Commit 712de9f5 by lanrion

added oauth2 api

parent 8733c61a
......@@ -47,7 +47,11 @@ module WeixinAuthorize
end
def plain_endpoint
"https://api.weixin.qq.com/cgi-bin"
"#{api_endpoint}/cgi-bin"
end
def api_endpoint
"https://api.weixin.qq.com"
end
def file_endpoint
......
......@@ -10,16 +10,27 @@ module WeixinAuthorize
# state 重定向后会带上state参数,开发者可以填写a-zA-Z0-9的参数值
# 如果用户点击同意授权,页面将跳转至 redirect_uri/?code=CODE&state=STATE。若用户禁止授权,则重定向后不会带上code参数,仅会带上state参数redirect_uri?state=STATE
def authorize_url(redirect_uri, scope="snsapi_base", state="")
def authorize_url(redirect_uri, scope="snsapi_base", state="weixin")
require "erb"
ERB::Util.url_encode(WeixinAuthorize.open_endpoint("/connect/oauth2/authorize?appid=#{app_id}&redirect_uri=#{redirect_uri}&response_type=code&scope=#{scope}&state=#{state}#wechat_redirect"))
redirect_uri = ERB::Util.url_encode(redirect_uri)
WeixinAuthorize.open_endpoint("/connect/oauth2/authorize?appid=#{app_id}&redirect_uri=#{redirect_uri}&response_type=code&scope=#{scope}&state=#{state}#wechat_redirect")
end
# 首先请注意,这里通过code换取的网页授权access_token,与基础支持中的access_token不同。公众号可通过下述接口来获取网页授权access_token。如果网页授权的作用域为snsapi_base,则本步骤中获取到网页授权access_token的同时,也获取到了openid,snsapi_base式的网页授权流程即到此为止。
# 微信通过请求 #authorize_url 方法后,会返回一个code到redirect_uri中
def get_oauth_access_token(code)
http_get("https://api.weixin.qq.com/sns/oauth2/access_token?appid=#{app_id}&secret=#{app_secret}&code=#{code}&grant_type=authorization_code")
WeixinAuthorize.http_get_without_token("/sns/oauth2/access_token?appid=#{app_id}&secret=#{app_secret}&code=#{code}&grant_type=authorization_code", {}, "api")
end
# refresh_token: 填写通过access_token获取到的refresh_token参数
def refresh_oauth2_token(refresh_token)
WeixinAuthorize.http_get_without_token("/sns/oauth2/refresh_token?appid=#{app_id}&grant_type=refresh_token&refresh_token=#{refresh_token}")
end
# 如果网页授权作用域为snsapi_userinfo,则此时开发者可以通过access_token和openid拉取用户信息了。
def get_oauth_userinfo(openid, oauth_token, lang="zh_CN")
WeixinAuthorize.http_get_without_token("/sns/userinfo?access_token=#{oauth_token}&openid=#{openid}&lang=#{lang}")
end
private
......
......@@ -10,6 +10,7 @@ module WeixinAuthorize
include Api::Groups
include Api::Qrcode
include Api::Media
include Api::Oauth
attr_accessor :app_id, :app_secret, :expired_at # Time.now + expires_in
attr_accessor :access_token, :redis_key
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment