微信授权（静默授权，非静默授权）

一、前言

微信授权分为静默授权和非静默授权，两者的区别在于，前者不需要微信用户点击授权按钮，但只能获取微信openid，后者需点击授权按钮，但能获取微信用户基本信息（openid、微信昵称、性别、头像地址、国籍、省、市），为什么获取不到手机号码？答案在这里。

二、准备

1、花6块钱在花生壳买个域名，将域名映射到本地项目80端口上。

2、申请测试号   测试号申请入口。（测试号申请成功后可以看见  appID和appsecret），自己手机微信扫一下，将自己二维码加进去。

 

三、配置

将在花生壳里买的域名填到这里

 

四、上代码

import com.aem.project.system.giftmall.member.service.IPointsMemberService;
import com.aem.project.system.wx.profession.domain.ReturnCode;
import com.aem.project.system.wx.profession.util.AuthUtil;
import com.alibaba.fastjson.JSONObject;
import com.google.gson.Gson;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.ui.ModelMap;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;

import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.UnsupportedEncodingException;
import java.net.HttpURLConnection;
import java.net.URL;
import java.net.URLEncoder;
import java.text.ParseException;
import java.util.Date;
import java.util.HashMap;
import java.util.List;
import java.util.Map;
import java.util.logging.Logger;

@Controller
@RequestMapping("/wx/authorization")
public class WxAuthorizationController {
    private static final Logger logger = Logger.getLogger(String.valueOf(WxAuthorizationController.class));

    @Autowired
    private IPointsMemberService memberService;

    /**
      * 公众号微信登录授权
     第一步：
     return  code    本地自测(注意：需要申请域名)    重定向去找授权方法
     */
    @RequestMapping(value = "/wxLogin", method = RequestMethod.GET)
    public String wxLogin(HttpServletRequest request, HttpServletResponse response)
            throws ParseException {
        //这个url的域名必须要进行在公众号中进行注册验证，这个地址是成功后的回调地址
        String backUrl="http://aem315.natapp1.cc/traceability/wx/authorization/callBack";
        // 第一步：用户同意授权，获取code
        String url ="https://open.weixin.qq.com/connect/oauth2/authorize?appid="+ AuthUtil.APPID + "&redirect_uri="+ URLEncoder.encode(backUrl) + "&response_type=code"
                + "&scope=snsapi_userinfo" + "&state=STATE#wechat_redirect";
        logger.info("forward重定向地址{" + url + "}");
        return "redirect:"+url;//必须重定向，否则不能成功
    }

    /**
      * 公众号微信登录授权回调函数
     第一种授权方式：非静默授权(需微信用户点击授权按钮,获取微信用户全部信息)
     */
    @RequestMapping(value = "/callBack", method = RequestMethod.GET)
    public void callBack(ModelMap modelMap, HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
                         /*
                     * start 获取微信用户基本信息
                     */
        String code =req.getParameter("code");
        //第二步：通过code换取网页授权access_token
        String url = "https://api.weixin.qq.com/sns/oauth2/access_token?appid="+AuthUtil.APPID + "&secret="+ AuthUtil.APPSECRET + "&code="+code
                + "&grant_type=authorization_code";
        System.out.println("url:"+url);
        JSONObject jsonObject = AuthUtil.doGetJson(url);
                         /*
                                 { "access_token":"ACCESS_TOKEN",
                                    "expires_in":7200,
                                    "refresh_token":"REFRESH_TOKEN",
                                    "openid":"OPENID",
                                    "scope":"SCOPE" 
                                   }
                                 */
        String openid = jsonObject.getString("openid");
        String access_token = jsonObject.getString("access_token");
        String refresh_token = jsonObject.getString("refresh_token");
        //第五步验证access_token是否失效；展示都不需要
        String chickUrl="https://api.weixin.qq.com/sns/auth?access_token="+access_token+"&openid="+openid;

        JSONObject chickuserInfo = AuthUtil.doGetJson(chickUrl);
        System.out.println(chickuserInfo.toString());
        if(!"0".equals(chickuserInfo.getString("errcode"))){
            // 第三步：刷新access_token（如果需要）-----暂时没有使用,参考文档https://mp.weixin.qq.com/wiki，
            String refreshTokenUrl="https://api.weixin.qq.com/sns/oauth2/refresh_token?appid="+openid+"&grant_type=refresh_token&refresh_token="+refresh_token;

            JSONObject refreshInfo = AuthUtil.doGetJson(chickUrl);
                                         /*
                                           { "access_token":"ACCESS_TOKEN",
                                        "expires_in":7200,
                                        "refresh_token":"REFRESH_TOKEN",
                                        "openid":"OPENID",
                                        "scope":"SCOPE" }
                                     */
            access_token=refreshInfo.getString("access_token");
        }

        // 第四步：拉取用户信息(需scope为 snsapi_userinfo)
        String infoUrl = "https://api.weixin.qq.com/sns/userinfo?access_token="+access_token + "&openid="+openid + "&lang=zh_CN";
        System.out.println("infoUrl:"+infoUrl);
        JSONObject userInfo = AuthUtil.doGetJson(infoUrl);
                         /*
                     {    "openid":" OPENID",
                        " nickname": NICKNAME,
                        "sex":"1",
                        "province":"PROVINCE"
                        "city":"CITY",
                        "country":"COUNTRY",
                        "headimgurl":    "http://wx.qlogo.cn/mmopen/g3MonUZtNHkdmzicIlibx6iaFqAc56vxLSUfpb6n5WKSYVY0ChQKkiaJSgQ1dZuTOgvLLrhJbERQQ4eMsv84eavHiaiceqxibJxCfHe/46",
                        "privilege":[ "PRIVILEGE1" "PRIVILEGE2"     ],
                        "unionid": "o6_bmasdasdsad6_2sgVt7hMZOPfL"
                        }
                      */
        System.out.println("JSON-----"+userInfo.toString());
        System.out.println("名字-----"+userInfo.getString("nickname"));
        System.out.println("头像-----"+userInfo.getString("headimgurl"));
                     /*
                             * end 获取微信用户基本信息
                             */
        //获取到用户信息后就可以进行重定向，走自己的业务逻辑了。。。。。。
        //接来的逻辑就是你系统逻辑了，请自由发挥
        //（为什么获取不到手机号？）https://developers.weixin.qq.com/miniprogram/dev/framework/open-ability/getPhoneNumber.html

        //判断会员表中有没有该微信会员信息
        String openId=userInfo.getString("openid");
        List<PointsMember> list= memberService.selectMemberByOpenid(openId);
        if(list.size()<=0){
            //会员表中没有该微信会员
            //openID  nickName  sex  headimgurl(头像地址)    province(省) city(市)       language(语言)
            PointsMember pointsMember=new PointsMember();
            pointsMember.setOpenid(openId);
            pointsMember.setNickname(userInfo.getString("nickname"));
            pointsMember.setSex(userInfo.getString("sex"));
            pointsMember.setHeadimgurl(userInfo.getString("headimgurl"));
            pointsMember.setMemberAreacode(userInfo.getString("province")+userInfo.getString("city"));
            pointsMember.setCreateDate(new Date());
            pointsMember.setCreateTime(new Date());
            memberService.insertMember(pointsMember);
        }
        //else  有

    }


    /**
      * 公众号微信登录授权回调函数
     第二种授权方式：静默授权(无需微信用户点击授权按钮,但是只能获取微信用户openId)
     */
    @RequestMapping("/getOpenid")
    public void authorize(HttpServletRequest request, HttpServletResponse response) throws UnsupportedEncodingException {
        request.setCharacterEncoding("UTF-8");
        response.setCharacterEncoding("UTF-8");
        Map<String, Object> map = new HashMap<String, Object>();
        String str = null;
        String code = request.getParameter("code");
        ReturnCode returnCode = null;
        InputStreamReader reader = null;
        BufferedReader breader = null;
        try {
            //通过获取access_token获得openid和access_token
            URL url = new URL("https://api.weixin.qq.com/sns/oauth2/access_token?appid="
                    + AuthUtil.APPID+"&secret="+ AuthUtil.APPSECRET+"&code="+code+
                    "&grant_type=authorization_code");
            HttpURLConnection connection = (HttpURLConnection) url.openConnection();
            connection.connect();
            reader = new InputStreamReader(connection.getInputStream());
            breader = new BufferedReader(reader);
            StringBuffer strb = new StringBuffer();
            while (null != (str = breader.readLine())) {
                strb.append(str);
            }
            Gson gson = new Gson();
            returnCode = gson.fromJson(strb.toString(), ReturnCode.class);
            //根据用户Access_token和openid获取用户信息
            System.out.println("打印用户openId=================="+returnCode.getOpenid());
        } catch (Exception e) {
            e.printStackTrace();
        }
        try {
            breader.close();
            reader.close();
        } catch (IOException e) {
            e.printStackTrace();
        }
        //                return  new ModelAndView(new RedirectView(Wx_Util.sendPage+"/wxdraw/productscan?qrcode="+qrcode+"" +
        //                        "&openid="+returnCode.getOpenid()));
    }

}

 

五、测试

http://你的域名/项目后缀/wx/authorization/wxLogin

用谷歌浏览器打开，它会提示你去微信里去。在地址栏中会生成一大串罗里吧嗦的链接地址，复制下来，在微信里随便找个人发过去，打开链接。