oauth.go 4.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152
  1. package oauth
  2. import (
  3. "encoding/json"
  4. "fmt"
  5. "net/http"
  6. "net/url"
  7. "github.com/silenceper/wechat/context"
  8. "github.com/silenceper/wechat/util"
  9. )
  10. const (
  11. redirectOauthURL = "https://open.weixin.qq.com/connect/oauth2/authorize?appid=%s&redirect_uri=%s&response_type=code&scope=%s&state=%s#wechat_redirect"
  12. accessTokenURL = "https://api.weixin.qq.com/sns/oauth2/access_token?appid=%s&secret=%s&code=%s&grant_type=authorization_code"
  13. refreshAccessTokenURL = "https://api.weixin.qq.com/sns/oauth2/refresh_token?appid=%s&grant_type=refresh_token&refresh_token=%s"
  14. userInfoURL = "https://api.weixin.qq.com/sns/userinfo?access_token=%s&openid=%s&lang=zh_CN"
  15. checkAccessTokenURL = "https://api.weixin.qq.com/sns/auth?access_token=%s&openid=%s"
  16. )
  17. //Oauth 保存用户授权信息
  18. type Oauth struct {
  19. *context.Context
  20. }
  21. //NewOauth 实例化授权信息
  22. func NewOauth(context *context.Context) *Oauth {
  23. auth := new(Oauth)
  24. auth.Context = context
  25. return auth
  26. }
  27. //GetRedirectURL 获取跳转的url地址
  28. func (oauth *Oauth) GetRedirectURL(redirectURI, scope, state string) (string, error) {
  29. //url encode
  30. urlStr := url.QueryEscape(redirectURI)
  31. return fmt.Sprintf(redirectOauthURL, oauth.AppID, urlStr, scope, state), nil
  32. }
  33. //Redirect 跳转到网页授权
  34. func (oauth *Oauth) Redirect(redirectURI, scope, state string) error {
  35. location, err := oauth.GetRedirectURL(redirectURI, scope, state)
  36. if err != nil {
  37. return err
  38. }
  39. http.Redirect(oauth.Writer, oauth.Request, location, 302)
  40. return nil
  41. }
  42. // ResAccessToken 获取用户授权access_token的返回结果
  43. type ResAccessToken struct {
  44. util.CommonError
  45. AccessToken string `json:"access_token"`
  46. ExpiresIn int64 `json:"expires_in"`
  47. RefreshToken string `json:"refresh_token"`
  48. OpenID string `json:"openid"`
  49. Scope string `json:"scope"`
  50. }
  51. // GetUserAccessToken 通过网页授权的code 换取access_token(区别于context中的access_token)
  52. func (oauth *Oauth) GetUserAccessToken(code string) (result ResAccessToken, err error) {
  53. urlStr := fmt.Sprintf(accessTokenURL, oauth.AppID, oauth.AppSecret, code)
  54. var response []byte
  55. response, err = util.HTTPGet(urlStr)
  56. if err != nil {
  57. return
  58. }
  59. err = json.Unmarshal(response, &result)
  60. if err != nil {
  61. return
  62. }
  63. if result.ErrCode != 0 {
  64. err = fmt.Errorf("GetUserAccessToken error : errcode=%v , errmsg=%v", result.ErrCode, result.ErrMsg)
  65. return
  66. }
  67. return
  68. }
  69. //RefreshAccessToken 刷新access_token
  70. func (oauth *Oauth) RefreshAccessToken(refreshToken string) (result ResAccessToken, err error) {
  71. urlStr := fmt.Sprintf(refreshAccessTokenURL, oauth.AppID, refreshToken)
  72. var response []byte
  73. response, err = util.HTTPGet(urlStr)
  74. if err != nil {
  75. return
  76. }
  77. err = json.Unmarshal(response, &result)
  78. if err != nil {
  79. return
  80. }
  81. if result.ErrCode != 0 {
  82. err = fmt.Errorf("GetUserAccessToken error : errcode=%v , errmsg=%v", result.ErrCode, result.ErrMsg)
  83. return
  84. }
  85. return
  86. }
  87. //CheckAccessToken 检验access_token是否有效
  88. func (oauth *Oauth) CheckAccessToken(accessToken, openID string) (b bool, err error) {
  89. urlStr := fmt.Sprintf(checkAccessTokenURL, accessToken, openID)
  90. var response []byte
  91. response, err = util.HTTPGet(urlStr)
  92. if err != nil {
  93. return
  94. }
  95. var result util.CommonError
  96. err = json.Unmarshal(response, &result)
  97. if err != nil {
  98. return
  99. }
  100. if result.ErrCode != 0 {
  101. b = false
  102. return
  103. }
  104. b = true
  105. return
  106. }
  107. //UserInfo 用户授权获取到用户信息
  108. type UserInfo struct {
  109. util.CommonError
  110. OpenID string `json:"openid"`
  111. Nickname string `json:"nickname"`
  112. Sex int32 `json:"sex"`
  113. Province string `json:"province"`
  114. City string `json:"city"`
  115. Country string `json:"country"`
  116. HeadImgURL string `json:"headimgurl"`
  117. Privilege []string `json:"privilege"`
  118. Unionid string `json:"unionid"`
  119. }
  120. //GetUserInfo 如果scope为 snsapi_userinfo 则可以通过此方法获取到用户基本信息
  121. func (oauth *Oauth) GetUserInfo(accessToken, openID string) (result UserInfo, err error) {
  122. urlStr := fmt.Sprintf(userInfoURL, accessToken, openID)
  123. var response []byte
  124. response, err = util.HTTPGet(urlStr)
  125. if err != nil {
  126. return
  127. }
  128. err = json.Unmarshal(response, &result)
  129. if err != nil {
  130. return
  131. }
  132. if result.ErrCode != 0 {
  133. err = fmt.Errorf("GetUserInfo error : errcode=%v , errmsg=%v", result.ErrCode, result.ErrMsg)
  134. return
  135. }
  136. return
  137. }