最近有做了關(guān)于微信公眾號(hào)和自己網(wǎng)站用戶進(jìn)行用戶關(guān)聯(lián)授權(quán)登錄的一個(gè)功能，主要是用戶關(guān)注該公眾號(hào)，點(diǎn)擊會(huì)員中心，則會(huì)彈出需要關(guān)聯(lián)授權(quán)的網(wǎng)頁授權(quán)：OAuth2.0網(wǎng)頁授權(quán)，然后用戶同意獲取用戶信息，進(jìn)行用戶和網(wǎng)站的關(guān)聯(lián)，然后用戶則可以使用微信進(jìn)行登錄。
??????? 本次做的是一個(gè)在Java的Action層處理各個(gè)返回參數(shù)獲取數(shù)據(jù)。
???????一、 使用到的工具：
??????????? 1、ngrok，將你自己的本機(jī)映射到公網(wǎng)，這樣保證可以隨時(shí)測(cè)試開發(fā)；
?????????????????? 1、下載ngrok，網(wǎng)址：http://www.tunnel.mobi/
???????????????????2、將文件放到Tomcat目錄下，在cmd中運(yùn)行ngrok -config ngrok.cfg -subdomain xinzhi 8080
?????????????????? 3、ngrok工具為在慕課網(wǎng)@LAOBI 看到的
??????????? 2、微信公眾號(hào)測(cè)試賬號(hào)，隨時(shí)測(cè)試，首先保證在測(cè)試賬號(hào)下沒有問題后在進(jìn)行公眾號(hào)的移植。
?????? 二、使用到在Java中發(fā)送一個(gè)Http請(qǐng)求，然后返回JSON參數(shù)，獲得JSON參數(shù)，然后進(jìn)行處理。
?????????? 首先，獲取將公眾號(hào)測(cè)試號(hào)放到properties文件中，以便我們進(jìn)行調(diào)用或者更換,如：url請(qǐng)用https
???
Properties代碼??
AppID?=?wxf00**c3dd2ebfa0??AppSecret?=?3cb220755f****506dc35391aa5c03ec??url?=?https://xinzhi.tunnel.mobi??
?
?????????? 這里url為我們映射到外網(wǎng)的地址，一會(huì)需要用到。然后需要兩個(gè)工具類，該工具類作用是在Java的Action中發(fā)送http請(qǐng)求后獲取到去返回值
?????????? ?這里使用的是@柳峰，關(guān)于服務(wù)器請(qǐng)求的代碼http://blog.csdn.net/lyq8479/article/details/9841371，啟用自己有相應(yīng)的改動(dòng)，以適應(yīng)本項(xiàng)目的需求：
?????????? WeixinUtil.java 和 MyX509TrustManager.java
?
Java代碼??
package?com.zhtx.common.util;??????import?java.io.BufferedReader;??import?java.io.InputStream;??import?java.io.InputStreamReader;??import?java.io.OutputStream;??import?java.net.ConnectException;??import?java.net.URL;????import?javax.net.ssl.HttpsURLConnection;??import?javax.net.ssl.SSLContext;??import?javax.net.ssl.SSLSocketFactory;??import?javax.net.ssl.TrustManager;??????import?org.slf4j.Logger;??import?org.slf4j.LoggerFactory;?????????????public?class?WeixinUtil?{??????private?static?Logger?log?=?LoggerFactory.getLogger(WeixinUtil.class);?????????????????????public?static?String?httpRequest(String?requestUrl,?String?requestMethod,?String?outputStr)?{??????????StringBuffer?buffer?=?new?StringBuffer();??????????try?{????????????????????????????TrustManager[]?tm?=?{?new?MyX509TrustManager()?};??????????????SSLContext?sslContext?=?SSLContext.getInstance("SSL",?"SunJSSE");??????????????sslContext.init(null,?tm,?new?java.security.SecureRandom());????????????????????????????SSLSocketFactory?ssf?=?sslContext.getSocketFactory();????????????????URL?url?=?new?URL(requestUrl);??????????????HttpsURLConnection?httpUrlConn?=?(HttpsURLConnection)?url.openConnection();??????????????httpUrlConn.setSSLSocketFactory(ssf);????????????????httpUrlConn.setDoOutput(true);??????????????httpUrlConn.setDoInput(true);??????????????httpUrlConn.setUseCaches(false);????????????????????????????httpUrlConn.setRequestMethod(requestMethod);????????????????if?("GET".equalsIgnoreCase(requestMethod))??????????????????httpUrlConn.connect();??????????????????????????????if?(null?!=?outputStr)?{??????????????????OutputStream?outputStream?=?httpUrlConn.getOutputStream();????????????????????????????????????outputStream.write(outputStr.getBytes("UTF-8"));??????????????????outputStream.close();??????????????}??????????????????????????????InputStream?inputStream?=?httpUrlConn.getInputStream();??????????????InputStreamReader?inputStreamReader?=?new?InputStreamReader(inputStream,?"utf-8");??????????????BufferedReader?bufferedReader?=?new?BufferedReader(inputStreamReader);????????????????String?str?=?null;??????????????while?((str?=?bufferedReader.readLine())?!=?null)?{??????????????????buffer.append(str);??????????????}??????????????bufferedReader.close();??????????????inputStreamReader.close();????????????????????????????inputStream.close();??????????????inputStream?=?null;??????????????httpUrlConn.disconnect();????????????????????????}?catch?(ConnectException?ce)?{??????????????log.error("Weixin?server?connection?timed?out.");??????????}?catch?(Exception?e)?{??????????????log.error("https?request?error:{}",?e);??????????}??????????return?buffer.toString();??????}??}??
?
?對(duì)于https請(qǐng)求，我們需要一個(gè)證書信任管理器，這個(gè)管理器類需要自己定義，但需要實(shí)現(xiàn)X509TrustManager接口，代碼如下:
?
Java代碼??
package?com.zhtx.common.util;??????import?java.security.cert.CertificateException;??import?java.security.cert.X509Certificate;????import?javax.net.ssl.X509TrustManager;???????????public?class?MyX509TrustManager?implements?X509TrustManager?{????????public?void?checkClientTrusted(X509Certificate[]?chain,?String?authType)?throws?CertificateException?{??????}????????public?void?checkServerTrusted(X509Certificate[]?chain,?String?authType)?throws?CertificateException?{??????}????????public?X509Certificate[]?getAcceptedIssuers()?{??????????return?null;??????}??}??
?微信返回參數(shù)的一個(gè)POJO類：
?
Java代碼??
private?String??openid;????private?String??nickname;??private?Integer?sex;??private?String??province;??private?String??city;??private?String??country;??private?String??headimgurl;????private?String??privilege;??private?String??unionid;??private?String?access_token;??
?
?授權(quán)憑證驗(yàn)證的類：
?
Java代碼??
private?String?errcode;??private?String?errmsg;??
?通過code換取網(wǎng)頁授權(quán)access_token
?
Java代碼??
private?String?access_token;??private?String?expires_in;??private?String?refresh_token;??private?String?openid;??private?String?scope;??private?String?unionid;??
?關(guān)于微信頭像的，獲取的是一個(gè)http的url，則需要將圖片下載到服務(wù)器存儲(chǔ)，然后獲得相對(duì)路徑：
?
Java代碼??
?????????????public?static?void?fileUpload?(String?fileUrl,String?path){???????????????????????String?s1?=?fileUrl;???????????????java.io.InputStream?is?=?null;?????????????BufferedInputStream?bis?=?null;??????????????????????BufferedOutputStream?bos?=?null;?????????????try{???????????????java.net.URL?url?=?new?java.net.URL(s1);??????????????is?=?url.openStream();??????????????bis?=?new?java.io.BufferedInputStream(is);???????????????????File?file?=?new?File(path);?????????????????if(!file.exists()){???????????????????file.createNewFile();?????????????????}???????????????bos?=?new?BufferedOutputStream(new?FileOutputStream(file));;?????????????????byte[]?b?=?new?byte[1024];?????????????while(bis.read(b)!=-1){????????????????bos.write(b);????????????}?????????????}catch(Exception???e){?????????????????????System.out.println(e.toString());???????????????????}finally{?????????????????????try{?????????????????????????bos.flush();????????????????????bis.close();?????????????????}catch(Exception???e){?????????????????????????System.out.println(e.toString());???????????????????????}?????????????????}????????}??
?
現(xiàn)在是基礎(chǔ)工作都做完了，現(xiàn)在開發(fā)代碼的開發(fā)，在微信開發(fā)文檔中?http://mp.weixin.qq.com/wiki/17/c0f37d5704f0b64713d5d2c37b468d75.html?有提到每一個(gè)步驟，然后我們按照這個(gè)步驟開發(fā)：
?
- 1?第一步：用戶同意授權(quán)，獲取code
- 2?第二步：通過code換取網(wǎng)頁授權(quán)access_token
- 3?第三步：刷新access_token（如果需要）
- 4?第四步：拉取用戶信息(需scope為 snsapi_userinfo)
- 5?附：檢驗(yàn)授權(quán)憑證（access_token）是否有效
第一步：用戶同意授權(quán)，獲取code
? 這里的url就是前面所準(zhǔn)備在properties中的url了。
?
Java代碼??
???????????????@RequestMapping("wechatOauth")??????public?String?wechatOauth(HttpServletRequest?request,HttpServletResponse?response,Model?model)??{????????????????????????????????String?AppID?=?ZhtxHelper.getApplicationResourcesProp("sendSms","AppID");??????????String?urlOpen?=?ZhtxHelper.getApplicationResourcesProp("sendSms","url");????????????????????String?loginUrl?=?""+urlOpen+"/zhtx-wap/weixin/getAccessToken";????????????????????String?url?=?"https://open.weixin.qq.com/connect/oauth2/authorize?"??????????????????????+?"appid="+AppID+""??????????????????????+?"&redirect_uri="+loginUrl+""??????????????????????+?"&response_type=code"??????????????????????+?"&scope=snsapi_userinfo"??????????????????????+?"&state=123#wechat_redirect";????????????????????return?"redirect:"+url+"";???????}??
?
第二步：通過code換取網(wǎng)頁授權(quán)access_token
?
Java代碼??
???????????????@RequestMapping("getAccessToken")??????public?String?getAccessToken(HttpServletRequest?request,HttpServletResponse?response,Model?model)?{????????????????????try?{????????????????????????????String?AppID?=?ZhtxHelper.getApplicationResourcesProp("sendSms","AppID");??????????????String?AppSecret?=?ZhtxHelper.getApplicationResourcesProp("sendSms","AppSecret");??????????????String?code?=?request.getParameter("code");??????????????String?url?=?null;??????????????if(code!=null){????????????????????????????????????????????????????????url?=?"https://api.weixin.qq.com/sns/oauth2/access_token?"??????????????????????????+?"appid="+AppID+""??????????????????????????+?"&secret="+AppSecret+""??????????????????????????+?"&code="+code+""??????????????????????????+?"&grant_type=authorization_code";??????????????????String?requestMethod?=?"GET";??????????????????String?outputStr?=?"";??????????????????String?httpRequest?=?WeixinUtil.httpRequest(url,?requestMethod,?outputStr);????????????????????????????????????System.out.println("通過code換取網(wǎng)頁授權(quán)access_token="+httpRequest);????????????????????????????????????AccessTokenModel?accTok?=?JSON.parseObject(httpRequest,?AccessTokenModel.class);???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????String?urlUser?=?"https://api.weixin.qq.com/sns/userinfo?"??????????????????????????+?"access_token="+accTok.getAccess_token()+""??????????????????????????+?"&openid="+accTok.getOpenid()+""??????????????????????????+?"&lang=zh_CN";????????????????????????????????????String?httpUser?=?WeixinUtil.httpRequest(urlUser,?requestMethod,?outputStr);??????????????????System.out.println("拉取用戶信息=="+httpUser);????????????????????????????????????WechatUser?wechatUser?=?JSON.parseObject(httpUser,?WechatUser.class);??????????????????wechatUser.setAccess_token(accTok.getAccess_token());??????????????????????????????????????WechatMsg?checkAccessToken?=?checkAccessToken(wechatUser.getAccess_token(),?wechatUser.getOpenid());??????????????????if(checkAccessToken.getErrcode().equals("0")){??????????????????????CurrentSession.setAttribute("wechatUser",?wechatUser);??????????????????????WechatUser?wechatU?=?new?WechatUser();??????????????????????wechatU.setOpenid(wechatUser.getOpenid());??????????????????????List<WechatUser>?findWechatUser?=?wechatUserService.findWechatUser(wechatU);??????????????????????if(findWechatUser.size()>0){??????????????????????????UserRegister?userRegister?=?userService.findUserByOpenid(wechatUser.getOpenid());??????????????????????????CurrentSession.setAttribute("user",?userRegister);??????????????????????????return?"redirect:/user/userCenter";??????????????????????}else{????????????????????????????????????????????????????return?"/jsp/wechat/wechatregister";???????????????????????}????????????????????????????????????????}else{????????????????????????????????????????????this.wechatOauth(request,?response,?model);???????????????????}??????????????}??????????}?catch?(Exception?e)?{??????????????System.out.println("===拉取用戶出錯(cuò)===");??????????????e.printStackTrace();??????????}????????????????????return?"/jsp/wechat/wechatregister";???????}??
?
第四步：拉取用戶，和自己網(wǎng)站用戶綁定
Java代碼??
???????????????@RequestMapping("saveWechatUser")??????public?String?saveWechatUser(HttpServletResponse?response,String?mobilePhone,String?password,String?validataCode){????????????????????UserRegister?userRegister?=?userService.findUserByPhone(mobilePhone);??????????WechatUser?wechatUser?=?(WechatUser)CurrentSession.getAttribute("wechatUser");??????????WechatUser?wechatU?=?new?WechatUser();??????????wechatU.setOpenid(wechatUser.getOpenid());??????????List<WechatUser>?findWechatUser?=?wechatUserService.findWechatUser(wechatU);??????????if(findWechatUser.size()>0?&&?userRegister.getOpenid()!=null){??????????????CurrentSession.setAttribute("user",?userRegister);??????????????return?"redirect:/user/userCenter";??????????}else{????????????????????????????if(userRegister==null){??????????????????Result<UserRegister>?saveUserInfoApp?=?userRegisterService.saveUserInfoApp(mobilePhone,?password,?validataCode,wechatUser);??????????????????if(saveUserInfoApp.getState()==1){????????????????????????????????????????????wechatUserService.saveWechatUser(wechatUser);??????????????????????CurrentSession.setAttribute("user",?userRegister);??????????????????????return?"redirect:/user/userCenter";??????????????????}??????????????}else?if(userRegister.getOpenid()==null?||?userRegister.getOpenid().equals("")){????????????????????????????????UserRegister?userReg?=?new?UserRegister();??????????????????userReg.setId(userRegister.getId());????????????????????????????????????userReg.setOpenid(wechatUser.getOpenid());??????????????????userService.upUser(userReg);??????????????????UserInfo?user?=?new?UserInfo();??????????????????????????????????????????????????????String?dateStr?=DateUtil.format(DateUtil.getCurrentDate(),?"yyyyMMdd")??+?"/";????????????????????????????????????String?imgType?=?"JPG";????????????????????????????????????String?app2DBarNameAndType?=?UuidUtil.getUUID()+"."+imgType;????????????????????????????????????String?path?=???ZhtxHelper.getApplicationResourcesProp("application","app.img.projectpath")+?SysConstant.GOODS2DBARPATH?+?dateStr;??????????????????File?file1?=?new?File(path);??????????????????file1.mkdirs();????????????????????????????????????String?imgUrl?=?SysConstant.GOODS2DBARPATH?+?dateStr+app2DBarNameAndType;??????????????????FileUtil.fileUpload(wechatUser.getHeadimgurl(),?path);??????????????????user.setRegisterId(userRegister.getId());??????????????????user.setImageUrl(imgUrl);??????????????????userInfoService.updateUserInfo(user);????????????????????????????????????wechatUserService.saveWechatUser(wechatUser);????????????????????????????????????UserRegister?userW?=?userService.findUserByPhone(mobilePhone);??????????????????CurrentSession.setAttribute("user",?userW);??????????????????return?"redirect:/user/userCenter";??????????????}else{??????????????????CurrentSession.setAttribute("user",?userRegister);??????????????????return?"redirect:/user/userCenter";??????????????}??????????}??????????return?"redirect:/user/userCenter";??????}??
?
附：檢驗(yàn)授權(quán)憑證（access_token）是否有效
?
Java代碼??
?????????????public?static?WechatMsg?checkAccessToken(String?access_token,String?openid){???????????String?requestMethod?=?"GET";???????????String?outputStr?=?"";????????????String?url?=?"https://api.weixin.qq.com/sns/auth?"??????????????????+?"access_token="+access_token+""??????????????????+?"&openid="+openid+"";???????????String?httpmsg?=?WeixinUtil.httpRequest(url,?requestMethod,?outputStr);???????????System.out.println("拉取用戶信息返回消息=="+httpmsg);?????????????????????????WechatMsg?msg?=?JSON.parseObject(httpmsg,?WechatMsg.class);?????????????????????return?msg;??????}??
?然后在網(wǎng)頁端，則是需要編寫H5頁面，進(jìn)行自己網(wǎng)站和微信用戶的關(guān)聯(lián)，我這里是使用手機(jī)號(hào)，用戶輸入手機(jī)號(hào)，進(jìn)行判斷，如果注冊(cè)過就直接關(guān)聯(lián)，如果用戶沒有注冊(cè)則進(jìn)行注冊(cè)后關(guān)聯(lián)，完成后跳轉(zhuǎn)到會(huì)員中心。
?
?
?
總結(jié)
以上是生活随笔為你收集整理的微信开发之获取OAuth2.0网页授权认证和获取用户信息进行关联（转：http://playxinz.iteye.com/blog/2249634）的全部內(nèi)容，希望文章能夠幫你解決所遇到的問題。
如果覺得生活随笔網(wǎng)站內(nèi)容還不錯(cuò)，歡迎將生活随笔推薦給好友。
