请教QQ互联的代码是如何写的？

程序员文章站 2022-06-14 13:33:21

...

请问QQ互联的代码是怎么写的？？


  //应用的APPID

  $app_id = "xxxxx";

  //应用的APPKEY

  $app_secret = "xxxxxxx";

  //成功授权后的回调地址

  $my_url = "http://www.abc.com";


  //Step1：获取Authorization Code

  session_start();

  $code = $_REQUEST["code"];

  if(empty($code)) 

  {

     //state参数用于防止CSRF攻击，成功授权后回调时会原样带回

     $_SESSION['state'] = md5(uniqid(rand(), TRUE)); 

     //拼接URL     

     $dialog_url = "https://graph.qq.com/oauth2.0/authorize?response_type=code&client_id=" 

        . $app_id . "&redirect_uri=" . urlencode($my_url) . "&state="

        . $_SESSION['state'];

     echo("");

  }


  //Step2：通过Authorization Code获取Access Token

  if($_REQUEST['state'] == $_SESSION['state']) 

  {

     //拼接URL   

     $token_url = "https://graph.qq.com/oauth2.0/token?grant_type=authorization_code&"

     . "client_id=" . $app_id . "&redirect_uri=" . urlencode($my_url)

     . "&client_secret=" . $app_secret . "&code=" . $code;

     $response = file_get_contents($token_url);

     if (strpos($response, "callback") !== false)

     {

        $lpos = strpos($response, "(");

        $rpos = strrpos($response, ")");

        $response  = substr($response, $lpos + 1, $rpos - $lpos -1);

        $msg = json_decode($response);

        if (isset($msg->error))

        {

           echo "error:
" . $msg->error;

           echo "msg  :
" . $msg->error_description;

           exit;

        }

     }


     //Step3：使用Access Token来获取用户的OpenID

     $params = array();

     parse_str($response, $params);

     $graph_url = "https://graph.qq.com/oauth2.0/me?access_token=".$params['access_token'];

     $str  = file_get_contents($graph_url);

     if (strpos($str, "callback") !== false)

     {

        $lpos = strpos($str, "(");

        $rpos = strrpos($str, ")");

        $str  = substr($str, $lpos + 1, $rpos - $lpos -1);

     }

     $user = json_decode($str);

     if (isset($user->error))

     {

        echo "error:
" . $user->error;

        echo "msg  :
" . $user->error_description;

        exit;

     }

     echo("Hello " . $user->openid);

  }

  else 

  {

     echo("The state does not match. You may be a victim of CSRF.");

  }

?>