Spring Boot实现微信扫码登录功能流程分析

redirect_uri?code=CODE&state=STATE

redirect_uri?state=STATE

{

"access_token" : "ACCESS_TOKEN" ,

"expires_in" : 7200 ,

"refresh_token" : "REFRESH_TOKEN" ,

"openid" : "OPENID" ,

"scope" : "SCOPE" ,

"unionid" : "o6_bmasdasdsad6_2sgVt7hMZOPfL"

}

{ "errcode" : 40029 , "errmsg" : "invalid code" }

# 开放平台

wechat.open-app-id=wx6ad144e54af67d87

wechat.open-app-secret=91a2ff6d38a2bbccfb7e9f9079108e2e

@Data

@Component

@ConfigurationProperties (prefix = "wechat" )

public class WechatAccountConfig {

     //公众号appid

     private String mpAppId;

     //公众号appSecret

     private String mpAppSecret;

     //商户号

     private String mchId;

     //商户秘钥

     private String mchKey;

     //商户证书路径

     private String keyPath;

     //微信支付异步通知

     private String notifyUrl;

     //开放平台id

     private String openAppId;

     //开放平台秘钥

     private String openAppSecret;

}

@Configuration

public class WechatOpenConfig {

     @Autowired

     private WechatAccountConfig accountConfig;

     @Bean

     public WxMpService wxOpenService() {

         WxMpService wxOpenService = new WxMpServiceImpl();

         wxOpenService.setWxMpConfigStorage(wxOpenConfigStorage());

         return wxOpenService;

     }

     public WxMpConfigStorage wxOpenConfigStorage() {

         WxMpInMemoryConfigStorage wxMpInMemoryConfigStorage = new WxMpInMemoryConfigStorage();

         wxMpInMemoryConfigStorage.setAppId(accountConfig.getOpenAppId());

         wxMpInMemoryConfigStorage.setSecret(accountConfig.getOpenAppSecret());

         return wxMpInMemoryConfigStorage;

@Controller

@RequestMapping ( "/wechat" )

@Slf4j

public class WeChatController {

     private WxMpService wxMpService;

     private WxMpService wxOpenService;

     @GetMapping ( "/qrAuthorize" )

     public String qrAuthorize() {

         //returnUrl就是用户授权同意后回调的地址

         String returnUrl = "http://heng.nat300.top/sell/wechat/qrUserInfo" ;

         //引导用户访问这个链接，进行授权

         String url = wxOpenService.buildQrConnectUrl(returnUrl, WxConsts.QRCONNECT_SCOPE_SNSAPI_LOGIN, URLEncoder.encode(returnUrl));

         return "redirect:" + url;

     //用户授权同意后回调的地址，从请求参数中获取code

     @GetMapping ( "/qrUserInfo" )

     public String qrUserInfo( @RequestParam ( "code" ) String code) {

         WxMpOAuth3AccessToken wxMpOAuth3AccessToken = new WxMpOAuth3AccessToken();

         try {

             //通过code获取access_token

             wxMpOAuth3AccessToken = wxOpenService.oauth3getAccessToken(code);

         } catch (WxErrorException e) {

             log.error( "【微信网页授权】{}" , e);

             throw new SellException(ResultEnum.WECHAT_MP_ERROR.getCode(), e.getError().getErrorMsg());

         }

         //从token中获取openid

         String openId = wxMpOAuth3AccessToken.getOpenId();

         //这个地址可有可无，反正只是为了拿到openid，但是如果没有会报404错误，为了好看随便返回一个百度的地址

         String  returnUrl = "http://HdhCmsTestbaidu测试数据" ;

         log.info( "openid={}" , openId);

         return "redirect:" + returnUrl + "?openid=" +openId;

@Controller

@RequestMapping ( "/seller" )

public class SellerUserController {

     @Autowired

     private SellerService sellerService;

     private StringRedisTemplate redisTemplate;

     private ProjectUrlConfig projectUrlConfig;

     @GetMapping ( "/login" )

     public ModelAndView login( @RequestParam ( "openid" ) String openid,                               HttpServletResponse response,                               Map<String, Object> map) {

         //1. openid去和数据库里的数据匹配

         SellerInfo sellerInfo = sellerService.findSellerInfoByOpenid(openid);

         if (sellerInfo == null ) {

             map.put( "msg" , ResultEnum.LOGIN_FAIL.getMessage());

             map.put( "url" , "/sell/seller/order/list" );

             return new ModelAndView( "common/error" );

         }

         //2. 设置token至redis

         String token = UUID.randomUUID().toString();

         //设置token的过期时间

         Integer expire = RedisConstant.EXPIRE;

         redisTemplate.opsForValue().set(String.format(RedisConstant.TOKEN_PREFIX, token), openid, expire, TimeUnit.SECONDS);

         //3. 设置token至cookie

         CookieUtil.set(response, CookieConstant.TOKEN, token, expire);

         return new ModelAndView( "redirect:" + "http://heng.nat300.top/sell/seller/order/list" );

     }

     @GetMapping ( "/logout" )

     public ModelAndView logout(HttpServletRequest request,                        HttpServletResponse response,                        Map<String, Object> map) {

         //1. 从cookie里查询

         Cookie cookie = CookieUtil.get(request, CookieConstant.TOKEN);

         if (cookie != null ) {

             //2. 清除redis

             redisTemplate.opsForValue().getOperations().delete(String.format(RedisConstant.TOKEN_PREFIX, cookie.getValue()));

             //3. 清除cookie

             CookieUtil.set(response, CookieConstant.TOKEN, null , 0 );

         map.put( "msg" , ResultEnum.LOGOUT_SUCCESS.getMessage());

         map.put( "url" , "/sell/seller/order/list" );

         return new ModelAndView( "common/success" , map);

}

//用户授权同意后回调的地址，从请求参数中获取code

    @GetMapping ( "/qrUserInfo" )

    public String qrUserInfo( @RequestParam ( "code" ) String code) {

        WxMpOAuth3AccessToken wxMpOAuth3AccessToken = new WxMpOAuth3AccessToken();

        try {

            //通过code获取access_token

            wxMpOAuth3AccessToken = wxOpenService.oauth3getAccessToken(code);

        } catch (WxErrorException e) {

            log.error( "【微信网页授权】{}" , e);

            throw new SellException(ResultEnum.WECHAT_MP_ERROR.getCode(), e.getError().getErrorMsg());

        }

        //从token中获取openid

        String openId = wxMpOAuth3AccessToken.getOpenId();

        //授权成功后跳转到卖家系统的登录地址

        String  returnUrl = "http://heng.nat300.top/sell/seller/login" ;

        log.info( "openid={}" , openId);

        return "redirect:" + returnUrl + "?openid=" +openId;

    }

@Aspect

@Component

@Slf4j

public class SellerAuthorizeAspect {

     @Autowired

     private StringRedisTemplate redisTemplate;

     @Pointcut ( "execution(public * com.hh.controller.Seller*.*(..))" +

     "&& !execution(public * com.hh.controller.SellerUserController.*(..))" )

     public void verify() {}

     @Before ( "verify()" )

     public void doVerify() {

         ServletRequestAttributes attributes = (ServletRequestAttributes) RequestContextHolder.getRequestAttributes();

         HttpServletRequest request = attributes.getRequest();

         //查询cookie

         Cookie cookie = CookieUtil.get(request, CookieConstant.TOKEN);

         //如果cookie中没有token说明已经登出或者根本没有登录

         if (cookie == null ) {

             log.warn( "【登录校验】Cookie中查不到token" );

             //校验不通过，抛出异常

             throw new SellerAuthorizeException();

         }

         //去redis里查询

         String tokenValue = redisTemplate.opsForValue().get(String.format(RedisConstant.TOKEN_PREFIX, cookie.getValue()));

         //如果redis中没有对应的openid，同样表示登出或者根本没有登录

         if (StringUtils.isEmpty(tokenValue)) {

             log.warn( "【登录校验】Redis中查不到token" );

     }

}

@ControllerAdvice

public class SellExceptionHandler {

     //拦截登录异常

     @ExceptionHandler (value = SellerAuthorizeException. class )     public ModelAndView handlerAuthorizeException() {

         //拦截异常后，跳转到登录界面

         return new ModelAndView( "redirect:" .concat( "https://open.weixin.qq测试数据/connect/qrconnect?" +

                 "appid=wx6ad144e54af67d87" +

                 "&redirect_uri=http%3A%2F%2Fsell.springboot.cn%2Fsell%2Fqr%2F" +

                 "oTgZpwenC6lwO2eTDDf_-UYyFtqI" +

                 "&response_type=code&scope=snsapi_login" +

                 "&state=http%3a%2f%2fheng.nat300.top%2fsell%2fwechat%2fqrUserInfo" ));

     }

     @ExceptionHandler (value = SellException. class )     @ResponseBody      public ResultVO handlerSellerException(SellException e) {

         return ResultVOUtil.error(e.getCode(), e.getMessage());

     }

     @ExceptionHandler (value = ResponseBankException. class )     @ResponseStatus (HttpStatus.FORBIDDEN)     public void handleResponseBankException() {

     }

}