In this era of mobile terminals, WeChat official accounts have gradually become a channel for people to obtain information, and a means for merchants to develop potential customers. Therefore, many programmers have turned to WeChat development, so today, we are here to help you Let’s introduce how to implement web page authorization in the development of WeChat public accounts.

Before I give you a custom request interface function, this function is used in the request interface in the following sample code

The function of this function is to initiate a request to the interface, pass parameters and return the data returned by the interface

(The code inside this will not be explained in detail. If you want to know more, you can Take a look at php curl function summary)

//自定義請(qǐng)求接口函數(shù)，$data為空時(shí)發(fā)起get請(qǐng)求，$data有值時(shí)發(fā)情post請(qǐng)求
function http_url($url,$data=null){
    $ch = curl_init();
    curl_setopt($ch,CURLOPT_URL,$url);
    curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,FALSE);
    curl_setopt($ch,CURLOPT_SSL_VERIFYHOST,0);
    curl_setopt($ch,CURLOPT_RETURNTRANSFER,TRUE);
    if(!empty($data)){
        curl_setopt($ch,CURLOPT_POST,1);
        curl_setopt($ch,CURLOPT_POSTFIELDS,$data);
    }
    $res = curl_exec($ch);
    if(curl_errno($ch)){
        echo "error:".curl_error($ch);
        exit;
    }
    curl_close($ch);
    return $res;
}

(The interface used in this article is officially provided by Tencent. You can refer to the WeChat public platformDeveloper Documentation)

1. First we need to configure our official account

1. Before the WeChat official account requests user web page authorization, developers need to go to the official website of the public platform to obtain basic user information" configuration options, modify the authorization callback domain name. Please note that the domain name (a string) filled in here is not the URL, so please do not add http:// and other protocol headers;

2. Authorization callback domain name configuration specifications It is a full domain name. For example, the domain name that requires web page authorization is: www.qq.com. After configuration, the pages under this domain name are http://www.qq.com/music.html and http://www.qq.com/login. .html can be authenticated by OAuth2.0. But http://pay.qq.com, http://music.qq.com, http://qq.com cannot perform OAuth2.0 authentication

3. If the official account login is authorized to If a third-party developer manages it, there is no need to make any settings. The third party can replace the official account to implement web page authorization.

2. The user agrees to the authorization and obtains the code

Interface address:

https://open.weixin.qq.com/connect/oauth2/authorize?appid=APPID&redirect_uri=REDIRECT_URI&response_type=code&scope=SCOPE&state=STATE#wechat_redirect (note the interface parameters)

function Get_Code()  //獲取code
{
//構(gòu)造請(qǐng)求地址
$code_url = "https://open.weixin.qq.com/connect/oauth2/authorize?appid=微信公眾號(hào)appid&redirect_uri=請(qǐng)求功后回調(diào)地址&response_type=code&scope=snsapi_userinfo&state=STATE #wechat_redirect";
//跳轉(zhuǎn)到請(qǐng)求地址，應(yīng)為本省設(shè)置了回調(diào)地址，所以不需要使用file_get_content()來(lái)請(qǐng)求接口。
header("location:" . $code_url);
exit;
}

3. The obtained code may contain access_token and openid

Interface: https://api.weixin.qq.com/sns/oauth2/access_token?appid=APPID&secret=SECRET&code=CODE&grant_type=authorization_code

/**
 *  通過(guò)獲取到的code來(lái)獲取access_token和openid 
 *  $code為獲取到的code
 * 接口的參數(shù)注意換成自己的，如appid和secret
 */
function GetAccess_Token($code)
{
$get_access_token_url = "https://api.weixin.qq.com/sns/oauth2/access_token?appid=appid&secret=secret&code=$code&grant_type=authorization_code";
$res = http_url($get_access_token_url);
return json_decode($res, true);
}

4. Determine whether access_token is valid
##Interface:

https://api.weixin.qq.com/sns/auth?access_token=ACCESS_TOKEN&openid=OPENID

/**
 * 檢查access_token是否有效
 * 
 */
function CkeckAccessToken($access_token, $openid)
{
    $check_url = "https://api.weixin.qq.com/sns/auth?access_token=$access_token&openid=$openid";
    $res = http_url($check_url);
    $result = json_decode($res, true);
    if (isset($result['errmsg']) && $result['errmsg'] == 1) {
        return 1;       //access_token有效   
    } else {
        return 0;       //access_token無(wú)效 
    }
}

5. If it fails, refresh the access_token
Interface:

https://api.weixin.qq.com/sns/oauth2/refresh_token?appid=APPID&grant_type=refresh_token&refresh_token=REFRESH_TOKEN

/**
 * 如果獲取到的access_token無(wú)效，通過(guò)refresh_token來(lái)刷新access_token
 *接口的參數(shù)注意換成自己的
 */
function GetRefresh_Token($refresh_token)
{
$get_refresh_token_url = "https://api.weixin.qq.com/sns/oauth2/refresh_token?appid=appid&grant_type=refresh_token&refresh_token=$refresh_token";
$res = http_url($get_refresh_token_url);
return json_decode($res, true);
}

6. Obtain user informationInterface:

https://api.weixin.qq.com/sns/userinfo?access_token=ACCESS_TOKEN&openid=OPENID&lang=zh_CN

/** * 獲取用戶(hù)基本信息 *  */
function Get_User_Info($access_token, $openid){   
     $get_user_info = "https://api.weixin.qq.com/sns/userinfo?access_token=$access_token&openid=$openid&lang=zh_CN";   
      $res = http_url($get_user_info);   
       return json_decode($res, true);
   }

獲取到用戶(hù)信息數(shù)據(jù)：

{   
    "openid":" OPENID",
    " nickname": NICKNAME,
    "sex":"1",
    "province":"PROVINCE"
    "city":"CITY",
    "country":"COUNTRY",
    "headimgurl":       "http://thirdwx.qlogo.cn/mmopen/g3MonUZtNHkdmzicIlibx6iaFqAc56vxLSUfpb6n5WKSYVY0ChQKkiaJSgQ1dZuTOgvLLrhJbERQQ4eMsv84eavHiaiceqxibJxCfHe/46",
    "privilege":[ "PRIVILEGE1" "PRIVILEGE2"     ],
    "unionid": "o6_bmasdasdsad6_2sgVt7hMZOPfL"
}

下面上完整代碼：

<?php
    //跳轉(zhuǎn)第三方頁(yè)面，獲取用戶(hù)基本信息
    // 這是請(qǐng)求頁(yè)面也是code的回調(diào)頁(yè)面
    session_start();                //啟動(dòng)session
    if (isset($_GET[&#39;code&#39;])) {     //判斷是否有code傳過(guò)來(lái)，如果沒(méi)有調(diào)用函數(shù)請(qǐng)求code
          $res = GetAccess_Token($_GET[&#39;code&#39;]);     //使用code獲取access_token和openid
          if (CkeckAccessToken($res[&#39;access_token&#39;], $res[&#39;openid&#39;]) == 0) {     //判斷access_token是否有效，如果無(wú)效獲取新的access_token
                  $res = GetRefresh_Token($res[&#39;refresh_token&#39;]);                    //或缺新的access_token
            }
           $userinfo = Get_User_Info($res[&#39;access_token&#39;], $res[&#39;openid&#39;]);        //獲取用戶(hù)信息
           $_SESSION[&#39;userinfo&#39;] = $userinfo;                                      //將用戶(hù)信息存入session中
           $next_url = &#39;http://web/index.php&#39;;                                     //下一個(gè)頁(yè)面地址
           header("location:" . $next_url);                                       //獲取到信息后跳轉(zhuǎn)到其他頁(yè)面
           exit;
      } else { 
         //獲取code
      Get_Code();
      }
    function Get_Code()  //獲取code{
    $code_url = "https://open.weixin.qq.com/connect/oauth2/authorize?appid=appid&redirect_uri=回調(diào)地址&response_type=code&scope=snsapi_userinfo&state=STATE #wechat_redirect";
    header("location:" . $code_url);
    exit;
    }
    /**
    *  通過(guò)獲取到的code來(lái)獲取access_token和openid
    *
    */
    function GetAccess_Token($code){
        $get_access_token_url = "https://api.weixin.qq.com/sns/oauth2/access_token?appid=appid&secret=secret&code=$code&grant_type=authorization_code";
        $res = http_url($get_access_token_url);
        return json_decode($res, true);
        }
    /**
     * 檢查access_token是否有效
     *
    */
    function CkeckAccessToken($access_token, $openid){
    $check_url = "https://api.weixin.qq.com/sns/auth?access_token=$access_token&openid=$openid"; 
    $res = http_url($check_url);
    $result = json_decode($res, true);
    if (isset($result[&#39;errmsg&#39;]) && $result[&#39;errmsg&#39;] == 1) {
       return 1;       //access_token有效 
     } else { 
       return 0;       //access_token無(wú)效 
     }
    }

    /**
     * 如果獲取到的access_token無(wú)效，通過(guò)refresh_token來(lái)刷新access_token 
     */
    function GetRefresh_Token($refresh_token){
        $get_refresh_token_url = "https://api.weixin.qq.com/sns/oauth2/refresh_token?appid=appid&grant_type=refresh_token&refresh_token=$refresh_token";
        $res = http_url($get_refresh_token_url);
        return json_decode($res, true);
     }
    /**
     * 獲取用戶(hù)基本信息
     *
     */
    function Get_User_Info($access_token, $openid){
        $get_user_info = "https://api.weixin.qq.com/sns/userinfo?access_token=$access_token&openid=$openid&lang=zh_CN";
        $res = http_url($get_user_info);
        return json_decode($res, true);}
    //自定義請(qǐng)求接口函數(shù)，$data為空時(shí)發(fā)起get請(qǐng)求，$data有值時(shí)發(fā)起post請(qǐng)求
    function http_url($url,$data=null){
       $ch = curl_init();
        curl_setopt($ch,CURLOPT_URL,$url);
        curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,FALSE);
        curl_setopt($ch,CURLOPT_SSL_VERIFYHOST,0);
        curl_setopt($ch,CURLOPT_RETURNTRANSFER,TRUE);
        if(!empty($data)){    
            curl_setopt($ch,CURLOPT_POST,1);
            curl_setopt($ch,CURLOPT_POSTFIELDS,$data);
         }
         $res = curl_exec($ch);
         if(curl_errno($ch)){
           echo "error:".curl_error($ch);
           exit;
          }
          curl_close($ch);
          return $res;
          }

? ?

The above is the detailed content of Detailed explanation of WeChat public account web authorization. For more information, please follow other related articles on the PHP Chinese website!