123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234 |
- <?php
- /*
- * This file is part of the overtrue/socialite.
- *
- * (c) overtrue <i@overtrue.me>
- *
- * This source file is subject to the MIT license that is bundled
- * with this source code in the file LICENSE.
- */
- namespace Overtrue\Socialite\Providers;
- use Overtrue\Socialite\AccessToken;
- use Overtrue\Socialite\AccessTokenInterface;
- use Overtrue\Socialite\InvalidArgumentException;
- use Overtrue\Socialite\ProviderInterface;
- use Overtrue\Socialite\User;
- use Overtrue\Socialite\WeChatComponentInterface;
- /**
- * Class WeChatProvider.
- *
- * @see http://mp.weixin.qq.com/wiki/9/01f711493b5a02f24b04365ac5d8fd95.html [WeChat - 公众平台OAuth文档]
- * @see https://open.weixin.qq.com/cgi-bin/showdocument?action=dir_list&t=resource/res_list&verify=1&id=open1419316505&token=&lang=zh_CN [网站应用微信登录开发指南]
- */
- class WeChatProvider extends AbstractProvider implements ProviderInterface
- {
- /**
- * The base url of WeChat API.
- *
- * @var string
- */
- protected $baseUrl = 'https://api.weixin.qq.com/sns';
- /**
- * {@inheritdoc}.
- */
- protected $openId;
- /**
- * {@inheritdoc}.
- */
- protected $scopes = ['snsapi_login'];
- /**
- * Indicates if the session state should be utilized.
- *
- * @var bool
- */
- protected $stateless = true;
- /**
- * Return country code instead of country name.
- *
- * @var bool
- */
- protected $withCountryCode = false;
- /**
- * @var WeChatComponentInterface
- */
- protected $component;
- /**
- * Return country code instead of country name.
- *
- * @return $this
- */
- public function withCountryCode()
- {
- $this->withCountryCode = true;
- return $this;
- }
- /**
- * WeChat OpenPlatform 3rd component.
- *
- * @param WeChatComponentInterface $component
- *
- * @return $this
- */
- public function component(WeChatComponentInterface $component)
- {
- $this->scopes = ['snsapi_base'];
- $this->component = $component;
- return $this;
- }
- /**
- * {@inheritdoc}.
- */
- public function getAccessToken($code)
- {
- $response = $this->getHttpClient()->get($this->getTokenUrl(), [
- 'headers' => ['Accept' => 'application/json'],
- 'query' => $this->getTokenFields($code),
- ]);
- return $this->parseAccessToken($response->getBody());
- }
- /**
- * {@inheritdoc}.
- */
- protected function getAuthUrl($state)
- {
- $path = 'oauth2/authorize';
- if (in_array('snsapi_login', $this->scopes)) {
- $path = 'qrconnect';
- }
- return $this->buildAuthUrlFromBase("https://open.weixin.qq.com/connect/{$path}", $state);
- }
- /**
- * {@inheritdoc}.
- */
- protected function buildAuthUrlFromBase($url, $state)
- {
- $query = http_build_query($this->getCodeFields($state), '', '&', $this->encodingType);
- return $url.'?'.$query.'#wechat_redirect';
- }
- /**
- * {@inheritdoc}.
- */
- protected function getCodeFields($state = null)
- {
- if ($this->component) {
- $this->with(['component_appid' => $this->component->getAppId()]);
- }
- return array_merge([
- 'appid' => $this->clientId,
- 'redirect_uri' => $this->redirectUrl,
- 'response_type' => 'code',
- 'scope' => $this->formatScopes($this->scopes, $this->scopeSeparator),
- 'state' => $state ?: md5(time()),
- ], $this->parameters);
- }
- /**
- * {@inheritdoc}.
- */
- protected function getTokenUrl()
- {
- if ($this->component) {
- return $this->baseUrl.'/oauth2/component/access_token';
- }
- return $this->baseUrl.'/oauth2/access_token';
- }
- /**
- * {@inheritdoc}.
- */
- protected function getUserByToken(AccessTokenInterface $token)
- {
- $scopes = explode(',', $token->getAttribute('scope', ''));
- if (in_array('snsapi_base', $scopes)) {
- return $token->toArray();
- }
- if (empty($token['openid'])) {
- throw new InvalidArgumentException('openid of AccessToken is required.');
- }
- $language = $this->withCountryCode ? null : (isset($this->parameters['lang']) ? $this->parameters['lang'] : 'zh_CN');
- $response = $this->getHttpClient()->get($this->baseUrl.'/userinfo', [
- 'query' => array_filter([
- 'access_token' => $token->getToken(),
- 'openid' => $token['openid'],
- 'lang' => $language,
- ]),
- ]);
- return json_decode($response->getBody(), true);
- }
- /**
- * {@inheritdoc}.
- */
- protected function mapUserToObject(array $user)
- {
- return new User([
- 'id' => $this->arrayItem($user, 'openid'),
- 'name' => $this->arrayItem($user, 'nickname'),
- 'nickname' => $this->arrayItem($user, 'nickname'),
- 'avatar' => $this->arrayItem($user, 'headimgurl'),
- 'email' => null,
- ]);
- }
- /**
- * {@inheritdoc}.
- */
- protected function getTokenFields($code)
- {
- return array_filter([
- 'appid' => $this->clientId,
- 'secret' => $this->clientSecret,
- 'component_appid' => $this->component ? $this->component->getAppId() : null,
- 'component_access_token' => $this->component ? $this->component->getToken() : null,
- 'code' => $code,
- 'grant_type' => 'authorization_code',
- ]);
- }
- /**
- * Remove the fucking callback parentheses.
- *
- * @param mixed $response
- *
- * @return string
- */
- protected function removeCallback($response)
- {
- if (strpos($response, 'callback') !== false) {
- $lpos = strpos($response, '(');
- $rpos = strrpos($response, ')');
- $response = substr($response, $lpos + 1, $rpos - $lpos - 1);
- }
- return $response;
- }
- }
|