微信和QQ网页授权登录

一：微信授权

//用户授权

public function is_weixin(){

$url = "https://open.weixin.qq.com/connect/oauth2/authorize?appid=xxxxxxxxxxxxxxx&redirect_uri=http://xxx.xxxxx.com/index.php/privilege/getWeixinUser&response_type=code&scope=snsapi_userinfo&state=1#wechat_redirect";
redirect($url);
}

上面的$url 中有5个get参数，前面2个get参数的值由我们指定,即appid 和 redirect_uri 

　　appid="微信APP_ID"

　　redirect_uri="回调地址"

以上例子中 is_weixin 方法执行后浏览器会访问 redirect_uri所填写的地址，也就是会执行privilege中的getWeixinUser方法

public function getWeixinUser(){
$appid = "xxxxxxxxxxxxxxxxxxxxxxx";
$secret = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx";
$code = $_GET["code"];
$get_token_url = 'https://api.weixin.qq.com/sns/oauth2/access_token?appid='.$appid.'&secret='.$secret.'&code='.$code.'&grant_type=authorization_code';

$ch = curl_init();
curl_setopt($ch,CURLOPT_URL,$get_token_url); 
curl_setopt($ch,CURLOPT_HEADER,0); 
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 ); 
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE); 
$res = curl_exec($ch);
curl_close($ch); 
$json_obj = json_decode($res,true);

//根据openid和access_token查询用户信息 
$access_token = $json_obj['access_token']; 
$openid = $json_obj['openid']; 
$get_user_info_url = 'https://api.weixin.qq.com/sns/userinfo?access_token='.$access_token.'&openid='.$openid.'&lang=zh_CN'; 

$ch = curl_init();
curl_setopt($ch,CURLOPT_URL,$get_user_info_url); 
curl_setopt($ch,CURLOPT_HEADER,0); 
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 ); 
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE); 
$res = curl_exec($ch); 
curl_close($ch); 

//解析json
$user_obj = json_decode($res,true);

// array(
// [openid] => o3ushwi5OiaBfCNA2F187BKPdnfU
// [nickname] => xxx
// [sex] => 1
// [language] => zh_CN
// [city] => 深圳
// [province] => 广东
// [country] => 中国
// [headimgurl] => http://wx.qlogo.cn/mmopen/qibdIUkiaxRnic3D9icdBOonZxI3HibH1sP1xKchqhlDOnQibVuxhfNxHVvRJCrfz9jOkR5uZxsWiaToMIQQ0spkRNfG325j8NaGO67/0
// );

}

getWeixinUser方法中最终得到的$user_obj就是一个包含了用户微信基本信息的数组。

二：QQ授权

 第一步，跳转到QQ授权页面,获取(Authorization) Code值

/*QQ登陆*/
public function qqlogin(){

$appid = 'xxxxxxxxxxx';
$appkey = 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx';

$scope = "get_user_info";

//成功授权后的回调地址,需要进行urlencode
$my_url = "http://www.nightlostk.com/index.php/privilege/callback";

set_sess('state',md5(uniqid(rand(), TRUE)));
$login_url = "https://graph.qq.com/oauth2.0/authorize?response_type=code&client_id=".$appid."&redirect_uri=" .urlencode($my_url)."&state=".get_sess('state')."&scope=".$scope;

redirect($login_url);
}

 

代码运行后会跳转到类似如下页面:

　用户点击QQ头像即表示授权并登录。页面将会跳转到 上面代码中的回调地址

　　//成功授权后的回调地址,需要进行urlencode
　　$my_url = "http://www.nightlostk.com/index.php/privilege/callback";

实际上回调地址会附带一些上get参数。  实际的地址为: http://www.nightlostk.com/index.php/privilege/callback?code=xxxxxxxxxxxx&state=xxxxxxxxxxxxxx

可以理解为第一步就是为了获取到返回的get参数 code的值

第二步, 通过Authorization Code获取Access Token->openid->用户基本信息

在第一步中，页面最后跳转到

http://www.nightlostk.com/index.php/privilege/callback?code=xxxxxxxxxxxx&state=xxxxxxxxxxxxxx
在PHP中会执行 privilege中的 callback方法

/*QQ登陆回调地址*/
    public function callback(){

        $appid = '101261269';
        $appkey = 'adcaacfadd912ecc5991aa6936aafe0d';
        $my_url = "http://m.etripbon.com/index.php/privilege/callback";
        //Step2：通过Authorization Code获取Access Token
        if($_REQUEST['state'] == get_sess('state')) {
            $code = $_REQUEST["code"];
            //拼接URL   
            $token_url = "https://graph.qq.com/oauth2.0/token?grant_type=authorization_code&"."client_id=".$appid."&redirect_uri=".urlencode($my_url)."&client_secret=".$appkey."&code=".$code;
            $response = $this->https_request($token_url);
           //Step3：使用Access Token来获取用户的OpenID
            $params = array();
            parse_str($response, $params);
            $graph_url = "https://graph.qq.com/oauth2.0/me?access_token=".$params['access_token'];
            $access_token = $params["access_token"];
                    
            $str = $this->https_request($graph_url);
           $user = json_decode($str);$openid = $user->openid;
            $url = "https://graph.qq.com/user/get_user_info?access_token=".$access_token."&oauth_consumer_key=".$appid."&openid=".$openid;
            $output = $this->https_request($url);
            $jsoninfo = json_decode($output, true); 
                
        }else{
            echo("The state does not match. You may be a victim of CSRF.");
        }

    }

  

public function https_request($url,$data = null){
        if(function_exists('curl_init')){
            $curl = curl_init();
            curl_setopt($curl, CURLOPT_URL, $url);
            curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE);
            curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, FALSE);
            curl_setopt($curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1);
            if (!empty($data)){
                curl_setopt($curl, CURLOPT_POST, 1);
                curl_setopt($curl, CURLOPT_POSTFIELDS, $data);
            }
            curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
            $output = curl_exec($curl);
            curl_close($curl);
            return $output;
        }else{
            return false;
        }
    }

  在callback方法中，通过第一步获取的code值来组装好url

https://graph.qq.com/oauth2.0/token?grant_type=authorization_code&"."client_id=".$appid."&redirect_uri=".urlencode($my_url)."&client_secret=".$appkey."&code=".$code

请求这个url 获取到 Access Token

Access Token 有了以后组装出如下url

$graph_url = "https://graph.qq.com/oauth2.0/me?access_token=".$params['access_token']

请求这个url 获取到用户的 openid

openid 有了以后组装出如下url

$url = "https://graph.qq.com/user/get_user_info?access_token=".$access_token."&oauth_consumer_key=".$appid."&openid=".$openid;

请求这个url 获取到用户的基本信息，到此为止，用户的QQ基本信息就获取到了。后续则是根据自己项目的业务需求来处理这些信息即可。

返回的QQ用户基本信息如下图所示