背景
最近項(xiàng)目需要上線支付寶小程序,同時(shí)需要走用戶的授權(quán)流程完成用戶信息的存儲(chǔ),以前做過微信小程序的開發(fā),本以為實(shí)現(xiàn)授權(quán)的過程是很簡(jiǎn)單的事情,但是再實(shí)現(xiàn)的過程中還是遇到了不少的坑,因此記錄一下實(shí)現(xiàn)的過程
學(xué)到的知識(shí)
吐槽點(diǎn)
支付寶小程序的入口隱藏的很深,沒有微信小程序那么直接了當(dāng)
支付寶小程序的開發(fā)者工具比較難用,編譯時(shí)候比較卡,性能有很大的問題
每提交一次代碼,支付寶小程序的體驗(yàn)碼都要進(jìn)行更換,比較繁瑣,而且localStorage的東西不知道要如何刪除
事先準(zhǔn)備
授權(quán)的步驟
授權(quán)時(shí)序圖
實(shí)現(xiàn)流程
AmpHelper工具類
?php /** * Created by PhpStorm. * User: My * Date: 2018/8/16 * Time: 17:45 */ namespace App\Http\Helper; use App\Http\Helper\Sys\BusinessHelper; use Illuminate\Support\Facades\Log; class AmpHelper { const API_DOMAIN = "https://openapi.alipay.com/gateway.do?"; const API_METHOD_GENERATE_QR = 'alipay.open.app.qrcode.create'; const API_METHOD_AUTH_TOKEN = 'alipay.system.oauth.token'; const API_METHOD_GET_USER_INFO = 'alipay.user.info.share'; const SIGN_TYPE_RSA2 = 'RSA2'; const VERSION = '1.0'; const FILE_CHARSET_UTF8 = "UTF-8"; const FILE_CHARSET_GBK = "GBK"; const RESPONSE_OUTER_NODE_QR = 'alipay_open_app_qrcode_create_response'; const RESPONSE_OUTER_NODE_AUTH_TOKEN = 'alipay_system_oauth_token_response'; const RESPONSE_OUTER_NODE_USER_INFO = 'alipay_user_info_share_response'; const RESPONSE_OUTER_NODE_ERROR_RESPONSE = 'error_response'; const STATUS_CODE_SUCCESS = 10000; const STATUS_CODE_EXCEPT = 20000; /** * 獲取用戶信息接口,根據(jù)token * @param $code 授權(quán)碼 * 通過授權(quán)碼獲取用戶的信息 */ public static function getAmpUserInfoByAuthCode($code){ $aliUserInfo = []; $tokenData = AmpHelper::getAmpToken($code); //如果token不存在,這種主要是為了處理支付寶的異常記錄 if(isset($tokenData['code'])){ return $tokenData; } $token = formatArrValue($tokenData,'access_token'); if($token){ $userBusiParam = self::getAmpUserBaseParam($token); $url = self::buildRequestUrl($userBusiParam); $resonse = self::getResponse($url,self::RESPONSE_OUTER_NODE_USER_INFO); if($resonse['code'] == self::STATUS_CODE_SUCCESS){ //有效的字段列 $userInfoColumn = ['user_id','avatar','province','city','nick_name','is_student_certified','user_type','user_status','is_certified','gender']; foreach ($userInfoColumn as $column){ $aliUserInfo[$column] = formatArrValue($resonse,$column,''); } }else{ $exceptColumns = ['code','msg','sub_code','sub_msg']; foreach ($exceptColumns as $column){ $aliUserInfo[$column] = formatArrValue($resonse,$column,''); } } } return $aliUserInfo; } /** * 獲取小程序token接口 */ public static function getAmpToken($code){ $param = self::getAuthBaseParam($code); $url = self::buildRequestUrl($param); $response = self::getResponse($url,self::RESPONSE_OUTER_NODE_AUTH_TOKEN); $tokenResult = []; if(isset($response['code']) $response['code'] != self::STATUS_CODE_SUCCESS){ $exceptColumns = ['code','msg','sub_code','sub_msg']; foreach ($exceptColumns as $column){ $tokenResult[$column] = formatArrValue($response,$column,''); } }else{ $tokenResult = $response; } return $tokenResult; } /** * 獲取二維碼鏈接接口 * 433ac5ea4c044378826afe1532bcVX78 * https://openapi.alipay.com/gateway.do?timestamp=2013-01-01 08:08:08method=alipay.open.app.qrcode.createapp_id=2893sign_type=RSA2sign=ERITJKEIJKJHKKKKKKKHJEREEEEEEEEEEEversion=1.0biz_content= {"url_param":"/index.html?name=aliloc=hz", "query_param":"name=1age=2", "describe":"二維碼描述"} */ public static function generateQrCode($mpPage = 'pages/index',$queryParam = [],$describe){ $param = self::getQrcodeBaseParam($mpPage,$queryParam,$describe ); $url = self::buildRequestUrl($param); $response = self::getResponse($url,self::RESPONSE_OUTER_NODE_QR); return $response; } /** * 獲取返回的數(shù)據(jù),對(duì)返回的結(jié)果做進(jìn)一步的封裝和解析,因?yàn)橹Ц秾毜拿總€(gè)接口的返回都是由一個(gè)特定的 * key組成的,因此這里直接封裝了而一個(gè)通用的方法,對(duì)于不同的接口只需要更改相應(yīng)的node節(jié)點(diǎn)就可以了 */ public static function getResponse($url,$responseNode){ $json = curlRequest($url); $response = json_decode($json,true); $responseContent = formatArrValue($response,$responseNode,[]); $errResponse = formatArrValue($response,self::RESPONSE_OUTER_NODE_ERROR_RESPONSE,[]); if($errResponse){ return $errResponse; } return $responseContent; } /** * 獲取請(qǐng)求的鏈接 */ public static function buildQrRequestUrl($mpPage = 'pages/index',$queryParam = []){ $paramStr = http_build_query(self::getQrBaseParam($mpPage,$queryParam)); return self::API_DOMAIN . $paramStr; } /** * 構(gòu)建請(qǐng)求鏈接 */ public static function buildRequestUrl($param){ $paramStr = http_build_query($param); return self::API_DOMAIN . $paramStr; } /** * 獲取用戶的基礎(chǔ)信息接口 */ public static function getAmpUserBaseParam($token){ $busiParam = [ 'auth_token' => $token, ]; $param = self::buildApiBuisinessParam($busiParam,self::API_METHOD_GET_USER_INFO); return $param; } /** *獲取二維碼的基礎(chǔ)參數(shù) */ public static function getQrcodeBaseParam($page= 'pages/index/index',$queryParam = [],$describe = ''){ $busiParam = [ 'biz_content' => self::getQrBizContent($page,$queryParam,$describe) ]; $param = self::buildApiBuisinessParam($busiParam,self::API_METHOD_GENERATE_QR); return $param; } /** *獲取授權(quán)的基礎(chǔ)參數(shù) */ public static function getAuthBaseParam($code,$refreshToken = ''){ $busiParam = [ 'grant_type' => 'authorization_code', 'code' => $code, 'refresh_token' => $refreshToken, ]; $param = self::buildApiBuisinessParam($busiParam,self::API_METHOD_AUTH_TOKEN); return $param; } /** * 構(gòu)建業(yè)務(wù)參數(shù) */ public static function buildApiBuisinessParam($businessParam,$apiMethod){ $pubParam = self::getApiPubParam($apiMethod); $businessParam = array_merge($pubParam,$businessParam); $signContent = self::getSignContent($businessParam); error_log('sign_content ===========>'.$signContent); $rsaHelper = new RsaHelper(); $sign = $rsaHelper->createSign($signContent); error_log('sign ===========>'.$sign); $businessParam['sign'] = $sign; return $businessParam; } /** * 公共參數(shù) * */ public static function getApiPubParam($apiMethod){ $ampBaseInfo = BusinessHelper::getAmpBaseInfo(); $param = [ 'timestamp' => date('Y-m-d H:i:s') , 'method' => $apiMethod, 'app_id' => formatArrValue($ampBaseInfo,'appid',config('param.amp.appid')), 'sign_type' =>self::SIGN_TYPE_RSA2, 'charset' =>self::FILE_CHARSET_UTF8, 'version' =>self::VERSION, ]; return $param; } /** * 獲取簽名的內(nèi)容 */ public static function getSignContent($params) { ksort($params); $stringToBeSigned = ""; $i = 0; foreach ($params as $k => $v) { if (!empty($v) "@" != substr($v, 0, 1)) { if ($i == 0) { $stringToBeSigned .= "$k" . "=" . "$v"; } else { $stringToBeSigned .= "" . "$k" . "=" . "$v"; } $i++; } } unset ($k, $v); return $stringToBeSigned; } public static function convertArrToQueryParam($param){ $queryParam = []; foreach ($param as $key => $val){ $obj = $key.'='.$val; array_push($queryParam,$obj); } $queryStr = implode('',$queryParam); return $queryStr; } /** * 轉(zhuǎn)換字符集編碼 * @param $data * @param $targetCharset * @return string */ public static function characet($data, $targetCharset) { if (!empty($data)) { $fileType = self::FILE_CHARSET_UTF8; if (strcasecmp($fileType, $targetCharset) != 0) { $data = mb_convert_encoding($data, $targetCharset, $fileType); } } return $data; } /** * 獲取業(yè)務(wù)參數(shù)內(nèi)容 */ public static function getQrBizContent($page, $queryParam = [],$describe = ''){ if(is_array($queryParam)){ $queryParam = http_build_query($queryParam); } $obj = [ 'url_param' => $page, 'query_param' => $queryParam, 'describe' => $describe ]; $bizContent = json_encode($obj,JSON_UNESCAPED_UNICODE); return $bizContent; } }
AmpHeler工具類關(guān)鍵代碼解析相關(guān)常量
//支付寶的api接口地址 const API_DOMAIN = "https://openapi.alipay.com/gateway.do?"; //獲取支付寶二維碼的接口方法 const API_METHOD_GENERATE_QR = 'alipay.open.app.qrcode.create'; //獲取token的接口方法 const API_METHOD_AUTH_TOKEN = 'alipay.system.oauth.token'; //獲取用戶信息的接口方法 const API_METHOD_GET_USER_INFO = 'alipay.user.info.share'; //支付寶的簽名方式,由RSA2和RSA兩種 const SIGN_TYPE_RSA2 = 'RSA2'; //版本號(hào),此處固定挑那些就可以了 const VERSION = '1.0'; //UTF8編碼 const FILE_CHARSET_UTF8 = "UTF-8"; //GBK編碼 const FILE_CHARSET_GBK = "GBK"; //二維碼接口調(diào)用成功的 返回節(jié)點(diǎn) const RESPONSE_OUTER_NODE_QR = 'alipay_open_app_qrcode_create_response'; //token接口調(diào)用成功的 返回節(jié)點(diǎn) const RESPONSE_OUTER_NODE_AUTH_TOKEN = 'alipay_system_oauth_token_response'; //用戶信息接口調(diào)用成功的 返回節(jié)點(diǎn) const RESPONSE_OUTER_NODE_USER_INFO = 'alipay_user_info_share_response'; //錯(cuò)誤的返回的時(shí)候的節(jié)點(diǎn) const RESPONSE_OUTER_NODE_ERROR_RESPONSE = 'error_response'; const STATUS_CODE_SUCCESS = 10000; const STATUS_CODE_EXCEPT = 20000;
getAmpUserInfoByAuthCode方法
這個(gè)方法是獲取用戶信息的接口方法,只需要傳入客戶端傳遞的code,就可以獲取到用戶的完整信息
getAmpToken方法
這個(gè)方法是獲取支付寶接口的token的方法,是一個(gè)公用方法,后面所有的支付寶的口調(diào)用,都可以使用這個(gè)方法先獲取token
getResponse方法
考慮到會(huì)調(diào)用各個(gè)支付寶的接口,因此這里封裝這個(gè)方法是為了方便截取接口返回成功之后的信息,提高代碼的閱讀性
getApiPubParam方法
這個(gè)方法是為了獲取公共的參數(shù),包括版本號(hào),編碼,appid,簽名類型等基礎(chǔ)業(yè)務(wù)參數(shù)
getSignContent方法
這個(gè)方法是獲取簽名的內(nèi)容,入?yún)⑹且粋€(gè)數(shù)組,最后輸出的是參數(shù)的拼接字符串
buildApiBuisinessParam($businessParam,$apiMethod)
這個(gè)是構(gòu)建api獨(dú)立的業(yè)務(wù)參數(shù)部分方法,businessParam參數(shù)是支付寶各個(gè)接口的業(yè)務(wù)參數(shù)部分(出去公共參數(shù)),$apiMethod是對(duì)應(yīng)的接口的方法名稱,如獲取token的方法名為alipay.system.oauth.token
簽名幫助類
?php /** * Created by PhpStorm. * User: Auser * Date: 2018/12/4 * Time: 15:37 */ namespace App\Http\Helper; /** *$rsa2 = new Rsa2(); *$data = 'mydata'; //待簽名字符串 *$strSign = $rsa2->createSign($data); //生成簽名 *$is_ok = $rsa2->verifySign($data, $strSign); //驗(yàn)證簽名 */ class RsaHelper { private static $PRIVATE_KEY; private static $PUBLIC_KEY; function __construct(){ self::$PRIVATE_KEY = config('param.amp.private_key'); self::$PUBLIC_KEY = config('param.amp.public_key'); } /** * 獲取私鑰 * @return bool|resource */ private static function getPrivateKey() { $privKey = self::$PRIVATE_KEY; $privKey = "-----BEGIN RSA PRIVATE KEY-----".PHP_EOL.wordwrap($privKey, 64, PHP_EOL, true).PHP_EOL."-----END RSA PRIVATE KEY-----"; ($privKey) or die('您使用的私鑰格式錯(cuò)誤,請(qǐng)檢查RSA私鑰配置'); error_log('private_key is ===========>: '.$privKey); return openssl_pkey_get_private($privKey); } /** * 獲取公鑰 * @return bool|resource */ private static function getPublicKey() { $publicKey = self::$PUBLIC_KEY; $publicKey = "-----BEGIN RSA PRIVATE KEY-----".PHP_EOL.wordwrap($publicKey, 64, PHP_EOL, true).PHP_EOL."-----END RSA PRIVATE KEY-----"; error_log('public key is : ===========>'.$publicKey); return openssl_pkey_get_public($publicKey); } /** * 創(chuàng)建簽名 * @param string $data 數(shù)據(jù) * @return null|string */ public function createSign($data = '') { // var_dump(self::getPrivateKey());die; if (!is_string($data)) { return null; } return openssl_sign($data, $sign, self::getPrivateKey(),OPENSSL_ALGO_SHA256 ) ? base64_encode($sign) : null; } /** * 驗(yàn)證簽名 * @param string $data 數(shù)據(jù) * @param string $sign 簽名 * @return bool */ public function verifySign($data = '', $sign = '') { if (!is_string($sign) || !is_string($sign)) { return false; } return (bool)openssl_verify( $data, base64_decode($sign), self::getPublicKey(), OPENSSL_ALGO_SHA256 ); } }
調(diào)用
$originUserData = AmpHelper::getAmpUserInfoByAuthCode($code); echo $originUserData;
注意getAmpUserInfoByAuthCode方法,調(diào)用接口成功,會(huì)返回支付寶用戶的正確信息,示例如下
{ "alipay_user_info_share_response": { "code": "10000", "msg": "Success", "user_id": "2088102104794936", "avatar": "http://tfsimg.alipay.com/images/partner/T1uIxXXbpXXXXXXXX", "province": "安徽省", "city": "安慶", "nick_name": "支付寶小二", "is_student_certified": "T", "user_type": "1", "user_status": "T", "is_certified": "T", "gender": "F" }, "sign": "ERITJKEIJKJHKKKKKKKHJEREEEEEEEEEEE" }
踩坑點(diǎn)
以上就是本文的全部?jī)?nèi)容,希望對(duì)大家的學(xué)習(xí)有所幫助,也希望大家多多支持腳本之家。
標(biāo)簽:萊蕪 清遠(yuǎn) 金華 綏化 安康 呼倫貝爾 溫州 紹興
巨人網(wǎng)絡(luò)通訊聲明:本文標(biāo)題《詳解PHP實(shí)現(xiàn)支付寶小程序用戶授權(quán)的工具類》,本文關(guān)鍵詞 詳解,PHP,實(shí)現(xiàn),支付,寶小,;如發(fā)現(xiàn)本文內(nèi)容存在版權(quán)問題,煩請(qǐng)?zhí)峁┫嚓P(guān)信息告之我們,我們將及時(shí)溝通與處理。本站內(nèi)容系統(tǒng)采集于網(wǎng)絡(luò),涉及言論、版權(quán)與本站無(wú)關(guān)。