weixin.js 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330
  1. 'use strict';
  2. const assert = require('assert');
  3. const _ = require('lodash');
  4. const uuid = require('uuid');
  5. const urljoin = require('url-join');
  6. const Controller = require('egg').Controller;
  7. /**
  8. * 微信认证,获得openid和用户信息,生成微信Jwt
  9. */
  10. class WeixinController extends Controller {
  11. /**
  12. * 认证流程
  13. * 1. 缓存原始请求地址,生成state和认证回调地址
  14. * 2. 通过wxapi认证,获得认证code
  15. * 3. 通过code获得openid,通过openid,查询绑定用户,创建jwt
  16. * 4. jwt写入redis,返回认证code
  17. * 5. 通过code获取jwt
  18. */
  19. // GET 请求认证
  20. // response_type:
  21. // code - url带上code参数重定向到原始地址
  22. // store - 默认,认证结果写入sessionStore,然后重定向回请求页面(要求请求页面和认证服务在同一域名下)
  23. // token - url带上token参数重定向到原始地址
  24. async auth() {
  25. const {
  26. redirect_uri,
  27. code,
  28. test,
  29. type,
  30. response_type = 'store',
  31. uid,
  32. qrcode,
  33. } = this.ctx.query;
  34. if (test) {
  35. return await this.authTest();
  36. }
  37. if (code) {
  38. return await this.authBack(this.ctx.query);
  39. }
  40. this.ctx.logger.debug(`[auth] reditect_uri - ${redirect_uri}`);
  41. // assert(redirect_uri, '回调地址不能为空');
  42. // TODO: 保存原始请求地址
  43. // const { config } = this.app;
  44. // console.log('ctx.host: ', this.ctx.host);
  45. // console.log('config.hostHeaders: ', config.hostHeaders);
  46. // TODO: 保存原始请求地址
  47. const state = uuid();
  48. const key = `visit:auth:state:${state}`;
  49. const val = JSON.stringify({ redirect_uri, type, uid, qrcode });
  50. await this.app.redis.set(key, val, 'EX', 600);
  51. // TODO: 生成回调地址
  52. // const { wxapi, authUrl = this.ctx.path } = this.app.config;
  53. // const backUrl = encodeURI(
  54. // `${this.app.config.baseUrl}${this.config.authUrl}?state=${state}`
  55. // );
  56. // const to_uri = `${wxapi.baseUrl}/api/auth?appid=${wxapi.appid}&response_type=code&redirect_uri=${backUrl}&connect_redirect=1#wechat`;
  57. // console.log('url-->' + to_uri);
  58. // this.ctx.redirect(to_uri);
  59. const { wxapi, authUrl = this.ctx.path } = this.app.config;
  60. const backUrl = encodeURI(`${this.app.config.baseUrl}${this.config.authUrl}?state=${state}`);
  61. // const to_uri = `${wxapi.baseUrl}/api/auth?appid=${wxapi.appid}&response_type=code&redirect_uri=${backUrl}&connect_redirect=1#wechat`;
  62. // const backUrl = encodeURI(`${this.app.config.baseUrl}${this.config.authUrl}/`);
  63. const to_uri = `https://open.weixin.qq.com/connect/oauth2/authorize?appid=${wxapi.appid}&response_type=code&scope=snsapi_base&redirect_uri=${backUrl}&state=${state}&connect_redirect=1#wechat_redirect`;
  64. console.log('url-->' + to_uri);
  65. this.ctx.redirect(to_uri);
  66. }
  67. // GET 认证回调
  68. async authBack({ code, state }) {
  69. // const { code, state, type, redirecturi } = this.ctx.query;
  70. console.log(this.ctx.query);
  71. this.ctx.logger.debug(`[auth-back] code - ${code}, state - ${state}`);
  72. assert(code, 'code不能为空');
  73. assert(state, 'state不能为空');
  74. console.log('code-->' + code);
  75. const { weixin } = this.ctx.service;
  76. let openid;
  77. try {
  78. ({ openid } = await weixin.fetch(code));
  79. } catch (err) {
  80. await this.ctx.render('error.njk', {
  81. title: err.message,
  82. message: err.details,
  83. });
  84. return;
  85. }
  86. console.log('openid--->' + openid);
  87. if (openid) {
  88. const key = `visit:auth:state:${state}`;
  89. const val = await this.app.redis.get(key);
  90. const { redirect_uri, type, uid, qrcode } = JSON.parse(val);
  91. console.log('redirect_uri-->' + redirect_uri);
  92. const user = await this.ctx.service.user.findByOpenid(openid);
  93. console.log('用户信息1--->' + user);
  94. if (type === '0') {
  95. // 通过openid取得用户信息
  96. if (user) {
  97. console.log('用户信息2--->' + user.role);
  98. // user_ = await this.checkVip(user_);
  99. let remark = '';
  100. if (user.role === '8') {
  101. const url = 'http://127.0.0.1:9008/api/live/dock/getdock/' + user.id;
  102. const vipuser = await this.ctx.curl(url, {
  103. method: 'post',
  104. headers: {
  105. 'content-type': 'application/json',
  106. },
  107. dataType: 'json',
  108. });
  109. if (vipuser.status === 200) {
  110. if (vipuser.data.errcode === 0) {
  111. const vd = vipuser.data.res;
  112. if (vd.length > 0) {
  113. const f = _.head(vd);
  114. const fid = _.get(f, 'id');
  115. remark = fid;
  116. }
  117. }
  118. }
  119. }
  120. console.log('用户信息remark--->' + remark);
  121. const user_ = { ...JSON.parse(JSON.stringify(user)), remark };
  122. console.log('用户信息重组' + user_);
  123. console.log(user_);
  124. const token = await this.ctx.service.login.createJwt(user_);
  125. console.log('token--->' + token);
  126. const to_uri = urljoin(redirect_uri, `?token=${token}`);
  127. // TODO: 重定性页面
  128. console.log('to_uri000-->' + to_uri);
  129. this.ctx.redirect(to_uri);
  130. } else {
  131. const url = 'http://127.0.0.1:9008/api/live/dock/dockopenid?openid=' + openid;
  132. const dockuser = await this.ctx.curl(url, {
  133. method: 'get',
  134. headers: {
  135. 'content-type': 'application/json',
  136. },
  137. dataType: 'json',
  138. });
  139. const user_ = {};
  140. console.log(dockuser);
  141. if (dockuser.status === 200) {
  142. if (dockuser.data.errcode === 0) {
  143. const vd = dockuser.data.res;
  144. if (vd) {
  145. user_.id = vd.id;
  146. user_.name = vd.adminuser;
  147. user_.role = vd.role;
  148. user_.phone = vd.phone;
  149. }
  150. }
  151. }
  152. if (user_) {
  153. const token = await this.ctx.service.login.createJwt(user_);
  154. console.log('token--->' + token);
  155. const to_uri = urljoin(redirect_uri, `?token=${token}`);
  156. // TODO: 重定性页面
  157. console.log('to_uri--dock-->' + to_uri);
  158. this.ctx.redirect(to_uri);
  159. } else {
  160. console.log('rrr0000--->' + redirect_uri);
  161. const result = await weixin.fetchUnionID(openid);
  162. const touri = `${this.app.config.baseUrl}/platmobile/error`;
  163. const to_uri = urljoin(touri, `?openid=${openid}&data=${result}`);
  164. // TODO: 重定性页面
  165. this.ctx.redirect(to_uri);
  166. }
  167. }
  168. } else if (type === '1') {
  169. const to_uri = urljoin(
  170. redirect_uri,
  171. `?openid=${openid}&uid=${uid}&type=${type}&qrcode=${qrcode}`
  172. );
  173. // TODO: 重定性页面
  174. console.log('1111---?' + to_uri);
  175. this.ctx.redirect(to_uri);
  176. } else if (type === '2') {
  177. const to_uri = urljoin(
  178. redirect_uri,
  179. `?openid=${openid}&uid=${uid}&type=${type}&qrcode=${qrcode}`
  180. );
  181. // TODO: 重定性页面
  182. console.log('1111---?' + to_uri);
  183. this.ctx.redirect(to_uri);
  184. }
  185. }
  186. }
  187. // GET 用户授权内部测试接口
  188. async authTest() {
  189. const { redirect_uri, type, uid, qrcode, openid } = this.ctx.query;
  190. this.ctx.logger.debug(
  191. `[auth-test] reditect_uri - ${redirect_uri}, openid - ${openid}`
  192. );
  193. assert(redirect_uri, '回调地址不能为空');
  194. assert(openid, 'openid不能为空');
  195. if (openid) {
  196. console.log('redirect_uri-->' + redirect_uri);
  197. const user = await this.ctx.service.user.findByOpenid(openid);
  198. console.log('用户信息1--->' + user);
  199. if (type === '0') {
  200. // 通过openid取得用户信息
  201. if (user) {
  202. console.log('用户信息2--->' + user.role);
  203. // user_ = await this.checkVip(user_);
  204. let remark = '';
  205. if (user.role === '8') {
  206. const url = 'http://127.0.0.1:9008/api/live/dock/getdock/' + user.id;
  207. const vipuser = await this.ctx.curl(url, {
  208. method: 'post',
  209. headers: {
  210. 'content-type': 'application/json',
  211. },
  212. dataType: 'json',
  213. });
  214. if (vipuser.status === 200) {
  215. if (vipuser.data.errcode === 0) {
  216. const vd = vipuser.data.res;
  217. if (vd.length > 0) {
  218. const f = _.head(vd);
  219. const fid = _.get(f, 'id');
  220. remark = fid;
  221. }
  222. }
  223. }
  224. }
  225. console.log('用户信息remark--->' + remark);
  226. const user_ = { ...JSON.parse(JSON.stringify(user)), remark };
  227. console.log('用户信息重组' + user_);
  228. console.log(user_);
  229. const token = await this.ctx.service.login.createJwt(user_);
  230. console.log('token--->' + token);
  231. const to_uri = urljoin(redirect_uri, `?token=${token}`);
  232. // TODO: 重定性页面
  233. console.log('to_uri000-->' + to_uri);
  234. this.ctx.redirect(to_uri);
  235. } else {
  236. const url = 'http://127.0.0.1:9008/api/live/dock/dockopenid?openid=' + openid;
  237. const dockuser = await this.ctx.curl(url, {
  238. method: 'get',
  239. headers: {
  240. 'content-type': 'application/json',
  241. },
  242. dataType: 'json',
  243. });
  244. const user_ = {};
  245. console.log(dockuser);
  246. if (dockuser.status === 200) {
  247. if (dockuser.data.errcode === 0) {
  248. const vd = dockuser.data.res;
  249. user_.id = vd.id;
  250. user_.name = vd.adminuser;
  251. user_.role = vd.role;
  252. user_.phone = vd.phone;
  253. }
  254. }
  255. if (user_) {
  256. const token = await this.ctx.service.login.createJwt(user_);
  257. console.log('token--->' + token);
  258. const to_uri = urljoin(redirect_uri, `?token=${token}`);
  259. // TODO: 重定性页面
  260. console.log('to_uri--dock-->' + to_uri);
  261. this.ctx.redirect(to_uri);
  262. } else {
  263. console.log('rrr0000--->' + redirect_uri);
  264. const touri = `${this.app.config.baseUrl}/platmobile/error`;
  265. const to_uri = urljoin(touri, `?openid=${openid}`);
  266. // TODO: 重定性页面
  267. this.ctx.redirect(to_uri);
  268. }
  269. }
  270. } else if (type === '1') {
  271. const to_uri = urljoin(
  272. redirect_uri,
  273. `?openid=${openid}&uid=${uid}&type=${type}&qrcode=${qrcode}`
  274. );
  275. // TODO: 重定性页面
  276. console.log('1111---?' + to_uri);
  277. this.ctx.redirect(to_uri);
  278. } else if (type === '2') {
  279. const to_uri = urljoin(
  280. redirect_uri,
  281. `?openid=${openid}&uid=${uid}&type=${type}&qrcode=${qrcode}`
  282. );
  283. // TODO: 重定性页面
  284. console.log('1111---?' + to_uri);
  285. this.ctx.redirect(to_uri);
  286. }
  287. }
  288. }
  289. async checkVip(user) {
  290. const { role, id } = user;
  291. if (role === '8') {
  292. const url = 'http://127.0.0.1:9008/api/live/dock/getdock/' + id;
  293. const vipuser = await this.ctx.curl(url, {
  294. method: 'post',
  295. headers: {
  296. 'content-type': 'application/json',
  297. },
  298. dataType: 'json',
  299. });
  300. console.log('取得vipuser--' + vipuser);
  301. if (vipuser.status === 200) {
  302. if (vipuser.data.errcode === 0) {
  303. const vd = vipuser.data.res;
  304. if (vd.length > 0) {
  305. const f = _.head(vd);
  306. const fid = _.get(f, 'id');
  307. user = { ...user, remark: fid };
  308. }
  309. }
  310. }
  311. }
  312. return user;
  313. }
  314. // 用户绑定
  315. async bind() {
  316. const res = await this.service.weixin.bindUser(this.ctx.request.body);
  317. return this.ctx.ok(res);
  318. }
  319. }
  320. module.exports = WeixinController;