三方登录之QQ登录
如果网站没有一个三方登录，可以毫不留情的说这个网站很失败。会流失很多用户资源。
既然如此，那就记录一个qq登录的代码吧！
逻辑是：1.根据QQ互联得到QQ的openid。2.比对数据库判断用户。3.进行用户登录或者用户绑定。
控制器：**auth**
```
public function qqlogin(){
$qqLogin = new QQLogin();
$code = I('get.code','');
if(empty($code)){
$qqLogin->getCode();
}
$openId = $qqLogin->getOpenId($code);
if($openId===false){
$this->err($qqLogin->getError());
}
if(empty($openId)){
$this->err('OPEN ID IS EMPTY');
}
$user = new userModel();
$res = $user->qqAutoLogin($openId);
if($res === false){
$this->err($user->getError());
}else if($res === true){
redirect(TRUE_DIR);
}else{
$qqinfo = $qqLogin->getQQInfo($openId);
if($qqinfo===false){
$this->err($qqLogin->getError());
}
session('authinfo',$qqinfo);
session('authtype','qq');
session('authopenid',$openId);
$this->redirect('index/bind');
}
}
```
模型：**user**
```
//QQ自动登录
function qqAutoLogin($openid){
$user = $this->table('auth_user')->where(array('openid'=>$openid))->find();
if($user){
$res = $this->table('user')->where(array('id'=>$user['create_by']))->find();
if(!$res){
$this->error = '用户异常，无法登录';
return false;
}
if($res['status']==0){
$this->error = '帐号无法登录，请联系管理员';
return false;
}
self::login($res);
return true;
}else{
return U('index/bind');
}
}
```
功能类:**QQlogin**
```
class QQLogin {
//应用的APPID
private $app_id = null;
//应用的APPKEY
private $app_secret = null;
//成功授权后的回调地址
private $my_url = null;
protected $error = null;
public function __construct() {
$qqLoginConfig = C('QQ_LOGIN');
if(!$qqLoginConfig){
//E('请配置QQ登录参数。');
$this->error='请配置QQ登录参数';
return false;
}
$this->app_id=$qqLoginConfig['APP_ID'];
$this->app_secret=$qqLoginConfig['APP_Key'];
//REDIRECT_URL
$this->my_url=urlencode($qqLoginConfig['REDIRECT_URL']);
}
//获取code
function getCode(){
//state参数用于防止CSRF攻击，成功授权后回调时会原样带回
$state = md5(uniqid(rand(), TRUE));
session('state',$state);
//拼接URL
$dialog_url = "https://graph.qq.com/oauth2.0/authorize?response_type=code&client_id="
. $this->app_id . "&redirect_uri=" . $this->my_url. "&state="
.$state;
exit("<script> top.location.href='" . $dialog_url . "'</script>");
}
function getAccessToken($code){
//拼接URL
$token_url = "https://graph.qq.com/oauth2.0/token?grant_type=authorization_code&"
. "client_id=" . $this->app_id . "&redirect_uri=<span class="hljs-string">" . $this->my_url
. "</span>&client_secret=" . $this->app_secret . "&code=<span class="hljs-string">" . $code;
$response = file_get_contents($token_url);
if (strpos($response, "</span>callback<span class="hljs-string">") !== false)
{
$lpos = strpos($response, "</span>(<span class="hljs-string">");
$rpos = strrpos($response, "</span>)<span class="hljs-string">");
$response = substr($response, $lpos + 1, $rpos - $lpos -1);
$msg = json_decode($response);
if (isset($msg->error))
{
//E($msg->error_description,$msg->error);
$this->error=$msg->error_description;
return false;
/* echo "</span><h3>error:</h3><span class="hljs-string">" . $msg->error;
echo "</span><h3>msg :</h3><span class="hljs-string">" . $msg->error_description;
exit;*/
}
}
//Step3：使用Access Token来获取用户的OpenID
$params = array();
parse_str($response, $params);
$accessToken = $params['access_token'];
session('qqlogin_accesstoken',$accessToken);
return $accessToken;
}
function getOpenId($code){
if(I('param.state') == session('state'))
{
$access_token = self::getAccessToken($code);
if($access_token===false){
return false;
}
$graph_url = "</span>https://graph.qq.com/oauth2.0/me?access_token=<span class="hljs-string">".$access_token;
$str = file_get_contents($graph_url);
if (strpos($str, "</span>callback<span class="hljs-string">") !== false)
{
$lpos = strpos($str, "</span>(<span class="hljs-string">");
$rpos = strrpos($str, "</span>)<span class="hljs-string">");
$str = substr($str, $lpos + 1, $rpos - $lpos -1);
}
$user = json_decode($str);
if (isset($user->error))
{
//E($user->error_description,$user->error);
$this->error=$user->error_description;
return false;
/* echo "</span><h3>error:</h3><span class="hljs-string">" . $user->error;
echo "</span><h3>msg :</h3><span class="hljs-string">" . $user->error_description;
exit;*/
}
return $user->openid;
}
else
{
//echo("</span>The state does not match. You may be a victim of CSRF.<span class="hljs-string">");
//E('The state does not match. You may be a victim of CSRF.');
$this->error='The state does not match. You may be a victim of CSRF.';
return false;
}
}
function getQQInfo($openid){
$accesstoken = session('qqlogin_accesstoken');
$graph_url = "</span>https://graph.qq.com/user/get_user_info?access_token=".$accesstoken."&oauth_consumer_key=".$this->app_id."&openid=<span class="hljs-string">".$openid;
$str = file_get_contents($graph_url);
$user = json_decode($str);
if($user->ret!=0){
$this->error=$user->msg;
return false;
}else{
return $user;
}
}
function getError(){
return $this->error;
}
}</span>
```
评论区