java调起微信公众号授权

创建一个微信授权的工具类

public class WXAuthUtil {
    public static final String APPID = "xxxxxxxxx"; //微信Appid
    public static final String APPSECRET = "xxxxxxxx";//微信APPSECRET
    private static final String TOKEN = "immco";

    public static JSONObject doGetJson(String url) throws ClientProtocolException, IOException {
        JSONObject jsonObject = null;
        DefaultHttpClient client = new DefaultHttpClient();
        HttpGet httpGet = new HttpGet(url);
        HttpResponse response =client.execute(httpGet);
        HttpEntity entity = response.getEntity();
        if (entity != null) {
            //把返回的结果转换为JSON对象
            String result = EntityUtils.toString(entity, "UTF-8");
            jsonObject = JSON.parseObject(result);
        }

        return jsonObject;
    }

}

创建一个微信的Controller

@Controller
@RequestMapping("/api/Wx")
@CrossOrigin("*")
public class wwController extends BaseController {
    @Autowired
    private UserinfoService userinfoService;
    private static Logger log = LoggerFactory.getLogger(WxController.class);


    @RequestMapping(value = "/wxLogin", method = RequestMethod.GET)
    public String wxLogin(HttpServletRequest request,
                          HttpServletResponse response)
            throws ParseException {
        //这个url的域名必须要进行再公众号中进行注册验证,这个地址是成功后的回调地址
        String backUrl = "http://qgjava.nat300.top/api/Wx/callBack";
        // 第一步:用户同意授权,获取code
        String url = "https://open.weixin.qq.com/connect/oauth2/authorize?appid=" + WXAuthUtil.APPID
                + "&redirect_uri=" + URLEncoder.encode(backUrl)
                + "&response_type=code"
                + "&scope=snsapi_userinfo"
                + "&state=STATE#wechat_redirect";

        log.info("forward重定向地址{" + url + "}");
        //response.sendRedirect(url);
        return "redirect:" + url;//必须重定向,否则不能成功
    }

    @RequestMapping(value = "/callBack", method = RequestMethod.GET)
    public String callBack(ModelMap modelMap, HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
        //start 获取微信用户基本信息
        String code = req.getParameter("code");
        //第二步:通过code换取网页授权access_token
        String url = "https://api.weixin.qq.com/sns/oauth2/access_token?appid=" + WXAuthUtil.APPID
                + "&secret=" + WXAuthUtil.APPSECRET
                + "&code=" + code
                + "&grant_type=authorization_code";

        System.out.println("url:" + url);
        com.alibaba.fastjson.JSONObject jsonObject = WXAuthUtil.doGetJson(url);
         /*
         { "access_token":"ACCESS_TOKEN",
            "expires_in":7200,
            "refresh_token":"REFRESH_TOKEN",
            "openid":"OPENID",
            "scope":"SCOPE" 
           }
         */
        String openid = jsonObject.getString("openid");
        String access_token = jsonObject.getString("access_token");
        String refresh_token = jsonObject.getString("refresh_token");
        //第五步验证access_token是否失效;展示都不需要
        String chickUrl = "https://api.weixin.qq.com/sns/auth?access_token=" + access_token + "&openid=" + openid;

        com.alibaba.fastjson.JSONObject chickuserInfo = WXAuthUtil.doGetJson(chickUrl);
        System.out.println(chickuserInfo.toString());
        if (!"0".equals(chickuserInfo.getString("errcode"))) {
            // 第三步:刷新access_token(如果需要)-----暂时没有使用,参考文档https://mp.weixin.qq.com/wiki,
            String refreshTokenUrl = "https://api.weixin.qq.com/sns/oauth2/refresh_token?appid=" + openid + "&grant_type=refresh_token&refresh_token=" + refresh_token;
            com.alibaba.fastjson.JSONObject refreshInfo = WXAuthUtil.doGetJson(chickUrl);
            /*
             * { "access_token":"ACCESS_TOKEN",
                "expires_in":7200,
                "refresh_token":"REFRESH_TOKEN",
                "openid":"OPENID",
                "scope":"SCOPE" }
             */
           // System.out.println(refreshInfo.toString());
            access_token = refreshInfo.getString("access_token");
        }
        // 第四步:拉取用户信息(需scope为 snsapi_userinfo)
        String infoUrl = "https://api.weixin.qq.com/sns/userinfo?access_token=" + access_token
                + "&openid=" + openid
                + "&lang=zh_CN";
       // System.out.println("infoUrl:" + infoUrl);
        JSONObject userInfo = WXAuthUtil.doGetJson(infoUrl);
         /*
         {    "openid":" OPENID",
            " nickname": NICKNAME,
            "sex":"1",
            "province":"PROVINCE"
            "city":"CITY",
            "country":"COUNTRY",
            "headimgurl":    "http://wx.qlogo.cn/mmopen/g3MonUZtNHkdmzicIlibx6iaFqAc56vxLSUfpb6n5WKSYVY0ChQKkiaJSgQ1dZuTOgvLLrhJbERQQ4eMsv84eavHiaiceqxibJxCfHe/46",
            "privilege":[ "PRIVILEGE1" "PRIVILEGE2"     ],
            "unionid": "o6_bmasdasdsad6_2sgVt7hMZOPfL"
            }
         */
        System.out.println("JSON-----" + userInfo.toString());
        System.out.println("名字-----" + userInfo.getString("nickname"));
        System.out.println("头像-----" + userInfo.getString("headimgurl"));
        Integer userId=0;
        UserinfoDO userinfoDO=userinfoService.getUserDetilByOpenId(userInfo.getString("openid"));
        if (userinfoDO!=null){
            //已经存在  更新用户名称  头像
            userinfoDO.setUserName(userInfo.getString("nickname"));
            userinfoDO.setUserPic(userInfo.getString("headimgurl"));
            userinfoService.update(userinfoDO);
            userId=userinfoDO.getId();
        }else{
            //新用户 注册
            UserinfoDO userNew=new UserinfoDO();
            userNew.setUserName(userInfo.getString("nickname"));
            userNew.setRegisterTime(new Date());
            userNew.setUserPic(userInfo.getString("headimgurl"));
            userNew.setOpenid(userInfo.getString("openid"));
            userinfoService.save(userNew);
            userId=userNew.getId();
        }
         /*
         * end 获取微信用户基本信息
         */
        //获取到用户信息后就可以进行重定向,走自己的业务逻辑了。。。。。。


       //下面地址为 授权成功后 页面将要跳转的地址
        String redUrl = "http://xxxxxxxxx:5500/index.html?userId="+userId;
        return "redirect:" + redUrl;
    }


}

摸索了好半天  最后才发现前端直接用href请求 不需要ajax  希望走过的坑不会再犯

### 实现Java环境中微信公众号OAuth2授权登录 #### 构造OAuth2授权URL 为了启动OAuth2授权过程,需先构建授权链接。这可以通过`WxMpOAuth2Service`对象来完成。 ```java // 获取服务实例并创建授权URL WxMpOAuth2Service wxMpOAuth2Service = wxService.getOAuth2Service(); String authorizationUrl = wxMpOAuth2Service.buildAuthorizationUrl( "https://example.com/callback", // 替换为实际回调地址 WxConsts.OAUTH2_SCOPE_BASE, // 或者使用 snsapi_userinfo 请求更多信息 "STATE"); // 可选状态参数用于保持请求前后状态一致[^1] ``` 此代码片段展示了如何利用`buildAuthorizationUrl()`函数生成带有必要查询参数的URL字符串,这些参数包括应用ID (`appid`)、重定向URI(`redirect_uri`)以及权限范围(`scope`)等。 #### 处理用户同意后的回调 当用户点击上述构造好的链接,并授予应用程序所需权限后,会跳转到指定的回调页面带上临时凭证`code`作为GET参数传递过来。此时服务器端应准备接收该请求并对之作出响应处理。 ```java @RequestMapping("/callback") public ResponseEntity<?> handleCallback(@RequestParam(value = "code") String code, @RequestParam(value = "state", required = false) String state){ if (code == null || code.isEmpty()) { return new ResponseEntity<>("Missing or invalid 'code' parameter.", HttpStatus.BAD_REQUEST); } try{ // 使用获得的code换取access_token String accessTokenUrl = "https://api.weixin.qq.com/sns/oauth2/access_token?" + "appid=YOUR_APP_ID&secret=YOUR_SECRET_KEY&code=" + code + "&grant_type=authorization_code"; RestTemplate restTemplate = new RestTemplate(); Map<String, Object> result = restTemplate.getForObject(accessTokenUrl, Map.class); // 提取必要的信息如openid 和 access_token String openid = (String)result.get("openid"); String accessToken = (String)result.get("access_token"); // 进一步操作... System.out.println("User OpenId: "+openid+", Access Token:"+accessToken); return new ResponseEntity<>(result, HttpStatus.OK); }catch(Exception e){ return new ResponseEntity<>("Error processing callback request.", HttpStatus.INTERNAL_SERVER_ERROR); } } ``` 这段示例说明了怎样解析来自前端浏览器携带的`code`值,并向微信API发起HTTP GET请求以交换成永久性的`access_token`和用户的唯一标识符`openid`[^4]。 #### 存储与验证用户数据 一旦获得了有效的`access_token`及关联的`openid`,就可以将其保存至数据库或其他持久化存储机制中以便日后识别已认证过的访客身份。此外,在每次接收到新的访问时都应该重新校验令牌的有效性和合法性,从而保障系统的安全性[^5]。
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值