企业微信自建应用授权登录demo

Myth丶恋晨 2022-05-15 11:52 809阅读 0赞

<?php
    /**
     * Created by PhpStorm.
     * User: liubao
     * Date: 2018/8/29 更新时间v1：2018-9-29 v1.1:2020-08-10
     * Time: 10:49
     */
    
    namespace app\controller;
    
    
    use support\bootstrap\Redis;
    
    class Qywx
    {
        /**
         * 微信授权登录
         *
         * */
        private $appId = '';//我的企业ID
        private $appSecret = '';//自建应用里的Secret
        private $agentid = '';//AgentId 手动授权时scope值改为snsapi_privateinfo 后面必须有AgentId
        private $common_url = 'http://liubao.org.cn';
        private $code = '';
        private $access_token = '';
        private $user_ticket = '';
        private $UserId = '';
        private $openid = '';
    
        public function index()
        {
            $uri = urlencode($this->common_url . '/Qywx/back'); //授权成功返回地址
            //下面$url请求授权登录地址,设置的是手动授权
            $url = 'https://open.weixin.qq.com/connect/oauth2/authorize?appid=' . $this->appId . '&redirect_uri=' . $uri . '&response_type=code&scope=snsapi_privateinfo&agentid=' . $this->agentid . '&state=STATE#wechat_redirect';
            return redirect($url);
        }
    
        public function back($request)
        {
            $this->code = $request->get('code'); //接收上面url返回code，5分钟有效期
            try {
                $userInfo = $this->common();
                if (isset($userInfo)) {
                    //$openId = $this->getOpenId();//获取openID（——暂时不用）
                    return $userInfo;
                }
            } catch (\Exception $e) {
                return false;
            }
        }
    
        //获取企业微信用户信息
        public function common()
        {
            $access_token = $this->getAccessToken();//获取token
            $user_ticket = $this->getUserInfoList();//获取基本信息里的user_ticket值
            $userInfo = $this->getUserInfoDetail();//获取登录人的详情信息
            if (isset($access_token) && isset($user_ticket) && isset($userInfo)) {
                return json($userInfo);
            }
            return false;
        }
    
        //获取access_token // 这里可以每过2小时主动去获取一次access_token
        public function getAccessToken()
        {
            if (Redis::get('access_token')) return $this->access_token = Redis::get('access_token');
            $code_url = "https://qyapi.weixin.qq.com/cgi-bin/gettoken?corpid=" . $this->appId . "&corpsecret=" . $this->appSecret;
            $access_token_str = $this->curl_get($code_url);
            $access_token_list = json_decode($access_token_str, true);
            $this->access_token = $access_token_list["access_token"];//获取access_token
            if ($access_token_list['errcode'] == 0) {
                Redis::set('access_token',$this->access_token,3600*2-10);
                return $this->access_token;
            }
            return false;
        }
    
        //获取登录人基本信息
        public function getUserInfoList()
        {
            $user_url = "https://qyapi.weixin.qq.com/cgi-bin/user/getuserinfo?access_token=" . $this->getAccessToken() . "&code=" . $this->code;
            $userInfo_str = $this->curl_get($user_url);
            $userInfo_list = json_decode($userInfo_str, true);//get获取企业登录人基本信息
            $this->user_ticket = $userInfo_list['user_ticket'];
            $this->UserId = $userInfo_list['UserId'];
            if ($userInfo_list['errcode'] == 0) {
                return $userInfo_list;
            }
            return false;
        }
    
        //获取登录人的详情信息包括昵称邮箱和头像等
        public function getUserInfoDetail()
        {
            $detail_url = "https://qyapi.weixin.qq.com/cgi-bin/user/getuserdetail?access_token=" . $this->getAccessToken();//post获取详细信息
            $param = array('user_ticket' => $this->user_ticket);
            $data = json_decode($this->curl_post($detail_url, $param), true);
            if ($data['errcode'] == 0) {
                return $data;
            }
            return false;
        }
    
        //根据userID获取openID
        public function getOpenId()
        {
            $url = "https://qyapi.weixin.qq.com/cgi-bin/user/convert_to_openid?access_token=" . $this->getAccessToken();
            $param = array('userid' => $this->UserId);
            $data = json_decode($this->curl_post($url, $param), true);
            if ($data['errcode'] == 0) {
                $this->openid = $data['openid'];
            }
            return $this->openid;
        }
    
        /**
         * 文本消息推送
         * touser、toparty、totag不能同时为空
         * touser 成员ID列表（消息接收者，多个接收者用‘|’分隔，最多支持1000个）。特殊情况：指定为@all，则向该企业应用的全部成员发送
         * toparty 部门ID列表，多个接收者用‘|’分隔，最多支持100个。当touser为@all时忽略本参数
         * totag 标签ID列表，多个接收者用‘|’分隔，最多支持100个。当touser为@all时忽略本参数
         * safe 表示是否是保密消息，0表示否，1表示是，默认0
         * @param $touser
         * @param $toparty
         * @param string $message //推送内容
         * @return true or false
         */
        public function push_message($touser, $toparty, $message)
        {
            $url = "https://qyapi.weixin.qq.com/cgi-bin/message/send?access_token=" . $this->getAccessToken();
            $params = array("touser" => $touser, "toparty" => $toparty, "totag" => "", "msgtype" => "text", "agentid" => $this->agentid, "text" => array("content" => $message), "safe" => 0);
            $data = json_decode($this->curl_post($url, $params), true);
            if ($data['errcode'] == 0) {
                return true;
            }
            return false;
        }
    
        /**
         * //发送推送文本卡片消息展现
         * @param $touser
         * @param $toparty
         * @param $title
         * @param $description
         * @param $url
         * @return bool|mixed
         */
        public function push_card($touser, $toparty, $title, $description, $url)
        {
            $access_token = $this->getAccessToken();
            $push_url = "https://qyapi.weixin.qq.com/cgi-bin/message/send?access_token=" . $access_token;
            $params = array("touser" => $touser, "toparty" => $toparty, "totag" => "", "msgtype" => "textcard", "agentid" => $this->agentid, "textcard" => array("title" => $title, "description" => $description, "url" => $url, "btntxt" => ""));
            $data = json_decode($this->curl_post($push_url, $params), true);
            if ($data['errcode'] == 0) {
                return $data;
            }
            return false;
    
        }
    
        /**
         * 获取部门列表
         * @param $department_id //部门id。获取指定部门及其下的子部门。 如果不填，默认获取全量组织架构
         * @return
         */
        public function get_department($department_id)
        {
            $url = "https://qyapi.weixin.qq.com/cgi-bin/department/list?access_token=" . $this->getAccessToken() . "&id=" . $department_id;
            $departmentInfo = $this->curl_get($url);
            $departmentInfo = json_decode($departmentInfo, true);//只能拉取token对应的应用的权限范围内的部门列表
            if ($departmentInfo['errcode'] == 0) {
                return $departmentInfo['department'];//所有的部门信息
            }
            return false;
    
        }
    
        //curl get方式
        public function curl_get($url)
        {
            $curl = curl_init();
            curl_setopt($curl, CURLOPT_URL, $url);
            curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
            curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
            $data = curl_exec($curl);
            curl_close($curl);
            return $data;
        }
    
        //curl post方式
        public function curl_post($url, $param)
        {
            $param = json_encode($param, true);
            $ch = curl_init($url);
            curl_setopt($ch, CURLOPT_HEADER, 0);
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
            curl_setopt($ch, CURLOPT_POST, 1);
            curl_setopt($ch, CURLOPT_POSTFIELDS, $param);
            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
            curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
            $data = curl_exec($ch);
            return $data;
        }
    
        //判断是否是企业微信登录
        public function isQyWx()
        {
            if (strpos($_SERVER['HTTP_USER_AGENT'], 'wxwork') !== false) {
                return true;
            } else {
                return false;
            }
        }
    
    
    }

`2018-9-29：更新了卡片消息推送 可以不在企业微信里打开也能触发`

![70][]

备注：access\_token最好用Redis缓存起来，不要频繁去刷新token，2小时有效期 （为了防止正好在2小时整那个点失效，我建议可以把过期时间设置2小时-10秒）

[70]: /images/20220515/f035bedb740c40f7b52d7bba11c33628.png