WechatOfficialController.php 19 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536
  1. <?php
  2. namespace App\Http\Api;
  3. use App\Services\Login\LoginTokenService;
  4. use EasyWeChat\Factory;
  5. use EasyWeChat\Kernel\Messages\News;
  6. use EasyWeChat\Kernel\Messages\NewsItem;
  7. use Illuminate\Support\Facades\DB;
  8. use Illuminate\Support\Facades\Request;
  9. use Illuminate\Support\Str;
  10. use Illuminate\Http\JsonResponse;
  11. use Illuminate\Support\Facades\Cache;
  12. use Illuminate\Support\Facades\Log;
  13. /**
  14. * 微信公众号授权
  15. *
  16. * Class WechatController
  17. * @package App\Http\Seller\Controllers
  18. */
  19. class WechatOfficialController extends HttpBaseController
  20. {
  21. protected $app = '';
  22. public function __construct()
  23. {
  24. parent::__construct();
  25. $this->setWebsite(__NAMESPACE__);
  26. $config = config('easywechat.official_account.default');
  27. $this->app = Factory::officialAccount($config);
  28. }
  29. // 测试登录
  30. public function testLogin()
  31. {
  32. if ($this->isTest()) {
  33. $userId = 1;
  34. $productMid = "web";
  35. $loginToken = new LoginTokenService($this->siteInfo['token_table']);
  36. $token = $loginToken->createOnlyOneToken($userId, $productMid);
  37. return responseMessage(1001, '', $token);
  38. }
  39. }
  40. public function index2()
  41. {
  42. $this->app->server->push(function ($message) {
  43. $msgType = $message['MsgType'];
  44. if ($msgType == 'event') {
  45. $event = $message['Event'];
  46. return $this->msgEvent($event, $message);
  47. } else {
  48. return $this->msgtType($msgType, $message);
  49. }
  50. });
  51. $response = $this->app->server->serve();
  52. $response->send();
  53. exit();
  54. }
  55. public function index()
  56. {
  57. $this->app->server->push(function ($message) {
  58. $msgType = $message['MsgType'];
  59. $event = $message['Event'];
  60. $eventKey = $message['EventKey'];
  61. $openid = $message['FromUserName'];
  62. // 替换字符串
  63. $eventKey = str_replace('qrscene_', '', $eventKey);
  64. /**
  65. * 扫描带参数二维码事件
  66. */
  67. if ($msgType == 'event') {
  68. $msg = '';
  69. switch ($event) {
  70. case 'subscribe': // 1. 用户未关注时,进行关注后的事件推送
  71. case 'SCAN': // 2. 用户已关注时的事件推送
  72. // 保存用户信息
  73. $isSuccess = $this->saveUser($openid, $eventKey);
  74. if ($isSuccess) {
  75. $msg = "您好!欢迎使用 办公软件!";
  76. } else {
  77. $msg = "对不起!扫描失败,请重试!";
  78. }
  79. break;
  80. case 'unsubscribe': // 取消关注
  81. //$this->loginOut($openid, $eventKey);
  82. break;
  83. }
  84. return $msg;
  85. } else {
  86. return "您好!欢迎使用办公软件!";
  87. }
  88. });
  89. $this->app->server->serve();
  90. // $response = $this->app->server->serve();
  91. // $response->send();
  92. exit();
  93. }
  94. /**
  95. * @param $openid
  96. * @throws \EasyWeChat\Kernel\Exceptions\InvalidConfigException
  97. */
  98. private function saveUser($openid, $eventKey)
  99. {
  100. $userInfo = $this->app->user->get($openid);
  101. $sceneStr = $eventKey;
  102. // 分离产品id和session
  103. [$productMid, $sessionId] = explode(':', $sceneStr, 2);
  104. if (empty($productMid) || empty($sessionId)) {
  105. abort(500, '登录授权失败,非法操作!');
  106. }
  107. $nickname = '未命名'; // 对应微信的 nickname
  108. $avatar = 'https://www.xingyousoft.com/static/images/softlogo.png'; // 头像网址
  109. $unionid = $userInfo['unionid'] ?? '';
  110. $wxInfo = $userInfo;
  111. Log::info('11111111111111111111111111 === ' . 'openid' . $openid );
  112. $isExistUser = DB::table('user_wechat_official_account')->select('id','mid')->where('openid', $openid)->first();
  113. $productInfo = DB::table('product')->where('mid', $productMid)->where('is_delete', 0)->first();
  114. $productTitle = '办公软件';
  115. if ($productInfo) {
  116. $productTitle = $productInfo -> title;
  117. }
  118. if ($isExistUser) {
  119. $isSuccess = true;
  120. $userId = $isExistUser->id; // 用户id
  121. $nickname = $isExistUser->mid; //用户的mid
  122. Log::info('2222222222222222222222222 === ' . 'userid' . $isExistUser->id );
  123. } else {
  124. Log::info('33333333333333333333333333333333333 === ' . 'nickname' . $nickname);
  125. // 插入数据
  126. $isSuccess = DB::transaction(function () use ($openid, $nickname, $avatar, $unionid, $wxInfo) {
  127. $mid = Str::random(12);
  128. $nickname = $mid;
  129. $userData = [
  130. 'username' => $nickname,
  131. 'avatar' => $avatar,
  132. 'roles' => json_encode([1]),
  133. 'unionid' => $unionid,
  134. 'status' => 1,
  135. 'mid' => $mid,
  136. 'created_at' => time(),
  137. 'updated_at' => time(),
  138. ];
  139. $userId = DB::table('user')->insertGetId($userData);
  140. $officialData = [
  141. 'user_id' => $userId,
  142. 'openid' => $openid,
  143. 'unionid' => $unionid,
  144. 'nick' => $nickname,
  145. 'wx_avatar' => $avatar,
  146. 'wx_info' => json_encode($wxInfo),
  147. 'mid' => $mid,
  148. 'created_at' => time(),
  149. 'updated_at' => time(),
  150. ];
  151. DB::table('user_wechat_official_account')->insertGetId($officialData);
  152. $returnInfo = [
  153. 'userId' => $userId,
  154. 'nickname' => $nickname
  155. ];
  156. Log::info('666666666666666666666666666666 === ' . 'id' . $returnInfo['nickname']);
  157. return $returnInfo;
  158. //return $userId;
  159. });
  160. Log::info('555555555555555555555555555 === ' . 'id' . $isSuccess -> userId);
  161. $userId = $isSuccess -> userId; // 用户id
  162. }
  163. if ($isSuccess) {
  164. $oauthUrl = 'https://www.xingyousoft.com';
  165. if ($sceneStr) {
  166. $oauthUrl = $this->app->oauth->withState(base64_encode($sceneStr))->redirect();
  167. }
  168. Log::info('4444444444444444444444444444444 === ' . 'nickname' . $nickname);
  169. // 发送登录成功消息
  170. $this->app->template_message->send([
  171. 'touser' => $openid,
  172. 'template_id' => 'demGYbEZInVgvwO1ClJNuz2Hc-0FYWZp_duv7HSgdmw',
  173. 'url' => $oauthUrl,
  174. 'data' => [
  175. 'thing2' => $nickname,
  176. 'thing3' => $productTitle,
  177. 'time6' => date('Y-m-d H:i:s')
  178. ]
  179. ]);
  180. // 保存生成token需要的信息
  181. $loginToken = new LoginTokenService($this->siteInfo['token_table']);
  182. $token = $loginToken->createOnlyOneToken($userId, $productMid);
  183. Cache::put('TOKEN_' . $sceneStr, $token, 5 * 60); // 有效期5分钟
  184. return true;
  185. } else {
  186. abort(500, '登录授权失败,请稍后再试!');
  187. }
  188. }
  189. private function msgEvent($event, $message)
  190. {
  191. // 场景值为 productMid:sessionId
  192. $sceneStr = $message['EventKey'] ?? '';
  193. // 新关注用户有qrscene_,替换掉
  194. $sceneStr = str_replace('qrscene_', '', $sceneStr);
  195. // $openid = Request::input('openid');
  196. switch ($event) {
  197. case 'subscribe': // 1. 用户未关注时,进行关注后的事件推送
  198. case 'SCAN': // 2. 用户已关注时的事件推送
  199. if (empty($sceneStr)) {
  200. return "欢迎你关注办公软件";
  201. } else {
  202. $oauthUrl = $this->app->oauth->withState(base64_encode($sceneStr))->redirect();
  203. //$oauthUrl = str_replace('https://open.weixin.qq.com/connect/oauth2/authorize?appid=wx1edb103f32029099&redirect_uri=https%3A%2F%2Fwww.xingyousoft.com%2Fapi%2Fwechat%2FoauthCallback&response_type=code&scope=snsapi_userinfo&state=WHdCeXhSMW5vUHgzOjUyNDEzYTY3MWVjNzAzNDc4M2FhMWEzMDMyNmRlMjNk&connect_redirect=1#wechat_redirect', '', $oauthUrl);
  204. $items = [
  205. new NewsItem([
  206. 'title' => '',
  207. 'description' => '',
  208. 'url' => $oauthUrl,
  209. 'image' => 'https://www.xingyousoft.com/static/login.jpg',
  210. ]),
  211. new NewsItem([
  212. 'title' => '点击确认登录',
  213. 'description' => '',
  214. 'url' => $oauthUrl,
  215. 'image' => 'https://www.xingyousoft.com/static/logo.png',
  216. ]),
  217. ];
  218. // 记录当前的扫描状态
  219. Cache::put("SCAN_" . $sceneStr, true, 2 * 60); // 有效期2分钟
  220. return new News($items); // 发送登录链接
  221. }
  222. case 'unsubscribe': // 取消关注
  223. break;
  224. }
  225. return 'success';
  226. }
  227. private function msgtType($type, $message)
  228. {
  229. switch ($type) {
  230. case 'text':
  231. case 'image':
  232. case 'voice': //语音消息
  233. case 'video': //视频消息
  234. case 'shortvideo': // 小视频消息
  235. case 'location': // 地理位置消息
  236. case 'link': // 链接消息
  237. default:
  238. $items = [
  239. new NewsItem([
  240. 'title' => '官方客服',
  241. 'description' => '需要帮助,请联系客服!',
  242. 'url' => 'https://work.weixin.qq.com/kfid/kfc5471afeb3f4331af',
  243. 'image' => 'https://www.xingyousoft.com/static/images/u10.png',
  244. ]),
  245. ];
  246. $msg = new News($items);
  247. }
  248. return $msg;
  249. }
  250. /**
  251. * 创建登录的临时二维码
  252. *
  253. * @return JsonResponse
  254. */
  255. public function createQrcode()
  256. {
  257. /**
  258. * 场景值为 productMid:sessionId
  259. */
  260. $sceneStr = Request::post('scene_str'); //
  261. if (empty($sceneStr)) {
  262. Log::error("scene_str,为空!");
  263. return responseMessage(2001, '参数错误!');
  264. }
  265. $arr = explode(':', $sceneStr, 2);
  266. if (count($arr) != 2) {
  267. Log::error("scene_str,参数错误2,为空!");
  268. return responseMessage(2002, '参数错误!');
  269. }
  270. // 缓存当前的scene,防止用户重复点击登录
  271. Cache::put('clickOne_' . md5($sceneStr), true, 5 * 60);
  272. $result = $this->app->qrcode->temporary($sceneStr, 5 * 60);
  273. if (isset($result['ticket']) && $result['ticket']) {
  274. $url = $this->app->qrcode->url($result['ticket']);
  275. return responseMessage(1001, '', ['url' => $url, 'expire_seconds' => $result['expire_seconds']]);
  276. } else {
  277. Log::error("scene_str,参数错误3,请求错误!");
  278. return responseMessage(2002, '参数错误2!');
  279. }
  280. }
  281. public function oauthCallback()
  282. {
  283. $code = Request::input('code');
  284. $state = Request::input('state');
  285. if (empty($state)) {
  286. abort(500, '登录授权失败,参数错误!');
  287. }
  288. // 场景值为 productMid:sessionId
  289. $sceneStr = base64_decode($state);
  290. if (empty($sceneStr)) {
  291. abort(500, '登录授权失败,非法操作!');
  292. }
  293. $oauth = $this->app->oauth;
  294. $user = $oauth->userFromCode($code);
  295. Log::info('22222222222222222222222 === ' . 'code' . $code );
  296. $openid = $user->getId();// 对应微信的 OPENID
  297. $nickname = $user->getNickname(); // 对应微信的 nickname
  298. $avatar = $user->getAvatar(); // 头像网址
  299. $tokenResponse = $user->getAttribute('token_response');
  300. $unionid = $tokenResponse['unionid'] ?? '';
  301. $wxInfo = $user->getAttributes();
  302. // 缓存当前的scene,防止用户重复点击登录
  303. $isClick = Cache::get('clickOne_' . md5($sceneStr));
  304. if (!$isClick) {
  305. abort(500, '登录授权失败,请重新扫码!');
  306. } else {
  307. Cache::forget('clickOne_' . md5($sceneStr));
  308. }
  309. // 分离产品id和session
  310. [$productMid, $sessionId] = explode(':', $sceneStr, 2);
  311. if (empty($productMid) || empty($sessionId)) {
  312. abort(500, '登录授权失败,非法操作!');
  313. }
  314. Log::info('$openid == ' . $openid);
  315. $isExistUser = DB::table('user_wechat_official_account')->select('id')->where('openid', $openid)->first();
  316. if ($isExistUser) {
  317. // 更新头像
  318. $isSuccess = DB::transaction(function () use ($openid, $isExistUser, $unionid, $nickname, $avatar, $wxInfo) {
  319. DB::table('user_wechat_official_account')->where('id', $isExistUser->id)->update([
  320. 'openid' => $openid,
  321. 'unionid' => $unionid,
  322. 'nick' => $nickname,
  323. 'wx_avatar' => $avatar,
  324. 'wx_info' => json_encode($wxInfo),
  325. ]);
  326. DB::table('user')->where('id', $isExistUser->id)->update([
  327. 'unionid' => $unionid,
  328. 'username' => $nickname,
  329. 'avatar' => $avatar,
  330. ]);
  331. return true;
  332. });
  333. $userId = $isExistUser->id; // 用户id
  334. } else {
  335. // 插入数据
  336. $isSuccess = DB::transaction(function () use ($openid, $nickname, $avatar, $unionid, $wxInfo) {
  337. $mid = Str::random(12);
  338. $userData = [
  339. 'username' => $nickname,
  340. 'avatar' => $avatar,
  341. 'roles' => json_encode([1]),
  342. 'unionid' => $unionid,
  343. 'status' => 1,
  344. 'mid' => $mid,
  345. 'created_at' => time(),
  346. 'updated_at' => time(),
  347. ];
  348. $userId = DB::table('user')->insertGetId($userData);
  349. $officialData = [
  350. 'user_id' => $userId,
  351. 'openid' => $openid,
  352. 'unionid' => $unionid,
  353. 'nick' => $nickname,
  354. 'wx_avatar' => $avatar,
  355. 'wx_info' => json_encode($wxInfo),
  356. 'mid' => $mid,
  357. 'created_at' => time(),
  358. 'updated_at' => time(),
  359. ];
  360. DB::table('user_wechat_official_account')->insertGetId($officialData);
  361. return $userId;
  362. });
  363. $userId = $isSuccess; // 用户id
  364. }
  365. if ($isSuccess) {
  366. // 保存生成token需要的信息
  367. $loginToken = new LoginTokenService($this->siteInfo['token_table']);
  368. $token = $loginToken->createOnlyOneToken($userId, $productMid);
  369. Cache::put('TOKEN_' . $sceneStr, $token, 5 * 60); // 有效期5分钟
  370. Log::info('33333333333333333333 === ' . 'TOKEN_' . $sceneStr . ' ==== ' . $token);
  371. // 如果用户直接点击手机登录链接,而没有扫描,则处理一下当前的扫描状态
  372. if (!Cache::get("SCAN_" . $sceneStr)) {
  373. Cache::put("SCAN_" . $sceneStr, true, 2 * 60); // 有效期2分钟
  374. }
  375. // 网页跳转,带一个随机参数,然后再通过该参数来换取session
  376. $key = md5(microtime() . $sceneStr);
  377. Cache::put($key, $token, 2 * 60); // 有效期3分钟
  378. return redirect('/mobile/#/?key=' . $key);
  379. } else {
  380. abort(500, '登录授权失败,请稍后再试!');
  381. }
  382. }
  383. /**
  384. * web 网页登录
  385. *
  386. * 通过key换取session
  387. */
  388. public function key2token()
  389. {
  390. $key = Request::post('key');
  391. if (empty($key)) {
  392. return responseMessage(2001, '非法操作!');
  393. } else {
  394. $token = Cache::get($key);
  395. if ($token) {
  396. return responseMessage(1001, '', $token);
  397. } else {
  398. return responseMessage(2002, '登录失败,请重试!');
  399. }
  400. }
  401. }
  402. /**
  403. * 验证登录
  404. *
  405. * @return JsonResponse
  406. */
  407. public function checkLogin()
  408. {
  409. // 注意: 实际上不是scene_str,是sessionId
  410. $sessionId = Request::post('scene_str');
  411. if (empty($sessionId)) {
  412. return responseMessage(2001, '参数错误!');
  413. }
  414. // 过如果用户已经登录,则验证该用户是否需要更新token,7天有效
  415. $loginToken = new LoginTokenService($this->siteInfo['token_table']);
  416. if ($tokenInfo = $loginToken->checkLogin()) {
  417. //超过 7天 有效期,刷新token
  418. $limitTime = time() - $tokenInfo->updated_at;
  419. if ($limitTime > 7 * 24 * 3600) {
  420. // 需要重新登录,清除登录缓存
  421. $loginToken->destroyCurrentAccessToken();
  422. return responseMessage(2002, '登录已过期,请重新登录!');
  423. } elseif ($limitTime > 3 * 24 * 3600 && $limitTime < 7 * 24 * 3600) {
  424. // 大于3天 小于7天,则刷新token
  425. $token = $loginToken->createOnlyOneToken($tokenInfo->user_id, $tokenInfo->name);
  426. } else {
  427. $token = $loginToken->getToken();
  428. }
  429. return responseMessage(1001, '已登录!', $token);
  430. } else {
  431. $token = Cache::get('TOKEN_' . $sessionId);
  432. if (empty($token)) {
  433. return responseMessage(2003, '未登录!');
  434. } else {
  435. // 如果用户退出登录,而且缓存还没有失效,会出现检测已经登陆,
  436. // 解决:前端清除token,后端判断是否已经登陆
  437. if ($loginToken->findToken($token)) {
  438. return responseMessage(1001, 'success', $token);
  439. } else {
  440. //清除多余的缓存
  441. Cache::forget('TOKEN_' . $sessionId);
  442. Log::info('清除多余的token缓存 TOKEN_' . $sessionId);
  443. return responseMessage(2004, '未登录!');
  444. }
  445. }
  446. }
  447. }
  448. /**
  449. * 检测是否已经扫描
  450. */
  451. public function checkScan()
  452. {
  453. /**
  454. * 场景值为 productMid:sessionId
  455. */
  456. $sceneStr = Request::post('scene_str'); //
  457. if (empty($sceneStr)) {
  458. return responseMessage(2001, '参数错误!');
  459. }
  460. $isScan = Cache::get("SCAN_" . $sceneStr);
  461. if ($isScan) {
  462. // 删除缓存
  463. Cache::forget("SCAN_" . $sceneStr);
  464. return responseMessage(1001, '已扫描');
  465. } else {
  466. return responseMessage(2003, '等待中');
  467. }
  468. }
  469. }