微信网页授权获取并获取用户信息

网页授权和获取用户信息是基本所有开发微信都需要明白的东西，包括easywechat，thinkPHP等

一、网页授权 重定向

//用户授权获取code
    public function getCode(){

        $redirect_uri = urlencode('http://'.$_SERVER['HTTP_HOST'].'/monopoly/index/getUserInfo');
        
        $url = "https://open.weixin.qq.com/connect/oauth2/authorize?appid=" . $this->appId . "&redirect_uri=" . $redirect_uri . "&response_type=code&scope=snsapi_userinfo&state=123#wechat_redirect";

        $this->redirect($url,302);
    }

二、接收code 获取用户信息

//获取用户信息
    public function getUserInfo(){

        $code = $_GET['code'];


        // if (empty($code)) $this->error('授权失败');

        //获取openid和access_token
        $url = "https://api.weixin.qq.com/sns/oauth2/access_token?appid=$this->appId&secret=$this->appSecret&code=$code&grant_type=authorization_code";

        $curl = new Curl();
        $curl->setOpt(CURLOPT_SSL_VERIFYPEER, false);
        $curl->setOpt(CURLOPT_SSL_VERIFYHOST, false);
        $curl->get($url);
        $djson = $curl->response;

        $rjson = json_decode($djson,true);

        // dump($rjson);die;
        $openId = $rjson['openid'];//得到openid

        $access_token1 =$rjson['access_token'];
        $userUrl = "https://api.weixin.qq.com/sns/userinfo?access_token=$access_token1&openid=$openId&lang=zh_CN";

        $curl = new Curl();
        $curl->setOpt(CURLOPT_SSL_VERIFYPEER, false);
        $curl->setOpt(CURLOPT_SSL_VERIFYHOST, false);
        $curl->get($userUrl);
        $ujson = $curl->response;

        $result = json_decode($ujson,true);

        // dump($result);die;
        //获取公共的access_token
        $access_token = $this->getSessionAccessToken();

        //获取用户是否关注了公众号
        $userInfoUrl = "https://api.weixin.qq.com/cgi-bin/user/info?access_token=$access_token&openid=$openId&lang=zh_CN";

        $curl2 = new Curl();
        $curl2->setOpt(CURLOPT_SSL_VERIFYPEER, false);
        $curl2->setOpt(CURLOPT_SSL_VERIFYHOST, false);

        $curl2->get($userInfoUrl);

        $uujson = $curl2->response;

        $uujson = json_decode($uujson,true);
        // dump($uujson);die;
        // $result = json_decode($result,true);
        $result['subscribe'] = $uujson['subscribe'];

        // dump($result);die;
        //判断用户是否关注
        if ($result['subscribe'] == 1){
            session('ys_monopoly_user',$result);
            $this->redirect('login');
        }else{
            $this->redirect('getQrcode');
        }

    }

三、通用access_token的获取和缓存

//获取access_token
    public function getSessionAccessToken(){
        if (session('wx_access_token') && session('expire_time')>time()){
            return session('wx_access_token');
        }else{
            //获取通用的access_token 不是网页授权的access_token
            $access_token_url = "https://api.weixin.qq.com/cgi-bin/token?grant_type=client_credential&appid=$this->appId&secret=$this->appSecret";


            $curl1 = new Curl();
            $curl1->setOpt(CURLOPT_SSL_VERIFYPEER, false);
            $curl1->setOpt(CURLOPT_SSL_VERIFYHOST, false);

            $curl1->get($access_token_url);

            $ajson = $curl1->response;

            $ajson = json_decode($ajson,true);

            // dump($ajson);die;
            $access_token = $ajson['access_token'];

            session('wx_access_token',$access_token);

            session('expire_time',time()+6000);

            return $access_token;
        }
    }

注：同一个公众号的access_token 需要统一获取缓存，如果在不同模块下都获取access_token，新获取access_token后，之前的access_token 将失效，即使是在有效时间内。