微信小程序登录

App({
    onLaunch: function () {
        wx.login({
          success: function (res) {
            if (res.code) {
              var code = res.code;
              // 发送 res.code 到后台换取 openId, sessionKey, unionId
              console.log('获取用户登录凭证：' + code);
              // --------- 发送凭证 ------------------
              wx.request({
                url: webserveurl,
                data: { action: "onlogin", code: code },
                header: {
                  'content-type': 'application/json' // 默认值
                },
                success: function (res) {
                  console.log("wx.request-onlogin-" + JSON.stringify(res));
                  if (res.data.errcode == 0) {
                    wx.setStorageSync('openid', res.data.data.openid);

                    var userid = res.data.data.userid;
                    if (userid > 0) {//已经有账号
                      wx.setStorageSync('userid', userid);
                    } else {//游客
                      getUserInfo();
                    }
                  } else {
                    console.log("登录失败");
                  }
                }
              });
              // ------------------------------------
            } else {
              console.log('获取用户登录态失败！' + res.errMsg)
            }
          }
        });
    },
    //全局获取openid的方法
    getOpenId: function () {
        return wx.getStorageSync('openid');
    },
    //全局获取openid的方法
    getUserId: function () {
        return wx.getStorageSync('userid');
    }
})

private string OnLogin(HttpContext context)
{
    string code = context.Request.Params["code"];
    string retString = string.Empty;
    string formatString = string.Format(@"https://api.weixin.qq.com/sns/jscode2session?appid={0}&secret={1}&js_code={2}&grant_type=authorization_code", appid, appsecret, code);
    try
    {
        retString = weixinbase.RequestGetUrl(formatString);
        #region 正常返回的JSON数据包
        ////正常返回的JSON数据包
        //{
        //    "openid": "OPENID",
        //    "session_key": "SESSIONKEY",
        //}
        ////满足UnionID返回条件时，返回的JSON数据包
        //{
        //    "openid": "OPENID",
        //    "session_key": "SESSIONKEY",
        //    "unionid": "UNIONID"
        //}
        ////错误时返回JSON数据包(示例为Code无效)
        //{
        //    "errcode": 40029,
        //    "errmsg": "invalid code"
        //} 
        #endregion
        ResultMsg relust = JsonConvert.DeserializeJsonToObject<ResultMsg>(retString);
        //开发者应该事先通过 wx.login 登录流程获取会话密钥 session_key 并保存在服务器。为了数据不被篡改，开发者不应该把session_key传到小程序客户端等服务器外的环境。
        if (relust.errcode == 0)
        {
            Model.TUser mod = bll_TUser.GetModelByOpenId(relust.openid) ?? new Model.TUser();
            int userid = mod != null ? mod.ID : 0;
            //保存登录状态
            context.Cache.Insert("USERModel_" + relust.openid, mod);
            //保存openid session_key
            context.Cache.Insert("session_key_" + relust.openid, relust.session_key);
            return "{"errcode": 0, "errmsg": "登录成功！", "data":{"userid": "" + userid + "","openid": "" + relust.openid + ""}}";
        }
        else
        {
            return "{"errcode": " + relust.errcode + ", "errmsg": "" + relust.errmsg + "", "data":[]}";
        }
    }
    catch (Exception ex)
    {
        return "{"errcode": -2, "errmsg": "" + ex.StackTrace + "", "data":[]}";
    }
}

/// <summary>
/// 结果信息
/// </summary>
public class ResultMsg
{
    /// <summary>
    /// 错误码
    /// </summary>
    public int errcode;
    /// <summary>
    /// 错误信息
    /// </summary>
    public string errmsg;
    /// <summary>
    /// 用户唯一标识
    /// </summary>
    public string openid;
    /// <summary>
    /// 会话密钥
    /// </summary>
    public string session_key;
    /// <summary>
    /// 用户在开放平台的唯一标识符
    /// </summary>
    public string unionid;
}

function getUserInfo() {
  //获取游客具体敏感信息
  wx.getUserInfo({
    success: function (res) {
      console.log("获取用户信息成功-" + JSON.stringify(res))
      //后续处理--解密游客具体信息
      getEncrypUserInfo(res.signature, res.encryptedData, res.iv)
    },
    fail: function (res) {
      console.log("获取用户信息失败-" + JSON.stringify(res))
    }
  });
}

//解密用户数据
function getEncrypUserInfo(signature, encryptedData, iv) {
  wx.request({
    url: webserveurl,
    data: { action: "getencrypuserinfo", "signature": signature, "encryptedData": encryptedData, "iv": iv, "openid": wx.getStorageSync('openid') },
    success: function (res) {
      console.log("getEncrypUserInfo-" + JSON.stringify(res));
    }
  });
}

/// <summary>
/// 解密微信wx.getUserInfo返回的 用户敏感数据
/// </summary>
/// <param name="context"></param>
/// <returns></returns>
private string GetEncrypUserInfo(HttpContext context)
{
    string openid = context.Request.Params["openid"];
    string signature = context.Request.Params["signature"];
    string encryptedData = context.Request.Params["encryptedData"];
    string iv = context.Request.Params["iv"];
    string session_key = context.Cache["session_key_" + openid] == null ? "error" : context.Cache["session_key_" + openid].ToString();
    string result = AESDecrypt(encryptedData, iv, session_key);
    result = result.Length > 0 ? result : "{"errcode":"0","errmsg":"无效数据"}";
    return result;
}

/// <summary>
/// AES-128-CBC对称解密
/// </summary>
/// <param name="encryptedData"></param>
/// <param name="iv"></param>
/// <param name="session_key"></param>
/// <returns></returns>
private string AESDecrypt(string encryptedData, string iv, string session_key)
{
    string result = string.Empty;
    try
    {
        byte[] encryptedDataBytes = Convert.FromBase64String(encryptedData);
        RijndaelManaged rijndaelCipher = new RijndaelManaged();
        rijndaelCipher.Key = Convert.FromBase64String(session_key);
        rijndaelCipher.IV = Convert.FromBase64String(iv);
        rijndaelCipher.Mode = CipherMode.CBC;
        rijndaelCipher.Padding = PaddingMode.PKCS7;
        ICryptoTransform transform = rijndaelCipher.CreateDecryptor();
        byte[] plainText = transform.TransformFinalBlock(encryptedDataBytes, 0, encryptedDataBytes.Length);
        result = Encoding.UTF8.GetString(plainText);
    }
    catch (Exception e)
    {
        Log.Error("AESDecrypt-" + e.ToString());
    }
    return result;
}