redirect_uri?code=CODE&state=STATE

redirect_uri?state=STATE

{
"access_token":"ACCESS_TOKEN",
"expires_in":7200,
"refresh_token":"REFRESH_TOKEN",
"openid":"OPENID",
"scope":"SCOPE",
"unionid": "o6_bmasdasdsad6_2sgVt7hMZOPfL"
}

{"errcode":40029,"errmsg":"invalid code"}

# 開放平臺
wechat.open-app-id=wx6ad144e54af67d87
wechat.open-app-secret=91a2ff6d38a2bbccfb7e9f9079108e2e
@Data
@Component
@ConfigurationProperties(prefix = "wechat")
public class WechatAccountConfig {

    //公眾號appid
    private String mpAppId;
    //公眾號appSecret
    private String mpAppSecret;
    //商戶號
    private String mchId;
    //商戶秘鑰
    private String mchKey;
    //商戶證書路徑
    private String keyPath;
    //微信支付異步通知
    private String notifyUrl;
    //開放平臺id
    private String openAppId;
    //開放平臺秘鑰
    private String openAppSecret;
}
@Configuration
public class WechatOpenConfig {
    @Autowired
    private WechatAccountConfig accountConfig;
    @Bean
    public WxMpService wxOpenService() {
        WxMpService wxOpenService = new WxMpServiceImpl();
        wxOpenService.setWxMpConfigStorage(wxOpenConfigStorage());
        return wxOpenService;
    }
    public WxMpConfigStorage wxOpenConfigStorage() {
        WxMpInMemoryConfigStorage wxMpInMemoryConfigStorage = new WxMpInMemoryConfigStorage();
        wxMpInMemoryConfigStorage.setAppId(accountConfig.getOpenAppId());
        wxMpInMemoryConfigStorage.setSecret(accountConfig.getOpenAppSecret());
        return wxMpInMemoryConfigStorage;
@Controller
@RequestMapping("/wechat")
@Slf4j
public class WeChatController {
    private WxMpService wxMpService;
    private WxMpService wxOpenService;
    @GetMapping("/qrAuthorize")
    public String qrAuthorize() {
        //returnUrl就是用戶授權(quán)同意后回調(diào)的地址
        String returnUrl = "http://heng.nat300.top/sell/wechat/qrUserInfo";
        //引導(dǎo)用戶訪問這個鏈接，進行授權(quán)
        String url = wxOpenService.buildQrConnectUrl(returnUrl, WxConsts.QRCONNECT_SCOPE_SNSAPI_LOGIN, URLEncoder.encode(returnUrl));
        return "redirect:" + url;
    //用戶授權(quán)同意后回調(diào)的地址，從請求參數(shù)中獲取code
    @GetMapping("/qrUserInfo")
    public String qrUserInfo(@RequestParam("code") String code) {
        WxMpOAuth3AccessToken wxMpOAuth3AccessToken = new WxMpOAuth3AccessToken();
        try {
            //通過code獲取access_token
            wxMpOAuth3AccessToken = wxOpenService.oauth3getAccessToken(code);
        } catch (WxErrorException e) {
            log.error("【微信網(wǎng)頁授權(quán)】{}", e);
            throw new SellException(ResultEnum.WECHAT_MP_ERROR.getCode(), e.getError().getErrorMsg());
        }
        //從token中獲取openid
        String openId = wxMpOAuth3AccessToken.getOpenId();
        //這個地址可有可無，反正只是為了拿到openid，但是如果沒有會報404錯誤，為了好看隨便返回一個百度的地址
        String  returnUrl = "http://www.baidu.com";
        log.info("openid={}", openId);
        return "redirect:" + returnUrl + "?openid="+openId;

@Controller
@RequestMapping("/seller")
public class SellerUserController {

    @Autowired
    private SellerService sellerService;
    private StringRedisTemplate redisTemplate;
    private ProjectUrlConfig projectUrlConfig;
    @GetMapping("/login")
    public ModelAndView login(@RequestParam("openid") String openid,                               HttpServletResponse response,                               Map<String, Object> map) {
        //1. openid去和數(shù)據(jù)庫里的數(shù)據(jù)匹配
        SellerInfo sellerInfo = sellerService.findSellerInfoByOpenid(openid);
        if (sellerInfo == null) {
            map.put("msg", ResultEnum.LOGIN_FAIL.getMessage());
            map.put("url", "/sell/seller/order/list");
            return new ModelAndView("common/error");
        }
        //2. 設(shè)置token至redis
        String token = UUID.randomUUID().toString();
        //設(shè)置token的過期時間
        Integer expire = RedisConstant.EXPIRE;
        redisTemplate.opsForValue().set(String.format(RedisConstant.TOKEN_PREFIX, token), openid, expire, TimeUnit.SECONDS);
        //3. 設(shè)置token至cookie
        CookieUtil.set(response, CookieConstant.TOKEN, token, expire);
        return new ModelAndView("redirect:" + "http://heng.nat300.top/sell/seller/order/list");
    }
    @GetMapping("/logout")
    public ModelAndView logout(HttpServletRequest request,                        HttpServletResponse response,                        Map<String, Object> map) {
        //1. 從cookie里查詢
        Cookie cookie = CookieUtil.get(request, CookieConstant.TOKEN);
        if (cookie != null) {
            //2. 清除redis
            redisTemplate.opsForValue().getOperations().delete(String.format(RedisConstant.TOKEN_PREFIX, cookie.getValue()));
            //3. 清除cookie
            CookieUtil.set(response, CookieConstant.TOKEN, null, 0);
        map.put("msg", ResultEnum.LOGOUT_SUCCESS.getMessage());
        map.put("url", "/sell/seller/order/list");
        return new ModelAndView("common/success", map);
}

 //用戶授權(quán)同意后回調(diào)的地址，從請求參數(shù)中獲取code
    @GetMapping("/qrUserInfo")
    public String qrUserInfo(@RequestParam("code") String code) {
        WxMpOAuth3AccessToken wxMpOAuth3AccessToken = new WxMpOAuth3AccessToken();
        try {
            //通過code獲取access_token
            wxMpOAuth3AccessToken = wxOpenService.oauth3getAccessToken(code);
        } catch (WxErrorException e) {
            log.error("【微信網(wǎng)頁授權(quán)】{}", e);
            throw new SellException(ResultEnum.WECHAT_MP_ERROR.getCode(), e.getError().getErrorMsg());
        }
        //從token中獲取openid
        String openId = wxMpOAuth3AccessToken.getOpenId();

        //授權(quán)成功后跳轉(zhuǎn)到賣家系統(tǒng)的登錄地址
        String  returnUrl = "http://heng.nat300.top/sell/seller/login";
        log.info("openid={}", openId);
        return "redirect:" + returnUrl + "?openid="+openId;
    }

@Aspect
@Component
@Slf4j
public class SellerAuthorizeAspect {

    @Autowired
    private StringRedisTemplate redisTemplate;
    @Pointcut("execution(public * com.hh.controller.Seller*.*(..))" +
    "&& !execution(public * com.hh.controller.SellerUserController.*(..))")
    public void verify() {}
    @Before("verify()")
    public void doVerify() {
        ServletRequestAttributes attributes = (ServletRequestAttributes) RequestContextHolder.getRequestAttributes();
        HttpServletRequest request = attributes.getRequest();
        //查詢cookie
        Cookie cookie = CookieUtil.get(request, CookieConstant.TOKEN);
        //如果cookie中沒有token說明已經(jīng)登出或者根本沒有登錄
        if (cookie == null) {
            log.warn("【登錄校驗】Cookie中查不到token");
            //校驗不通過，拋出異常
            throw new SellerAuthorizeException();
        }
        //去redis里查詢
        String tokenValue = redisTemplate.opsForValue().get(String.format(RedisConstant.TOKEN_PREFIX, cookie.getValue()));
        //如果redis中沒有對應(yīng)的openid，同樣表示登出或者根本沒有登錄
        if (StringUtils.isEmpty(tokenValue)) {
            log.warn("【登錄校驗】Redis中查不到token");
    }
}

@ControllerAdvice
public class SellExceptionHandler {
    //攔截登錄異常
    @ExceptionHandler(value = SellerAuthorizeException.class)     public ModelAndView handlerAuthorizeException() {
        //攔截異常后，跳轉(zhuǎn)到登錄界面
        return new ModelAndView("redirect:".concat("https://open.weixin.qq.com/connect/qrconnect?" +
                "appid=wx6ad144e54af67d87" +
                "&redirect_uri=http%3A%2F%2Fsell.springboot.cn%2Fsell%2Fqr%2F" +
                "oTgZpwenC6lwO2eTDDf_-UYyFtqI" +
                "&response_type=code&scope=snsapi_login" +
                "&state=http%3a%2f%2fheng.nat300.top%2fsell%2fwechat%2fqrUserInfo"));
    }
    @ExceptionHandler(value = SellException.class)     @ResponseBody     public ResultVO handlerSellerException(SellException e) {
        return ResultVOUtil.error(e.getCode(), e.getMessage());
    }
    @ExceptionHandler(value = ResponseBankException.class)     @ResponseStatus(HttpStatus.FORBIDDEN)     public void handleResponseBankException() {
    }
}