1.实现要配置安全域名与IP白名单与检查是否有权限
JSSDK.php
<?php
/**
* 权限验证
* Created by PhpStorm.
* User: Administrator
* Date: 2018/6/21
* Time: 10:34
*/
use think\Cache;
class JSSDK
{
private $appId;
private $appSecret;
public function __construct($appId,$appSecret)
{
$this->appId = $appId;
$this->appSecret = $appSecret;
}
public function getSignPackage() {
$jsapiTicket = $this->getJsApiTicket();
$url = "http://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";
// $protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://";
// $url = "$protocol$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";
$timestamp = time();
$nonceStr = $this->createNonceStr();
// 这里参数的顺序要按照 key 值 ASCII 码升序排序
$string = "jsapi_ticket=$jsapiTicket&noncestr=$nonceStr×tamp=$timestamp&url=$url";
$signature = sha1($string);
$signPackage = array(
"appId" => $this->appId,
"nonceStr" => $nonceStr,
"timestamp" => $timestamp,
"url" => $url,
"signature" => $signature,
"rawString" => $string
);
return $signPackage;
}
private function getJsApiTicket()
{
// jsapi_ticket 应该全局存储与更新,以下代码以写入到文件中做示例
$data = json_decode(file_get_contents("jsapi_ticket.json"));
if ($data->expires_in < time()) {
$accessToken = $this->getAccessToken();
$url = "https://api.weixin.qq.com/cgi-bin/ticket/getticket?type=jsapi&access_token=$accessToken";
$res = json_decode($this->httpGet($url));
$ticket = $res->ticket;
if ($ticket) {
$data->expires_in = time() + 7000;
$data->jsapi_ticket = $ticket;
$fp = fopen("jsapi_ticket.json", "w");
fwrite($fp, json_encode($data));
fclose($fp);
}
} else {
$ticket = $data->jsapi_ticket;
}
return $ticket;
}
private function createNonceStr($length = 16) {
$chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
$str = "";
for ($i = 0; $i < $length; $i++) {
$str .= substr($chars, mt_rand(0, strlen($chars) - 1), 1);
}
return $str;
}
private function getAccessToken() {
// access_token 应该全局存储与更新,以下代码以写入到文件中做示例
$data = json_decode(file_get_contents("access_token.json"));
if ($data->expires_in < time()) {
$url = "https://api.weixin.qq.com/cgi-bin/token?grant_type=client_credential&appid=$this->appId&secret=$this->appSecret";
$res = json_decode($this->httpGet($url));
$access_token = $res->access_token;
if ($access_token) {
$data->expires_in = time() + 7000;
$data->access_token = $access_token;
$fp = fopen("access_token.json", "w");
fwrite($fp, json_encode($data));
fclose($fp);
}
} else {
$access_token = $data->access_token;
}
return $access_token;
}
function httpGet($url)
{
$curl = curl_init (); // 启动一个CURL会话
curl_setopt ( $curl, CURLOPT_URL, $url );
curl_setopt ( $curl, CURLOPT_HEADER, 0 );
curl_setopt ( $curl, CURLOPT_RETURNTRANSFER, 1 );
curl_setopt ( $curl, CURLOPT_SSL_VERIFYPEER, false ); // 跳过证书检查
curl_setopt ( $curl, CURLOPT_SSL_VERIFYHOST, false ); // 从证书中检查SSL加密算法是否存在
$tmpInfo = curl_exec ( $curl ); // 返回api的json对象
// 关闭URL请求
curl_close ( $curl );
return $tmpInfo; // 返回json对象
}
}
<?php
require_once "JSSDK.php";
$jssdk = new JSSDK('appdi','秘钥');
$signPackage = $jssdk->GetSignPackage();
?>
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<meta content="width=device-width,initial-scale=1.0,maximum-scale=1.0,user-scalable=no" name="viewport">
<meta content="yes" name="apple-mobile-web-app-capable">
<meta content="black" name="apple-mobile-web-app-status-bar-style">
<meta content="telephone=no" name="format-detection">
<meta content="email=no" name="format-detection">
<title>答对12道题拿奖金</title>
<!--公共css-->
<link rel="stylesheet" href="../css/style.css">
<!--index.css-->
<link rel="stylesheet" type="text/css" href="../css/index.css"/>
</head>
<!--分享页面-->
<body class="share_body">
<button class="btn btn_primary" id="onMenuShareTimeline">onMenuShareTimeline</button>
<button class="btn btn_primary" id="onMenuShareAppMessage">onMenuShareAppMessage</button>
</body>
<script src="../js/jquery-1.11.3.js"></script>
<script src="https://res.wx.qq.com/open/js/jweixin-1.2.0.js" type="text/javascript" charset="utf-8"></script>
<script>
wx.config({
debug: true,
appId:'<?php echo $signPackage["appId"];?>',
timestamp:'<?php echo $signPackage["timestamp"];?>',
nonceStr:'<?php echo $signPackage["nonceStr"];?>',
signature:'<?php echo $signPackage["signature"];?>',
jsApiList: [
'onMenuShareAppMessage'
]
})
wx.ready(function () {
;
wx.onMenuShareAppMessage({
title: "测试", // 分享标题
desc: "我是测试", // 分享描述
link: "http://xx.cn/static/h5/answer_test/pages/share.php", // 分享链接,该链接域名或路径必须与当前页面对应的公众号JS安全域名一致
imgUrl: "http://xx.cn/static/h5/answer_test/images/answer_fail.png", // 分享图标
type: "", // 分享类型,music、video或link,不填默认为link
dataUrl: "", // 如果type是music或video,则要提供数据链接,默认为空
success: function () {
alert('ok~');
}
});
});
wx.error(function(res){
// config信息验证失败会执行error函数,如签名过期导致验证失败,具体错误信息可以打开config的debug模式查看,也可以在返回的res参数中查看,对于SPA可以在这里更新签名。
alert("error:"+JSON.stringify(res));
});
</script>
</html>