESCAPED_UNICODE);}
}
$oauth = new Oauth();$method = isset($_GET[\’method\’])?$_GET[\’method\’]:\’getUser\’;echo $oauth->$method();